Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1G8KjnYKhDmGpvajA7atRSFpwaF7mKjkKpaxfFZn5W7/0/323830343a386132343a3a2f33322d3332203d3e20323733363530.roa
File:                     323830343a386132343a3a2f33322d3332203d3e20323733363530.roa (raw, json)
Hash identifier:          48niBNMbyaHalqE7/hhiWDmyzDBVxH6jDMSPODRFLjk=
Subject key identifier:   75:E7:0D:74:65:19:AF:56:52:B1:F9:86:90:39:18:F3:1A:74:9D:25
Certificate issuer:       /CN=6487DB5F4E26A7034D65454A185757A6025CB554
Certificate serial:       51B7200B03CCD2530AF275666860A6E560628BEE
Authority key identifier: 64:87:DB:5F:4E:26:A7:03:4D:65:45:4A:18:57:57:A6:02:5C:B5:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6487DB5F4E26A7034D65454A185757A6025CB554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1G8KjnYKhDmGpvajA7atRSFpwaF7mKjkKpaxfFZn5W7/0/323830343a386132343a3a2f33322d3332203d3e20323733363530.roa
Signing time:             Fri 10 Mar 2023 19:23:30 +0000
ROA not before:           Fri 10 Mar 2023 19:18:30 +0000
ROA not after:            Fri 08 Mar 2024 19:23:30 +0000
asID:                     273650
IP address blocks:        2804:8a24::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b7:20:0b:03:cc:d2:53:0a:f2:75:66:68:60:a6:e5:60:62:8b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6487DB5F4E26A7034D65454A185757A6025CB554
        Validity
            Not Before: Mar 10 19:18:30 2023 GMT
            Not After : Mar  8 19:23:30 2024 GMT
        Subject: CN=75E70D746519AF5652B1F986903918F31A749D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:6d:5d:0c:05:60:54:ed:3c:21:36:7b:ca:
                    ab:7b:82:3b:a9:53:cc:21:f0:7a:ee:2a:7c:19:8c:
                    f3:f7:24:5f:2b:67:8c:41:70:a4:ea:f5:33:96:04:
                    68:35:4f:0b:3c:a0:50:b6:70:9f:dc:89:0f:37:17:
                    76:41:38:b3:b4:3b:c3:61:3f:be:93:36:b8:c7:f5:
                    ab:f9:43:0a:b2:0c:e6:f2:4a:c0:56:47:0e:77:48:
                    48:39:cb:d8:b4:e2:d2:c2:76:29:51:e0:5c:cd:40:
                    34:76:c6:cd:18:c2:cb:ae:0a:8e:30:35:aa:c2:b2:
                    30:e6:7f:67:c8:7a:0b:79:6c:60:fc:67:fd:08:c2:
                    01:30:9a:72:b6:b5:57:65:8a:ec:31:29:31:a2:ee:
                    8c:50:09:24:a4:a6:af:ea:3d:6c:58:ad:2b:62:66:
                    f5:6f:80:59:56:58:73:89:c1:dc:fc:a8:c3:ed:9e:
                    3a:e3:27:c4:80:36:09:0b:62:fe:a6:a2:50:52:af:
                    69:c1:7c:8c:bd:b7:ad:07:dc:09:4a:ba:56:7d:7e:
                    b0:c8:33:1c:78:b0:ef:15:cf:3e:4b:a0:03:24:6e:
                    0b:5b:fc:98:80:c0:4b:34:67:c3:91:8f:0a:3e:ff:
                    b9:0c:31:75:8c:97:49:b0:ac:35:cc:90:64:68:79:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E7:0D:74:65:19:AF:56:52:B1:F9:86:90:39:18:F3:1A:74:9D:25
            X509v3 Authority Key Identifier:
                keyid:64:87:DB:5F:4E:26:A7:03:4D:65:45:4A:18:57:57:A6:02:5C:B5:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1G8KjnYKhDmGpvajA7atRSFpwaF7mKjkKpaxfFZn5W7/0/6487DB5F4E26A7034D65454A185757A6025CB554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6487DB5F4E26A7034D65454A185757A6025CB554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1G8KjnYKhDmGpvajA7atRSFpwaF7mKjkKpaxfFZn5W7/0/323830343a386132343a3a2f33322d3332203d3e20323733363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a24::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:11:8d:b0:90:63:3c:0f:5e:a2:ff:06:e1:05:f2:45:00:cf:
         f9:6f:08:ec:23:4a:4f:31:b0:ea:c0:32:5c:a2:36:dd:08:0f:
         8f:0f:cc:fa:26:ab:4a:c4:9f:07:e2:fc:57:e6:4d:00:52:10:
         bd:c0:cb:11:57:ff:b6:71:1d:e2:89:f7:ac:92:2c:41:0c:b8:
         3e:55:e9:c5:40:97:66:66:4b:62:fb:56:73:0d:fc:bd:7e:0a:
         d8:2d:78:c2:9e:f4:dc:13:c5:92:74:a4:66:48:ec:d5:4d:42:
         56:67:93:99:ba:5e:49:f8:0f:3b:d9:9f:9a:35:52:10:6a:64:
         62:cb:4b:20:55:13:2b:db:44:62:b2:bf:09:b6:8b:53:2f:b6:
         2c:48:79:59:25:83:25:44:fd:23:04:d3:a8:15:3a:e0:c6:b4:
         db:c6:78:9f:70:03:dd:7f:cf:02:82:f6:62:f7:29:23:07:f3:
         d8:d8:16:d9:ac:07:5f:86:8e:25:14:bc:11:57:7b:fe:3c:d0:
         10:d9:5c:be:a2:2f:25:77:8a:fa:6e:76:c4:8b:1c:c9:f5:52:
         11:18:de:02:2c:ae:12:fe:fd:6a:9a:71:59:6b:9e:5f:3d:d6:
         e4:b5:fe:21:57:7d:6d:1b:fd:46:45:a4:1d:d6:06:ad:0e:ae:
         96:bf:f1:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUbcgCwPM0lMK8nVmaGCm5WBii+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ4N0RCNUY0RTI2QTcwMzRENjU0NTRBMTg1NzU3QTYw
MjVDQjU1NDAeFw0yMzAzMTAxOTE4MzBaFw0yNDAzMDgxOTIzMzBaMDMxMTAvBgNV
BAMTKDc1RTcwRDc0NjUxOUFGNTY1MkIxRjk4NjkwMzkxOEYzMUE3NDlEMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgG1dDAVgVO08ITZ7yqt7gjup
U8wh8HruKnwZjPP3JF8rZ4xBcKTq9TOWBGg1Tws8oFC2cJ/ciQ83F3ZBOLO0O8Nh
P76TNrjH9av5QwqyDObySsBWRw53SEg5y9i04tLCdilR4FzNQDR2xs0YwsuuCo4w
NarCsjDmf2fIegt5bGD8Z/0IwgEwmnK2tVdliuwxKTGi7oxQCSSkpq/qPWxYrSti
ZvVvgFlWWHOJwdz8qMPtnjrjJ8SANgkLYv6molBSr2nBfIy9t60H3AlKulZ9frDI
Mxx4sO8Vzz5LoAMkbgtb/JiAwEs0Z8ORjwo+/7kMMXWMl0mwrDXMkGRoeQO/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdecNdGUZr1ZSsfmGkDkY8xp0nSUwHwYDVR0j
BBgwFoAUZIfbX04mpwNNZUVKGFdXpgJctVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzFHOEtqbllLaERtR3B2YWpBN2F0UlNGcHdhRjdtS2prS3BheGZGWm41
VzcvMC82NDg3REI1RjRFMjZBNzAzNEQ2NTQ1NEExODU3NTdBNjAyNUNCNTU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0ODdEQjVGNEUyNkE3MDM0
RDY1NDU0QTE4NTc1N0E2MDI1Q0I1NTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cxRzhLam5ZS2hEbUdwdmFqQTdhdFJTRnB3YUY3bUtqa0twYXhmRlpuNVc3LzAv
MzIzODMwMzQzYTM4NjEzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASKJDANBgkqhkiG9w0BAQsFAAOCAQEAkxGNsJBj
PA9eov8G4QXyRQDP+W8I7CNKTzGw6sAyXKI23QgPjw/M+iarSsSfB+L8V+ZNAFIQ
vcDLEVf/tnEd4on3rJIsQQy4PlXpxUCXZmZLYvtWcw38vX4K2C14wp703BPFknSk
Zkjs1U1CVmeTmbpeSfgPO9mfmjVSEGpkYstLIFUTK9tEYrK/CbaLUy+2LEh5WSWD
JUT9IwTTqBU64Ma028Z4n3AD3X/PAoL2YvcpIwfz2NgW2awHX4aOJRS8EVd7/jzQ
ENlcvqIvJXeK+m52xIscyfVSERjeAiyuEv79appxWWueXz3W5LX+IVd9bRv9RkWk
HdYGrQ6ulr/xYw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:10:35 2025 by rpki-client