Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa
File:                     323830343a353865303a3a2f33322d3334203d3e20323638313535.roa (raw, json)
Hash identifier:          N/9E2CMvcKUaqbs7EoBP5TDnPm+9Eese09d6X2bjYdA=
Subject key identifier:   5E:53:8A:69:F8:BF:C4:E8:49:EA:B5:54:2A:9F:5D:A7:84:6E:C9:4C
Certificate issuer:       /CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
Certificate serial:       21E1182A08E02CFE1C66BFCFC812387738415C95
Authority key identifier: 09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa
Signing time:             Mon 08 Apr 2024 17:09:31 +0000
ROA not before:           Mon 08 Apr 2024 17:04:31 +0000
ROA not after:            Mon 07 Apr 2025 17:09:31 +0000
asID:                     268155
IP address blocks:        2804:58e0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e1:18:2a:08:e0:2c:fe:1c:66:bf:cf:c8:12:38:77:38:41:5c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
        Validity
            Not Before: Apr  8 17:04:31 2024 GMT
            Not After : Apr  7 17:09:31 2025 GMT
        Subject: CN=5E538A69F8BFC4E849EAB5542A9F5DA7846EC94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:b5:1c:a8:76:3b:7b:3a:69:e6:23:62:5f:
                    3e:2e:28:46:be:61:a2:93:d2:e8:fb:ee:9f:d8:bb:
                    62:98:53:54:84:fc:d8:c0:cc:71:4f:97:a6:56:be:
                    3f:3a:98:ca:66:90:52:80:02:fe:4c:ac:85:0e:37:
                    5e:a6:57:83:d7:2d:f1:dc:dd:a9:e8:43:fd:91:af:
                    f5:a1:13:24:86:b0:c6:1a:75:c4:54:1e:a7:a6:db:
                    f9:5d:05:7e:0c:fe:45:88:d9:24:a4:90:ba:68:d7:
                    43:27:9a:a9:da:ae:be:91:77:dc:bb:97:79:7a:f7:
                    b6:14:e8:87:35:de:d0:55:16:59:0e:7b:72:11:3a:
                    4d:83:00:9c:ca:17:41:22:76:72:24:27:18:bd:69:
                    e7:ba:16:60:e0:44:01:36:ad:cb:9c:d6:cc:39:7f:
                    5e:2b:73:2d:e2:8b:b8:22:15:67:f8:14:ca:09:89:
                    4e:ce:c3:3d:60:3a:d7:7f:55:25:6a:62:22:57:65:
                    ab:ab:6a:49:82:04:7e:57:8c:d6:34:8b:27:75:aa:
                    a5:a5:7a:72:67:54:f3:2d:dc:27:ce:1d:bd:48:39:
                    68:d0:01:46:87:2a:80:69:26:e9:06:a3:91:43:11:
                    8b:db:ad:dc:c2:97:9f:8e:e3:a9:51:69:bc:68:64:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:53:8A:69:F8:BF:C4:E8:49:EA:B5:54:2A:9F:5D:A7:84:6E:C9:4C
            X509v3 Authority Key Identifier:
                keyid:09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:65:29:91:6f:3f:df:59:ad:d0:7b:e3:e3:49:fd:e1:06:5b:
         66:ad:ad:96:f7:ba:62:59:5a:8e:dd:7e:e4:e2:20:51:5f:e4:
         b4:1a:48:3e:b1:b5:f3:ba:ea:4c:d9:c5:55:43:22:63:0c:2d:
         b1:ff:5a:df:72:35:02:ff:5e:a9:51:37:64:a9:ed:0b:9f:ba:
         0c:d7:74:57:1d:59:44:14:ca:97:a4:88:16:de:4c:2f:99:51:
         88:f1:9f:fa:5c:1d:35:18:56:8a:35:33:09:5d:99:38:aa:18:
         98:ad:1a:1b:a6:fc:89:cd:7d:c2:51:22:9e:3a:48:e8:34:e8:
         e4:7b:33:f5:4c:1f:1c:1a:10:d8:1f:0c:1b:d5:7c:63:04:85:
         f2:dc:f2:a5:d8:c2:17:d8:71:13:d0:eb:c7:ad:78:7d:c8:55:
         52:ac:3d:25:9e:5c:4a:ed:f9:7f:81:16:28:8f:7e:1f:69:00:
         8d:5e:31:c2:c5:a1:e6:6c:b7:38:75:f1:c9:13:f5:10:96:3a:
         a7:d8:56:7e:de:64:91:ff:27:0b:af:f5:52:a4:de:0b:d3:e8:
         57:0b:04:ab:d7:ae:15:6c:e3:e3:08:68:c9:ac:f9:ee:aa:0f:
         94:2c:e6:b6:45:db:20:0f:de:39:e7:e3:15:fc:4c:93:55:e3:
         bf:06:62:cd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIeEYKgjgLP4cZr/PyBI4dzhBXJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCODVGQTc3MjZCRERGNzE3ODI3RjNCMDZDQzVBMzEx
M0Q3RDIwMjAeFw0yNDA0MDgxNzA0MzFaFw0yNTA0MDcxNzA5MzFaMDMxMTAvBgNV
BAMTKDVFNTM4QTY5RjhCRkM0RTg0OUVBQjU1NDJBOUY1REE3ODQ2RUM5NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzC7UcqHY7ezpp5iNiXz4uKEa+
YaKT0uj77p/Yu2KYU1SE/NjAzHFPl6ZWvj86mMpmkFKAAv5MrIUON16mV4PXLfHc
3anoQ/2Rr/WhEySGsMYadcRUHqem2/ldBX4M/kWI2SSkkLpo10Mnmqnarr6Rd9y7
l3l697YU6Ic13tBVFlkOe3IROk2DAJzKF0EidnIkJxi9aee6FmDgRAE2rcuc1sw5
f14rcy3ii7giFWf4FMoJiU7Owz1gOtd/VSVqYiJXZaurakmCBH5XjNY0iyd1qqWl
enJnVPMt3CfOHb1IOWjQAUaHKoBpJukGo5FDEYvbrdzCl5+O46lRabxoZPRfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXlOKafi/xOhJ6rVUKp9dp4RuyUwwHwYDVR0j
BBgwFoAUCbhfp3Jr3fcXgn87BsxaMRPX0gIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgz
cnAvMS8wOUI4NUZBNzcyNkJEREY3MTc4MjdGM0IwNkNDNUEzMTEzRDdEMjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5Qjg1RkE3NzI2QkRERjcx
NzgyN0YzQjA2Q0M1QTMxMTNEN0QyMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR1UldUU1ZydDl3NVVDWUpUVnZLTVpjOUZFVlRxM3RIWlp5ajZETW5YM3JwLzEv
MzIzODMwMzQzYTM1Mzg2NTMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzEzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARY4DANBgkqhkiG9w0BAQsFAAOCAQEAc2UpkW8/
31mt0Hvj40n94QZbZq2tlve6Yllajt1+5OIgUV/ktBpIPrG187rqTNnFVUMiYwwt
sf9a33I1Av9eqVE3ZKntC5+6DNd0Vx1ZRBTKl6SIFt5ML5lRiPGf+lwdNRhWijUz
CV2ZOKoYmK0aG6b8ic19wlEinjpI6DTo5Hsz9UwfHBoQ2B8MG9V8YwSF8tzypdjC
F9hxE9Drx614fchVUqw9JZ5cSu35f4EWKI9+H2kAjV4xwsWh5my3OHXxyRP1EJY6
p9hWft5kkf8nC6/1UqTeC9PoVwsEq9euFWzj4whoyaz57qoPlCzmtkXbIA/eOefj
FfxMk1XjvwZizQ==
-----END CERTIFICATE-----
Generated at Wed May 7 04:26:00 2025 by rpki-client