Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa
File:                     323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa (raw, json)
Hash identifier:          iFIQSty9luspMmhO0XdCK4OkAZy5vmXw9WgCP0gReSc=
Subject key identifier:   C5:19:66:0D:44:D8:74:E0:F8:8B:DB:7A:6B:45:B8:FC:D2:4A:41:B7
Certificate issuer:       /CN=8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822
Certificate serial:       1261154FA55A2CC367A84CFDF945EE68449925CC
Authority key identifier: 8D:D8:D7:38:AA:0E:AA:0C:2D:24:2A:7B:B2:DF:31:E3:2A:41:B8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa
Signing time:             Tue 18 Feb 2025 18:03:44 +0000
ROA not before:           Tue 18 Feb 2025 17:58:44 +0000
ROA not after:            Tue 17 Feb 2026 18:03:44 +0000
asID:                     273704
IP address blocks:        2804:8af8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:61:15:4f:a5:5a:2c:c3:67:a8:4c:fd:f9:45:ee:68:44:99:25:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822
        Validity
            Not Before: Feb 18 17:58:44 2025 GMT
            Not After : Feb 17 18:03:44 2026 GMT
        Subject: CN=C519660D44D874E0F88BDB7A6B45B8FCD24A41B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:62:67:99:ba:6c:29:b9:6c:0f:3b:85:a1:
                    63:16:a3:7f:b8:ba:89:5d:7e:fa:34:86:9b:5c:ee:
                    dd:4e:5e:b4:e3:6b:9e:8f:95:99:fd:d1:5e:ad:6f:
                    ab:39:64:0d:94:1d:61:ec:fd:02:e3:8e:93:a9:b9:
                    94:65:2b:73:6c:13:31:ee:fb:e3:db:db:d5:eb:cf:
                    27:87:41:8c:c8:3e:64:7e:1a:17:9d:7d:b0:54:5d:
                    25:f9:0d:51:60:e4:f6:58:e0:dd:42:bf:72:c7:a2:
                    d5:4c:fb:eb:85:0d:e9:17:2b:c7:b7:41:5a:38:2e:
                    06:37:6d:7d:10:e3:43:73:00:c8:d0:e6:50:f4:03:
                    a1:fd:0a:0b:83:1c:af:f6:76:3b:2d:97:e1:46:24:
                    de:d5:a2:f9:80:eb:e2:10:57:1f:a2:92:3d:21:e0:
                    a5:e3:df:74:c0:3e:31:93:14:d2:d1:22:5c:72:d4:
                    ee:14:5d:83:cd:e2:46:0f:2d:6b:89:d4:2c:9e:ce:
                    9e:53:fe:33:1f:8a:2f:a8:c2:9c:43:5f:7d:0b:61:
                    4e:de:53:60:d2:51:47:4b:3c:4e:a1:51:0c:73:eb:
                    57:9e:a4:dc:97:f1:7a:1f:13:9d:d7:7d:6d:49:52:
                    35:2e:09:fb:cd:23:ce:c2:2c:70:a1:c6:20:c6:49:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:19:66:0D:44:D8:74:E0:F8:8B:DB:7A:6B:45:B8:FC:D2:4A:41:B7
            X509v3 Authority Key Identifier:
                keyid:8D:D8:D7:38:AA:0E:AA:0C:2D:24:2A:7B:B2:DF:31:E3:2A:41:B8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:ad:94:d7:5f:69:d9:65:56:10:17:18:7a:e2:6e:88:3d:
         c6:90:2e:6c:27:10:67:1c:4f:0e:94:d2:bf:62:71:d7:9c:05:
         7d:8f:d4:fa:cd:46:15:7f:22:c0:98:4f:65:93:58:26:7f:fc:
         e8:8f:3b:da:88:3b:97:13:0c:4a:52:1d:7c:5a:2c:03:78:c2:
         1e:09:c0:af:b8:4d:08:4e:cb:44:4d:9f:64:4e:cb:83:03:99:
         54:f0:64:24:ed:c2:c4:f4:37:c7:77:73:b9:c4:0b:9e:20:a6:
         82:c2:32:1d:9b:1c:6f:ec:15:9f:11:87:72:92:ec:4f:f3:9e:
         46:0c:72:e1:a3:b3:cb:1c:09:f9:f1:2a:3f:c7:02:e0:c9:a9:
         e0:30:a3:84:c4:25:4e:7d:ef:6f:ab:a0:22:05:1b:ca:1b:b8:
         30:6e:1e:24:c9:96:d9:ca:50:17:e1:fc:17:51:fa:ec:25:2e:
         2a:3a:99:db:a8:53:f6:8f:0b:72:bb:7a:86:f3:a4:41:43:26:
         be:08:fd:45:14:f9:ee:36:2d:77:09:61:4d:de:ed:06:79:3d:
         14:4d:89:9d:a1:50:f7:d3:f3:72:60:47:fc:38:87:b0:56:dc:
         06:c0:f2:de:3a:c5:b6:c5:7a:40:47:06:00:12:a6:8c:ea:7b:
         30:e7:ce:a1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEmEVT6VaLMNnqEz9+UXuaESZJcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEREOEQ3MzhBQTBFQUEwQzJEMjQyQTdCQjJERjMxRTMy
QTQxQjgyMjAeFw0yNTAyMTgxNzU4NDRaFw0yNjAyMTcxODAzNDRaMDMxMTAvBgNV
BAMTKEM1MTk2NjBENDREODc0RTBGODhCREI3QTZCNDVCOEZDRDI0QTQxQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tGJnmbpsKblsDzuFoWMWo3+4
uoldfvo0hptc7t1OXrTja56PlZn90V6tb6s5ZA2UHWHs/QLjjpOpuZRlK3NsEzHu
++Pb29XrzyeHQYzIPmR+GhedfbBUXSX5DVFg5PZY4N1Cv3LHotVM++uFDekXK8e3
QVo4LgY3bX0Q40NzAMjQ5lD0A6H9CguDHK/2djstl+FGJN7VovmA6+IQVx+ikj0h
4KXj33TAPjGTFNLRIlxy1O4UXYPN4kYPLWuJ1Cyezp5T/jMfii+owpxDX30LYU7e
U2DSUUdLPE6hUQxz61eepNyX8XofE53XfW1JUjUuCfvNI87CLHChxiDGSXdNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUxRlmDUTYdOD4i9t6a0W4/NJKQbcwHwYDVR0j
BBgwFoAUjdjXOKoOqgwtJCp7st8x4ypBuCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC84REQ4RDczOEFBMEVBQTBDMkQyNDJBN0JCMkRGMzFFMzJBNDFCODIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERDhENzM4QUEwRUFBMEMy
RDI0MkE3QkIyREYzMUUzMkE0MUI4MjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOVluY0pGbW94ajVQS3hKQzFEbnhzc0tXSjhBaFlKWTNMWmtFS0JHVlhqLzAv
MzIzODMwMzQzYTM4NjE2NjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMzM3MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEiviAMA0GCSqGSIb3DQEBCwUA
A4IBAQB0Ta2U119p2WVWEBcYeuJuiD3GkC5sJxBnHE8OlNK/YnHXnAV9j9T6zUYV
fyLAmE9lk1gmf/zojzvaiDuXEwxKUh18WiwDeMIeCcCvuE0ITstETZ9kTsuDA5lU
8GQk7cLE9DfHd3O5xAueIKaCwjIdmxxv7BWfEYdykuxP855GDHLho7PLHAn58So/
xwLgyangMKOExCVOfe9vq6AiBRvKG7gwbh4kyZbZylAX4fwXUfrsJS4qOpnbqFP2
jwtyu3qG86RBQya+CP1FFPnuNi13CWFN3u0GeT0UTYmdoVD30/NyYEf8OIewVtwG
wPLeOsW2xXpARwYAEqaM6nsw586h
-----END CERTIFICATE-----
Generated at Sat Mar 8 03:28:31 2025 by rpki-client on console.sobornost.net