Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a383030303a3a2f33342d3334203d3e20323638313739.roa
File:                     323830343a353934303a383030303a3a2f33342d3334203d3e20323638313739.roa (raw, json)
Hash identifier:          C5pfEICsBDqYWIZynrT8aMO7y7ECXW4lPoYLr7/UKjc=
Subject key identifier:   74:B9:19:7C:20:31:EF:14:CE:A7:4F:07:4E:E9:DD:DD:E7:A8:10:1A
Certificate issuer:       /CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
Certificate serial:       54658C752DE55328B516BFE4E108D6231419A5BA
Authority key identifier: 16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a383030303a3a2f33342d3334203d3e20323638313739.roa
Signing time:             Wed 28 Dec 2022 20:37:09 +0000
ROA not before:           Wed 28 Dec 2022 20:32:09 +0000
ROA not after:            Wed 27 Dec 2023 20:37:09 +0000
asID:                     268179
IP address blocks:        2804:5940:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:65:8c:75:2d:e5:53:28:b5:16:bf:e4:e1:08:d6:23:14:19:a5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
        Validity
            Not Before: Dec 28 20:32:09 2022 GMT
            Not After : Dec 27 20:37:09 2023 GMT
        Subject: CN=74B9197C2031EF14CEA74F074EE9DDDDE7A8101A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:53:57:d4:8a:42:02:75:d4:f0:29:4b:74:
                    a1:3b:94:d0:14:ab:f6:46:da:86:4c:64:84:c9:ed:
                    f3:d8:ba:be:29:5d:f2:87:42:d2:b8:ea:78:de:1b:
                    db:f3:93:9d:c4:b0:1a:6f:2e:00:18:a9:e5:f0:4b:
                    97:d3:fe:37:a6:51:c5:ac:96:2a:7d:dc:12:6a:b0:
                    17:70:40:04:28:a9:30:0e:7a:ca:92:86:a2:00:d3:
                    32:ca:f2:56:79:a8:b7:bc:f6:11:0a:68:e2:39:6c:
                    25:32:8f:ce:af:6d:0c:05:8e:e7:92:f9:e3:9b:06:
                    19:14:82:ef:bd:5c:e0:6d:c4:a8:85:bd:49:e9:85:
                    ce:24:49:12:8e:d8:d6:24:4a:66:c1:95:fc:ea:9a:
                    0c:65:8d:84:f2:c4:a1:34:0c:89:85:e1:d7:dc:b7:
                    4e:88:1d:10:c8:27:40:1f:45:33:18:ad:96:bb:63:
                    78:ca:0d:ed:b0:8b:16:a3:4d:cf:e9:68:81:29:89:
                    49:f4:10:96:78:f4:15:46:32:7d:60:23:49:7c:cf:
                    9c:dd:06:de:c1:86:15:b3:21:e0:42:3b:6a:8e:59:
                    8b:b6:d3:1b:b7:9e:d8:d5:31:29:a1:31:e3:53:00:
                    7f:a2:45:ff:37:61:57:7f:77:61:d2:d5:7b:95:46:
                    72:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:19:7C:20:31:EF:14:CE:A7:4F:07:4E:E9:DD:DD:E7:A8:10:1A
            X509v3 Authority Key Identifier:
                keyid:16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a383030303a3a2f33342d3334203d3e20323638313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5940:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         95:ef:e5:3b:f9:ef:e1:fc:bc:02:10:55:3f:7b:ef:18:c7:ea:
         30:56:8c:e8:ab:c6:88:c0:ab:75:2f:51:82:7b:24:77:75:46:
         55:d6:c2:d7:7c:56:ce:1e:ec:2c:0e:1a:91:9b:52:2a:c5:30:
         06:0e:ae:7b:9b:de:bf:35:64:f6:6c:76:a7:27:a2:7e:ad:ce:
         06:02:2b:a6:c2:fc:26:d5:6a:9b:a1:14:4a:22:81:9e:7c:26:
         97:2c:4f:f6:40:e8:91:5a:19:cd:3d:13:8f:30:0d:fe:9e:28:
         47:4a:06:bb:d6:7b:2a:4c:3e:11:5b:7c:7a:07:db:11:f5:ea:
         01:ac:b6:79:4a:6a:43:39:1a:d3:6e:3e:b6:d8:a2:b6:63:4b:
         79:f7:35:67:28:56:f1:c8:a9:6a:c8:f2:9e:eb:7b:a3:76:a3:
         cc:17:6a:db:d7:fb:f2:c9:9a:d5:5a:c1:bd:a2:98:c6:94:87:
         96:d6:1d:9e:f4:d9:48:4e:65:2c:0e:97:9f:08:5b:f8:26:6c:
         1d:a7:ac:dd:55:2d:1d:d8:d6:b5:4c:0b:be:24:03:e5:b0:d7:
         b8:34:4c:b0:9a:83:dc:63:c0:36:4a:a3:c9:10:f4:ff:c9:ef:
         8a:87:ad:20:29:82:05:34:8f:c0:3f:b8:17:16:7b:e6:7f:8e:
         02:36:9b:b2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVGWMdS3lUyi1Fr/k4QjWIxQZpbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZGNjVFQUExMUREM0I4RTk0RDY2RjA3RjU0QzQ0RDVE
QTk3QTA5RTAeFw0yMjEyMjgyMDMyMDlaFw0yMzEyMjcyMDM3MDlaMDMxMTAvBgNV
BAMTKDc0QjkxOTdDMjAzMUVGMTRDRUE3NEYwNzRFRTlERERERTdBODEwMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15FNX1IpCAnXU8ClLdKE7lNAU
q/ZG2oZMZITJ7fPYur4pXfKHQtK46njeG9vzk53EsBpvLgAYqeXwS5fT/jemUcWs
lip93BJqsBdwQAQoqTAOesqShqIA0zLK8lZ5qLe89hEKaOI5bCUyj86vbQwFjueS
+eObBhkUgu+9XOBtxKiFvUnphc4kSRKO2NYkSmbBlfzqmgxljYTyxKE0DImF4dfc
t06IHRDIJ0AfRTMYrZa7Y3jKDe2wixajTc/paIEpiUn0EJZ49BVGMn1gI0l8z5zd
Bt7BhhWzIeBCO2qOWYu20xu3ntjVMSmhMeNTAH+iRf83YVd/d2HS1XuVRnJ7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUdLkZfCAx7xTOp08HTund3eeoEBowHwYDVR0j
BBgwFoAUFvZeqhHdO46U1m8H9UxE1dqXoJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzF6eTF1YldXcUgyQUw2SG81TUJ4VUNqaEZpYmFiVlROQzhBOVZUTGpO
MVMvMC8xNkY2NUVBQTExREQzQjhFOTRENjZGMDdGNTRDNDRENURBOTdBMDlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2RjY1RUFBMTFERDNCOEU5
NEQ2NkYwN0Y1NEM0NEQ1REE5N0EwOUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cxenkxdWJXV3FIMkFMNkhvNU1CeFVDamhGaWJhYlZUTkM4QTlWVExqTjFTLzAv
MzIzODMwMzQzYTM1MzkzNDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMxMzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWUCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCV7+U7+e/h/LwCEFU/e+8Yx+owVozoq8aIwKt1L1GCeyR3dUZV1sLXfFbO
HuwsDhqRm1IqxTAGDq57m96/NWT2bHanJ6J+rc4GAiumwvwm1WqboRRKIoGefCaX
LE/2QOiRWhnNPROPMA3+nihHSga71nsqTD4RW3x6B9sR9eoBrLZ5SmpDORrTbj62
2KK2Y0t59zVnKFbxyKlqyPKe63ujdqPMF2rb1/vyyZrVWsG9opjGlIeW1h2e9NlI
TmUsDpefCFv4Jmwdp6zdVS0d2Na1TAu+JAPlsNe4NEywmoPcY8A2SqPJEPT/ye+K
h60gKYIFNI/AP7gXFnvmf44CNpuy
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:50 2025 by rpki-client