Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          VsQCACG+Bv8gsVer2TymaiPF4MECtOzv891ZCkxhFII=
Subject key identifier:   CB:A1:6D:29:EB:37:E2:CF:88:16:8F:78:BA:98:FC:31:DF:62:61:06
Certificate issuer:       /CN=365EB380D1AF8407FD93545D5B6D63209853804F
Certificate serial:       595FC3F1435AF6660922F394E66707BE1461BED4
Authority key identifier: 36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Thu 10 Aug 2023 13:26:07 +0000
ROA not before:           Thu 10 Aug 2023 13:21:07 +0000
ROA not after:            Thu 08 Aug 2024 13:26:07 +0000
asID:                     271612
IP address blocks:        2804:7e40:3000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5f:c3:f1:43:5a:f6:66:09:22:f3:94:e6:67:07:be:14:61:be:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365EB380D1AF8407FD93545D5B6D63209853804F
        Validity
            Not Before: Aug 10 13:21:07 2023 GMT
            Not After : Aug  8 13:26:07 2024 GMT
        Subject: CN=CBA16D29EB37E2CF88168F78BA98FC31DF626106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ea:2b:42:9a:d0:87:ae:46:39:0a:a4:ce:ed:
                    67:36:4c:28:60:88:45:69:38:3d:4f:59:eb:96:1d:
                    60:65:31:58:11:ed:85:c7:91:bd:8f:f4:b5:bf:b8:
                    e7:fe:c0:81:9f:76:23:a3:e3:fe:4d:a3:78:bb:05:
                    ab:4c:01:87:11:6d:ce:0a:03:52:81:f0:57:93:46:
                    2d:4f:4b:a7:44:f8:b3:a4:1d:24:ab:0a:6f:6a:ba:
                    98:fd:70:10:7c:51:5b:49:d7:d5:0e:83:64:1d:f3:
                    91:71:7d:ad:5b:e8:b7:da:34:c5:9d:b4:d2:21:65:
                    b9:3b:de:8a:c3:1d:46:eb:9c:8c:fe:f1:f9:04:20:
                    7d:7e:6b:0a:d7:e6:34:4d:ea:c2:2f:64:f6:f0:22:
                    7a:e0:9b:74:39:3a:19:12:cb:4b:1e:50:cb:fc:eb:
                    f0:1a:e4:f2:94:fc:1b:ff:44:ed:3a:0b:9d:7a:bb:
                    be:7f:fa:72:1c:83:5d:ef:02:04:d1:44:95:a8:14:
                    d3:73:a2:68:39:9d:0a:b7:ac:f1:23:ef:09:04:7a:
                    cb:ef:72:c4:ba:93:67:5a:bf:ce:44:85:c7:0b:be:
                    05:36:80:02:d1:60:4c:9d:88:b3:d1:2d:4a:ed:f1:
                    a8:44:fc:83:3d:16:9f:c7:e3:2e:ea:3b:cf:31:0b:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A1:6D:29:EB:37:E2:CF:88:16:8F:78:BA:98:FC:31:DF:62:61:06
            X509v3 Authority Key Identifier:
                keyid:36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/365EB380D1AF8407FD93545D5B6D63209853804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:10:22:9f:28:7d:38:7a:52:f1:75:f4:9b:2a:3b:8f:e9:3b:
         20:0b:08:32:57:a2:78:e4:58:15:d2:54:5e:59:52:4b:eb:94:
         18:ad:13:50:df:47:5e:1a:03:5e:90:a0:b1:b2:35:76:65:ca:
         09:32:61:bd:d4:8f:74:4a:91:01:dd:e9:cb:0a:a3:79:40:34:
         02:09:55:a3:f1:bc:54:16:40:d7:25:2b:05:ee:78:50:88:2f:
         24:7d:79:5c:d1:85:bb:e8:fc:e2:6d:04:13:51:62:22:7e:e3:
         81:62:63:f4:76:6f:77:68:75:17:88:fb:b9:33:f0:49:a3:8e:
         c7:dd:ea:05:0b:d6:b7:72:33:2f:0f:44:4e:49:a8:99:20:28:
         43:8e:4e:3e:e5:13:00:b0:17:c0:58:13:34:85:f4:31:01:9b:
         63:55:e7:9d:03:9a:96:2f:dd:a4:e8:99:26:a2:48:16:39:0c:
         8c:0d:81:db:a6:e6:07:4a:ac:35:f7:bd:09:63:8c:b2:62:e8:
         39:f3:f1:84:10:c7:57:f3:e5:ad:da:8f:86:7c:60:87:c1:da:
         91:d4:11:b5:68:16:9c:6e:62:fa:ec:83:1b:65:af:5d:0b:b6:
         70:ee:c7:4f:6b:65:ba:26:f4:7e:5b:0b:d0:64:4f:29:ed:1b:
         ea:49:e2:55
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWV/D8UNa9mYJIvOU5mcHvhRhvtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY1RUIzODBEMUFGODQwN0ZEOTM1NDVENUI2RDYzMjA5
ODUzODA0RjAeFw0yMzA4MTAxMzIxMDdaFw0yNDA4MDgxMzI2MDdaMDMxMTAvBgNV
BAMTKENCQTE2RDI5RUIzN0UyQ0Y4ODE2OEY3OEJBOThGQzMxREY2MjYxMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu6itCmtCHrkY5CqTO7Wc2TChg
iEVpOD1PWeuWHWBlMVgR7YXHkb2P9LW/uOf+wIGfdiOj4/5No3i7BatMAYcRbc4K
A1KB8FeTRi1PS6dE+LOkHSSrCm9qupj9cBB8UVtJ19UOg2Qd85Fxfa1b6LfaNMWd
tNIhZbk73orDHUbrnIz+8fkEIH1+awrX5jRN6sIvZPbwInrgm3Q5OhkSy0seUMv8
6/Aa5PKU/Bv/RO06C516u75/+nIcg13vAgTRRJWoFNNzomg5nQq3rPEj7wkEesvv
csS6k2dav85EhccLvgU2gALRYEydiLPRLUrt8ahE/IM9Fp/H4y7qO88xC6nTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUy6FtKes34s+IFo94upj8Md9iYQYwHwYDVR0j
BBgwFoAUNl6zgNGvhAf9k1RdW21jIJhTgE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM
bjUvMC8zNjVFQjM4MEQxQUY4NDA3RkQ5MzU0NUQ1QjZENjMyMDk4NTM4MDRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2NUVCMzgwRDFBRjg0MDdG
RDkzNTQ1RDVCNkQ2MzIwOTg1MzgwNEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzAv
MzIzODMwMzQzYTM3NjUzNDMwM2EzMzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMTM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEfkAwMA0GCSqGSIb3DQEBCwUA
A4IBAQApECKfKH04elLxdfSbKjuP6TsgCwgyV6J45FgV0lReWVJL65QYrRNQ30de
GgNekKCxsjV2ZcoJMmG91I90SpEB3enLCqN5QDQCCVWj8bxUFkDXJSsF7nhQiC8k
fXlc0YW76PzibQQTUWIifuOBYmP0dm93aHUXiPu5M/BJo47H3eoFC9a3cjMvD0RO
SaiZIChDjk4+5RMAsBfAWBM0hfQxAZtjVeedA5qWL92k6JkmokgWOQyMDYHbpuYH
Sqw1970JY4yyYug58/GEEMdX8+Wt2o+GfGCHwdqR1BG1aBacbmL67IMbZa9dC7Zw
7sdPa2W6JvR+WwvQZE8p7RvqSeJV
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:44 2025 by rpki-client