Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a633030303a3a2f33342d3334203d3e20323638333732.roa
File:                     323830343a353032383a633030303a3a2f33342d3334203d3e20323638333732.roa (raw, json)
Hash identifier:          uCQTi3NrgC2h4UnyuGz4Iy/4Y17mHeUlajzhqXz5VBI=
Subject key identifier:   59:D4:AE:3D:46:49:AA:B6:3B:CC:A8:42:22:C3:E5:EC:89:BF:CC:9C
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       5D4444BCCFFF76E2F537391B2B09A79DE24AE154
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a633030303a3a2f33342d3334203d3e20323638333732.roa
Signing time:             Tue 10 Dec 2024 12:53:40 +0000
ROA not before:           Tue 10 Dec 2024 12:48:40 +0000
ROA not after:            Tue 09 Dec 2025 12:53:40 +0000
asID:                     268372
IP address blocks:        2804:5028:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:44:44:bc:cf:ff:76:e2:f5:37:39:1b:2b:09:a7:9d:e2:4a:e1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Dec 10 12:48:40 2024 GMT
            Not After : Dec  9 12:53:40 2025 GMT
        Subject: CN=59D4AE3D4649AAB63BCCA84222C3E5EC89BFCC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:5b:7a:35:dd:af:f6:00:79:84:ec:77:16:
                    8e:12:64:d3:a0:35:45:72:ae:ef:57:0a:a5:70:13:
                    01:72:f4:46:8b:1e:4e:c3:4d:83:75:5b:86:a5:75:
                    0f:18:ae:be:56:e5:20:6f:07:73:a1:8a:97:e2:b4:
                    cc:93:ec:43:d4:dd:0d:45:f9:88:a3:4c:1b:9f:ac:
                    e2:17:30:2a:ad:d3:09:fb:48:ee:c7:69:bd:ec:58:
                    2c:29:03:50:f4:23:3b:a7:16:46:f8:7f:b6:d3:f2:
                    8e:e1:47:ff:39:6a:0d:c2:b9:02:76:e4:d5:47:26:
                    7c:16:bb:08:a9:1d:48:1a:2a:99:3b:0d:6d:1f:c5:
                    8f:dc:d3:8b:eb:e5:48:ca:57:e5:3a:81:62:1f:ab:
                    4c:12:68:53:87:a7:61:dd:8c:5a:58:63:b7:24:c5:
                    71:44:6e:0b:d6:cd:39:dd:f8:1c:a6:65:50:17:17:
                    11:57:b6:aa:26:b8:dc:eb:99:f7:30:12:18:36:6e:
                    a7:ad:54:d1:b5:1a:8b:bc:23:29:42:c0:28:5c:d5:
                    b5:5f:8d:43:ca:19:24:d7:6b:e9:44:f0:cb:33:0e:
                    0c:26:b6:dc:7c:00:ac:a2:82:ab:7f:3f:78:22:fd:
                    34:d7:01:1c:6c:9e:bb:5b:2e:61:c9:e6:0c:a9:a8:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D4:AE:3D:46:49:AA:B6:3B:CC:A8:42:22:C3:E5:EC:89:BF:CC:9C
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a633030303a3a2f33342d3334203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5028:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         36:39:28:e8:f9:20:10:92:57:78:10:75:59:cc:f6:8e:02:14:
         55:62:93:71:fc:b8:27:b0:e4:b4:15:2f:99:82:d9:c9:ec:ae:
         b3:82:92:81:5f:de:f6:a4:bd:52:3e:3f:7e:b2:e9:c8:53:2b:
         00:0b:0e:87:d1:5c:27:15:63:62:03:a9:11:94:20:10:6f:cd:
         67:f0:99:c7:b1:69:03:42:cd:76:09:02:90:fa:d6:83:66:da:
         e5:74:41:60:8d:cb:f8:62:de:e8:ca:e7:05:d8:86:45:fe:70:
         06:e0:a2:c4:d4:f2:6c:33:a2:36:d4:bd:bf:f7:80:cb:c6:07:
         13:26:ee:85:fd:67:28:e6:78:e4:69:2c:94:a1:97:ce:12:af:
         9f:8e:38:4a:28:46:93:db:1f:8f:f4:1a:ad:a5:76:8d:da:ad:
         58:34:23:c9:d1:01:8e:83:64:7e:1a:56:6e:6f:82:1e:77:52:
         e6:71:2c:e6:55:b6:02:93:f3:c2:43:f8:7a:95:94:db:75:52:
         cb:93:04:42:ed:79:80:a8:6e:55:2c:da:85:bd:a1:31:9f:8c:
         79:ee:48:91:ee:07:ee:42:53:77:79:4d:62:dd:76:5b:57:30:
         96:f8:e8:c2:e7:89:05:1f:b7:82:b7:12:67:d9:d5:04:5b:e2:
         b0:88:71:62
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXUREvM//duL1NzkbKwmnneJK4VQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVGQzhGQTQwRDNFMzk1NDQxREZCRUU0RTlFNjc1RUE1
NjVBQjlGNjAeFw0yNDEyMTAxMjQ4NDBaFw0yNTEyMDkxMjUzNDBaMDMxMTAvBgNV
BAMTKDU5RDRBRTNENDY0OUFBQjYzQkNDQTg0MjIyQzNFNUVDODlCRkNDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Dlt6Nd2v9gB5hOx3Fo4SZNOg
NUVyru9XCqVwEwFy9EaLHk7DTYN1W4aldQ8Yrr5W5SBvB3OhipfitMyT7EPU3Q1F
+YijTBufrOIXMCqt0wn7SO7Hab3sWCwpA1D0IzunFkb4f7bT8o7hR/85ag3CuQJ2
5NVHJnwWuwipHUgaKpk7DW0fxY/c04vr5UjKV+U6gWIfq0wSaFOHp2HdjFpYY7ck
xXFEbgvWzTnd+BymZVAXFxFXtqomuNzrmfcwEhg2bqetVNG1Gou8IylCwChc1bVf
jUPKGSTXa+lE8MszDgwmttx8AKyigqt/P3gi/TTXARxsnrtbLmHJ5gypqMJjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWdSuPUZJqrY7zKhCIsPl7Im/zJwwHwYDVR0j
BBgwFoAUZfyPpA0+OVRB377k6eZ16lZaufYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnRyaU5hcWVGcWVDcHN1bTNnYzJzbWtlNHpHOTVpRzhSeUdjWXJrcEta
UEIvMC82NUZDOEZBNDBEM0UzOTU0NDFERkJFRTRFOUU2NzVFQTU2NUFCOUY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RkM4RkE0MEQzRTM5NTQ0
MURGQkVFNEU5RTY3NUVBNTY1QUI5RjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0cmlOYXFlRnFlQ3BzdW0zZ2Myc21rZTR6Rzk1aUc4UnlHY1lya3BLWlBCLzAv
MzIzODMwMzQzYTM1MzAzMjM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMzMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUCjAMA0GCSqGSIb3DQEBCwUA
A4IBAQA2OSjo+SAQkld4EHVZzPaOAhRVYpNx/LgnsOS0FS+ZgtnJ7K6zgpKBX972
pL1SPj9+sunIUysACw6H0VwnFWNiA6kRlCAQb81n8JnHsWkDQs12CQKQ+taDZtrl
dEFgjcv4Yt7oyucF2IZF/nAG4KLE1PJsM6I21L2/94DLxgcTJu6F/Wco5njkaSyU
oZfOEq+fjjhKKEaT2x+P9BqtpXaN2q1YNCPJ0QGOg2R+GlZub4Ied1LmcSzmVbYC
k/PCQ/h6lZTbdVLLkwRC7XmAqG5VLNqFvaExn4x57kiR7gfuQlN3eU1i3XZbVzCW
+OjC54kFH7eCtxJn2dUEW+KwiHFi
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:44:55 2025 by rpki-client