Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/323830343a343263343a653030373a3a2f34382d3438203d3e20323637353234.roa
File:                     323830343a343263343a653030373a3a2f34382d3438203d3e20323637353234.roa (raw, json)
Hash identifier:          cifiCTfCnm6XxLzj78p3/s9oiKfqq/HBoEv9v0frbOU=
Subject key identifier:   6A:92:D2:44:F0:48:67:DF:58:44:07:30:B2:AE:22:7A:36:4D:26:58
Certificate issuer:       /CN=5489051296CE799761D50A1125A05964C2356CDC
Certificate serial:       1444B93B16EE3D2BB0A1EA9CE102D199A14984F7
Authority key identifier: 54:89:05:12:96:CE:79:97:61:D5:0A:11:25:A0:59:64:C2:35:6C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5489051296CE799761D50A1125A05964C2356CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/323830343a343263343a653030373a3a2f34382d3438203d3e20323637353234.roa
Signing time:             Tue 12 Oct 2021 02:00:01 +0000
ROA not before:           Tue 12 Oct 2021 01:55:01 +0000
ROA not after:            Tue 11 Oct 2022 02:00:01 +0000
asID:                     267524
IP address blocks:        2804:42c4:e007::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:44:b9:3b:16:ee:3d:2b:b0:a1:ea:9c:e1:02:d1:99:a1:49:84:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5489051296CE799761D50A1125A05964C2356CDC
        Validity
            Not Before: Oct 12 01:55:01 2021 GMT
            Not After : Oct 11 02:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:ac:8f:38:b4:c2:8f:b3:05:a9:18:ee:c1:
                    49:08:03:a1:5a:48:d3:15:31:7a:bb:cd:28:08:5f:
                    b5:d2:d2:84:96:c4:a1:6b:42:58:25:5f:cb:c7:ff:
                    c4:cc:09:05:32:4e:ac:c9:7d:26:6e:60:16:31:d2:
                    df:72:48:ec:4d:44:78:a1:f6:c6:f6:c1:ec:a0:2f:
                    47:71:6a:9a:bb:dd:57:e4:2c:aa:0e:4d:af:17:eb:
                    12:fd:88:21:26:2e:4d:a1:ca:23:04:ef:b6:cd:8a:
                    8a:02:86:6e:3b:26:3b:a1:3e:59:8a:0c:fc:95:8d:
                    84:69:45:34:0a:64:b0:f4:f9:cb:c4:88:01:ca:e1:
                    cb:9d:03:54:75:57:30:46:aa:bb:86:f3:b5:d0:d8:
                    81:26:60:d3:6d:dd:15:80:c8:a5:da:ad:7a:5d:de:
                    43:ad:55:66:e5:94:6e:f1:32:8c:7b:3b:ab:66:62:
                    ff:67:67:35:1c:c4:07:c9:4b:3d:9b:f3:bb:dc:d6:
                    7a:af:f1:41:84:61:ad:6f:df:9d:6e:cd:72:7f:14:
                    77:80:ff:65:b3:44:7c:67:e8:4f:41:e2:9a:d5:5c:
                    0f:36:a7:12:7b:41:e8:b2:63:f6:d8:dc:3a:7d:f8:
                    28:f4:23:d5:9d:65:7e:02:ab:23:62:73:63:4c:6d:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:92:D2:44:F0:48:67:DF:58:44:07:30:B2:AE:22:7A:36:4D:26:58
            X509v3 Authority Key Identifier:
                keyid:54:89:05:12:96:CE:79:97:61:D5:0A:11:25:A0:59:64:C2:35:6C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/5489051296CE799761D50A1125A05964C2356CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5489051296CE799761D50A1125A05964C2356CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/323830343a343263343a653030373a3a2f34382d3438203d3e20323637353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42c4:e007::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:af:54:7b:01:17:db:43:d9:66:bf:ee:5a:c2:a7:85:bf:d8:
         ce:c4:58:51:b1:e9:06:1a:5c:77:1e:2a:88:94:c4:72:42:13:
         a2:49:46:3f:57:4c:8a:15:90:5c:63:2a:7f:e8:16:7c:66:53:
         3c:35:dd:e8:be:d3:08:c7:22:69:d9:22:b3:28:3d:90:b8:14:
         b3:28:f3:b4:8f:35:3a:47:20:c5:39:a4:56:36:16:22:d6:ef:
         f6:eb:55:62:1e:8b:15:1b:2a:bf:ec:bc:83:d5:60:8b:42:0a:
         f0:f4:79:43:a5:7c:c0:b5:07:ac:12:83:8d:53:79:1d:71:9f:
         1b:5f:1d:e7:87:7e:70:3d:57:9a:b3:c3:c9:d0:72:00:3a:45:
         be:d0:bc:aa:b0:3e:53:6f:f0:79:ec:be:f7:84:59:96:54:6f:
         30:7f:31:dd:e6:4d:20:a2:1c:21:a3:00:fc:39:3a:67:2a:0e:
         30:7a:c6:82:c0:a1:08:fc:99:75:56:4f:7b:8b:c2:70:28:b8:
         cc:fa:4e:70:3d:39:4c:64:63:d2:b4:d5:54:ff:bd:c2:7f:c7:
         10:39:7e:51:ab:10:ea:99:51:a9:06:62:a2:b1:88:f5:6d:1d:
         2c:8e:de:a2:26:1b:1f:8d:e4:10:51:e4:4c:47:70:43:4b:2d:
         08:d3:1d:62
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUFES5OxbuPSuwoeqc4QLRmaFJhPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ4OTA1MTI5NkNFNzk5NzYxRDUwQTExMjVBMDU5NjRD
MjM1NkNEQzAeFw0yMTEwMTIwMTU1MDFaFw0yMjEwMTEwMjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUVCMkFDOEYzOEI0QzI4RkIz
MDVBOTE4RUVDMTQ5MDgwM0ExNUE0OEQzMTUzMTdBQkJDRDI4MDg1RkI1RDJEMjg0
OTZDNEExNkI0MjU4MjU1RkNCQzdGRkM0Q0MwOTA1MzI0RUFDQzk3RDI2NkU2MDE2
MzFEMkRGNzI0OEVDNEQ0NDc4QTFGNkM2RjZDMUVDQTAyRjQ3NzE2QTlBQkJERDU3
RTQyQ0FBMEU0REFGMTdFQjEyRkQ4ODIxMjYyRTREQTFDQTIzMDRFRkI2Q0Q4QThB
MDI4NjZFM0IyNjNCQTEzRTU5OEEwQ0ZDOTU4RDg0Njk0NTM0MEE2NEIwRjRGOUNC
QzQ4ODAxQ0FFMUNCOUQwMzU0NzU1NzMwNDZBQUJCODZGM0I1RDBEODgxMjY2MEQz
NkRERDE1ODBDOEE1REFBRDdBNURERTQzQUQ1NTY2RTU5NDZFRjEzMjhDN0IzQkFC
NjY2MkZGNjc2NzM1MUNDNDA3Qzk0QjNEOUJGM0JCRENENjdBQUZGMTQxODQ2MUFE
NkZERjlENkVDRDcyN0YxNDc3ODBGRjY1QjM0NDdDNjdFODRGNDFFMjlBRDU1QzBG
MzZBNzEyN0I0MUU4QjI2M0Y2RDhEQzNBN0RGODI4RjQyM0Q1OUQ2NTdFMDJBQjIz
NjI3MzYzNEM2REZGRjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArrKsjzi0wo+zBakY7sFJCAOhWkjTFTF6u80oCF+10tKElsSha0JY
JV/Lx//EzAkFMk6syX0mbmAWMdLfckjsTUR4ofbG9sHsoC9HcWqau91X5CyqDk2v
F+sS/YghJi5NocojBO+2zYqKAoZuOyY7oT5Zigz8lY2EaUU0CmSw9PnLxIgByuHL
nQNUdVcwRqq7hvO10NiBJmDTbd0VgMil2q16Xd5DrVVm5ZRu8TKMezurZmL/Z2c1
HMQHyUs9m/O73NZ6r/FBhGGtb9+dbs1yfxR3gP9ls0R8Z+hPQeKa1VwPNqcSe0Ho
smP22Nw6ffgo9CPVnWV+AqsjYnNjTG3/8wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FGqS0kTwSGffWEQHMLKuIno2TSZYMB8GA1UdIwQYMBaAFFSJBRKWznmXYdUKESWg
WWTCNWzcMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdG5GMkh3UXFRWkt4emV1
R1ZBbzFQdHZYdldoaGlISmJ6NXJNbk4xS285Ui8wLzU0ODkwNTEyOTZDRTc5OTc2
MUQ1MEExMTI1QTA1OTY0QzIzNTZDREMuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvNTQ4OTA1MTI5NkNFNzk5NzYxRDUwQTExMjVBMDU5NjRDMjM1NkNE
Qy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdG5GMkh3UXFRWkt4emV1R1ZBbzFQ
dHZYdldoaGlISmJ6NXJNbk4xS285Ui8wLzMyMzgzMDM0M2EzNDMyNjMzNDNhNjUz
MDMwMzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczNTMyMzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoBELE4AcwDQYJKoZIhvcNAQELBQADggEBAACvVHsBF9tD2Wa/7lrCp4W/
2M7EWFGx6QYaXHceKoiUxHJCE6JJRj9XTIoVkFxjKn/oFnxmUzw13ei+0wjHImnZ
IrMoPZC4FLMo87SPNTpHIMU5pFY2FiLW7/brVWIeixUbKr/svIPVYItCCvD0eUOl
fMC1B6wSg41TeR1xnxtfHeeHfnA9V5qzw8nQcgA6Rb7QvKqwPlNv8HnsvveEWZZU
bzB/Md3mTSCiHCGjAPw5OmcqDjB6xoLAoQj8mXVWT3uLwnAouMz6TnA9OUxkY9K0
1VT/vcJ/xxA5flGrEOqZUakGYqKxiPVtHSyO3qImGx+N5BBR5ExHcENLLQjTHWI=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:48 2025 by rpki-client