Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a343030303a3a2f33342d3334203d3e20323636303039.roa
File:                     323830343a343133303a343030303a3a2f33342d3334203d3e20323636303039.roa (raw, json)
Hash identifier:          +cV1LHlnPIcAkmBZZ/jvUNIUxwO/zgwpmRn9mU6ZefA=
Subject key identifier:   B4:5D:2C:68:E6:66:04:F1:27:28:69:42:6F:D2:BA:13:40:62:A2:E6
Certificate issuer:       /CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
Certificate serial:       62CA19DFCF6966C0DB082B25CD4D7BB84932797D
Authority key identifier: E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a343030303a3a2f33342d3334203d3e20323636303039.roa
Signing time:             Thu 04 Apr 2024 13:41:04 +0000
ROA not before:           Thu 04 Apr 2024 13:36:04 +0000
ROA not after:            Thu 03 Apr 2025 13:41:04 +0000
asID:                     266009
IP address blocks:        2804:4130:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ca:19:df:cf:69:66:c0:db:08:2b:25:cd:4d:7b:b8:49:32:79:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
        Validity
            Not Before: Apr  4 13:36:04 2024 GMT
            Not After : Apr  3 13:41:04 2025 GMT
        Subject: CN=B45D2C68E66604F1272869426FD2BA134062A2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:0d:a7:91:5f:dc:36:d3:9c:85:cc:95:a0:
                    eb:64:98:5a:54:25:c1:9c:5a:43:f4:d1:4f:e4:5b:
                    be:38:17:fa:06:f0:9d:1d:d0:93:77:18:55:cd:11:
                    b6:a7:8a:f7:3a:9a:e2:b4:ea:c8:ae:1a:5b:f7:31:
                    60:e8:84:09:ed:c9:c7:85:78:ec:de:22:5e:0f:35:
                    50:98:e1:cb:a7:9c:f3:2a:ea:ff:1b:ce:0c:4a:79:
                    ac:3d:d5:a7:28:03:2c:0c:78:95:be:0b:53:83:78:
                    a0:47:c3:6e:b1:c8:f6:b9:bd:e2:08:17:e5:45:33:
                    0a:20:95:0e:29:84:4e:08:21:d8:0a:2b:1e:bf:84:
                    74:e8:4c:23:94:2e:59:9c:eb:18:41:10:c9:7d:78:
                    9f:e4:6f:8b:f9:5e:0b:a1:c5:13:15:38:2f:24:da:
                    92:3c:14:8a:e8:f1:a1:2b:bc:32:bf:f3:9d:8f:d9:
                    d8:03:ca:c0:db:e6:85:d4:88:23:6e:5b:f4:37:2f:
                    c8:26:a7:cc:e1:dd:78:0b:5d:26:57:5a:cb:6e:f0:
                    94:f3:c5:34:a1:b1:ae:ba:b0:f7:54:e4:20:d9:8d:
                    0a:d6:8a:93:06:f4:49:8a:bc:ee:94:5b:db:16:95:
                    a8:93:c7:c7:02:c1:87:6b:bf:8d:24:6d:ed:e1:11:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5D:2C:68:E6:66:04:F1:27:28:69:42:6F:D2:BA:13:40:62:A2:E6
            X509v3 Authority Key Identifier:
                keyid:E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a343030303a3a2f33342d3334203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4130:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:28:69:fc:1c:8c:01:62:c8:7b:3e:fd:f3:8c:22:0d:e5:
         ae:d6:bf:ae:ba:22:b1:b6:a2:d5:03:e8:a5:dd:89:db:54:c8:
         7b:8e:be:61:f4:df:fd:ec:b9:88:c2:cf:bb:37:cf:bd:11:31:
         1a:b0:fe:f2:2e:02:3c:80:1a:25:ff:8f:db:1b:12:cd:d8:9e:
         8b:69:ce:a5:33:c3:f1:53:64:e8:3f:25:ff:9e:24:73:13:6e:
         88:60:19:b6:e5:63:2f:74:dd:9f:90:b6:11:31:af:b0:11:a5:
         51:3a:fd:aa:c6:f2:20:aa:c6:a3:53:db:f1:c7:ef:e9:63:9f:
         15:2d:79:12:47:04:59:16:3c:6b:1f:3d:24:9d:b6:36:53:47:
         8c:ab:91:aa:37:06:a4:62:50:44:5e:f9:24:2b:5f:02:c1:8b:
         c1:28:f5:b8:d6:13:01:f1:ea:b7:b7:ec:4c:36:e9:d5:b4:d9:
         5e:f9:d4:0a:94:aa:15:69:6a:24:1a:94:20:78:36:03:04:c4:
         8e:49:85:d3:40:6f:e6:30:8f:8c:3d:12:dd:1a:52:87:e1:fa:
         df:fc:5d:fb:0c:c7:77:c0:1f:0c:f8:b6:d1:a5:65:07:96:39:
         fc:2a:73:62:b4:0f:27:2b:13:2c:24:c6:db:56:ba:cc:a6:ed:
         31:77:f8:f2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYsoZ389pZsDbCCslzU17uEkyeX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMzMTU4RkM0NzFCNUQwMDlFODMwQjhGNkZGMEU5ODM4
NUJBNTgxNTAeFw0yNDA0MDQxMzM2MDRaFw0yNTA0MDMxMzQxMDRaMDMxMTAvBgNV
BAMTKEI0NUQyQzY4RTY2NjA0RjEyNzI4Njk0MjZGRDJCQTEzNDA2MkEyRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbmw2nkV/cNtOchcyVoOtkmFpU
JcGcWkP00U/kW744F/oG8J0d0JN3GFXNEbanivc6muK06siuGlv3MWDohAntyceF
eOzeIl4PNVCY4cunnPMq6v8bzgxKeaw91acoAywMeJW+C1ODeKBHw26xyPa5veII
F+VFMwoglQ4phE4IIdgKKx6/hHToTCOULlmc6xhBEMl9eJ/kb4v5XguhxRMVOC8k
2pI8FIro8aErvDK/852P2dgDysDb5oXUiCNuW/Q3L8gmp8zh3XgLXSZXWstu8JTz
xTShsa66sPdU5CDZjQrWipMG9EmKvO6UW9sWlaiTx8cCwYdrv40kbe3hEYndAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUtF0saOZmBPEnKGlCb9K6E0BiouYwHwYDVR0j
BBgwFoAU4zFY/EcbXQCegwuPb/Dpg4W6WBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjR2R0U3cVdSb0FLZGFreXNZdEt2Z1VwTHVrZkZNRVRTQXFma3pGeEFk
WmIvMS9FMzMxNThGQzQ3MUI1RDAwOUU4MzBCOEY2RkYwRTk4Mzg1QkE1ODE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMzE1OEZDNDcxQjVEMDA5
RTgzMEI4RjZGRjBFOTgzODVCQTU4MTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y0dkdFN3FXUm9BS2Rha3lzWXRLdmdVcEx1a2ZGTUVUU0FxZmt6RnhBZFpiLzEv
MzIzODMwMzQzYTM0MzEzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQTBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAyrShp/ByMAWLIez7984wiDeWu1r+uuiKxtqLVA+il3YnbVMh7jr5h9N/9
7LmIws+7N8+9ETEasP7yLgI8gBol/4/bGxLN2J6Lac6lM8PxU2ToPyX/niRzE26I
YBm25WMvdN2fkLYRMa+wEaVROv2qxvIgqsajU9vxx+/pY58VLXkSRwRZFjxrHz0k
nbY2U0eMq5GqNwakYlBEXvkkK18CwYvBKPW41hMB8eq3t+xMNunVtNle+dQKlKoV
aWokGpQgeDYDBMSOSYXTQG/mMI+MPRLdGlKH4frf/F37DMd3wB8M+LbRpWUHljn8
KnNitA8nKxMsJMbbVrrMpu0xd/jy
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:15:49 2025 by rpki-client