Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa
File:                     323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa (raw, json)
Hash identifier:          T3xe6C0QTLg48F90QdUP0+GSnUOTDN48qK2ny7XvDIg=
Subject key identifier:   A5:3F:30:F4:02:91:C6:0F:6A:BF:88:9F:E6:E0:E7:9E:E1:E2:EA:AD
Certificate issuer:       /CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Certificate serial:       CA2605D09E30B251C6D90EDB3F2B259C34C8EE
Authority key identifier: 68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa
Signing time:             Tue 25 Mar 2025 20:35:29 +0000
ROA not before:           Tue 25 Mar 2025 20:30:29 +0000
ROA not after:            Tue 24 Mar 2026 20:35:29 +0000
asID:                     264862
IP address blocks:        2804:2ef0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:26:05:d0:9e:30:b2:51:c6:d9:0e:db:3f:2b:25:9c:34:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
        Validity
            Not Before: Mar 25 20:30:29 2025 GMT
            Not After : Mar 24 20:35:29 2026 GMT
        Subject: CN=A53F30F40291C60F6ABF889FE6E0E79EE1E2EAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:e5:9c:29:99:02:7b:fa:04:34:99:4f:fa:
                    a7:1e:f1:17:78:13:e2:b9:e5:6a:a9:6f:1a:6f:a8:
                    40:69:4d:07:d0:79:48:ad:18:82:ba:a3:c6:53:22:
                    25:15:ec:c4:5c:ea:d1:5c:99:e7:22:62:e4:fc:d2:
                    0c:6d:c8:c0:14:62:53:da:31:99:f5:4c:9c:4f:fe:
                    ae:32:0c:cf:f9:d5:75:96:94:ac:36:6d:12:33:c8:
                    fe:e3:d9:25:4d:6c:37:b0:ea:1a:1b:88:91:3c:94:
                    ce:b0:b8:6a:8e:32:6f:fa:6d:08:55:14:b1:b2:3f:
                    24:74:de:c1:80:a9:89:87:63:07:fd:cb:f0:a7:e2:
                    1e:7b:53:86:ce:e8:ce:4e:c1:ad:a2:df:a9:cd:42:
                    e7:e9:30:dd:bf:d5:f2:3e:75:76:3a:e8:57:b0:f0:
                    f4:c4:f4:fa:56:ed:12:41:f6:90:58:73:1a:47:8d:
                    4e:ba:a6:35:04:16:cf:9c:bd:11:05:f5:ae:4c:01:
                    67:57:4f:18:20:32:1f:61:7b:9b:69:8b:88:0a:ff:
                    3e:29:b5:e6:9d:eb:82:d2:da:74:d2:59:1f:94:4e:
                    62:56:f8:f3:83:d7:2c:4b:74:e4:93:33:16:32:01:
                    c6:46:33:00:a5:3e:61:e7:8e:cb:df:c5:56:e0:23:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3F:30:F4:02:91:C6:0F:6A:BF:88:9F:E6:E0:E7:9E:E1:E2:EA:AD
            X509v3 Authority Key Identifier:
                keyid:68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ef0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:53:fe:eb:b9:7e:7a:95:37:ab:06:a7:5b:9e:95:1c:3e:f3:
         8b:71:d2:3d:4f:15:d7:db:5c:55:29:62:8a:8e:27:2a:e6:62:
         02:a5:a0:8b:95:9c:45:a6:bd:a7:2b:0d:65:f6:b7:26:63:51:
         54:38:4e:fa:fe:9c:5e:e7:76:89:bc:1f:46:6c:92:48:2d:0c:
         a2:37:ff:4c:28:28:d9:c9:2a:c2:5b:3f:23:33:4c:2d:08:04:
         f8:0b:4a:e4:62:5a:eb:25:14:85:15:5c:c1:c7:bc:88:a4:72:
         bb:8e:f2:be:ec:ec:25:cc:dd:19:a9:eb:e7:a7:52:c6:13:37:
         5f:1e:61:8f:cf:2d:14:19:34:23:a6:36:22:44:11:8a:3b:9c:
         2d:5d:72:3a:2f:74:14:e2:c2:8f:10:a6:2a:71:10:59:21:53:
         2d:a9:03:05:35:2f:5c:24:73:e8:c5:1f:6e:8f:4d:ca:9d:d2:
         e5:5c:f5:b8:49:d4:a0:22:38:e9:26:59:32:46:a4:05:7a:08:
         8e:3c:3f:17:34:f3:b1:8d:00:4e:42:9a:66:41:f5:ec:5b:d2:
         a4:e3:48:7c:c4:b3:fd:4c:a5:71:95:29:ca:5f:1b:5d:ee:ce:
         1a:3f:37:a3:94:c4:a0:21:23:a5:10:2f:05:a2:a8:14:3c:cc:
         d9:7a:57:5d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAMomBdCeMLJRxtkO2z8rJZw0yO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg5OTBFNjEwMEQyRkYwQTAwMTQ2NzQzRjZENzQzQzNB
M0M3OTQ0QjAeFw0yNTAzMjUyMDMwMjlaFw0yNjAzMjQyMDM1MjlaMDMxMTAvBgNV
BAMTKEE1M0YzMEY0MDI5MUM2MEY2QUJGODg5RkU2RTBFNzlFRTFFMkVBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+eWcKZkCe/oENJlP+qce8Rd4
E+K55WqpbxpvqEBpTQfQeUitGIK6o8ZTIiUV7MRc6tFcmeciYuT80gxtyMAUYlPa
MZn1TJxP/q4yDM/51XWWlKw2bRIzyP7j2SVNbDew6hobiJE8lM6wuGqOMm/6bQhV
FLGyPyR03sGAqYmHYwf9y/Cn4h57U4bO6M5Owa2i36nNQufpMN2/1fI+dXY66Few
8PTE9PpW7RJB9pBYcxpHjU66pjUEFs+cvREF9a5MAWdXTxggMh9he5tpi4gK/z4p
tead64LS2nTSWR+UTmJW+POD1yxLdOSTMxYyAcZGMwClPmHnjsvfxVbgIwLFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpT8w9AKRxg9qv4if5uDnnuHi6q0wHwYDVR0j
BBgwFoAUaJkOYQDS/woAFGdD9tdDw6PHlEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldX
Y20vMC82ODk5MEU2MTAwRDJGRjBBMDAxNDY3NDNGNkQ3NDNDM0EzQzc5NDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OTkwRTYxMDBEMkZGMEEw
MDE0Njc0M0Y2RDc0M0MzQTNDNzk0NEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhHWGNoMm5vQmRrR2tqaE5NOW11Z1JzZ2FrcEs5RHB0SGZRamNINkZXV2NtLzAv
MzIzODMwMzQzYTMyNjU2NjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDM4MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygELvCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAuU/7ruX56lTerBqdbnpUcPvOLcdI9TxXX21xVKWKKjicq5mICpaCLlZxF
pr2nKw1l9rcmY1FUOE76/pxe53aJvB9GbJJILQyiN/9MKCjZySrCWz8jM0wtCAT4
C0rkYlrrJRSFFVzBx7yIpHK7jvK+7OwlzN0Zqevnp1LGEzdfHmGPzy0UGTQjpjYi
RBGKO5wtXXI6L3QU4sKPEKYqcRBZIVMtqQMFNS9cJHPoxR9uj03KndLlXPW4SdSg
IjjpJlkyRqQFegiOPD8XNPOxjQBOQppmQfXsW9Kk40h8xLP9TKVxlSnKXxtd7s4a
PzejlMSgISOlEC8FoqgUPMzZeldd
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net