Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f33322d3332203d3e20323636353436.roa
File:                     323830343a336461633a3a2f33322d3332203d3e20323636353436.roa (raw, json)
Hash identifier:          54yPWVcEd/+IMGDk0DqDvTN0qM4YMhlF9zE08MS4RT4=
Subject key identifier:   5D:8F:66:03:F0:21:2E:03:FB:4A:5D:C7:F3:8E:36:65:C1:8E:3D:69
Certificate issuer:       /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial:       0690DACFEB6A6AC805CF1A50EDB886E08FB38CE4
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f33322d3332203d3e20323636353436.roa
Signing time:             Tue 18 Mar 2025 20:06:36 +0000
ROA not before:           Tue 18 Mar 2025 20:01:36 +0000
ROA not after:            Tue 17 Mar 2026 20:06:36 +0000
asID:                     266546
IP address blocks:        2804:3dac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:90:da:cf:eb:6a:6a:c8:05:cf:1a:50:ed:b8:86:e0:8f:b3:8c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
        Validity
            Not Before: Mar 18 20:01:36 2025 GMT
            Not After : Mar 17 20:06:36 2026 GMT
        Subject: CN=5D8F6603F0212E03FB4A5DC7F38E3665C18E3D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:92:30:f0:b3:48:fe:26:a8:59:c6:84:ed:
                    ec:aa:09:b8:d9:09:ca:7e:01:8c:ac:65:5d:13:5a:
                    db:f4:6d:c3:1a:03:5c:ab:6f:a1:b2:d9:38:0a:18:
                    4e:4a:31:62:41:a7:7f:a2:38:0a:a3:9b:c9:ed:6f:
                    68:f4:7c:be:65:a5:94:2a:6d:8b:a3:69:85:55:29:
                    83:8b:82:73:b0:35:12:15:60:47:af:6b:4a:d1:72:
                    53:5c:26:5e:61:52:7c:9a:60:c6:24:b0:23:a5:69:
                    43:13:54:ce:34:55:d2:02:62:8f:90:a1:7c:65:10:
                    4c:27:10:96:79:77:e0:7d:88:59:0b:10:3e:15:c6:
                    60:8d:4e:46:92:56:d6:8a:30:67:4c:e2:6b:79:1a:
                    e4:5a:56:ba:18:37:09:ce:7d:65:d2:6d:f4:63:a6:
                    90:20:cf:ed:84:df:c7:47:ed:f8:df:84:a7:42:33:
                    c1:49:bc:95:35:3f:69:59:b1:c9:8e:4e:f7:64:54:
                    bf:14:b0:b0:ea:8e:b2:0b:50:a0:93:79:50:bf:37:
                    01:11:f5:ee:e9:15:b5:9b:7d:63:71:5c:78:b4:f6:
                    9b:ad:77:5b:d4:8f:bc:49:48:92:ae:20:22:dd:fc:
                    4e:4a:78:7c:4a:44:bc:04:30:38:21:32:62:42:8e:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8F:66:03:F0:21:2E:03:FB:4A:5D:C7:F3:8E:36:65:C1:8E:3D:69
            X509v3 Authority Key Identifier:
                keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f33322d3332203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dac::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:0a:ec:b4:bf:ea:87:5b:90:62:c2:a2:0b:f9:75:ef:63:
         de:d3:dd:82:59:e7:f9:3f:b4:a7:a9:05:ec:3a:33:68:0c:61:
         06:ec:cc:18:4f:91:e6:52:34:b5:b1:74:53:19:5a:6e:cd:f5:
         69:59:30:11:d5:f8:5e:ca:6d:84:49:6e:0b:13:3f:02:7d:6e:
         aa:e0:72:13:e4:71:81:b9:6b:ce:a4:5c:15:6a:3d:b6:14:4d:
         e7:b0:3a:25:d3:d7:b1:07:56:47:36:98:a8:5b:b2:3e:59:cb:
         bf:ae:e7:49:59:fd:a2:8a:e7:4d:d3:a8:10:10:cf:f0:12:8b:
         21:77:f7:81:6d:ad:59:23:77:bc:c7:72:2e:bb:bc:87:3e:e6:
         fe:ae:0d:08:09:60:d5:21:16:29:f4:f9:97:0b:33:a4:e8:c8:
         3a:bc:19:69:62:b5:56:81:17:53:56:70:09:e8:e6:58:66:65:
         bc:a6:45:82:13:36:ef:fb:20:05:15:b2:20:53:ef:ad:f2:3d:
         08:a7:19:ab:9d:3c:46:01:f0:bd:80:74:68:c2:fe:80:9d:e4:
         d6:0a:e6:70:0d:b6:9d:7a:73:9b:8c:30:c7:6a:21:93:ff:15:
         59:32:4f:56:c1:16:3b:8d:a0:e5:3a:f6:62:f8:48:44:2b:d1:
         08:cd:e7:bc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBpDaz+tqasgFzxpQ7biG4I+zjOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc4MEExQUQ2RUJCQjZENzhCMkZGNURBREQ5QTMxNzA3
QTRCRUU4QTAeFw0yNTAzMTgyMDAxMzZaFw0yNjAzMTcyMDA2MzZaMDMxMTAvBgNV
BAMTKDVEOEY2NjAzRjAyMTJFMDNGQjRBNURDN0YzOEUzNjY1QzE4RTNENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWb5Iw8LNI/iaoWcaE7eyqCbjZ
Ccp+AYysZV0TWtv0bcMaA1yrb6Gy2TgKGE5KMWJBp3+iOAqjm8ntb2j0fL5lpZQq
bYujaYVVKYOLgnOwNRIVYEeva0rRclNcJl5hUnyaYMYksCOlaUMTVM40VdICYo+Q
oXxlEEwnEJZ5d+B9iFkLED4VxmCNTkaSVtaKMGdM4mt5GuRaVroYNwnOfWXSbfRj
ppAgz+2E38dH7fjfhKdCM8FJvJU1P2lZscmOTvdkVL8UsLDqjrILUKCTeVC/NwER
9e7pFbWbfWNxXHi09putd1vUj7xJSJKuICLd/E5KeHxKRLwEMDghMmJCjkHrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXY9mA/AhLgP7Sl3H8442ZcGOPWkwHwYDVR0j
BBgwFoAUp4ChrW67tteLL/Xa3ZoxcHpL7oowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWhnRDFUaEhDTk1VejJrQURrTVdKdGVTZnBuVE5wd1FoeEU4aGUyUFhX
RXovMC9BNzgwQTFBRDZFQkJCNkQ3OEIyRkY1REFERDlBMzE3MDdBNEJFRThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3ODBBMUFENkVCQkI2RDc4
QjJGRjVEQUREOUEzMTcwN0E0QkVFOEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VoZ0QxVGhIQ05NVXoya0FEa01XSnRlU2ZwblROcHdRaHhFOGhlMlBYV0V6LzAv
MzIzODMwMzQzYTMzNjQ2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzUzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ9rDANBgkqhkiG9w0BAQsFAAOCAQEAQm4K7LS/
6odbkGLCogv5de9j3tPdglnn+T+0p6kF7DozaAxhBuzMGE+R5lI0tbF0Uxlabs31
aVkwEdX4XspthEluCxM/An1uquByE+RxgblrzqRcFWo9thRN57A6JdPXsQdWRzaY
qFuyPlnLv67nSVn9oornTdOoEBDP8BKLIXf3gW2tWSN3vMdyLru8hz7m/q4NCAlg
1SEWKfT5lwszpOjIOrwZaWK1VoEXU1ZwCejmWGZlvKZFghM27/sgBRWyIFPvrfI9
CKcZq508RgHwvYB0aML+gJ3k1grmcA22nXpzm4wwx2ohk/8VWTJPVsEWO42g5Tr2
YvhIRCvRCM3nvA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:20:14 2025 by rpki-client