Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa
File:                     323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa (raw, json)
Hash identifier:          lkpv+FQCBnpTNszvIol4zWsSBeWyUAH+JyNHii8ff3c=
Subject key identifier:   CA:84:DB:8D:FE:59:2E:9C:39:BA:DF:F4:23:0F:2C:BA:BA:C1:E7:51
Certificate issuer:       /CN=A549402556B1273F8A3031E620C960AD6F9EF416
Certificate serial:       72CC0E68FE52699C55B7B0FC91755FBF6C2494F4
Authority key identifier: A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa
Signing time:             Wed 02 Oct 2024 15:02:48 +0000
ROA not before:           Wed 02 Oct 2024 14:57:48 +0000
ROA not after:            Wed 01 Oct 2025 15:02:48 +0000
asID:                     263887
IP address blocks:        2804:2740:4000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cc:0e:68:fe:52:69:9c:55:b7:b0:fc:91:75:5f:bf:6c:24:94:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A549402556B1273F8A3031E620C960AD6F9EF416
        Validity
            Not Before: Oct  2 14:57:48 2024 GMT
            Not After : Oct  1 15:02:48 2025 GMT
        Subject: CN=CA84DB8DFE592E9C39BADFF4230F2CBABAC1E751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:f6:ca:03:6c:c3:27:9c:70:76:3d:0f:a3:
                    d9:db:c4:b9:81:e6:49:28:03:d0:42:b1:e3:25:e8:
                    ca:2a:a0:ea:30:42:5b:e1:81:79:08:51:e6:d9:3e:
                    37:7e:b8:ab:fc:05:8c:50:f9:09:15:df:67:12:96:
                    73:7f:fc:50:9b:6f:62:d7:be:6d:ec:e2:ba:23:5a:
                    22:57:1e:10:39:c2:8e:c8:f6:13:99:c6:27:e8:5d:
                    41:27:85:fe:7f:76:19:62:c5:8c:f3:fb:ac:d5:d2:
                    51:f2:ed:55:00:76:17:9e:85:e9:e6:9c:28:40:eb:
                    4b:ee:68:c9:8e:3f:0d:87:57:e6:dc:13:fc:70:b5:
                    ce:bc:65:23:11:44:3a:ce:41:b0:e5:84:62:03:a8:
                    de:a6:a5:ab:44:b7:03:d3:6a:d2:6f:6d:11:7e:23:
                    00:50:d2:91:57:13:ae:7d:22:91:ab:27:90:90:71:
                    86:5d:a3:69:b9:37:f6:c5:c1:dd:86:4f:2f:fe:2f:
                    b1:84:68:a0:50:73:b3:2e:29:51:bc:a8:70:8a:1c:
                    60:c5:7c:e8:5a:eb:a5:59:90:9a:b3:03:cc:c5:f1:
                    aa:06:27:09:2e:6d:08:06:45:8c:7a:f4:23:34:50:
                    c3:84:4b:68:14:af:59:10:39:e3:66:6e:e0:00:ae:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:DB:8D:FE:59:2E:9C:39:BA:DF:F4:23:0F:2C:BA:BA:C1:E7:51
            X509v3 Authority Key Identifier:
                keyid:A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2740:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:01:07:e7:16:37:19:01:ad:68:22:38:0c:1b:7d:12:4b:
         f2:cf:b5:25:c2:76:a5:b9:96:8a:b4:3f:bf:3f:61:38:3f:ec:
         05:09:06:89:0a:d6:1e:36:02:5e:8d:f1:d9:8d:67:70:fd:66:
         02:d2:41:d3:a1:83:ab:bd:e7:79:2b:2c:bd:78:39:98:2e:e5:
         5f:2f:f8:e9:a3:73:5e:d6:db:a3:02:17:61:82:b5:96:38:00:
         9e:ae:83:23:4d:df:f4:fa:e0:fd:99:c0:e2:1f:fe:20:30:73:
         c2:a8:1b:d7:9c:bd:32:67:a0:a4:c3:eb:a9:70:31:fd:6f:0b:
         36:db:8d:54:98:af:25:68:4a:60:f4:f4:b1:88:15:f0:49:a1:
         95:55:a5:a3:ba:2b:60:5a:fb:cd:54:2b:56:c1:16:f6:75:c8:
         84:6e:9b:27:ce:78:ee:bc:13:2a:ab:f3:59:2b:b6:97:c7:96:
         f8:bb:31:39:2e:ce:33:6c:7b:6d:d0:69:bf:80:f0:f9:72:f5:
         a2:1b:24:cf:30:85:a2:55:10:8b:b2:32:88:02:d4:a3:08:b1:
         3f:66:e8:bb:79:43:94:68:fe:56:42:5d:74:bf:1e:3a:27:ed:
         99:fb:69:6d:d7:83:b5:d1:2b:a8:3a:b0:37:96:eb:87:7c:d4:
         fb:22:35:5c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcswOaP5SaZxVt7D8kXVfv2wklPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0OTQwMjU1NkIxMjczRjhBMzAzMUU2MjBDOTYwQUQ2
RjlFRjQxNjAeFw0yNDEwMDIxNDU3NDhaFw0yNTEwMDExNTAyNDhaMDMxMTAvBgNV
BAMTKENBODREQjhERkU1OTJFOUMzOUJBREZGNDIzMEYyQ0JBQkFDMUU3NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjz/bKA2zDJ5xwdj0Po9nbxLmB
5kkoA9BCseMl6MoqoOowQlvhgXkIUebZPjd+uKv8BYxQ+QkV32cSlnN//FCbb2LX
vm3s4rojWiJXHhA5wo7I9hOZxifoXUEnhf5/dhlixYzz+6zV0lHy7VUAdheehenm
nChA60vuaMmOPw2HV+bcE/xwtc68ZSMRRDrOQbDlhGIDqN6mpatEtwPTatJvbRF+
IwBQ0pFXE659IpGrJ5CQcYZdo2m5N/bFwd2GTy/+L7GEaKBQc7MuKVG8qHCKHGDF
fOha66VZkJqzA8zF8aoGJwkubQgGRYx69CM0UMOES2gUr1kQOeNmbuAArti7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUyoTbjf5ZLpw5ut/0Iw8surrB51EwHwYDVR0j
BBgwFoAUpUlAJVaxJz+KMDHmIMlgrW+e9BYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlFLU3Rta1NFTUZzZGdiTFlIeHNWSkVhRmtmb1pFVkxSeTQ5eDNHb3dE
SDIvMC9BNTQ5NDAyNTU2QjEyNzNGOEEzMDMxRTYyMEM5NjBBRDZGOUVGNDE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDk0MDI1NTZCMTI3M0Y4
QTMwMzFFNjIwQzk2MEFENkY5RUY0MTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZRS1N0bWtTRU1Gc2RnYkxZSHhzVkpFYUZrZm9aRVZMUnk0OXgzR293REgyLzAv
MzIzODMwMzQzYTMyMzczNDMwM2EzNDMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM4MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJ0BAMA0GCSqGSIb3DQEBCwUA
A4IBAQCeIQEH5xY3GQGtaCI4DBt9Ekvyz7UlwnaluZaKtD+/P2E4P+wFCQaJCtYe
NgJejfHZjWdw/WYC0kHToYOrved5Kyy9eDmYLuVfL/jpo3Ne1tujAhdhgrWWOACe
roMjTd/0+uD9mcDiH/4gMHPCqBvXnL0yZ6Ckw+upcDH9bws2241UmK8laEpg9PSx
iBXwSaGVVaWjuitgWvvNVCtWwRb2dciEbpsnznjuvBMqq/NZK7aXx5b4uzE5Ls4z
bHtt0Gm/gPD5cvWiGyTPMIWiVRCLsjKIAtSjCLE/Zui7eUOUaP5WQl10vx46J+2Z
+2lt14O10SuoOrA3luuHfNT7IjVc
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:54 2025 by rpki-client