Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/323830343a366232383a3a2f33322d3332203d3e20323730333832.roa
File:                     323830343a366232383a3a2f33322d3332203d3e20323730333832.roa (raw, json)
Hash identifier:          wsoEdnBlarKYlE5gLjqz+y+PnhcsJj7RLutE9P+FT1s=
Subject key identifier:   C9:50:A4:5A:61:1E:CA:CD:C9:9F:C4:81:06:6B:F3:DB:8F:4E:7A:7D
Certificate issuer:       /CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
Certificate serial:       302515CBF2E7AC47C63FD2D6102B2A617266058B
Authority key identifier: 85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/323830343a366232383a3a2f33322d3332203d3e20323730333832.roa
Signing time:             Mon 18 Dec 2023 19:19:26 +0000
ROA not before:           Mon 18 Dec 2023 19:14:26 +0000
ROA not after:            Mon 16 Dec 2024 19:19:26 +0000
asID:                     270382
IP address blocks:        2804:6b28::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:25:15:cb:f2:e7:ac:47:c6:3f:d2:d6:10:2b:2a:61:72:66:05:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
        Validity
            Not Before: Dec 18 19:14:26 2023 GMT
            Not After : Dec 16 19:19:26 2024 GMT
        Subject: CN=C950A45A611ECACDC99FC481066BF3DB8F4E7A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:68:3e:7c:5a:de:b6:be:f2:2b:41:76:68:
                    a2:4f:c6:20:f6:d1:47:d8:57:dc:4b:6e:b7:4b:20:
                    8c:ae:b4:b2:93:01:d1:2d:5a:3c:80:20:a6:36:4e:
                    72:da:aa:04:fe:bd:a6:c3:44:07:25:6b:58:0c:12:
                    0b:1b:cf:d7:ef:b2:f9:9c:1e:7e:8c:52:cb:b9:77:
                    b6:50:dc:cf:60:15:7b:4d:98:ad:5f:fe:4d:d0:c0:
                    36:3f:e3:17:ee:12:8b:d8:a6:60:b8:e1:63:ca:ab:
                    9f:25:28:96:42:8a:f0:14:8b:a4:f4:70:0e:54:02:
                    7a:2c:6e:96:22:2d:9f:aa:58:d5:9f:b1:3b:a5:58:
                    0f:1f:4e:78:81:86:8d:8b:64:29:ef:ff:b3:16:57:
                    d3:e3:81:a9:8e:6f:80:55:d5:3e:54:10:5b:b5:31:
                    56:38:57:b7:43:1a:9a:58:20:7c:5c:b1:f2:cf:59:
                    85:a5:a2:bb:b9:f8:3e:05:4c:48:17:e6:26:3f:59:
                    08:16:8b:64:00:8a:ee:0b:de:35:b4:e7:5e:8f:9a:
                    2c:e0:3a:86:01:7d:a0:9e:e0:5a:37:6c:fd:ea:3e:
                    1f:f2:d3:2b:48:3b:b7:6b:d1:9b:58:17:f9:15:c2:
                    05:cf:7c:54:2c:ca:4b:9e:c9:95:d7:2c:03:7e:62:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:A4:5A:61:1E:CA:CD:C9:9F:C4:81:06:6B:F3:DB:8F:4E:7A:7D
            X509v3 Authority Key Identifier:
                keyid:85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/323830343a366232383a3a2f33322d3332203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:f7:00:c2:01:1c:b0:0b:de:87:58:7b:c2:4b:46:66:27:
         09:cf:d4:30:df:9f:8f:5e:17:dd:a0:e0:5d:a8:10:5e:9c:70:
         00:db:36:99:29:9c:02:fc:b6:c5:53:bc:f9:ae:c2:b6:ca:e5:
         ab:2f:bc:04:97:ed:a5:7c:2a:de:6d:ae:73:81:ab:65:c0:8a:
         5f:fd:57:2d:8e:98:24:3f:e8:ea:61:48:0a:1c:30:e7:29:90:
         09:34:02:a9:be:ed:05:8d:82:1b:61:02:88:7b:75:5d:7e:72:
         02:f9:b6:bb:71:8f:3c:d1:cb:13:2c:0b:a6:02:41:38:07:e5:
         bb:0b:0a:68:9a:54:0f:35:97:81:df:49:10:24:d5:5c:fc:78:
         33:7b:0e:b6:5f:73:de:b8:f1:aa:a4:5d:64:db:ff:ac:37:90:
         71:59:3c:2b:80:63:2d:db:6a:8f:da:bf:de:4f:aa:fb:61:cf:
         e9:53:b8:cc:ca:3c:c8:05:0b:c1:12:45:01:6d:e5:96:0b:51:
         c6:a1:1b:05:2e:65:37:06:b7:e7:fc:4a:ec:e0:a0:9b:3a:96:
         4e:d4:12:7e:63:2b:f2:83:a9:4d:41:22:a5:a3:ff:fa:27:95:
         63:97:f8:b3:a9:0a:2b:cd:a1:c9:72:74:5d:5d:c7:d7:57:dd:
         95:95:b5:fc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMCUVy/LnrEfGP9LWECsqYXJmBYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxOTJDNUZBODU2QTIwRDM2REJEMjE1NUI5Rjk0RDJD
OTRERkEzRjAeFw0yMzEyMTgxOTE0MjZaFw0yNDEyMTYxOTE5MjZaMDMxMTAvBgNV
BAMTKEM5NTBBNDVBNjExRUNBQ0RDOTlGQzQ4MTA2NkJGM0RCOEY0RTdBN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDmg+fFretr7yK0F2aKJPxiD2
0UfYV9xLbrdLIIyutLKTAdEtWjyAIKY2TnLaqgT+vabDRAcla1gMEgsbz9fvsvmc
Hn6MUsu5d7ZQ3M9gFXtNmK1f/k3QwDY/4xfuEovYpmC44WPKq58lKJZCivAUi6T0
cA5UAnosbpYiLZ+qWNWfsTulWA8fTniBho2LZCnv/7MWV9PjgamOb4BV1T5UEFu1
MVY4V7dDGppYIHxcsfLPWYWloru5+D4FTEgX5iY/WQgWi2QAiu4L3jW0516Pmizg
OoYBfaCe4Fo3bP3qPh/y0ytIO7dr0ZtYF/kVwgXPfFQsykueyZXXLAN+YgMTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyVCkWmEeys3Jn8SBBmvz249Oen0wHwYDVR0j
BBgwFoAUhRksX6hWog0229IVW5+U0slN+j8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFdSa055VjZrTExjRmF4OW10UVFYOUx5VDhpUXVFWlpZQWh3RFpaRDZ1
UG0vMC84NTE5MkM1RkE4NTZBMjBEMzZEQkQyMTU1QjlGOTREMkM5NERGQTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MTkyQzVGQTg1NkEyMEQz
NkRCRDIxNTVCOUY5NEQyQzk0REZBM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RXUmtOeVY2a0xMY0ZheDltdFFRWDlMeVQ4aVF1RVpaWUFod0RaWkQ2dVBtLzAv
MzIzODMwMzQzYTM2NjIzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzMzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARrKDANBgkqhkiG9w0BAQsFAAOCAQEAHwX3AMIB
HLAL3odYe8JLRmYnCc/UMN+fj14X3aDgXagQXpxwANs2mSmcAvy2xVO8+a7Ctsrl
qy+8BJftpXwq3m2uc4GrZcCKX/1XLY6YJD/o6mFIChww5ymQCTQCqb7tBY2CG2EC
iHt1XX5yAvm2u3GPPNHLEywLpgJBOAfluwsKaJpUDzWXgd9JECTVXPx4M3sOtl9z
3rjxqqRdZNv/rDeQcVk8K4BjLdtqj9q/3k+q+2HP6VO4zMo8yAULwRJFAW3llgtR
xqEbBS5lNwa35/xK7OCgmzqWTtQSfmMr8oOpTUEipaP/+ieVY5f4s6kKK82hyXJ0
XV3H11fdlZW1/A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:58:26 2025 by rpki-client