Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33322d3332203d3e20323730343431.roa
File:                     323830343a366330383a3a2f33322d3332203d3e20323730343431.roa (raw, json)
Hash identifier:          DllXrXnbTnjUoB7kAB6UATWlrg/Zizs2MV1fty33qUo=
Subject key identifier:   2B:D5:52:04:77:70:02:E5:85:57:DD:AB:CC:DB:DA:C0:34:DB:B0:1A
Certificate issuer:       /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial:       16DDE58B1C33E90F241D2F155ACE891AB8670DED
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33322d3332203d3e20323730343431.roa
Signing time:             Tue 03 Dec 2024 14:13:49 +0000
ROA not before:           Tue 03 Dec 2024 14:08:49 +0000
ROA not after:            Tue 02 Dec 2025 14:13:49 +0000
asID:                     270441
IP address blocks:        2804:6c08::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:dd:e5:8b:1c:33:e9:0f:24:1d:2f:15:5a:ce:89:1a:b8:67:0d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
        Validity
            Not Before: Dec  3 14:08:49 2024 GMT
            Not After : Dec  2 14:13:49 2025 GMT
        Subject: CN=2BD55204777002E58557DDABCCDBDAC034DBB01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:bb:76:7a:1d:7d:ee:49:ce:85:e7:94:9c:
                    d4:9c:01:e2:cf:dc:7c:cc:ac:fb:bc:bf:0c:fa:9c:
                    75:fa:a6:35:70:29:1d:f6:76:c4:2a:5f:e1:05:58:
                    cc:45:d5:7b:e8:2d:2d:5d:c7:df:7e:62:cf:cd:18:
                    c7:79:30:94:82:44:39:a7:1e:40:9b:cf:3a:c8:28:
                    f1:17:0f:15:2a:4a:ef:2b:59:2c:8b:83:53:cb:41:
                    4a:e5:81:e6:e1:1e:2c:89:fa:fa:fe:9d:25:79:74:
                    53:a7:3c:ac:12:24:f3:d1:20:42:c8:15:b8:af:a6:
                    a9:f3:4e:01:d9:2b:72:fb:3a:b6:25:c8:db:23:4b:
                    0c:a0:6a:85:44:6d:65:0e:94:2b:75:b9:8d:cd:a7:
                    d8:66:3f:f2:14:d5:6a:03:07:04:cd:ec:68:54:b2:
                    6a:12:74:f8:24:bf:00:25:6b:00:8c:02:37:42:e1:
                    e8:64:28:5a:70:95:aa:87:d6:d2:36:40:70:8a:31:
                    dc:72:b3:2d:24:80:52:72:62:61:a4:80:8c:79:0e:
                    59:53:43:cb:3f:1f:3b:ae:55:07:6e:97:ce:99:3e:
                    44:fb:03:b8:fa:fc:6b:59:13:16:b4:18:40:a8:ac:
                    1a:7e:5b:c5:2b:26:a2:5b:69:a2:85:ef:34:17:45:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:52:04:77:70:02:E5:85:57:DD:AB:CC:DB:DA:C0:34:DB:B0:1A
            X509v3 Authority Key Identifier:
                keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33322d3332203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:72:eb:39:56:dd:9a:eb:cc:6a:26:7f:b2:d6:e3:bf:5f:
         e5:e1:84:c4:c0:92:e2:79:f1:cf:74:80:10:36:93:b2:87:a2:
         39:46:bf:db:23:7e:65:28:7b:23:78:17:93:d4:43:6d:d9:3f:
         57:0e:87:19:18:b9:e0:0c:0f:41:60:aa:87:09:c7:c2:9d:71:
         53:3d:59:7d:d6:79:19:98:1c:2c:1f:a9:b3:02:a1:18:7c:9d:
         5f:35:50:bb:56:92:e8:f2:cf:68:b7:dc:dc:13:f5:51:e4:64:
         a4:4b:44:72:b8:cd:0d:2c:6f:01:26:3f:06:09:45:5f:db:56:
         66:2a:66:d6:e6:7c:80:7d:70:2f:1d:9d:0e:81:5a:c5:03:50:
         eb:d6:10:eb:d8:66:ed:74:86:e4:b5:2e:64:9d:d9:2c:ed:21:
         88:21:3e:14:e1:a7:3c:22:4e:1c:1d:b9:6a:19:9e:09:95:fa:
         ee:90:2d:c7:80:ba:50:27:12:dc:38:5e:b1:18:53:88:ff:4d:
         e7:11:5e:2e:76:10:12:fb:ea:cd:a8:d8:a5:8d:f0:5c:a7:74:
         d4:be:fc:09:f7:14:6b:b4:18:30:c4:f0:76:7a:32:83:8c:5d:
         5b:26:7c:ab:4e:4b:10:d8:4d:a6:3c:f1:9f:a6:55:60:b6:5b:
         95:8a:d9:d7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFt3lixwz6Q8kHS8VWs6JGrhnDe0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBNDdCOTU0RDhBRDg5MjNBN0E4RkFEQ0RCODI3ODdD
MzFGQjE2QTAeFw0yNDEyMDMxNDA4NDlaFw0yNTEyMDIxNDEzNDlaMDMxMTAvBgNV
BAMTKDJCRDU1MjA0Nzc3MDAyRTU4NTU3RERBQkNDREJEQUMwMzREQkIwMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIT7t2eh197knOheeUnNScAeLP
3HzMrPu8vwz6nHX6pjVwKR32dsQqX+EFWMxF1XvoLS1dx99+Ys/NGMd5MJSCRDmn
HkCbzzrIKPEXDxUqSu8rWSyLg1PLQUrlgebhHiyJ+vr+nSV5dFOnPKwSJPPRIELI
FbivpqnzTgHZK3L7OrYlyNsjSwygaoVEbWUOlCt1uY3Np9hmP/IU1WoDBwTN7GhU
smoSdPgkvwAlawCMAjdC4ehkKFpwlaqH1tI2QHCKMdxysy0kgFJyYmGkgIx5DllT
Q8s/HzuuVQdul86ZPkT7A7j6/GtZExa0GECorBp+W8UrJqJbaaKF7zQXRfi7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUK9VSBHdwAuWFV92rzNvawDTbsBowHwYDVR0j
BBgwFoAUt6R7lU2K2JI6eo+tzbgnh8MfsWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2Q3NDVkU0NqTmtDWHdKdWlFWDhyUXdqN1ZYdFl5TjI4d2doSmJCNUpC
eE0vMC9CN0E0N0I5NTREOEFEODkyM0E3QThGQURDREI4Mjc4N0MzMUZCMTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3QTQ3Qjk1NEQ4QUQ4OTIz
QTdBOEZBRENEQjgyNzg3QzMxRkIxNkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NkNzQ1ZFNDak5rQ1h3SnVpRVg4clF3ajdWWHRZeU4yOHdnaEpiQjVKQnhNLzAv
MzIzODMwMzQzYTM2NjMzMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzQzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARsCDANBgkqhkiG9w0BAQsFAAOCAQEADCty6zlW
3ZrrzGomf7LW479f5eGExMCS4nnxz3SAEDaTsoeiOUa/2yN+ZSh7I3gXk9RDbdk/
Vw6HGRi54AwPQWCqhwnHwp1xUz1ZfdZ5GZgcLB+pswKhGHydXzVQu1aS6PLPaLfc
3BP1UeRkpEtEcrjNDSxvASY/BglFX9tWZipm1uZ8gH1wLx2dDoFaxQNQ69YQ69hm
7XSG5LUuZJ3ZLO0hiCE+FOGnPCJOHB25ahmeCZX67pAtx4C6UCcS3DhesRhTiP9N
5xFeLnYQEvvqzajYpY3wXKd01L78CfcUa7QYMMTwdnoyg4xdWyZ8q05LENhNpjzx
n6ZVYLZblYrZ1w==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:59:08 2025 by rpki-client