Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a666630303a3a2f34312d3431203d3e203238323737.roa
File:                     323830343a3264633a666630303a3a2f34312d3431203d3e203238323737.roa (raw, json)
Hash identifier:          WiFu2uUX+8pNwFclZOaUI1qIdSqqr+FawAIvtdlqvWc=
Subject key identifier:   6C:39:7E:FC:6B:C4:FB:95:CB:29:D7:D9:C5:B8:82:B6:4F:DC:2B:52
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       2F3F4FFA6A6822C91275658867A58C86EA287101
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a666630303a3a2f34312d3431203d3e203238323737.roa
Signing time:             Thu 28 Apr 2022 18:00:00 +0000
ROA not before:           Thu 28 Apr 2022 17:55:00 +0000
ROA not after:            Fri 28 Apr 2023 18:00:00 +0000
asID:                     28277
IP address blocks:        2804:2dc:ff00::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3f:4f:fa:6a:68:22:c9:12:75:65:88:67:a5:8c:86:ea:28:71:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Apr 28 17:55:00 2022 GMT
            Not After : Apr 28 18:00:00 2023 GMT
        Subject: CN=3082010A0282010100C0179458B19771CB4AED36824CC33E47E22C73F96AEC9BA2D34FBAE5FD3772B1F04D2C5A050080274500BF5420D8A6534462031A43D6B61C54CE38FB29A8EF13442E86B8084222EBD2A6FC637D2FF8BF7B9D9DB4304D883215F0AAA877F900DBE8BA71CCDC830F6EB231C902CC089DFE3E3B0EAB46E3A79D4B9A5C39EBDC15E804D991DCB02C43AFEA2F5286666C4A193EDE9CCFDD2AE4CE9B8A5E16A6E7F9644057277458C5E7D7B30D64BA3923C2CB85C3F8B8A8A80BD13545D9F1BCBF2B2D0FC3FEAC6149770F7346CFDEE054C2A1CFF464866204CA59F72D36A699F99848205FA2742706B6FBA61C7952311F0F15A1142B4572A4035D0BDD4F343051EA390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:94:58:b1:97:71:cb:4a:ed:36:82:4c:c3:
                    3e:47:e2:2c:73:f9:6a:ec:9b:a2:d3:4f:ba:e5:fd:
                    37:72:b1:f0:4d:2c:5a:05:00:80:27:45:00:bf:54:
                    20:d8:a6:53:44:62:03:1a:43:d6:b6:1c:54:ce:38:
                    fb:29:a8:ef:13:44:2e:86:b8:08:42:22:eb:d2:a6:
                    fc:63:7d:2f:f8:bf:7b:9d:9d:b4:30:4d:88:32:15:
                    f0:aa:a8:77:f9:00:db:e8:ba:71:cc:dc:83:0f:6e:
                    b2:31:c9:02:cc:08:9d:fe:3e:3b:0e:ab:46:e3:a7:
                    9d:4b:9a:5c:39:eb:dc:15:e8:04:d9:91:dc:b0:2c:
                    43:af:ea:2f:52:86:66:6c:4a:19:3e:de:9c:cf:dd:
                    2a:e4:ce:9b:8a:5e:16:a6:e7:f9:64:40:57:27:74:
                    58:c5:e7:d7:b3:0d:64:ba:39:23:c2:cb:85:c3:f8:
                    b8:a8:a8:0b:d1:35:45:d9:f1:bc:bf:2b:2d:0f:c3:
                    fe:ac:61:49:77:0f:73:46:cf:de:e0:54:c2:a1:cf:
                    f4:64:86:62:04:ca:59:f7:2d:36:a6:99:f9:98:48:
                    20:5f:a2:74:27:06:b6:fb:a6:1c:79:52:31:1f:0f:
                    15:a1:14:2b:45:72:a4:03:5d:0b:dd:4f:34:30:51:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:39:7E:FC:6B:C4:FB:95:CB:29:D7:D9:C5:B8:82:B6:4F:DC:2B:52
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a666630303a3a2f34312d3431203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dc:ff00::/41

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:2d:6a:ce:3d:e5:8b:ce:58:12:b3:4b:eb:16:95:f6:34:
         cb:bc:c1:b8:db:14:26:3f:29:dd:62:4f:a8:21:54:25:92:27:
         3b:fa:b6:92:62:91:2e:0c:ef:b5:d4:52:83:58:73:d1:2a:b9:
         9a:52:44:1f:f2:c0:97:3d:c0:6c:37:e1:57:7d:c5:59:39:19:
         a8:c6:3e:7b:0b:01:cb:dd:52:0f:61:e4:1c:2f:8d:88:69:5b:
         c8:ec:70:26:d4:08:2e:3d:5f:4a:a8:ad:6f:cf:32:d5:d5:f3:
         77:a1:27:3e:22:1f:7a:c7:da:35:8d:fd:97:d1:5c:db:4e:99:
         a4:c3:c5:19:df:8b:cd:0e:8e:2d:11:63:25:82:3b:b4:ce:7d:
         7a:63:cb:e9:62:36:69:66:a9:41:6f:6a:6c:cb:65:16:99:be:
         dd:20:41:b6:90:dd:ad:ad:0f:3a:d3:0e:82:b3:9a:0d:f3:8c:
         82:6f:99:33:2b:6c:77:04:16:26:c0:1a:3e:ac:bf:aa:5f:50:
         f3:1e:64:69:4c:69:91:07:a0:e7:6a:db:db:cb:f4:dc:d7:06:
         f5:48:87:b0:58:77:39:05:55:70:0b:58:96:b5:86:33:80:ab:
         de:ad:dd:74:dc:6b:4a:d4:6f:af:c6:92:30:68:5d:bd:e5:4f:
         ee:66:9b:d4
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIULz9P+mpoIskSdWWIZ6WMhuoocQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NTE2QTdFOEQ0MTIxOTAyRTNBN0VENTg2OEExQzRG
RTUyNUQzRjAeFw0yMjA0MjgxNzU1MDBaFw0yMzA0MjgxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzAxNzk0NThCMTk3NzFDQjRB
RUQzNjgyNENDMzNFNDdFMjJDNzNGOTZBRUM5QkEyRDM0RkJBRTVGRDM3NzJCMUYw
NEQyQzVBMDUwMDgwMjc0NTAwQkY1NDIwRDhBNjUzNDQ2MjAzMUE0M0Q2QjYxQzU0
Q0UzOEZCMjlBOEVGMTM0NDJFODZCODA4NDIyMkVCRDJBNkZDNjM3RDJGRjhCRjdC
OUQ5REI0MzA0RDg4MzIxNUYwQUFBODc3RjkwMERCRThCQTcxQ0NEQzgzMEY2RUIy
MzFDOTAyQ0MwODlERkUzRTNCMEVBQjQ2RTNBNzlENEI5QTVDMzlFQkRDMTVFODA0
RDk5MURDQjAyQzQzQUZFQTJGNTI4NjY2NkM0QTE5M0VERTlDQ0ZERDJBRTRDRTlC
OEE1RTE2QTZFN0Y5NjQ0MDU3Mjc3NDU4QzVFN0Q3QjMwRDY0QkEzOTIzQzJDQjg1
QzNGOEI4QThBODBCRDEzNTQ1RDlGMUJDQkYyQjJEMEZDM0ZFQUM2MTQ5NzcwRjcz
NDZDRkRFRTA1NEMyQTFDRkY0NjQ4NjYyMDRDQTU5RjcyRDM2QTY5OUY5OTg0ODIw
NUZBMjc0MjcwNkI2RkJBNjFDNzk1MjMxMUYwRjE1QTExNDJCNDU3MkE0MDM1RDBC
REQ0RjM0MzA1MUVBMzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwBeUWLGXcctK7TaCTMM+R+Isc/lq7Jui00+65f03crHwTSxaBQCA
J0UAv1Qg2KZTRGIDGkPWthxUzjj7KajvE0QuhrgIQiLr0qb8Y30v+L97nZ20ME2I
MhXwqqh3+QDb6LpxzNyDD26yMckCzAid/j47DqtG46edS5pcOevcFegE2ZHcsCxD
r+ovUoZmbEoZPt6cz90q5M6bil4Wpuf5ZEBXJ3RYxefXsw1kujkjwsuFw/i4qKgL
0TVF2fG8vystD8P+rGFJdw9zRs/e4FTCoc/0ZIZiBMpZ9y02ppn5mEggX6J0Jwa2
+6YceVIxHw8VoRQrRXKkA10L3U80MFHqOQIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FGw5fvxrxPuVyynX2cW4grZP3CtSMB8GA1UdIwQYMBaAFDeVFqfo1BIZAuOn7Vho
ocT+Ul0/MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g3dHZwRkhGM0JrWlBj
NUpaU2lVTEt0akdtdlBlNGZBanhpVTJESlpxUEcxLzAvMzc5NTE2QTdFOEQ0MTIx
OTAyRTNBN0VENTg2OEExQzRGRTUyNUQzRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zNzk1MTZBN0U4RDQxMjE5MDJFM0E3RUQ1ODY4QTFDNEZFNTI1
RDNGLmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IN3R2cEZIRjNCa1pQYzVKWlNp
VUxLdGpHbXZQZTRmQWp4aVUyREpacVBHMS8wLzMyMzgzMDM0M2EzMjY0NjMzYTY2
NjYzMDMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzIzODMyMzczNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBygEAtz/ADANBgkqhkiG9w0BAQsFAAOCAQEAFNQtas495YvOWBKzS+sWlfY0
y7zBuNsUJj8p3WJPqCFUJZInO/q2kmKRLgzvtdRSg1hz0Sq5mlJEH/LAlz3AbDfh
V33FWTkZqMY+ewsBy91SD2HkHC+NiGlbyOxwJtQILj1fSqitb88y1dXzd6EnPiIf
esfaNY39l9Fc206ZpMPFGd+LzQ6OLRFjJYI7tM59emPL6WI2aWapQW9qbMtlFpm+
3SBBtpDdra0POtMOgrOaDfOMgm+ZMytsdwQWJsAaPqy/ql9Q8x5kaUxpkQeg52rb
28v03NcG9UiHsFh3OQVVcAtYlrWGM4Cr3q3ddNxrStRvr8aSMGhdveVP7mab1A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:50:39 2025 by rpki-client