Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033383a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033383a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          CHWiv0+dy3QY5WekH/rHAaG2u6s32/zLlwiQ5/h6aQ0=
Subject key identifier:   B0:2A:E9:13:66:EB:6C:10:FA:03:FD:8F:D2:29:E0:03:18:2B:AC:F0
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       38DFA6A97B204BB7EA4992D884C86F14144B1DD0
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033383a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 13 Feb 2025 15:48:59 +0000
ROA not before:           Thu 13 Feb 2025 15:43:59 +0000
ROA not after:            Thu 12 Feb 2026 15:48:59 +0000
asID:                     52468
IP address blocks:        2804:2b78:8038::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:df:a6:a9:7b:20:4b:b7:ea:49:92:d8:84:c8:6f:14:14:4b:1d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 13 15:43:59 2025 GMT
            Not After : Feb 12 15:48:59 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ad:c8:8f:53:27:27:b1:ac:cf:85:b7:10:74:
                    a4:2a:eb:28:2f:78:c5:20:1d:eb:b8:f1:de:98:07:
                    18:5c:54:fb:19:0d:43:35:f8:cb:92:99:c1:d6:6f:
                    6f:57:8c:d2:af:51:91:bb:33:0b:1d:dc:74:24:b7:
                    f6:a4:b7:c0:7a:28:93:65:53:04:2e:82:70:98:68:
                    92:18:9f:64:f5:29:9a:d8:ca:5b:e1:d1:f0:1f:db:
                    04:0c:cf:e4:a6:47:55:84:b4:62:77:d8:89:4c:4b:
                    29:c4:8e:a0:ea:ad:b3:8a:8b:04:5c:42:cc:63:e9:
                    e3:ff:b5:9b:cd:b0:fc:c4:21:9c:5e:8b:94:d4:db:
                    5a:2e:4d:1e:04:51:14:35:bc:d4:37:62:46:72:19:
                    a0:b3:07:70:0a:54:46:fb:ae:81:46:6b:dd:13:dd:
                    18:57:03:ef:d9:2c:f3:f5:da:5c:fa:33:81:cf:07:
                    f8:a2:0b:e5:03:0f:de:e1:1f:33:5b:45:65:61:0e:
                    7f:59:d7:2f:90:2a:e7:f8:95:38:47:b3:4a:e5:a7:
                    d0:27:c1:e8:00:d2:1a:0f:45:59:e0:a0:84:e6:61:
                    93:67:49:c2:00:b2:15:7c:fe:8d:b7:f4:10:39:de:
                    80:a3:19:48:8e:d0:36:44:68:d0:be:ab:a9:1d:4d:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:E9:13:66:EB:6C:10:FA:03:FD:8F:D2:29:E0:03:18:2B:AC:F0
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033383a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8038::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:28:ad:a9:8c:ae:a7:c9:8e:3c:37:19:48:e2:26:c0:d5:bd:
         4c:b8:26:13:e1:08:f7:9f:75:f6:2a:f9:e6:6d:7f:fb:b2:11:
         bd:ee:72:9b:c9:84:39:92:03:c1:07:cf:3c:4d:3d:7e:bd:a9:
         c0:28:96:e1:1e:3a:14:08:60:6e:af:79:78:b1:ab:2f:60:8c:
         42:a0:b7:d6:63:40:7d:65:07:71:82:a1:cf:ea:27:8d:54:16:
         0d:70:9e:b3:5b:98:30:0f:16:b6:d5:e7:fa:a1:59:9a:28:02:
         fc:a5:9d:9f:db:c8:76:5e:e4:12:a2:f0:4d:b0:57:3f:07:75:
         9c:b7:be:ba:3e:26:83:79:26:d4:e5:5f:7a:f9:9e:13:b7:e1:
         6e:42:dc:6f:83:18:8e:e3:d7:2f:47:a2:b6:54:df:07:dc:2f:
         49:1f:8f:68:e6:eb:5c:d2:b3:38:dd:b1:10:f4:d6:6d:48:56:
         03:9d:e9:ae:17:42:6f:77:30:a9:6b:93:87:04:85:60:90:ff:
         b1:5b:0c:99:de:fc:80:cb:f9:4a:a8:48:f1:81:12:8e:7f:21:
         41:c9:f8:27:51:16:db:01:80:59:3c:70:a5:ea:be:bc:e4:7c:
         de:44:92:55:bf:8e:99:a2:33:4a:c3:8e:96:9e:0f:98:a9:39:
         1e:04:32:2c
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUON+mqXsgS7fqSZLYhMhvFBRLHdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAyMTMxNTQzNTlaFw0yNjAyMTIxNTQ4NTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjFBREM4OEY1MzI3MjdCMUFD
Q0Y4NUI3MTA3NEE0MkFFQjI4MkY3OEM1MjAxREVCQjhGMURFOTgwNzE4NUM1NEZC
MTkwRDQzMzVGOENCOTI5OUMxRDY2RjZGNTc4Q0QyQUY1MTkxQkIzMzBCMUREQzc0
MjRCN0Y2QTRCN0MwN0EyODkzNjU1MzA0MkU4MjcwOTg2ODkyMTg5RjY0RjUyOTlB
RDhDQTVCRTFEMUYwMUZEQjA0MENDRkU0QTY0NzU1ODRCNDYyNzdEODg5NEM0QjI5
QzQ4RUEwRUFBREIzOEE4QjA0NUM0MkNDNjNFOUUzRkZCNTlCQ0RCMEZDQzQyMTlD
NUU4Qjk0RDREQjVBMkU0RDFFMDQ1MTE0MzVCQ0Q0Mzc2MjQ2NzIxOUEwQjMwNzcw
MEE1NDQ2RkJBRTgxNDY2QkREMTNERDE4NTcwM0VGRDkyQ0YzRjVEQTVDRkEzMzgx
Q0YwN0Y4QTIwQkU1MDMwRkRFRTExRjMzNUI0NTY1NjEwRTdGNTlENzJGOTAyQUU3
Rjg5NTM4NDdCMzRBRTVBN0QwMjdDMUU4MDBEMjFBMEY0NTU5RTBBMDg0RTY2MTkz
Njc0OUMyMDBCMjE1N0NGRThEQjdGNDEwMzlERTgwQTMxOTQ4OEVEMDM2NDQ2OEQw
QkVBQkE5MUQ0RDk2NDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8a3Ij1MnJ7Gsz4W3EHSkKusoL3jFIB3ruPHemAcYXFT7GQ1DNfjL
kpnB1m9vV4zSr1GRuzMLHdx0JLf2pLfAeiiTZVMELoJwmGiSGJ9k9Sma2Mpb4dHw
H9sEDM/kpkdVhLRid9iJTEspxI6g6q2ziosEXELMY+nj/7WbzbD8xCGcXouU1Nta
Lk0eBFEUNbzUN2JGchmgswdwClRG+66BRmvdE90YVwPv2Szz9dpc+jOBzwf4ogvl
Aw/e4R8zW0VlYQ5/WdcvkCrn+JU4R7NK5afQJ8HoANIaD0VZ4KCE5mGTZ0nCALIV
fP6Nt/QQOd6AoxlIjtA2RGjQvqupHU2WRQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FLAq6RNm62wQ+gP9j9Ip4AMYK6zwMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMzMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIA4MA0GCSqGSIb3DQEBCwUAA4IBAQAlKK2pjK6nyY48NxlI4ibA
1b1MuCYT4Qj3n3X2KvnmbX/7shG97nKbyYQ5kgPBB888TT1+vanAKJbhHjoUCGBu
r3l4sasvYIxCoLfWY0B9ZQdxgqHP6ieNVBYNcJ6zW5gwDxa21ef6oVmaKAL8pZ2f
28h2XuQSovBNsFc/B3Wct766PiaDeSbU5V96+Z4Tt+FuQtxvgxiO49cvR6K2VN8H
3C9JH49o5utc0rM43bEQ9NZtSFYDnemuF0JvdzCpa5OHBIVgkP+xWwyZ3vyAy/lK
qEjxgRKOfyFByfgnURbbAYBZPHCl6r685HzeRJJVv46ZojNKw46Wng+YqTkeBDIs
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:06 2025 by rpki-client