Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/323830343a313763343a3a2f33322d3438203d3e20323633323530.roa
File:                     323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (raw, json)
Hash identifier:          6s070LAmJ+dEGtnRJ3WagZTEX0JKjSjtIWsNfqtDS1E=
Subject key identifier:   BD:CC:02:C5:72:0C:C5:94:D4:A4:28:C1:AF:F5:73:34:4A:37:E4:0D
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       38FEEE5A63AFDD82902E9FBABD44FF239A717B4E
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/323830343a313763343a3a2f33322d3438203d3e20323633323530.roa
Signing time:             Thu 02 May 2024 19:09:18 +0000
ROA not before:           Thu 02 May 2024 19:04:18 +0000
ROA not after:            Thu 01 May 2025 19:09:18 +0000
asID:                     263250
IP address blocks:        2804:17c4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fe:ee:5a:63:af:dd:82:90:2e:9f:ba:bd:44:ff:23:9a:71:7b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: May  2 19:04:18 2024 GMT
            Not After : May  1 19:09:18 2025 GMT
        Subject: CN=BDCC02C5720CC594D4A428C1AFF573344A37E40D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:46:6d:1e:96:7c:58:08:01:35:db:d5:45:
                    a3:4c:89:83:08:2e:d3:dd:53:ff:a9:3e:35:b9:7b:
                    a9:e2:73:22:d4:88:2a:f3:16:1a:9d:24:20:6d:40:
                    8e:73:ab:66:07:5a:17:64:67:bf:15:fa:d1:d2:07:
                    dd:a2:57:87:78:d4:07:7d:76:c8:30:aa:da:1d:a2:
                    91:54:b5:6a:a1:ce:51:1f:08:cc:1b:5a:ce:15:ce:
                    d6:08:22:48:32:29:85:a1:46:d0:b1:ad:62:28:9d:
                    36:a1:fa:52:c8:6f:71:5f:10:5f:fd:05:a2:05:40:
                    61:f9:59:81:a3:6c:3a:3a:b1:2f:91:87:34:68:e0:
                    ad:a6:d0:75:40:50:01:64:be:d0:88:f5:ee:2e:a0:
                    a5:b0:04:26:9c:13:9a:84:81:bc:31:36:2e:22:8f:
                    c2:d9:8e:0b:98:c0:c9:fe:04:a6:77:31:92:b4:ce:
                    6c:f8:19:b4:fe:99:7b:b4:db:0b:6f:73:cb:67:88:
                    9a:f5:10:7e:6e:3d:74:b1:58:26:cb:20:8c:47:89:
                    ef:c3:ff:4b:91:7d:39:e3:bd:b8:c0:b5:60:fb:1e:
                    69:96:99:1e:9d:94:d9:0f:89:94:57:7c:08:74:06:
                    40:f4:a7:b3:de:39:c2:9b:7e:64:2b:df:ab:3f:50:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CC:02:C5:72:0C:C5:94:D4:A4:28:C1:AF:F5:73:34:4A:37:E4:0D
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/323830343a313763343a3a2f33322d3438203d3e20323633323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:a8:56:c9:93:c8:36:59:3d:c7:02:5b:0a:11:48:c2:34:
         ca:25:fd:38:ab:50:34:64:2e:98:92:0c:c1:5d:0e:5d:85:04:
         b9:4f:83:49:ec:af:cc:04:41:67:c4:2f:ea:e6:e5:75:29:72:
         5d:f2:27:b1:8f:93:58:ab:71:95:dc:6a:af:85:5b:ca:d1:68:
         0f:45:44:fd:0d:a3:1b:69:84:82:ef:f3:1d:0c:8b:d1:17:19:
         14:7a:83:f4:43:30:33:d2:c4:35:da:de:18:12:34:29:fd:c2:
         91:5f:e4:b0:61:9b:fe:9c:a1:3e:da:ef:d5:44:71:4d:a0:b0:
         3f:93:d0:86:1b:e4:41:b8:ba:6d:b3:6b:6b:44:85:9a:f2:b8:
         ee:dc:f6:2b:b0:54:93:bb:c8:e5:63:f8:b9:29:54:08:f1:54:
         78:98:7a:75:e2:14:50:39:89:c8:d6:55:7f:a4:83:71:b4:2e:
         5a:f6:ff:b5:bd:2e:fe:0f:23:c2:03:85:e7:25:04:24:46:68:
         36:ce:ca:41:b0:a3:f7:78:5b:47:5b:10:0c:50:d1:c9:cf:ff:
         44:27:68:b7:d9:c2:a8:7e:12:29:5c:a6:27:ec:e6:0c:4a:14:
         be:ce:4d:9a:6f:77:b6:20:a6:5c:7b:05:e0:89:9c:ed:80:c2:
         86:0f:ba:15
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOP7uWmOv3YKQLp+6vUT/I5pxe04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2
RDUyNTI5MTAeFw0yNDA1MDIxOTA0MThaFw0yNTA1MDExOTA5MThaMDMxMTAvBgNV
BAMTKEJEQ0MwMkM1NzIwQ0M1OTRENEE0MjhDMUFGRjU3MzM0NEEzN0U0MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYkZtHpZ8WAgBNdvVRaNMiYMI
LtPdU/+pPjW5e6nicyLUiCrzFhqdJCBtQI5zq2YHWhdkZ78V+tHSB92iV4d41Ad9
dsgwqtodopFUtWqhzlEfCMwbWs4VztYIIkgyKYWhRtCxrWIonTah+lLIb3FfEF/9
BaIFQGH5WYGjbDo6sS+RhzRo4K2m0HVAUAFkvtCI9e4uoKWwBCacE5qEgbwxNi4i
j8LZjguYwMn+BKZ3MZK0zmz4GbT+mXu02wtvc8tniJr1EH5uPXSxWCbLIIxHie/D
/0uRfTnjvbjAtWD7HmmWmR6dlNkPiZRXfAh0BkD0p7PeOcKbfmQr36s/UDHhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUvcwCxXIMxZTUpCjBr/VzNEo35A0wHwYDVR0j
BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B
UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx
MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZZDJpSjluVTJ0aFNWUW9ncENaNmZKYWRhZ0RqRzlBY3M5WXRXOGNOQVBYLzAv
MzIzODMwMzQzYTMxMzc2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzIzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQXxDANBgkqhkiG9w0BAQsFAAOCAQEAPveoVsmT
yDZZPccCWwoRSMI0yiX9OKtQNGQumJIMwV0OXYUEuU+DSeyvzARBZ8Qv6ubldSly
XfInsY+TWKtxldxqr4VbytFoD0VE/Q2jG2mEgu/zHQyL0RcZFHqD9EMwM9LENdre
GBI0Kf3CkV/ksGGb/pyhPtrv1URxTaCwP5PQhhvkQbi6bbNra0SFmvK47tz2K7BU
k7vI5WP4uSlUCPFUeJh6deIUUDmJyNZVf6SDcbQuWvb/tb0u/g8jwgOF5yUEJEZo
Ns7KQbCj93hbR1sQDFDRyc//RCdot9nCqH4SKVymJ+zmDEoUvs5Nmm93tiCmXHsF
4Imc7YDChg+6FQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:59 2025 by rpki-client