Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa
File:                     323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa (raw, json)
Hash identifier:          y1P+K2V4udzN6NWPiuixhjbX3ulN/SBwdpKee4Rmwwk=
Subject key identifier:   17:68:39:B2:C2:D5:D3:9A:B7:3F:19:F8:C6:1E:5C:E9:F1:EE:6B:22
Certificate issuer:       /CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
Certificate serial:       2487D99D044A65A0BC5BA322BA45A1E75B13ADDB
Authority key identifier: 99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa
Signing time:             Fri 31 Jan 2025 18:37:52 +0000
ROA not before:           Fri 31 Jan 2025 18:32:52 +0000
ROA not after:            Fri 30 Jan 2026 18:37:52 +0000
asID:                     272164
IP address blocks:        2804:82e8:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:87:d9:9d:04:4a:65:a0:bc:5b:a3:22:ba:45:a1:e7:5b:13:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
        Validity
            Not Before: Jan 31 18:32:52 2025 GMT
            Not After : Jan 30 18:37:52 2026 GMT
        Subject: CN=176839B2C2D5D39AB73F19F8C61E5CE9F1EE6B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:9e:10:96:27:cf:c8:05:cf:2a:2d:fc:1a:
                    da:b3:05:d8:72:a8:5b:61:da:fa:f7:ac:36:79:1c:
                    9d:53:fe:bb:70:17:67:39:2b:b4:4b:ac:62:a8:b9:
                    c4:a9:02:16:67:2d:14:71:77:dd:e8:14:d6:80:74:
                    42:38:d1:a2:b8:02:5c:2d:f6:4c:af:02:49:85:45:
                    74:89:61:00:e0:23:30:27:f9:69:94:48:af:18:bf:
                    5b:4c:f5:24:42:68:54:fd:b6:6a:54:2c:47:c7:84:
                    fe:84:b6:5e:b4:37:2e:aa:ab:f0:d9:d8:fc:49:63:
                    f1:1b:e6:86:af:90:97:19:15:84:8d:4e:12:6a:ef:
                    82:10:71:3b:db:70:50:70:02:87:3f:aa:b8:fe:35:
                    07:02:6b:f0:f9:30:97:6d:9c:70:6f:dc:5b:6a:81:
                    8c:cc:ed:37:38:98:bc:0f:90:a1:5c:0a:96:93:bb:
                    f9:81:63:e6:23:10:d5:14:49:b5:5e:94:ff:6f:36:
                    2e:df:8b:ab:be:c5:31:d0:d1:29:58:98:d5:69:4e:
                    f4:98:07:a2:a8:fb:ef:aa:4c:3a:44:9b:bd:2f:37:
                    71:eb:40:9f:24:de:e6:61:83:2b:ce:a5:59:40:5d:
                    ab:28:1f:8d:41:85:c2:3e:ea:74:36:73:b7:53:b5:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:68:39:B2:C2:D5:D3:9A:B7:3F:19:F8:C6:1E:5C:E9:F1:EE:6B:22
            X509v3 Authority Key Identifier:
                keyid:99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:dd:52:f5:f4:8b:ef:c1:bb:e9:7e:86:39:1a:01:71:28:4d:
         81:af:21:f8:84:25:0a:45:3e:2e:5d:fd:c1:d0:b6:9d:3f:4e:
         2c:4a:74:34:2a:c1:09:c1:2a:0b:af:b1:4d:83:43:c4:cc:64:
         55:99:e1:8c:44:ed:1f:30:ac:1d:8a:da:0e:c5:8f:85:b7:80:
         4f:ab:7d:aa:d4:af:ea:ba:3c:22:fd:9f:bf:37:bb:0f:99:d1:
         8d:ae:8e:86:fc:e5:ed:21:79:6f:bd:d7:d6:aa:73:3b:75:12:
         36:4b:fe:2d:35:59:ba:39:4f:2e:bd:a6:13:9b:2f:9c:ad:9e:
         3f:11:01:da:5c:ef:97:2c:4c:c6:d0:be:0c:f0:27:c9:04:94:
         85:9c:79:37:0d:32:7e:1f:a5:3a:42:ac:ee:98:a3:f4:e5:65:
         51:ba:bf:2e:b8:58:da:c4:15:0c:46:1d:b5:56:80:0f:0a:87:
         0b:ed:79:0e:c2:5e:e2:57:3e:69:0a:46:79:b8:20:fd:7d:7a:
         26:cc:84:a1:88:83:f0:17:9d:d3:eb:de:b0:75:09:78:94:61:
         74:27:86:7a:f1:89:7a:56:4b:07:26:4d:4c:17:0e:d3:97:53:
         1b:cf:14:dc:d7:2e:6a:f8:ba:b6:09:5f:c5:70:8d:fa:77:08:
         52:5d:35:51
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJIfZnQRKZaC8W6MiukWh51sTrdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk5QkFCNDMzMUFEOTFERDdCMDg2NDNCRjlDQUI3NTBD
OUMzN0U3NjAeFw0yNTAxMzExODMyNTJaFw0yNjAxMzAxODM3NTJaMDMxMTAvBgNV
BAMTKDE3NjgzOUIyQzJENUQzOUFCNzNGMTlGOEM2MUU1Q0U5RjFFRTZCMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Op4QlifPyAXPKi38GtqzBdhy
qFth2vr3rDZ5HJ1T/rtwF2c5K7RLrGKoucSpAhZnLRRxd93oFNaAdEI40aK4Alwt
9kyvAkmFRXSJYQDgIzAn+WmUSK8Yv1tM9SRCaFT9tmpULEfHhP6Etl60Ny6qq/DZ
2PxJY/Eb5oavkJcZFYSNThJq74IQcTvbcFBwAoc/qrj+NQcCa/D5MJdtnHBv3Ftq
gYzM7Tc4mLwPkKFcCpaTu/mBY+YjENUUSbVelP9vNi7fi6u+xTHQ0SlYmNVpTvSY
B6Ko+++qTDpEm70vN3HrQJ8k3uZhgyvOpVlAXasoH41BhcI+6nQ2c7dTtcgXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUF2g5ssLV05q3Pxn4xh5c6fHuayIwHwYDVR0j
BBgwFoAUmZurQzGtkd17CGQ7+cq3UMnDfnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5Bc0FlQnZxc3NMdmdYa005anIzelRUQ1R5c2E1dm9OWXo0YnU0VnRt
YmovMC85OTlCQUI0MzMxQUQ5MUREN0IwODY0M0JGOUNBQjc1MEM5QzM3RTc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5OUJBQjQzMzFBRDkxREQ3
QjA4NjQzQkY5Q0FCNzUwQzlDMzdFNzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VOQXNBZUJ2cXNzTHZnWGtNOWpyM3pUVENUeXNhNXZvTll6NGJ1NFZ0bWJqLzAv
MzIzODMwMzQzYTM4MzI2NTM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMxMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEguiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCo3VL19IvvwbvpfoY5GgFxKE2BryH4hCUKRT4uXf3B0LadP04sSnQ0KsEJ
wSoLr7FNg0PEzGRVmeGMRO0fMKwditoOxY+Ft4BPq32q1K/qujwi/Z+/N7sPmdGN
ro6G/OXtIXlvvdfWqnM7dRI2S/4tNVm6OU8uvaYTmy+crZ4/EQHaXO+XLEzG0L4M
8CfJBJSFnHk3DTJ+H6U6QqzumKP05WVRur8uuFjaxBUMRh21VoAPCocL7XkOwl7i
Vz5pCkZ5uCD9fXomzIShiIPwF53T696wdQl4lGF0J4Z68Yl6VksHJk1MFw7Tl1Mb
zxTc1y5q+Lq2CV/FcI36dwhSXTVR
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:28:54 2025 by rpki-client