Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33332d3333203d3e20323632333132.roa
File:                     323830343a333730303a3a2f33332d3333203d3e20323632333132.roa (raw, json)
Hash identifier:          Un/muRgC2ke2AwTYEQY97g0XXbCSYdHSwpb3BY91RYo=
Subject key identifier:   D0:75:A6:A9:43:6E:DD:D6:B4:EB:6A:CF:42:09:64:CE:B1:23:5B:E6
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       45F2C012AC05FC15A79A7F9BDAFDFC3D1AEAF57F
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33332d3333203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:28 +0000
ROA not before:           Fri 16 Aug 2024 16:21:28 +0000
ROA not after:            Fri 15 Aug 2025 16:26:28 +0000
asID:                     262312
IP address blocks:        2804:3700::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f2:c0:12:ac:05:fc:15:a7:9a:7f:9b:da:fd:fc:3d:1a:ea:f5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:28 2024 GMT
            Not After : Aug 15 16:26:28 2025 GMT
        Subject: CN=D075A6A9436EDDD6B4EB6ACF420964CEB1235BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:bd:28:56:4e:a6:b1:8a:50:1a:d8:8a:3d:
                    9c:75:3a:dd:e5:df:2e:58:86:9a:42:e5:f9:ef:25:
                    a5:18:25:18:34:9f:a3:26:1a:a5:8c:56:c4:28:c0:
                    82:3a:51:5e:5e:18:4b:14:4e:c8:85:15:6f:3e:66:
                    1b:9c:39:a3:34:44:c6:53:13:93:1f:7a:4e:34:03:
                    f7:6c:94:87:48:a6:14:68:c5:25:70:06:ef:37:b6:
                    c4:17:2e:dc:96:6d:64:63:f4:c4:2c:cb:7e:19:f0:
                    4f:6a:cd:18:fa:6f:a2:12:46:9d:eb:f5:78:7b:26:
                    9a:22:98:2b:ee:9f:f4:a0:dc:c0:e7:22:7f:b5:56:
                    a3:54:ce:1f:b1:ca:37:fd:56:70:6e:0c:be:4b:b7:
                    1e:b6:47:44:25:a5:da:3d:ac:5e:3e:ee:88:a0:1e:
                    7f:76:e6:30:6a:9c:c4:27:ed:96:60:4e:3f:1e:4d:
                    51:4f:ce:ba:84:4c:e7:fa:16:3e:54:a0:ae:1f:44:
                    ce:b6:4d:56:ff:d8:47:00:e9:2a:02:ca:8d:93:a2:
                    c6:38:2d:35:ab:80:9b:70:e4:df:be:c4:a6:3d:d9:
                    f9:0b:7f:fe:5e:1d:0e:9c:57:97:b8:7c:1b:7e:9d:
                    15:19:04:9f:72:8c:ef:c2:0d:89:15:4e:fa:7b:bc:
                    45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:75:A6:A9:43:6E:DD:D6:B4:EB:6A:CF:42:09:64:CE:B1:23:5B:E6
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33332d3333203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3700::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:7c:37:13:4a:09:4b:08:8a:e8:8d:ad:7a:bb:07:ec:11:
         1c:db:a6:ba:97:9e:28:b0:af:a6:c3:22:e0:35:36:fd:c8:9a:
         f0:5f:2d:ce:29:30:c1:3a:30:c8:83:16:72:9b:4e:fb:08:bd:
         5c:8a:b5:35:6a:d7:5e:bd:90:52:be:46:6d:27:9f:ea:ad:a6:
         b3:a8:e4:91:ae:77:b2:11:1a:35:46:bc:7c:a6:32:47:4c:d8:
         a3:63:70:74:f0:56:5f:08:3b:c4:54:7c:f0:ea:49:8c:9c:63:
         c5:7e:9b:b1:2f:bc:b4:80:5f:97:9c:29:af:4e:6d:14:a0:84:
         3d:3d:40:5d:0f:65:a8:0d:09:ef:7d:a2:4f:4f:9d:a8:f7:d4:
         40:84:d5:2a:f0:0a:a7:24:d9:2a:02:6c:f4:c5:2e:6c:76:7a:
         e2:5c:61:e9:ff:7f:ef:bd:d2:6b:66:61:ac:78:d9:73:36:92:
         cc:d2:5a:22:1f:de:48:1f:13:7b:79:28:40:a3:77:33:17:df:
         9b:2f:27:76:56:a9:2e:82:f4:93:ce:a1:78:1e:34:79:cf:52:
         98:3c:49:3b:99:f0:cb:f1:d8:25:37:eb:07:36:d2:a4:9d:84:
         b8:fa:3e:73:14:f6:88:74:12:89:a3:9f:82:6b:3b:8d:82:13:
         08:fe:97:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURfLAEqwF/BWnmn+b2v38PRrq9X8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NjBDNTYzQUUyQUU3ODE1QTVBRkY1NDgyNkE3MDND
MTY2OUZEMjAeFw0yNDA4MTYxNjIxMjhaFw0yNTA4MTUxNjI2MjhaMDMxMTAvBgNV
BAMTKEQwNzVBNkE5NDM2RURERDZCNEVCNkFDRjQyMDk2NENFQjEyMzVCRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpR70oVk6msYpQGtiKPZx1Ot3l
3y5YhppC5fnvJaUYJRg0n6MmGqWMVsQowII6UV5eGEsUTsiFFW8+ZhucOaM0RMZT
E5Mfek40A/dslIdIphRoxSVwBu83tsQXLtyWbWRj9MQsy34Z8E9qzRj6b6ISRp3r
9Xh7JpoimCvun/Sg3MDnIn+1VqNUzh+xyjf9VnBuDL5Ltx62R0Qlpdo9rF4+7oig
Hn925jBqnMQn7ZZgTj8eTVFPzrqETOf6Fj5UoK4fRM62TVb/2EcA6SoCyo2TosY4
LTWrgJtw5N++xKY92fkLf/5eHQ6cV5e4fBt+nRUZBJ9yjO/CDYkVTvp7vEWnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0HWmqUNu3da062rPQglkzrEjW+YwHwYDVR0j
BBgwFoAULZYMVjrirngVpa/1SCanA8Fmn9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3pUM1JkcmpEV3l1dHI0MVlLcmdHUUtHUmdFRVRrV1Y1aFhoTkhnMVlW
Q1MvMC8yRDk2MEM1NjNBRTJBRTc4MTVBNUFGRjU0ODI2QTcwM0MxNjY5RkQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEOTYwQzU2M0FFMkFFNzgx
NUE1QUZGNTQ4MjZBNzAzQzE2NjlGRDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6VDNSZHJqRFd5dXRyNDFZS3JnR1FLR1JnRUVUa1dWNWhYaE5IZzFZVkNTLzAv
MzIzODMwMzQzYTMzMzczMDMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMy
MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ3AAAwDQYJKoZIhvcNAQELBQADggEBAEqAfDcT
SglLCIroja16uwfsERzbprqXniiwr6bDIuA1Nv3ImvBfLc4pMME6MMiDFnKbTvsI
vVyKtTVq1169kFK+Rm0nn+qtprOo5JGud7IRGjVGvHymMkdM2KNjcHTwVl8IO8RU
fPDqSYycY8V+m7EvvLSAX5ecKa9ObRSghD09QF0PZagNCe99ok9Pnaj31ECE1Srw
Cqck2SoCbPTFLmx2euJcYen/f++90mtmYax42XM2kszSWiIf3kgfE3t5KECjdzMX
35svJ3ZWqS6C9JPOoXgeNHnPUpg8STuZ8Mvx2CU36wc20qSdhLj6PnMU9oh0Eomj
n4JrO42CEwj+lyY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:34:42 2025 by rpki-client