Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa
File:                     323830343a323736633a3a2f33322d3332203d3e20323633393030.roa (raw, json)
Hash identifier:          ldP2WJT0H6xfgkesNLGb/LwInyo1ASOLy7gaco6QCEI=
Subject key identifier:   4B:60:F9:C8:FB:4A:3D:40:17:9C:E7:24:4C:5C:89:61:58:56:43:77
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       1276781C37F994F17CD48A430B06E4F5ACE3E496
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa
Signing time:             Wed 05 Mar 2025 20:00:07 +0000
ROA not before:           Wed 05 Mar 2025 19:55:07 +0000
ROA not after:            Wed 04 Mar 2026 20:00:07 +0000
asID:                     263900
IP address blocks:        2804:276c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:76:78:1c:37:f9:94:f1:7c:d4:8a:43:0b:06:e4:f5:ac:e3:e4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Mar  5 19:55:07 2025 GMT
            Not After : Mar  4 20:00:07 2026 GMT
        Subject: CN=4B60F9C8FB4A3D40179CE7244C5C896158564377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:8f:c1:4a:ee:f3:8f:a0:ee:1e:de:8f:2f:
                    55:ec:b7:5b:88:e4:44:cf:95:20:fc:b5:57:04:5c:
                    c5:c1:7b:4d:7a:67:e7:38:4b:4c:31:b4:51:f8:31:
                    73:c5:b0:98:df:6f:3e:5c:e9:35:4b:19:db:81:28:
                    22:98:07:1d:47:2a:84:ab:89:a8:aa:e0:70:04:eb:
                    ed:76:63:bd:4a:b2:3c:ec:da:91:4c:4f:64:9f:e2:
                    cf:8c:87:65:c4:55:fe:3d:84:16:ad:83:39:47:ed:
                    bf:be:53:17:1e:af:3e:7d:fc:45:41:a9:d9:8f:10:
                    70:3b:f3:c9:db:74:6a:bb:96:86:cf:09:d5:5d:86:
                    75:09:96:ba:04:8b:e2:86:8a:e1:4a:4b:44:61:78:
                    2c:14:a3:04:60:b6:9d:5a:21:81:20:ff:18:24:b0:
                    0f:15:b2:6c:30:a7:a0:d3:0c:28:07:0c:76:15:84:
                    ee:cf:8c:31:e2:4e:5e:6c:9c:62:79:c0:a2:ad:ba:
                    5b:05:1e:94:50:c0:90:6d:c5:27:b0:5b:77:27:37:
                    9f:31:96:72:87:07:8e:10:63:8e:55:fe:05:77:a4:
                    38:b8:4b:0c:67:e9:b0:0d:c3:02:fb:09:63:98:95:
                    ed:51:0b:98:0e:f6:c4:b1:e4:cd:b1:c0:8f:ca:a6:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:F9:C8:FB:4A:3D:40:17:9C:E7:24:4C:5C:89:61:58:56:43:77
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:f9:09:98:13:11:a1:87:42:27:c5:73:6b:d6:4d:c5:dd:
         b0:c2:be:14:d9:00:3b:14:ec:06:d1:90:74:c2:14:b2:d5:a8:
         e8:f9:40:1a:b1:0a:78:03:92:5b:fb:b8:12:3f:02:30:d2:ac:
         6e:3c:df:e7:a5:42:00:a8:7c:44:d2:57:e6:12:cf:34:d6:99:
         69:53:db:69:0c:41:a0:b8:7b:21:10:bc:82:57:5d:5e:23:bb:
         73:cb:b6:ad:ee:50:a8:97:3c:5a:7f:2c:16:44:10:bd:b2:f1:
         27:c7:71:e2:a2:19:27:ef:24:ee:9e:bd:1e:8b:be:59:04:c7:
         e8:5a:8f:b0:fa:15:f9:3e:f1:53:55:9c:f6:5e:39:c0:f7:14:
         5d:c6:85:57:e6:d9:30:ef:92:f9:9d:2b:53:a1:30:15:4f:92:
         9f:a4:fd:4e:aa:2d:16:58:20:ed:43:2a:a2:6b:f4:87:6d:c7:
         da:b8:5c:bc:63:c2:54:86:67:8e:ce:ce:f6:8e:42:7a:76:93:
         47:83:75:dd:62:61:cd:e8:77:1f:97:20:f4:e2:7c:87:78:94:
         a3:7c:17:f6:4b:7d:fb:c4:a0:20:da:90:85:01:b3:cc:30:31:
         15:9a:2a:66:bb:64:d0:39:66:5a:61:c6:f4:e6:90:52:76:2c:
         e5:1f:b2:ff
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEnZ4HDf5lPF81IpDCwbk9azj5JYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEwOEE2QTQ5OEIzODM5QjRGM0Y4MDVBQ0NBRTkzNEY4
Q0Y3OUQ5MDAeFw0yNTAzMDUxOTU1MDdaFw0yNjAzMDQyMDAwMDdaMDMxMTAvBgNV
BAMTKDRCNjBGOUM4RkI0QTNENDAxNzlDRTcyNDRDNUM4OTYxNTg1NjQzNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYY/BSu7zj6DuHt6PL1Xst1uI
5ETPlSD8tVcEXMXBe016Z+c4S0wxtFH4MXPFsJjfbz5c6TVLGduBKCKYBx1HKoSr
iaiq4HAE6+12Y71Ksjzs2pFMT2Sf4s+Mh2XEVf49hBatgzlH7b++Uxcerz59/EVB
qdmPEHA788nbdGq7lobPCdVdhnUJlroEi+KGiuFKS0RheCwUowRgtp1aIYEg/xgk
sA8Vsmwwp6DTDCgHDHYVhO7PjDHiTl5snGJ5wKKtulsFHpRQwJBtxSewW3cnN58x
lnKHB44QY45V/gV3pDi4Swxn6bANwwL7CWOYle1RC5gO9sSx5M2xwI/KpgSpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUS2D5yPtKPUAXnOckTFyJYVhWQ3cwHwYDVR0j
BBgwFoAU0QimpJizg5tPP4BazK6TT4z3nZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJSTVJacDd6Q1hNVVZVWlNXTnJzM3FzUG9QM2I3WE55QzlSanFtanY1
dXovMi9EMTA4QTZBNDk4QjM4MzlCNEYzRjgwNUFDQ0FFOTM0RjhDRjc5RDkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMDhBNkE0OThCMzgzOUI0
RjNGODA1QUNDQUU5MzRGOENGNzlEOTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSUk1SWnA3ekNYTVVWVVpTV05yczNxc1BvUDNiN1hOeUM5UmpxbWp2NXV6LzIv
MzIzODMwMzQzYTMyMzczNjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnbDANBgkqhkiG9w0BAQsFAAOCAQEAUKP5CZgT
EaGHQifFc2vWTcXdsMK+FNkAOxTsBtGQdMIUstWo6PlAGrEKeAOSW/u4Ej8CMNKs
bjzf56VCAKh8RNJX5hLPNNaZaVPbaQxBoLh7IRC8glddXiO7c8u2re5QqJc8Wn8s
FkQQvbLxJ8dx4qIZJ+8k7p69Hou+WQTH6FqPsPoV+T7xU1Wc9l45wPcUXcaFV+bZ
MO+S+Z0rU6EwFU+Sn6T9TqotFlgg7UMqomv0h23H2rhcvGPCVIZnjs7O9o5CenaT
R4N13WJhzeh3H5cg9OJ8h3iUo3wX9kt9+8SgINqQhQGzzDAxFZoqZrtk0DlmWmHG
9OaQUnYs5R+y/w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:30:44 2025 by rpki-client