Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a383030303a3a2f33332d3634203d3e20323636393234.roa
File:                     323830343a343536383a383030303a3a2f33332d3634203d3e20323636393234.roa (raw, json)
Hash identifier:          IqYPO+s6AoIEYKVXDt/2huTIDbAc0YGVLQNFwNddg7c=
Subject key identifier:   73:D4:D0:74:C0:69:F0:DD:62:7E:D4:74:60:B8:96:B6:1C:BA:98:3B
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       7F9D9A22909DB1CC4E02A8C3E9401C5E9ED4E47D
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a383030303a3a2f33332d3634203d3e20323636393234.roa
Signing time:             Wed 04 Dec 2024 16:46:10 +0000
ROA not before:           Wed 04 Dec 2024 16:41:10 +0000
ROA not after:            Wed 03 Dec 2025 16:46:10 +0000
asID:                     266924
IP address blocks:        2804:4568:8000::/33 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9d:9a:22:90:9d:b1:cc:4e:02:a8:c3:e9:40:1c:5e:9e:d4:e4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Dec  4 16:41:10 2024 GMT
            Not After : Dec  3 16:46:10 2025 GMT
        Subject: CN=73D4D074C069F0DD627ED47460B896B61CBA983B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:cb:5e:aa:0c:c0:fc:71:60:38:aa:9e:9a:
                    15:9c:60:b7:ae:54:7c:0c:b1:9a:84:2d:c0:19:16:
                    0c:ff:24:07:c1:c9:5d:0a:a5:26:aa:49:ae:fd:f4:
                    70:ed:24:93:dc:b6:36:03:db:b8:1b:9c:da:43:86:
                    d9:65:11:61:5f:20:2c:01:7a:a3:aa:20:06:51:f8:
                    fa:9a:02:98:37:77:04:ad:88:13:70:57:95:ef:20:
                    0d:42:3e:eb:99:f7:d1:7e:95:02:f2:21:0c:f7:11:
                    fc:02:1d:7f:f7:0f:28:e2:da:15:d7:d9:cd:18:55:
                    48:43:b6:70:da:47:81:c6:c3:54:85:1b:7a:3e:ef:
                    91:77:46:14:52:32:56:a0:18:41:ae:7d:85:19:58:
                    47:0f:cb:5c:cf:cf:ca:f9:0c:02:78:d0:ad:35:bf:
                    f7:43:4b:fa:74:3a:66:83:69:00:a2:6b:38:b7:01:
                    dd:26:5e:ec:b8:04:a0:db:08:f3:01:d8:6e:f0:57:
                    e3:1e:c0:4c:2d:68:a9:b7:f9:de:e0:53:b8:bc:85:
                    b2:a6:54:ef:a3:e0:d3:d1:d9:f9:59:76:85:13:3d:
                    15:40:ff:09:0c:6a:23:d2:b8:bd:ec:fa:d9:8e:3c:
                    ea:7a:b3:f7:31:ec:f5:2a:20:75:3b:37:bf:e0:fa:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D4:D0:74:C0:69:F0:DD:62:7E:D4:74:60:B8:96:B6:1C:BA:98:3B
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a383030303a3a2f33332d3634203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4568:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4c:69:8a:db:6c:4a:e8:9e:0c:6b:65:bc:2c:20:ad:df:af:7a:
         d5:8b:11:51:68:ca:b0:ad:d9:2d:5b:b7:3e:4c:b6:29:ef:2c:
         fd:53:28:5c:02:1c:9c:f1:0b:15:dd:79:02:7c:ec:2b:f6:53:
         6b:10:03:c0:f3:f5:fe:eb:76:6e:e1:fa:f7:1f:a9:07:37:bf:
         5a:c9:a8:c0:69:9f:b9:57:47:12:59:71:4d:0a:49:7e:6b:a7:
         6f:fe:1f:ef:d0:c6:df:81:68:d9:93:8b:1a:b5:9a:ef:1d:27:
         29:8b:a4:33:dc:f4:6a:1a:35:14:37:b9:b1:a3:93:6d:45:e6:
         a5:ca:2e:a8:aa:a2:35:2f:2b:09:3d:f9:69:b5:65:c9:3b:ad:
         8f:81:64:da:e0:8d:91:53:cf:b7:ed:a1:70:55:8a:e2:60:42:
         97:af:e7:22:bc:22:0f:5e:f5:48:13:ca:a1:0e:1d:44:3f:0c:
         cc:3a:3c:b5:44:cb:72:93:83:ea:ad:36:5b:37:30:93:cd:59:
         ed:27:ec:5d:22:c3:75:9e:68:ea:f9:51:3e:d8:b3:83:1f:b2:
         6a:45:18:ff:4c:5b:90:fa:a1:1d:bd:1b:a9:ea:b0:f8:28:86:
         dc:92:b2:88:c1:32:60:c0:4a:40:bd:07:14:99:bd:2e:46:b4:
         73:85:4e:0e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUf52aIpCdscxOAqjD6UAcXp7U5H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIzMzUzMzdDQkVCNTRCQkRDMEM1MUJBNDM0RjQ0MzlF
NzAwQzA1QTAeFw0yNDEyMDQxNjQxMTBaFw0yNTEyMDMxNjQ2MTBaMDMxMTAvBgNV
BAMTKDczRDREMDc0QzA2OUYwREQ2MjdFRDQ3NDYwQjg5NkI2MUNCQTk4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVsteqgzA/HFgOKqemhWcYLeu
VHwMsZqELcAZFgz/JAfByV0KpSaqSa799HDtJJPctjYD27gbnNpDhtllEWFfICwB
eqOqIAZR+PqaApg3dwStiBNwV5XvIA1CPuuZ99F+lQLyIQz3EfwCHX/3Dyji2hXX
2c0YVUhDtnDaR4HGw1SFG3o+75F3RhRSMlagGEGufYUZWEcPy1zPz8r5DAJ40K01
v/dDS/p0OmaDaQCiazi3Ad0mXuy4BKDbCPMB2G7wV+MewEwtaKm3+d7gU7i8hbKm
VO+j4NPR2flZdoUTPRVA/wkMaiPSuL3s+tmOPOp6s/cx7PUqIHU7N7/g+rlFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUc9TQdMBp8N1iftR0YLiWthy6mDswHwYDVR0j
BBgwFoAUizNTN8vrVLvcDFG6Q09EOecAwFowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9GYks4V2dZWEJBa0c4UEttZzRBY1Z1Q3VnQzRDd3k1eExHMmkzRVdT
RWMvMC84QjMzNTMzN0NCRUI1NEJCREMwQzUxQkE0MzRGNDQzOUU3MDBDMDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCMzM1MzM3Q0JFQjU0QkJE
QzBDNTFCQTQzNEY0NDM5RTcwMEMwNUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvRmJLOFdnWVhCQWtHOFBLbWc0QWNWdUN1Z0M0Q3d5NXhMRzJpM0VXU0VjLzAv
MzIzODMwMzQzYTM0MzUzNjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDM2MzQyMDNk
M2UyMDMyMzYzNjM5MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygERWiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBMaYrbbErongxrZbwsIK3fr3rVixFRaMqwrdktW7c+TLYp7yz9UyhcAhyc
8QsV3XkCfOwr9lNrEAPA8/X+63Zu4fr3H6kHN79ayajAaZ+5V0cSWXFNCkl+a6dv
/h/v0MbfgWjZk4satZrvHScpi6Qz3PRqGjUUN7mxo5NtRealyi6oqqI1LysJPflp
tWXJO62PgWTa4I2RU8+37aFwVYriYEKXr+civCIPXvVIE8qhDh1EPwzMOjy1RMty
k4PqrTZbNzCTzVntJ+xdIsN1nmjq+VE+2LODH7JqRRj/TFuQ+qEdvRup6rD4KIbc
krKIwTJgwEpAvQcUmb0uRrRzhU4O
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:16:24 2025 by rpki-client