Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030303a3a2f34382d3438203d3e203238313335.roa
File:                     323830343a38383a383030303a3a2f34382d3438203d3e203238313335.roa (raw, json)
Hash identifier:          UpAl3d9+gENTBH/Pm8+sGkVM/tQ5Wa3gWNTfVpWqafE=
Subject key identifier:   AD:BB:24:DA:CA:BB:CE:23:11:A0:40:6A:62:1A:CC:2E:D5:09:30:23
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       CF445312746EC93ABD5A9287B18F882A81C702
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030303a3a2f34382d3438203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:16 +0000
ROA not before:           Wed 13 Mar 2024 11:58:16 +0000
ROA not after:            Wed 12 Mar 2025 12:03:16 +0000
asID:                     28135
IP address blocks:        2804:88:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cf:44:53:12:74:6e:c9:3a:bd:5a:92:87:b1:8f:88:2a:81:c7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:16 2024 GMT
            Not After : Mar 12 12:03:16 2025 GMT
        Subject: CN=ADBB24DACABBCE2311A0406A621ACC2ED5093023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:5b:0e:06:18:36:16:6c:eb:b0:06:56:7a:
                    a8:98:ae:8f:c4:f3:42:f5:d6:8b:e6:f7:11:f3:d7:
                    bd:98:33:8f:b9:3a:82:42:70:71:9d:18:28:33:52:
                    5e:65:9e:e4:18:a8:63:3b:c7:11:a3:c1:99:d3:d3:
                    0f:75:83:09:84:9e:c1:68:02:d7:5d:86:ee:63:24:
                    76:c8:b2:17:f5:c5:87:c4:b0:85:72:f3:3e:fa:48:
                    88:fa:fd:30:98:3a:08:70:85:8b:92:1a:80:dd:14:
                    d8:ed:b1:d3:e2:a1:51:f7:e2:8e:dc:20:88:68:0b:
                    34:36:5c:4e:d0:e1:c4:40:09:6b:f6:62:c0:b6:42:
                    de:ac:42:66:73:62:4b:91:f4:a1:b4:f4:e6:b4:ea:
                    4a:15:8e:d9:4d:15:4a:9f:a7:56:82:39:99:b6:3a:
                    9b:72:a4:c1:a1:45:8b:b5:18:30:62:fb:f5:f9:80:
                    72:aa:46:d8:51:1b:02:e2:da:bc:48:27:6d:61:99:
                    0d:c5:ef:89:d1:34:8a:09:77:bb:e7:e3:ac:14:94:
                    11:f1:cb:91:19:87:44:40:c7:43:9c:a4:a1:ab:82:
                    83:c6:a2:f2:ac:8a:87:90:a7:1b:65:e6:a0:d9:c7:
                    a8:f8:6d:25:b4:97:c3:7c:eb:56:57:a9:f4:2b:b9:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BB:24:DA:CA:BB:CE:23:11:A0:40:6A:62:1A:CC:2E:D5:09:30:23
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030303a3a2f34382d3438203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:c1:f9:b0:9b:12:76:42:e8:7c:2f:8d:a4:c1:25:6c:80:
         11:6a:6e:39:85:dd:49:f8:be:f7:97:81:a0:d3:c8:2b:16:45:
         f9:2e:01:db:1c:57:38:88:1b:3b:44:65:d4:d4:ba:b4:3d:a5:
         ec:a8:6e:68:c1:da:f3:3d:c2:82:a3:a5:ce:fd:d7:9f:15:5f:
         f1:0c:a0:f3:1f:52:4d:0b:79:1f:cc:22:52:b6:78:5a:ff:23:
         29:30:36:b7:22:2e:2b:fc:58:9a:18:47:37:88:c7:cd:24:d7:
         aa:1e:83:f3:35:c8:1e:e0:5d:ca:36:b8:4d:eb:df:dd:21:bb:
         c2:3e:ad:8b:f6:b8:f2:7b:e9:bd:31:4a:98:9a:75:0a:f0:45:
         72:3e:09:6c:5d:5e:fa:8e:d0:c6:0c:e0:2b:05:29:fc:18:84:
         32:3d:9f:99:4d:d6:40:1a:01:5b:86:cd:53:58:40:af:25:a3:
         89:b8:c0:19:1b:f2:f2:fe:fa:cb:c2:4d:d0:1d:2b:4e:ed:a5:
         db:65:1d:4e:ae:4b:4b:63:07:ef:e6:b3:44:ba:60:e1:d5:76:
         5d:ba:82:de:96:9c:2c:8a:45:b0:5a:00:aa:7e:ca:97:3d:93:
         bc:a9:7d:43:e1:c8:d0:5d:0b:22:b3:6a:5f:5f:44:46:ab:3c:
         43:45:86:b0
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUAM9EUxJ0bsk6vVqSh7GPiCqBxwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yNDAzMTMxMTU4MTZaFw0yNTAzMTIxMjAzMTZaMDMxMTAvBgNV
BAMTKEFEQkIyNERBQ0FCQkNFMjMxMUEwNDA2QTYyMUFDQzJFRDUwOTMwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYFsOBhg2FmzrsAZWeqiYro/E
80L11ovm9xHz172YM4+5OoJCcHGdGCgzUl5lnuQYqGM7xxGjwZnT0w91gwmEnsFo
Atddhu5jJHbIshf1xYfEsIVy8z76SIj6/TCYOghwhYuSGoDdFNjtsdPioVH34o7c
IIhoCzQ2XE7Q4cRACWv2YsC2Qt6sQmZzYkuR9KG09Oa06koVjtlNFUqfp1aCOZm2
OptypMGhRYu1GDBi+/X5gHKqRthRGwLi2rxIJ21hmQ3F74nRNIoJd7vn46wUlBHx
y5EZh0RAx0OcpKGrgoPGovKsioeQpxtl5qDZx6j4bSW0l8N861ZXqfQruXXDAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUrbsk2sq7ziMRoEBqYhrMLtUJMCMwHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzIzODMwMzQzYTM4MzgzYTM4MzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzODMxMzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEAIiAADANBgkqhkiG9w0BAQsFAAOCAQEA
fM/B+bCbEnZC6HwvjaTBJWyAEWpuOYXdSfi+95eBoNPIKxZF+S4B2xxXOIgbO0Rl
1NS6tD2l7KhuaMHa8z3CgqOlzv3XnxVf8Qyg8x9STQt5H8wiUrZ4Wv8jKTA2tyIu
K/xYmhhHN4jHzSTXqh6D8zXIHuBdyja4Tevf3SG7wj6ti/a48nvpvTFKmJp1CvBF
cj4JbF1e+o7QxgzgKwUp/BiEMj2fmU3WQBoBW4bNU1hAryWjibjAGRvy8v76y8JN
0B0rTu2l22UdTq5LS2MH7+azRLpg4dV2XbqC3pacLIpFsFoAqn7Klz2TvKl9Q+HI
0F0LIrNqX19ERqs8Q0WGsA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:42:29 2025 by rpki-client