Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdquP3B4ij8VmQ6w33xJXaHb73gns3brKw2ziT5vezRf/0/323830343a383763633a383030303a3a2f33342d3334203d3e20323732373332.roa
File:                     323830343a383763633a383030303a3a2f33342d3334203d3e20323732373332.roa (raw, json)
Hash identifier:          8Au/hJeCRQ2TGACi0G3gKMMOZkDSMBA40cbshORPibw=
Subject key identifier:   71:23:7A:82:9D:89:A6:39:A0:35:2F:D2:96:B1:E3:A7:88:19:74:7E
Certificate issuer:       /CN=7FBD4B27E976CEBD49011F68316E61892C5E9B81
Certificate serial:       35DA6E88067CF899545826007128FF7D7B19D617
Authority key identifier: 7F:BD:4B:27:E9:76:CE:BD:49:01:1F:68:31:6E:61:89:2C:5E:9B:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FBD4B27E976CEBD49011F68316E61892C5E9B81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdquP3B4ij8VmQ6w33xJXaHb73gns3brKw2ziT5vezRf/0/323830343a383763633a383030303a3a2f33342d3334203d3e20323732373332.roa
Signing time:             Mon 21 Aug 2023 14:08:48 +0000
ROA not before:           Mon 21 Aug 2023 14:03:48 +0000
ROA not after:            Mon 19 Aug 2024 14:08:48 +0000
asID:                     272732
IP address blocks:        2804:87cc:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:da:6e:88:06:7c:f8:99:54:58:26:00:71:28:ff:7d:7b:19:d6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FBD4B27E976CEBD49011F68316E61892C5E9B81
        Validity
            Not Before: Aug 21 14:03:48 2023 GMT
            Not After : Aug 19 14:08:48 2024 GMT
        Subject: CN=71237A829D89A639A0352FD296B1E3A78819747E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:80:cc:bb:27:a4:b1:5e:87:64:60:75:5a:
                    66:5a:fb:80:f0:2c:6a:eb:45:1f:8a:a6:ef:b3:4d:
                    70:05:0f:a1:24:5d:84:1d:9c:20:18:4f:9f:9d:90:
                    8b:96:5d:da:67:da:b2:71:ed:a3:41:76:e7:f5:49:
                    20:65:7e:b7:e8:09:9b:a3:79:5f:cf:bc:d6:48:bc:
                    fc:6e:c5:31:67:cd:90:5e:ef:2e:d8:27:5c:ad:84:
                    2d:e1:57:3e:b1:87:06:71:fd:65:c3:b9:5f:69:57:
                    a2:08:bc:77:a1:41:89:c5:a0:0d:18:89:4f:5b:64:
                    59:80:fb:48:83:96:cb:ba:60:65:ae:61:43:41:b2:
                    45:0c:e6:02:07:ae:f0:0c:b7:5f:86:bd:a5:9f:36:
                    e5:b0:55:9e:5b:67:4c:30:c6:b6:0b:55:3a:d1:8c:
                    e1:ab:39:12:5e:86:14:6d:ba:12:e3:b3:41:5b:2a:
                    e8:0f:9f:21:15:b0:04:c5:90:c8:55:2e:03:f7:4b:
                    86:ef:8c:e8:f3:b5:ba:03:9b:d9:61:ab:44:01:08:
                    c1:cc:9f:b0:89:c6:ed:33:99:5f:af:f8:7e:73:32:
                    62:1f:a0:73:1e:df:20:69:17:6a:56:9a:85:b7:dc:
                    9a:a0:80:8b:62:11:69:f9:ec:a7:68:80:67:70:7d:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:7A:82:9D:89:A6:39:A0:35:2F:D2:96:B1:E3:A7:88:19:74:7E
            X509v3 Authority Key Identifier:
                keyid:7F:BD:4B:27:E9:76:CE:BD:49:01:1F:68:31:6E:61:89:2C:5E:9B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdquP3B4ij8VmQ6w33xJXaHb73gns3brKw2ziT5vezRf/0/7FBD4B27E976CEBD49011F68316E61892C5E9B81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FBD4B27E976CEBD49011F68316E61892C5E9B81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdquP3B4ij8VmQ6w33xJXaHb73gns3brKw2ziT5vezRf/0/323830343a383763633a383030303a3a2f33342d3334203d3e20323732373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87cc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:fd:04:c8:6c:ce:94:c5:1a:cd:04:6b:77:5e:f5:39:19:c2:
         00:32:0e:17:0b:d2:64:a3:eb:e5:b5:a6:02:96:5f:ae:0e:8e:
         d7:bc:47:db:8d:d9:b1:59:5e:77:a6:d1:7a:a8:e7:50:e5:d6:
         9c:d6:4b:2a:a3:a1:db:0f:3d:2f:7e:71:dd:14:48:d4:a9:b6:
         30:f1:a3:13:59:e2:bf:ae:6a:a3:54:1b:88:32:a3:9e:b2:ff:
         ee:41:49:32:18:f5:1a:a9:cc:43:67:3e:d1:9e:fb:6c:5e:9b:
         8a:59:99:e6:5c:6e:22:10:3a:37:e9:23:67:b8:3b:1f:6f:5d:
         e8:4c:71:6e:5a:90:12:d1:3a:51:e1:82:95:14:10:bb:e5:83:
         a4:77:0d:f5:76:7a:c5:48:58:76:93:b9:8e:86:90:3b:d0:d7:
         f7:e4:9c:53:c9:93:da:96:4b:f8:9b:f4:8f:00:2d:7e:25:7f:
         6e:3a:2f:eb:af:70:50:4f:39:75:4f:99:6e:36:a8:79:99:21:
         56:b2:81:bf:e0:73:3a:4e:02:a3:c2:53:b2:00:36:12:d5:63:
         ba:09:60:c9:7f:24:78:30:87:dd:e0:97:b2:e1:fc:f6:25:64:
         80:dd:67:2d:c2:65:c8:f5:02:0f:d3:70:bc:2c:a6:f1:73:4a:
         83:b8:7a:87
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNdpuiAZ8+JlUWCYAcSj/fXsZ1hcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZCRDRCMjdFOTc2Q0VCRDQ5MDExRjY4MzE2RTYxODky
QzVFOUI4MTAeFw0yMzA4MjExNDAzNDhaFw0yNDA4MTkxNDA4NDhaMDMxMTAvBgNV
BAMTKDcxMjM3QTgyOUQ4OUE2MzlBMDM1MkZEMjk2QjFFM0E3ODgxOTc0N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOoDMuyeksV6HZGB1WmZa+4Dw
LGrrRR+Kpu+zTXAFD6EkXYQdnCAYT5+dkIuWXdpn2rJx7aNBduf1SSBlfrfoCZuj
eV/PvNZIvPxuxTFnzZBe7y7YJ1ythC3hVz6xhwZx/WXDuV9pV6IIvHehQYnFoA0Y
iU9bZFmA+0iDlsu6YGWuYUNBskUM5gIHrvAMt1+GvaWfNuWwVZ5bZ0wwxrYLVTrR
jOGrORJehhRtuhLjs0FbKugPnyEVsATFkMhVLgP3S4bvjOjztboDm9lhq0QBCMHM
n7CJxu0zmV+v+H5zMmIfoHMe3yBpF2pWmoW33JqggItiEWn57KdogGdwfTBTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcSN6gp2JpjmgNS/SlrHjp4gZdH4wHwYDVR0j
BBgwFoAUf71LJ+l2zr1JAR9oMW5hiSxem4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2RxdVAzQjRpajhWbVE2dzMzeEpYYUhiNzNnbnMzYnJLdzJ6aVQ1dmV6
UmYvMC83RkJENEIyN0U5NzZDRUJENDkwMTFGNjgzMTZFNjE4OTJDNUU5QjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGQkQ0QjI3RTk3NkNFQkQ0
OTAxMUY2ODMxNkU2MTg5MkM1RTlCODEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NkcXVQM0I0aWo4Vm1RNnczM3hKWGFIYjczZ25zM2JyS3cyemlUNXZlelJmLzAv
MzIzODMwMzQzYTM4Mzc2MzYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM3MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEh8yAMA0GCSqGSIb3DQEBCwUA
A4IBAQBC/QTIbM6UxRrNBGt3XvU5GcIAMg4XC9Jko+vltaYCll+uDo7XvEfbjdmx
WV53ptF6qOdQ5dac1ksqo6HbDz0vfnHdFEjUqbYw8aMTWeK/rmqjVBuIMqOesv/u
QUkyGPUaqcxDZz7RnvtsXpuKWZnmXG4iEDo36SNnuDsfb13oTHFuWpAS0TpR4YKV
FBC75YOkdw31dnrFSFh2k7mOhpA70Nf35JxTyZPalkv4m/SPAC1+JX9uOi/rr3BQ
Tzl1T5luNqh5mSFWsoG/4HM6TgKjwlOyADYS1WO6CWDJfyR4MIfd4Jey4fz2JWSA
3WctwmXI9QIP03C8LKbxc0qDuHqH
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:58 2025 by rpki-client