Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663330303a3a2f34302d3438203d3e20323633323833.roa
File:                     323830343a313635383a663330303a3a2f34302d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          +6vmc0QrkVyExSLb2b+L2sUPf51lYlA+EeAQbVacqwE=
Subject key identifier:   43:7F:14:1A:71:DB:84:0F:2C:6C:CB:C0:77:74:91:69:25:80:26:FE
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       7DC3294C2B055412E40538E2F5EB0EC51D776E62
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663330303a3a2f34302d3438203d3e20323633323833.roa
Signing time:             Mon 10 Feb 2025 18:30:02 +0000
ROA not before:           Mon 10 Feb 2025 18:25:02 +0000
ROA not after:            Mon 09 Feb 2026 18:30:02 +0000
asID:                     263283
IP address blocks:        2804:1658:f300::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c3:29:4c:2b:05:54:12:e4:05:38:e2:f5:eb:0e:c5:1d:77:6e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Feb 10 18:25:02 2025 GMT
            Not After : Feb  9 18:30:02 2026 GMT
        Subject: CN=437F141A71DB840F2C6CCBC077749169258026FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:ef:6d:df:f6:29:27:d4:3d:77:99:ad:e6:
                    66:4d:bf:cc:b4:61:ae:b0:dc:1e:02:2a:3d:1c:0e:
                    18:a6:73:1d:87:29:8b:03:2c:68:92:18:f5:40:30:
                    9e:2c:b0:74:a4:39:f7:5d:cc:49:b7:af:ef:02:04:
                    57:2c:71:47:04:cc:f3:6a:38:df:54:3d:98:80:3c:
                    3f:eb:bf:72:2c:29:5f:a1:2e:cf:1a:bf:c8:13:68:
                    98:1f:8a:47:08:ca:2f:dc:5c:8c:02:3b:99:3f:cc:
                    b9:aa:6c:d5:e4:08:1d:3e:26:4b:b5:dd:cf:61:26:
                    3c:88:1d:f0:37:86:e6:24:ed:b6:2d:b6:a4:d6:2b:
                    9c:09:24:35:40:dd:2a:2e:ca:77:f5:13:38:a0:a0:
                    b2:ec:83:71:05:c4:c2:a0:8d:56:66:2e:c8:f8:e2:
                    03:82:49:af:e9:a2:73:ef:b7:80:12:de:f6:b0:fd:
                    b5:cd:e7:09:85:23:52:02:43:e8:ab:66:76:49:1c:
                    e0:6c:92:11:7a:9d:af:46:a0:67:ff:8e:e0:37:eb:
                    aa:3b:27:76:6b:08:11:be:46:24:ea:54:ec:10:4e:
                    94:b1:1d:18:dc:65:e8:ba:d1:9c:a0:1e:e3:23:b7:
                    96:84:c3:30:be:e8:69:98:a0:97:5e:6c:e7:33:a4:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7F:14:1A:71:DB:84:0F:2C:6C:CB:C0:77:74:91:69:25:80:26:FE
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663330303a3a2f34302d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:8d:29:9a:4d:29:e9:21:41:44:66:66:df:55:57:bb:6f:42:
         7d:e2:fb:98:7e:fd:1b:c4:23:0a:7d:b4:44:bb:d8:22:38:64:
         07:b2:3c:44:47:be:31:41:7b:54:f6:5e:a3:2d:ec:39:df:99:
         38:0d:99:60:79:11:2a:af:70:4a:54:ee:62:07:e3:43:3e:1c:
         e8:1f:6a:f2:d9:f1:47:1d:39:2e:5d:ff:df:4a:fa:c4:92:bb:
         c4:45:4b:b2:50:0a:53:41:f9:bf:f5:77:bc:2b:23:c2:77:18:
         5c:7b:b3:23:32:c2:83:e0:0e:c8:6d:98:cc:c8:f9:8c:d9:bd:
         d0:94:d9:10:22:d1:8e:8d:93:1d:da:e7:77:f6:46:96:c8:e1:
         c4:4f:a3:94:1a:6a:7b:54:54:29:e9:b7:6f:0d:35:33:eb:62:
         99:78:d4:5b:70:65:7a:d8:62:d8:a2:8f:c5:fd:10:aa:c7:d7:
         6e:db:b2:49:f8:60:92:d7:d4:69:fb:38:ae:c3:c0:6b:1c:e4:
         24:50:69:d3:57:e2:74:80:a1:c1:18:dc:d3:fe:5d:6d:5d:fa:
         85:af:c7:77:57:78:f3:0e:b2:01:cf:86:78:6c:57:5a:c7:35:
         15:75:77:e3:15:ff:5b:48:91:04:63:71:e0:e3:26:8f:c8:f9:
         56:eb:27:10
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfcMpTCsFVBLkBTji9esOxR13bmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFCMEQzRUE5OTRCM0E2ODQ2MDI2NDEzNTFDMjkyQzc4
MDhCNTBGQzAeFw0yNTAyMTAxODI1MDJaFw0yNjAyMDkxODMwMDJaMDMxMTAvBgNV
BAMTKDQzN0YxNDFBNzFEQjg0MEYyQzZDQ0JDMDc3NzQ5MTY5MjU4MDI2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJu9t3/YpJ9Q9d5mt5mZNv8y0
Ya6w3B4CKj0cDhimcx2HKYsDLGiSGPVAMJ4ssHSkOfddzEm3r+8CBFcscUcEzPNq
ON9UPZiAPD/rv3IsKV+hLs8av8gTaJgfikcIyi/cXIwCO5k/zLmqbNXkCB0+Jku1
3c9hJjyIHfA3huYk7bYttqTWK5wJJDVA3Souynf1EzigoLLsg3EFxMKgjVZmLsj4
4gOCSa/ponPvt4AS3vaw/bXN5wmFI1ICQ+irZnZJHOBskhF6na9GoGf/juA366o7
J3ZrCBG+RiTqVOwQTpSxHRjcZei60ZygHuMjt5aEwzC+6GmYoJdebOczpJLlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ38UGnHbhA8sbMvAd3SRaSWAJv4wHwYDVR0j
BBgwFoAUQbDT6plLOmhGAmQTUcKSx4CLUPwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29MQXVDZUI4cVBBUHpUMkNIZ3VXeWJVNFRaQXhqZGdRQWlYNXJVajRI
aGEvMy80MUIwRDNFQTk5NEIzQTY4NDYwMjY0MTM1MUMyOTJDNzgwOEI1MEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxQjBEM0VBOTk0QjNBNjg0
NjAyNjQxMzUxQzI5MkM3ODA4QjUwRkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvTEF1Q2VCOHFQQVB6VDJDSGd1V3liVTRUWkF4amRnUUFpWDVyVWo0SGhhLzMv
MzIzODMwMzQzYTMxMzYzNTM4M2E2NjMzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNk
M2UyMDMyMzYzMzMyMzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEFljzMA0GCSqGSIb3DQEBCwUA
A4IBAQCujSmaTSnpIUFEZmbfVVe7b0J94vuYfv0bxCMKfbREu9giOGQHsjxER74x
QXtU9l6jLew535k4DZlgeREqr3BKVO5iB+NDPhzoH2ry2fFHHTkuXf/fSvrEkrvE
RUuyUApTQfm/9Xe8KyPCdxhce7MjMsKD4A7IbZjMyPmM2b3QlNkQItGOjZMd2ud3
9kaWyOHET6OUGmp7VFQp6bdvDTUz62KZeNRbcGV62GLYoo/F/RCqx9du27JJ+GCS
19Rp+ziuw8BrHOQkUGnTV+J0gKHBGNzT/l1tXfqFr8d3V3jzDrIBz4Z4bFdaxzUV
dXfjFf9bSJEEY3Hg4yaPyPlW6ycQ
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:22:09 2025 by rpki-client