Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3332203d3e20323731333335.roa
File:                     323830343a373965383a3a2f33322d3332203d3e20323731333335.roa (raw, json)
Hash identifier:          6MY8AFeNwAOm7YpqS3GcMfvNWC31GNnLfZ0qhScmtEY=
Subject key identifier:   77:79:91:71:44:6A:E5:52:BA:8D:9C:6E:1A:08:52:E8:18:8C:B9:6F
Certificate issuer:       /CN=F480C4379294C536904F68B3310E84F3A994704C
Certificate serial:       456AC65AEC9242E81F1012F44BEFCDC6C3FBB2BE
Authority key identifier: F4:80:C4:37:92:94:C5:36:90:4F:68:B3:31:0E:84:F3:A9:94:70:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F480C4379294C536904F68B3310E84F3A994704C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3332203d3e20323731333335.roa
Signing time:             Sat 11 Nov 2023 13:49:51 +0000
ROA not before:           Sat 11 Nov 2023 13:44:51 +0000
ROA not after:            Sat 09 Nov 2024 13:49:51 +0000
asID:                     271335
IP address blocks:        2804:79e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6a:c6:5a:ec:92:42:e8:1f:10:12:f4:4b:ef:cd:c6:c3:fb:b2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F480C4379294C536904F68B3310E84F3A994704C
        Validity
            Not Before: Nov 11 13:44:51 2023 GMT
            Not After : Nov  9 13:49:51 2024 GMT
        Subject: CN=77799171446AE552BA8D9C6E1A0852E8188CB96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6d:ca:c0:c8:b5:f9:40:27:00:6d:60:14:ea:
                    af:90:26:26:2b:9e:a4:0b:82:6b:9b:aa:9a:8e:25:
                    13:f4:4a:fe:f8:6a:d4:3d:a9:29:3f:c2:c1:e0:4b:
                    77:ad:0b:1e:7d:8f:7c:4c:e8:a5:c9:15:40:74:2d:
                    a4:df:64:fa:d3:c3:d3:df:bc:46:4a:70:08:de:70:
                    ad:57:9f:91:46:b1:4b:5a:bf:01:62:0e:a7:95:67:
                    26:a6:5e:7a:40:c3:fc:2b:7a:48:b3:62:8d:18:55:
                    17:f3:f6:73:7f:c7:e5:ca:30:db:bc:87:1e:04:27:
                    f8:6a:a9:ed:8b:a0:d9:02:9b:c5:13:2b:39:fc:cd:
                    b9:81:69:5b:b5:c0:ea:be:e3:3e:02:28:39:bc:98:
                    bd:76:e2:18:18:1f:2b:08:e4:81:59:be:d9:03:cc:
                    7b:0c:6f:e7:4a:dd:1d:5b:9e:71:bf:97:d4:db:be:
                    d2:5c:7a:50:36:bd:83:65:51:8c:24:c2:dd:14:22:
                    71:c2:09:bd:b6:b0:df:a6:f4:bd:6a:5d:5d:90:ce:
                    7d:ab:68:d3:df:fe:bc:6c:18:bb:c9:66:07:3b:2b:
                    da:38:f8:cc:18:4c:df:2c:53:a2:d6:3b:55:5c:d2:
                    29:8b:89:2f:fd:74:f3:c5:80:f5:29:2d:82:02:83:
                    82:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:91:71:44:6A:E5:52:BA:8D:9C:6E:1A:08:52:E8:18:8C:B9:6F
            X509v3 Authority Key Identifier:
                keyid:F4:80:C4:37:92:94:C5:36:90:4F:68:B3:31:0E:84:F3:A9:94:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/F480C4379294C536904F68B3310E84F3A994704C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F480C4379294C536904F68B3310E84F3A994704C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3332203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:c3:a5:a5:71:37:fd:1d:4a:04:3a:89:40:83:24:58:46:15:
         cf:bc:b2:82:14:85:40:75:8e:a1:ae:a2:9d:2c:39:1e:27:5f:
         7d:21:23:0a:e2:9e:03:b9:33:89:67:e0:17:f5:a3:16:4c:3e:
         71:e8:df:eb:34:18:5c:23:fc:ed:99:5d:1d:4f:e2:85:98:ca:
         d6:8f:ef:fe:14:90:10:cb:c3:a6:19:99:86:ce:3e:71:32:52:
         0a:c2:81:0c:05:67:cb:d2:3f:91:e4:ce:55:20:9e:85:b9:62:
         3a:be:0b:6c:22:1e:c0:71:8a:8c:8c:35:b7:3b:ed:cb:bf:21:
         56:04:c6:4d:21:a8:b7:82:48:85:00:8c:db:c8:b8:e8:af:ea:
         23:eb:5b:5a:b9:14:4d:2c:4f:3e:08:7b:9b:0d:3a:fc:dd:bf:
         bb:bf:86:e0:df:fa:41:d5:c6:de:2b:8e:f5:68:c3:e7:8b:b3:
         46:a6:08:7a:6c:55:cc:e5:2c:f7:8e:16:e1:02:8a:f2:65:14:
         21:f6:20:6a:3e:7d:b9:78:71:80:b4:e3:80:eb:05:6e:85:f6:
         96:8f:f1:6d:5a:cf:36:d8:63:57:9c:c4:a5:90:61:e5:f7:6d:
         95:7a:82:b0:3c:f4:e7:f2:dd:21:1d:65:d0:ac:1a:dc:55:77:
         89:1c:4c:53
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURWrGWuySQugfEBL0S+/NxsP7sr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ4MEM0Mzc5Mjk0QzUzNjkwNEY2OEIzMzEwRTg0RjNB
OTk0NzA0QzAeFw0yMzExMTExMzQ0NTFaFw0yNDExMDkxMzQ5NTFaMDMxMTAvBgNV
BAMTKDc3Nzk5MTcxNDQ2QUU1NTJCQThEOUM2RTFBMDg1MkU4MTg4Q0I5NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYbcrAyLX5QCcAbWAU6q+QJiYr
nqQLgmubqpqOJRP0Sv74atQ9qSk/wsHgS3etCx59j3xM6KXJFUB0LaTfZPrTw9Pf
vEZKcAjecK1Xn5FGsUtavwFiDqeVZyamXnpAw/wrekizYo0YVRfz9nN/x+XKMNu8
hx4EJ/hqqe2LoNkCm8UTKzn8zbmBaVu1wOq+4z4CKDm8mL124hgYHysI5IFZvtkD
zHsMb+dK3R1bnnG/l9TbvtJcelA2vYNlUYwkwt0UInHCCb22sN+m9L1qXV2Qzn2r
aNPf/rxsGLvJZgc7K9o4+MwYTN8sU6LWO1Vc0imLiS/9dPPFgPUpLYICg4KhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUd3mRcURq5VK6jZxuGghS6BiMuW8wHwYDVR0j
BBgwFoAU9IDEN5KUxTaQT2izMQ6E86mUcEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkdwY1hwQ1ZDRnp2TVE4dUpuVmpqa1l6Umh2eWpuTjJzVjUxVzFIWEVv
R3MvMC9GNDgwQzQzNzkyOTRDNTM2OTA0RjY4QjMzMTBFODRGM0E5OTQ3MDRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0ODBDNDM3OTI5NEM1MzY5
MDRGNjhCMzMxMEU4NEYzQTk5NDcwNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZHcGNYcENWQ0Z6dk1ROHVKblZqamtZelJodnlqbk4yc1Y1MVcxSFhFb0dzLzAv
MzIzODMwMzQzYTM3Mzk2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR56DANBgkqhkiG9w0BAQsFAAOCAQEAu8OlpXE3
/R1KBDqJQIMkWEYVz7yyghSFQHWOoa6inSw5HidffSEjCuKeA7kziWfgF/WjFkw+
cejf6zQYXCP87ZldHU/ihZjK1o/v/hSQEMvDphmZhs4+cTJSCsKBDAVny9I/keTO
VSCehbliOr4LbCIewHGKjIw1tzvty78hVgTGTSGot4JIhQCM28i46K/qI+tbWrkU
TSxPPgh7mw06/N2/u7+G4N/6QdXG3iuO9WjD54uzRqYIemxVzOUs944W4QKK8mUU
IfYgaj59uXhxgLTjgOsFboX2lo/xbVrPNthjV5zEpZBh5fdtlXqCsDz05/LdIR1l
0Kwa3FV3iRxMUw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:00 2025 by rpki-client