Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa
File:                     323830343a346564383a3a2f33322d3438203d3e20323638323836.roa (raw, json)
Hash identifier:          DMca/RXiFrkqlQwBo0KlXsXg4OMfcZpgtGYiL5B71Ic=
Subject key identifier:   DE:3B:2D:A8:97:0E:49:43:74:43:9C:B8:CA:D4:83:E3:83:A5:D6:EA
Certificate issuer:       /CN=5BE4378A5E0B1629852BDD255130076ED843FD31
Certificate serial:       235FF0B03B85B13D6A0BB27656FD4F5DE06C9D3A
Authority key identifier: 5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa
Signing time:             Thu 06 Mar 2025 18:35:30 +0000
ROA not before:           Thu 06 Mar 2025 18:30:30 +0000
ROA not after:            Thu 05 Mar 2026 18:35:30 +0000
asID:                     268286
IP address blocks:        2804:4ed8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5f:f0:b0:3b:85:b1:3d:6a:0b:b2:76:56:fd:4f:5d:e0:6c:9d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE4378A5E0B1629852BDD255130076ED843FD31
        Validity
            Not Before: Mar  6 18:30:30 2025 GMT
            Not After : Mar  5 18:35:30 2026 GMT
        Subject: CN=DE3B2DA8970E494374439CB8CAD483E383A5D6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:11:58:22:58:c3:c0:38:33:03:0c:eb:10:
                    6f:c4:e3:d7:45:41:33:2b:80:70:56:be:d9:dc:74:
                    3a:4c:10:51:0f:d1:1e:02:e8:33:fa:f8:a3:7a:3b:
                    42:0c:4c:50:db:c1:f0:d8:f3:6b:3f:6c:c0:f9:61:
                    20:be:30:80:29:8a:97:c5:4e:b6:e4:70:9d:4f:fd:
                    df:a0:ff:12:33:e9:b7:c8:de:3e:de:fe:27:95:c3:
                    31:d4:f4:6d:08:bd:af:60:22:6c:01:d6:b2:43:77:
                    06:45:01:39:70:91:31:a8:4f:0e:ac:24:cc:e9:98:
                    52:ec:1b:9d:2a:17:f6:90:99:2f:77:3e:ec:70:4e:
                    b7:22:f4:16:5b:43:07:2d:36:0a:a2:61:5b:9e:af:
                    02:f3:f0:66:68:b2:c7:ba:87:8c:99:ac:f7:2b:13:
                    c3:74:91:14:bc:2e:15:d1:84:c9:cb:77:21:62:aa:
                    25:d9:3f:05:bd:34:8b:fb:0b:02:1e:fd:e1:80:74:
                    ef:d2:26:fb:ab:83:d9:96:45:48:c3:23:dc:8a:e9:
                    f9:c3:e9:a9:a9:28:b0:c3:8d:d1:24:9f:5e:b8:93:
                    ed:ed:ef:10:a7:0e:ca:98:48:a8:60:89:e8:e1:4b:
                    5b:9d:d6:60:c0:e5:9e:ec:6f:60:5c:bc:10:d1:d8:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3B:2D:A8:97:0E:49:43:74:43:9C:B8:CA:D4:83:E3:83:A5:D6:EA
            X509v3 Authority Key Identifier:
                keyid:5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:5e:45:84:5d:70:98:bf:2f:1f:3e:ca:3c:0e:c3:df:18:98:
         59:41:37:b9:3e:f8:7e:f0:2e:3f:5f:de:3a:41:77:40:14:00:
         89:90:49:b1:35:b7:de:08:f6:0a:67:78:3b:2e:c6:f4:21:07:
         ce:3c:95:e2:77:94:18:70:0e:c2:60:6e:a3:13:87:57:6b:df:
         ad:5b:f7:fc:ec:06:c6:da:bc:93:b4:27:a0:cf:0b:60:65:3d:
         14:19:ab:07:4f:60:b4:fb:cb:38:ed:8d:d8:24:2e:0c:44:49:
         6d:fc:26:c1:20:16:46:34:ab:65:04:70:0e:1d:45:a4:74:fc:
         58:25:6a:d1:3a:ab:ee:97:4d:0a:26:11:64:46:58:65:7f:1c:
         09:35:88:3a:e0:e3:57:72:03:b0:59:4d:76:08:58:44:0c:47:
         c2:19:92:61:f6:c7:90:21:d0:95:c4:15:b4:8d:fc:64:bd:8e:
         35:ca:27:97:3e:7e:3c:b9:c3:38:ac:83:30:02:19:13:b2:d2:
         15:7d:3a:2e:23:93:35:23:7b:7d:a9:6f:6e:20:9c:92:c9:9f:
         64:3e:00:02:cd:4c:15:af:78:df:ae:94:d6:21:15:8b:1b:8e:
         a3:ed:8a:51:e3:c5:bc:63:cf:2d:26:8b:cc:c8:cc:39:f9:4f:
         87:d8:0f:69
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUI1/wsDuFsT1qC7J2Vv1PXeBsnTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFNDM3OEE1RTBCMTYyOTg1MkJERDI1NTEzMDA3NkVE
ODQzRkQzMTAeFw0yNTAzMDYxODMwMzBaFw0yNjAzMDUxODM1MzBaMDMxMTAvBgNV
BAMTKERFM0IyREE4OTcwRTQ5NDM3NDQzOUNCOENBRDQ4M0UzODNBNUQ2RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GxFYIljDwDgzAwzrEG/E49dF
QTMrgHBWvtncdDpMEFEP0R4C6DP6+KN6O0IMTFDbwfDY82s/bMD5YSC+MIApipfF
TrbkcJ1P/d+g/xIz6bfI3j7e/ieVwzHU9G0Iva9gImwB1rJDdwZFATlwkTGoTw6s
JMzpmFLsG50qF/aQmS93PuxwTrci9BZbQwctNgqiYVuerwLz8GZosse6h4yZrPcr
E8N0kRS8LhXRhMnLdyFiqiXZPwW9NIv7CwIe/eGAdO/SJvurg9mWRUjDI9yK6fnD
6ampKLDDjdEkn164k+3t7xCnDsqYSKhgiejhS1ud1mDA5Z7sb2BcvBDR2PDdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3jstqJcOSUN0Q5y4ytSD44Ol1uowHwYDVR0j
BBgwFoAUW+Q3il4LFimFK90lUTAHbthD/TEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFQ5WUNGVjJoTXF5dkdNNUtWSHVuR3lyamdiWFBVTXBXaEhMUEp6YmRo
QzMvMS81QkU0Mzc4QTVFMEIxNjI5ODUyQkREMjU1MTMwMDc2RUQ4NDNGRDMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTQzNzhBNUUwQjE2Mjk4
NTJCREQyNTUxMzAwNzZFRDg0M0ZEMzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUOVlDRlYyaE1xeXZHTTVLVkh1bkd5cmpnYlhQVU1wV2hITFBKemJkaEMzLzEv
MzIzODMwMzQzYTM0NjU2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARO2DANBgkqhkiG9w0BAQsFAAOCAQEAbF5FhF1w
mL8vHz7KPA7D3xiYWUE3uT74fvAuP1/eOkF3QBQAiZBJsTW33gj2Cmd4Oy7G9CEH
zjyV4neUGHAOwmBuoxOHV2vfrVv3/OwGxtq8k7QnoM8LYGU9FBmrB09gtPvLOO2N
2CQuDERJbfwmwSAWRjSrZQRwDh1FpHT8WCVq0Tqr7pdNCiYRZEZYZX8cCTWIOuDj
V3IDsFlNdghYRAxHwhmSYfbHkCHQlcQVtI38ZL2ONconlz5+PLnDOKyDMAIZE7LS
FX06LiOTNSN7falvbiCcksmfZD4AAs1MFa94366U1iEVixuOo+2KUePFvGPPLSaL
zMjMOflPh9gPaQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:49:21 2025 by rpki-client