Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a666661313a3a2f34382d3438203d3e20323632383734.roa
File:                     323830343a3335343a666661313a3a2f34382d3438203d3e20323632383734.roa (raw, json)
Hash identifier:          Vn8xPvGsnLlUSE7ApswYMXpziM2jdoH+YAgLV0xHOgg=
Subject key identifier:   98:B6:AE:9A:F1:7B:34:61:C1:5B:95:5B:6A:39:9C:59:68:3F:DE:DC
Certificate issuer:       /CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
Certificate serial:       5124DBC5100D63E6F798128F8A91EA3E454DA4B4
Authority key identifier: 1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a666661313a3a2f34382d3438203d3e20323632383734.roa
Signing time:             Fri 06 Jan 2023 12:08:31 +0000
ROA not before:           Fri 06 Jan 2023 12:03:31 +0000
ROA not after:            Fri 05 Jan 2024 12:08:31 +0000
asID:                     262874
IP address blocks:        2804:354:ffa1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:24:db:c5:10:0d:63:e6:f7:98:12:8f:8a:91:ea:3e:45:4d:a4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
        Validity
            Not Before: Jan  6 12:03:31 2023 GMT
            Not After : Jan  5 12:08:31 2024 GMT
        Subject: CN=98B6AE9AF17B3461C15B955B6A399C59683FDEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:3a:9a:16:bf:37:20:2d:4b:2f:3f:13:38:
                    3f:3c:29:96:91:72:f6:13:73:58:3d:cf:a9:92:7f:
                    5c:c6:a8:98:b3:76:32:57:7e:ea:c2:e0:80:24:d7:
                    5e:0e:0e:11:19:45:ea:f2:89:7b:37:40:a7:46:ad:
                    19:c8:8c:8b:9d:d7:dd:0f:6a:f2:43:18:4f:8c:3a:
                    ab:8c:1d:08:de:5c:fd:61:07:dd:38:03:15:67:a6:
                    e7:0c:24:7e:5c:b3:5d:6a:5f:73:5d:73:bc:bf:eb:
                    22:78:c7:00:bb:c8:c8:b4:af:7b:86:b6:db:b5:4c:
                    e7:fa:63:35:e4:eb:5b:ee:f4:6e:ee:89:7e:4d:40:
                    c5:bb:36:e0:51:c0:e8:bc:d6:22:e7:3f:ea:f2:86:
                    a5:1c:bd:8b:46:87:53:da:ed:03:5d:ce:10:c1:d6:
                    9c:2f:f9:fc:d5:11:20:02:3f:aa:4d:4a:cb:a8:70:
                    11:eb:ec:a9:46:63:48:31:4c:e4:fb:eb:74:68:52:
                    2b:bd:42:cd:72:ca:af:4e:c7:8c:35:7c:aa:ea:79:
                    54:3b:33:d5:36:66:50:a7:a4:0d:85:6e:99:86:b9:
                    c4:94:7c:c1:ef:e5:d6:b8:68:91:51:3b:2f:f2:3d:
                    e9:5b:c4:f6:77:78:06:49:a7:77:65:50:fc:79:b1:
                    a7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B6:AE:9A:F1:7B:34:61:C1:5B:95:5B:6A:39:9C:59:68:3F:DE:DC
            X509v3 Authority Key Identifier:
                keyid:1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a666661313a3a2f34382d3438203d3e20323632383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354:ffa1::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:5d:4f:27:a5:e4:5a:60:ea:f1:83:91:05:42:f5:15:d9:
         19:b1:e0:f5:21:d4:42:f3:d0:c2:35:b7:ab:02:e2:76:3a:56:
         f0:8c:74:14:1a:72:b9:f5:f1:11:03:62:01:4a:28:6a:b8:b3:
         d5:bd:5b:0f:f7:a1:fd:7b:4a:be:da:99:63:5d:91:27:15:b6:
         7f:d6:6c:c2:84:b5:d1:f8:cb:9a:d3:51:45:d8:2a:0d:8d:29:
         63:aa:41:ed:53:e5:a3:2c:9a:b6:6f:89:39:b3:bd:36:1f:78:
         28:2b:f5:9c:8a:ab:3d:8c:bc:80:26:87:4e:5e:3c:64:b7:cc:
         1b:a1:5e:17:8b:fe:4e:fa:38:f6:e7:49:d3:b2:a4:aa:e8:8f:
         ef:43:f2:4f:82:1a:c4:cb:ca:9c:a6:86:cf:1e:35:eb:fe:f2:
         7b:ce:66:33:48:12:d2:94:ec:ea:25:99:bd:17:c4:21:c9:9a:
         b9:03:f2:08:87:82:52:a8:4d:4b:4a:be:0c:d5:02:3b:7d:1c:
         09:fa:48:69:5a:fb:28:5d:27:a3:69:ad:a1:70:b4:60:1c:eb:
         55:10:99:50:2c:c5:e9:e1:b6:ed:40:e8:65:8f:3e:e3:df:7b:
         e8:69:12:cb:16:3b:08:44:85:00:0b:2f:3c:fe:65:8c:0f:d3:
         fe:ea:68:f4
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUUSTbxRANY+b3mBKPipHqPkVNpLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBNkFCRUNFRjRGMkZCREY1MDE0NkI0MjVEMDdBNzdE
MDFFQTg1MjAeFw0yMzAxMDYxMjAzMzFaFw0yNDAxMDUxMjA4MzFaMDMxMTAvBgNV
BAMTKDk4QjZBRTlBRjE3QjM0NjFDMTVCOTU1QjZBMzk5QzU5NjgzRkRFREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kjqaFr83IC1LLz8TOD88KZaR
cvYTc1g9z6mSf1zGqJizdjJXfurC4IAk114ODhEZReryiXs3QKdGrRnIjIud190P
avJDGE+MOquMHQjeXP1hB904AxVnpucMJH5cs11qX3Ndc7y/6yJ4xwC7yMi0r3uG
ttu1TOf6YzXk61vu9G7uiX5NQMW7NuBRwOi81iLnP+ryhqUcvYtGh1Pa7QNdzhDB
1pwv+fzVESACP6pNSsuocBHr7KlGY0gxTOT763RoUiu9Qs1yyq9Ox4w1fKrqeVQ7
M9U2ZlCnpA2FbpmGucSUfMHv5da4aJFROy/yPelbxPZ3eAZJp3dlUPx5sae3AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUmLaumvF7NGHBW5VbajmcWWg/3twwHwYDVR0j
BBgwFoAUGqar7O9PL731AUa0JdB6d9AeqFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUdDQ0JIQkVLN1ZZNTRXWVJaMXBZelh6ODM2QjR6UE1GelJoQmtVVXEy
QkYvMC8xQUE2QUJFQ0VGNEYyRkJERjUwMTQ2QjQyNUQwN0E3N0QwMUVBODUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBQTZBQkVDRUY0RjJGQkRG
NTAxNDZCNDI1RDA3QTc3RDAxRUE4NTIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VHQ0NCSEJFSzdWWTU0V1lSWjFwWXpYejgzNkI0elBNRnpSaEJrVVVxMkJGLzAv
MzIzODMwMzQzYTMzMzUzNDNhNjY2NjYxMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzIzODM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBANU/6EwDQYJKoZIhvcNAQELBQAD
ggEBAJK6XU8npeRaYOrxg5EFQvUV2Rmx4PUh1ELz0MI1t6sC4nY6VvCMdBQacrn1
8REDYgFKKGq4s9W9Ww/3of17Sr7amWNdkScVtn/WbMKEtdH4y5rTUUXYKg2NKWOq
Qe1T5aMsmrZviTmzvTYfeCgr9ZyKqz2MvIAmh05ePGS3zBuhXheL/k76OPbnSdOy
pKroj+9D8k+CGsTLypymhs8eNev+8nvOZjNIEtKU7Oolmb0XxCHJmrkD8giHglKo
TUtKvgzVAjt9HAn6SGla+yhdJ6NpraFwtGAc61UQmVAsxenhtu1A6GWPPuPfe+hp
EssWOwhEhQALLzz+ZYwP0/7qaPQ=
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:35 2025 by rpki-client