Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33322d3333203d3e20323636393234.roa
File:                     323830343a343536383a3a2f33322d3333203d3e20323636393234.roa (raw, json)
Hash identifier:          oHzhtrrBpZtFBRqK+gE6zvHm7vswq0S/bokgiom8oNM=
Subject key identifier:   04:8E:90:8C:31:4D:E2:6E:ED:8B:3E:9B:FF:EB:00:D9:15:69:5C:26
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       1E1397AAC30C50EB52922BDAF73D9E323ECAE3EE
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33322d3333203d3e20323636393234.roa
Signing time:             Wed 04 Dec 2024 16:46:26 +0000
ROA not before:           Wed 04 Dec 2024 16:41:26 +0000
ROA not after:            Wed 03 Dec 2025 16:46:26 +0000
asID:                     266924
IP address blocks:        2804:4568::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:13:97:aa:c3:0c:50:eb:52:92:2b:da:f7:3d:9e:32:3e:ca:e3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Dec  4 16:41:26 2024 GMT
            Not After : Dec  3 16:46:26 2025 GMT
        Subject: CN=048E908C314DE26EED8B3E9BFFEB00D915695C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:02:6a:f5:d3:ba:67:b5:b6:c9:0d:48:f2:8b:
                    85:cc:0e:f2:1e:7b:8d:9f:f5:ed:76:f8:b9:63:be:
                    79:0e:1d:6d:40:8e:80:12:60:6d:b3:85:a4:cd:16:
                    4f:57:db:b0:9d:bd:8c:3f:0b:40:f8:4f:21:bd:0e:
                    8f:87:83:f2:82:8b:cf:1c:95:57:2b:fe:6a:4f:23:
                    73:3c:2a:b3:2b:b6:17:7e:55:a0:b3:32:3b:73:94:
                    ea:70:8a:25:69:74:22:54:09:d3:00:df:71:fc:87:
                    4a:c6:7e:88:4e:89:9d:7b:68:d8:7c:cc:7b:59:94:
                    d5:7c:b7:20:0d:f3:7f:82:69:70:20:d8:aa:f5:e6:
                    b6:67:45:72:f3:38:48:1c:9f:6a:d0:53:c5:58:50:
                    54:a3:96:94:bc:65:42:47:b3:c5:2e:cf:fe:c2:d0:
                    e7:f9:6e:b5:1a:30:78:9a:51:a0:69:70:d0:08:2b:
                    bd:ae:08:38:52:9a:c3:13:a2:c0:fe:1b:0e:73:63:
                    ab:32:81:f0:71:ce:c5:8f:ad:16:75:cd:79:18:e3:
                    be:5b:27:c8:5a:f8:ba:86:e0:7e:5b:d8:dd:d3:fe:
                    cf:cf:df:2d:14:d9:38:64:2d:85:dc:fd:64:0c:f9:
                    80:c3:74:45:ff:57:c1:e2:6f:b6:fc:39:7d:bb:b6:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8E:90:8C:31:4D:E2:6E:ED:8B:3E:9B:FF:EB:00:D9:15:69:5C:26
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33322d3333203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4568::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:5f:b6:8f:7e:92:55:02:a5:24:6a:8b:5b:ee:68:b7:5e:
         91:80:62:3e:8b:12:f4:f5:12:55:23:b4:e2:e1:cc:8a:88:11:
         d6:81:20:fe:1f:9e:00:a7:3b:1b:ec:b2:0b:bf:ff:be:0f:bf:
         60:23:a9:90:75:a7:4c:08:6e:47:bb:da:bc:54:6f:b6:0c:a6:
         fe:66:77:42:3a:52:90:29:0a:74:37:8a:86:9e:f7:9f:8a:09:
         ad:3c:a6:4c:f0:a7:5c:85:31:8b:34:d0:d0:66:0b:cf:3c:99:
         c0:c2:fd:b6:78:8f:0d:33:0b:2f:4f:83:41:a1:96:50:13:51:
         33:02:c2:8f:f5:67:2c:49:ba:4d:c9:47:cf:de:33:1c:c7:7f:
         4a:ba:d1:d6:2f:4d:17:50:c9:e2:3e:6f:ce:90:c7:ad:54:32:
         80:4b:e4:7f:a5:19:18:c1:64:f5:53:28:d9:57:57:f1:fe:53:
         ba:94:51:08:eb:9d:ab:3e:60:42:ed:94:be:96:86:5c:39:c1:
         1e:db:81:c6:c1:b9:b9:c5:5b:6c:ae:f8:05:3b:d2:00:2d:df:
         4a:a4:d5:5f:25:48:72:cb:dc:b5:3e:8e:86:b7:bb:52:f2:19:
         79:12:f6:b0:dd:94:f4:02:d3:ae:e6:9e:83:22:a4:3c:67:98:
         dd:5d:fc:87
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHhOXqsMMUOtSkiva9z2eMj7K4+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIzMzUzMzdDQkVCNTRCQkRDMEM1MUJBNDM0RjQ0MzlF
NzAwQzA1QTAeFw0yNDEyMDQxNjQxMjZaFw0yNTEyMDMxNjQ2MjZaMDMxMTAvBgNV
BAMTKDA0OEU5MDhDMzE0REUyNkVFRDhCM0U5QkZGRUIwMEQ5MTU2OTVDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPAmr107pntbbJDUjyi4XMDvIe
e42f9e12+LljvnkOHW1AjoASYG2zhaTNFk9X27CdvYw/C0D4TyG9Do+Hg/KCi88c
lVcr/mpPI3M8KrMrthd+VaCzMjtzlOpwiiVpdCJUCdMA33H8h0rGfohOiZ17aNh8
zHtZlNV8tyAN83+CaXAg2Kr15rZnRXLzOEgcn2rQU8VYUFSjlpS8ZUJHs8Uuz/7C
0Of5brUaMHiaUaBpcNAIK72uCDhSmsMTosD+Gw5zY6sygfBxzsWPrRZ1zXkY475b
J8ha+LqG4H5b2N3T/s/P3y0U2ThkLYXc/WQM+YDDdEX/V8Hib7b8OX27tiYjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBI6QjDFN4m7tiz6b/+sA2RVpXCYwHwYDVR0j
BBgwFoAUizNTN8vrVLvcDFG6Q09EOecAwFowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9GYks4V2dZWEJBa0c4UEttZzRBY1Z1Q3VnQzRDd3k1eExHMmkzRVdT
RWMvMC84QjMzNTMzN0NCRUI1NEJCREMwQzUxQkE0MzRGNDQzOUU3MDBDMDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCMzM1MzM3Q0JFQjU0QkJE
QzBDNTFCQTQzNEY0NDM5RTcwMEMwNUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvRmJLOFdnWVhCQWtHOFBLbWc0QWNWdUN1Z0M0Q3d5NXhMRzJpM0VXU0VjLzAv
MzIzODMwMzQzYTM0MzUzNjM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM2
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARFaDANBgkqhkiG9w0BAQsFAAOCAQEAdbFfto9+
klUCpSRqi1vuaLdekYBiPosS9PUSVSO04uHMiogR1oEg/h+eAKc7G+yyC7//vg+/
YCOpkHWnTAhuR7vavFRvtgym/mZ3QjpSkCkKdDeKhp73n4oJrTymTPCnXIUxizTQ
0GYLzzyZwML9tniPDTMLL0+DQaGWUBNRMwLCj/VnLEm6TclHz94zHMd/SrrR1i9N
F1DJ4j5vzpDHrVQygEvkf6UZGMFk9VMo2VdX8f5TupRRCOudqz5gQu2UvpaGXDnB
HtuBxsG5ucVbbK74BTvSAC3fSqTVXyVIcsvctT6Ohre7UvIZeRL2sN2U9ALTruae
gyKkPGeY3V38hw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:28:06 2025 by rpki-client