Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3130303a3a2f34302d3430203d3e20323638363333.roa
File:                     323830343a353432633a3130303a3a2f34302d3430203d3e20323638363333.roa (raw, json)
Hash identifier:          wHHQrbw+ACehXPpsRYvKXKvNV1lwpNvt+CgYd29acJM=
Subject key identifier:   DD:AE:21:24:AB:0C:E5:64:68:9A:A2:7B:82:A5:F4:CB:C4:82:30:1C
Certificate issuer:       /CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Certificate serial:       763F3D4679FFEA22EBE100FFA4D24773CB3A0554
Authority key identifier: 5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3130303a3a2f34302d3430203d3e20323638363333.roa
Signing time:             Mon 20 Nov 2023 18:16:29 +0000
ROA not before:           Mon 20 Nov 2023 18:11:29 +0000
ROA not after:            Mon 18 Nov 2024 18:16:29 +0000
asID:                     268633
IP address blocks:        2804:542c:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3f:3d:46:79:ff:ea:22:eb:e1:00:ff:a4:d2:47:73:cb:3a:05:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
        Validity
            Not Before: Nov 20 18:11:29 2023 GMT
            Not After : Nov 18 18:16:29 2024 GMT
        Subject: CN=DDAE2124AB0CE564689AA27B82A5F4CBC482301C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:3d:c5:9e:43:a9:6d:99:39:0f:df:b6:8b:
                    d9:a8:4c:35:21:86:64:29:9d:c3:b3:d1:53:5d:3d:
                    bb:a4:90:9a:86:cb:89:de:32:b2:30:f5:af:67:a6:
                    d1:d8:bf:3e:e4:e3:a8:61:92:43:d0:34:68:9c:f8:
                    0b:e3:a7:a7:63:4f:8e:1b:5a:63:f5:05:a9:2c:ca:
                    0f:43:7b:be:b4:d6:9c:bf:1c:65:ec:00:1b:06:10:
                    13:f0:dd:c5:03:3f:b3:30:d4:10:74:ff:c8:d8:8d:
                    07:2f:ff:5a:08:f8:78:7b:d8:2f:05:6a:22:9f:6c:
                    bb:aa:e1:8b:42:b8:84:20:67:82:83:9b:67:ff:4f:
                    84:cb:2c:53:e0:93:14:1e:c8:03:6c:33:1b:23:9f:
                    1f:5a:a8:81:c6:8a:a2:b8:67:72:93:49:14:30:5f:
                    b0:63:45:a2:45:ad:2a:00:bb:00:ab:09:6c:7b:79:
                    4b:b7:fc:80:0e:0a:ef:71:ec:08:d9:1c:7f:5d:58:
                    20:40:da:0e:73:9f:78:f9:a0:57:a9:50:be:15:7c:
                    34:7e:1d:7b:de:54:06:cb:ef:36:d1:a8:9d:91:82:
                    a0:52:b5:72:e7:2b:e7:fc:bb:11:6a:40:f7:50:1a:
                    1d:31:75:a4:ea:e1:56:03:d4:6f:e4:97:be:f0:ef:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AE:21:24:AB:0C:E5:64:68:9A:A2:7B:82:A5:F4:CB:C4:82:30:1C
            X509v3 Authority Key Identifier:
                keyid:5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3130303a3a2f34302d3430203d3e20323638363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:542c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:7c:62:ac:51:ea:64:dc:b6:9d:e7:ff:d8:26:2d:83:97:
         69:1a:d2:67:f2:20:44:63:af:59:09:57:e1:eb:09:05:09:96:
         ca:84:b8:ff:7a:77:93:ec:5a:00:51:b5:41:94:13:a9:a5:11:
         5f:ed:bf:78:3a:1f:96:4f:8a:16:90:91:c9:7d:16:9f:36:a1:
         d5:c2:d3:7f:d0:d6:39:25:d0:ff:79:24:db:6e:23:e4:f4:79:
         1e:b4:f8:4a:11:9b:c7:34:00:ac:46:66:16:7d:f1:2c:d3:99:
         9a:07:52:83:ed:5e:dd:36:95:64:b2:ba:15:7a:c8:39:af:0f:
         b0:93:13:8f:6f:58:b2:b4:26:d3:53:b2:98:b6:34:87:04:27:
         5d:c8:3b:f9:07:36:9d:74:11:71:c1:9a:d2:bb:4f:6c:3b:fc:
         68:0f:3a:82:09:79:50:e0:7b:f2:8c:cd:33:5d:45:78:96:97:
         3e:b0:1b:6c:7b:23:b0:17:96:45:1d:b9:d1:0e:f0:ff:1b:26:
         51:ec:62:a5:be:07:a1:ed:f7:a7:37:26:43:9c:75:8a:29:a0:
         2e:13:6e:d2:12:33:e7:e6:34:5b:10:24:5f:f4:14:fa:07:40:
         b7:fe:0c:91:fd:c1:08:c1:1f:82:93:51:41:c0:d9:61:ea:39:
         55:7f:74:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdj89Rnn/6iLr4QD/pNJHc8s6BVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGNTUzMTJFQTQwNzkxRDVGQkUyNUI1NjU2MEFBNDM0
OEZEN0I4OTAeFw0yMzExMjAxODExMjlaFw0yNDExMTgxODE2MjlaMDMxMTAvBgNV
BAMTKEREQUUyMTI0QUIwQ0U1NjQ2ODlBQTI3QjgyQTVGNENCQzQ4MjMwMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhT3FnkOpbZk5D9+2i9moTDUh
hmQpncOz0VNdPbukkJqGy4neMrIw9a9nptHYvz7k46hhkkPQNGic+Avjp6djT44b
WmP1Baksyg9De7601py/HGXsABsGEBPw3cUDP7Mw1BB0/8jYjQcv/1oI+Hh72C8F
aiKfbLuq4YtCuIQgZ4KDm2f/T4TLLFPgkxQeyANsMxsjnx9aqIHGiqK4Z3KTSRQw
X7BjRaJFrSoAuwCrCWx7eUu3/IAOCu9x7AjZHH9dWCBA2g5zn3j5oFepUL4VfDR+
HXveVAbL7zbRqJ2RgqBStXLnK+f8uxFqQPdQGh0xdaTq4VYD1G/kl77w72jxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3a4hJKsM5WRomqJ7gqX0y8SCMBwwHwYDVR0j
BBgwFoAUXfVTEupAeR1fviW1ZWCqQ0j9e4kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjNQWHZkQzVVbTVjQTFtcG83dmhxUUpUS0FhR055ODhSYU1oYm1wUUxS
ODUvMC81REY1NTMxMkVBNDA3OTFENUZCRTI1QjU2NTYwQUE0MzQ4RkQ3Qjg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERjU1MzEyRUE0MDc5MUQ1
RkJFMjVCNTY1NjBBQTQzNDhGRDdCODkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YzUFh2ZEM1VW01Y0ExbXBvN3ZocVFKVEtBYUdOeTg4UmFNaGJtcFFMUjg1LzAv
MzIzODMwMzQzYTM1MzQzMjYzM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzgzNjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBFQsATANBgkqhkiG9w0BAQsFAAOC
AQEAbS18YqxR6mTctp3n/9gmLYOXaRrSZ/IgRGOvWQlX4esJBQmWyoS4/3p3k+xa
AFG1QZQTqaURX+2/eDoflk+KFpCRyX0Wnzah1cLTf9DWOSXQ/3kk224j5PR5HrT4
ShGbxzQArEZmFn3xLNOZmgdSg+1e3TaVZLK6FXrIOa8PsJMTj29YsrQm01OymLY0
hwQnXcg7+Qc2nXQRccGa0rtPbDv8aA86ggl5UOB78ozNM11FeJaXPrAbbHsjsBeW
RR250Q7w/xsmUexipb4Hoe33pzcmQ5x1iimgLhNu0hIz5+Y0WxAkX/QU+gdAt/4M
kf3BCMEfgpNRQcDZYeo5VX90tw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:42 2025 by rpki-client