Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/323830343a353034633a3a2f33322d313238203d3e20323638333830.roa
File:                     323830343a353034633a3a2f33322d313238203d3e20323638333830.roa (raw, json)
Hash identifier:          JJeNadz39LCkxyUoFrTrLdfZuNXJ7JxmxQAUxqwReUg=
Subject key identifier:   71:4E:44:EE:9E:1D:36:90:09:69:F7:73:66:F0:BA:83:99:AE:18:68
Certificate issuer:       /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Certificate serial:       47BEA9BFF9C4D7370CAAA6F10530056C6E0013E5
Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/323830343a353034633a3a2f33322d313238203d3e20323638333830.roa
Signing time:             Sun 02 Feb 2025 02:42:35 +0000
ROA not before:           Sun 02 Feb 2025 02:37:35 +0000
ROA not after:            Sun 01 Feb 2026 02:42:35 +0000
asID:                     268380
IP address blocks:        2804:504c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:be:a9:bf:f9:c4:d7:37:0c:aa:a6:f1:05:30:05:6c:6e:00:13:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
        Validity
            Not Before: Feb  2 02:37:35 2025 GMT
            Not After : Feb  1 02:42:35 2026 GMT
        Subject: CN=714E44EE9E1D36900969F77366F0BA8399AE1868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:9c:e4:a8:e7:cd:73:8d:9f:96:46:c3:e6:
                    28:cb:04:69:77:c1:e2:bc:1e:42:ab:a3:05:3a:07:
                    82:37:f9:32:41:6c:a1:d5:3a:eb:35:70:24:b1:1e:
                    53:b0:60:d7:3b:2f:94:ac:10:8b:e7:d5:e9:8f:9f:
                    8f:bd:bd:51:c3:7d:28:b1:1f:a0:65:3d:4f:4d:10:
                    b3:05:50:1a:07:4a:7b:e9:55:a1:ea:92:1d:7e:51:
                    b6:c7:0c:7f:57:35:49:c6:bc:35:f7:70:e0:72:d5:
                    82:f8:66:53:6f:4f:74:75:67:c3:cc:89:68:ad:dd:
                    92:79:27:e0:96:86:a5:45:ed:6b:fd:fd:bd:70:fd:
                    db:ed:db:31:9e:71:ad:be:1d:08:a7:f5:8f:d7:98:
                    cb:4e:64:d1:31:ce:2a:b3:f4:e3:15:d4:3f:43:24:
                    e8:3f:56:a7:c3:72:e9:86:fe:54:b2:04:7f:7b:b9:
                    d5:34:e8:17:af:53:82:88:40:56:6a:0d:ce:a6:1c:
                    7c:dc:e6:f5:bf:2f:51:3b:75:7b:73:a7:35:ee:44:
                    a8:33:dd:c1:18:a2:98:7d:af:40:de:65:45:7a:bc:
                    8f:53:76:85:3d:df:5c:1b:98:ac:86:2c:b3:c8:28:
                    13:ef:29:07:09:b4:89:4c:43:ca:a3:ac:46:48:c9:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4E:44:EE:9E:1D:36:90:09:69:F7:73:66:F0:BA:83:99:AE:18:68
            X509v3 Authority Key Identifier:
                keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/323830343a353034633a3a2f33322d313238203d3e20323638333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:504c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:bb:38:28:7d:73:d6:36:99:61:a6:2e:6d:75:8f:4b:52:af:
         75:05:53:ba:ea:03:5b:00:f3:f1:79:7c:8a:e3:d3:47:3f:26:
         ab:fb:7a:c2:5b:b8:33:c1:30:60:f4:31:7e:96:47:3c:d8:b7:
         9a:9b:e9:be:76:0c:14:1d:59:6d:94:59:31:4c:cd:79:ee:85:
         93:88:9a:79:36:0b:1c:c1:58:9e:0e:c7:b2:9b:1a:15:5a:1b:
         41:d8:2a:c1:76:b9:8e:1e:a7:ee:e4:5c:e4:fc:96:34:19:f5:
         c3:13:9e:4b:f0:ac:70:8b:20:3e:c3:b4:02:32:31:fa:d9:4d:
         5e:a0:2a:99:e7:a3:20:e1:b8:cf:27:62:89:87:2d:d8:fd:1f:
         ba:f6:9b:2d:19:91:a6:d2:5e:45:29:56:ea:97:e1:5c:68:5c:
         b2:5e:86:d4:39:27:04:bb:c9:63:f6:00:2e:95:7a:e0:69:bb:
         1c:3e:89:f0:45:0f:f0:c7:00:cd:37:23:ce:f6:ac:9e:07:84:
         76:4e:e3:94:3d:d4:25:5d:c4:b5:24:6e:50:6a:5d:12:3a:fe:
         bb:81:7e:7b:1a:73:35:84:df:89:48:04:74:12:d2:e5:00:dd:
         a3:d7:0a:f9:de:99:96:8d:0a:81:17:f0:cb:32:2a:b1:03:29:
         5c:12:11:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUR76pv/nE1zcMqqbxBTAFbG4AE+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFDRTVCODFCQTQ1ODhBOTA1OEUzMkY3ODU5MEVENEFC
RkVCMjlCQTAeFw0yNTAyMDIwMjM3MzVaFw0yNjAyMDEwMjQyMzVaMDMxMTAvBgNV
BAMTKDcxNEU0NEVFOUUxRDM2OTAwOTY5Rjc3MzY2RjBCQTgzOTlBRTE4NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36JzkqOfNc42flkbD5ijLBGl3
weK8HkKrowU6B4I3+TJBbKHVOus1cCSxHlOwYNc7L5SsEIvn1emPn4+9vVHDfSix
H6BlPU9NELMFUBoHSnvpVaHqkh1+UbbHDH9XNUnGvDX3cOBy1YL4ZlNvT3R1Z8PM
iWit3ZJ5J+CWhqVF7Wv9/b1w/dvt2zGeca2+HQin9Y/XmMtOZNExziqz9OMV1D9D
JOg/VqfDcumG/lSyBH97udU06BevU4KIQFZqDc6mHHzc5vW/L1E7dXtzpzXuRKgz
3cEYoph9r0DeZUV6vI9TdoU931wbmKyGLLPIKBPvKQcJtIlMQ8qjrEZIyVSBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUcU5E7p4dNpAJafdzZvC6g5muGGgwHwYDVR0j
BBgwFoAUms5bgbpFiKkFjjL3hZDtSr/rKbowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3p1eHVkMWI0dWNzYUtZc2lDeldUenl1S0R6WDdoMWpWNjFBb1FZM245
cnIvMC85QUNFNUI4MUJBNDU4OEE5MDU4RTMyRjc4NTkwRUQ0QUJGRUIyOUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBQ0U1QjgxQkE0NTg4QTkw
NThFMzJGNzg1OTBFRDRBQkZFQjI5QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6dXh1ZDFiNHVjc2FLWXNpQ3pXVHp5dUtEelg3aDFqVjYxQW9RWTNuOXJyLzAv
MzIzODMwMzQzYTM1MzAzNDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMzM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFBMMA0GCSqGSIb3DQEBCwUAA4IBAQBKuzgo
fXPWNplhpi5tdY9LUq91BVO66gNbAPPxeXyK49NHPyar+3rCW7gzwTBg9DF+lkc8
2Leam+m+dgwUHVltlFkxTM157oWTiJp5NgscwVieDseymxoVWhtB2CrBdrmOHqfu
5Fzk/JY0GfXDE55L8KxwiyA+w7QCMjH62U1eoCqZ56Mg4bjPJ2KJhy3Y/R+69pst
GZGm0l5FKVbql+FcaFyyXobUOScEu8lj9gAulXrgabscPonwRQ/wxwDNNyPO9qye
B4R2TuOUPdQlXcS1JG5Qal0SOv67gX57GnM1hN+JSAR0EtLlAN2j1wr53pmWjQqB
F/DLMiqxAylcEhF7
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:42:36 2025 by rpki-client