Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3a2f33322d3332203d3e20323637323536.roa
File:                     323830343a346161633a3a2f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          c/ygWyUNr4Wr5gmoDHytMhfY1WZJsHQG5owscJG1UwA=
Subject key identifier:   58:80:D8:B8:C4:3B:B3:D4:7A:0A:CB:66:44:4F:48:AE:A0:EB:70:06
Certificate issuer:       /CN=CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F
Certificate serial:       41D79C2C3F973ED8E2826372818952859CA114A3
Authority key identifier: CA:2E:6F:E1:B3:E5:12:77:CE:3A:06:31:54:7E:5C:15:EC:CB:2F:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3a2f33322d3332203d3e20323637323536.roa
Signing time:             Thu 17 Nov 2022 01:58:16 +0000
ROA not before:           Thu 17 Nov 2022 01:53:16 +0000
ROA not after:            Thu 16 Nov 2023 01:58:16 +0000
asID:                     267256
IP address blocks:        2804:4aac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d7:9c:2c:3f:97:3e:d8:e2:82:63:72:81:89:52:85:9c:a1:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F
        Validity
            Not Before: Nov 17 01:53:16 2022 GMT
            Not After : Nov 16 01:58:16 2023 GMT
        Subject: CN=5880D8B8C43BB3D47A0ACB66444F48AEA0EB7006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:c6:97:63:d8:77:39:a4:f6:19:f3:72:44:
                    32:19:3b:b3:92:df:36:7d:be:8b:fe:60:ee:2c:a1:
                    b4:94:af:35:52:3b:aa:a6:b9:8e:a9:0a:58:c4:64:
                    51:12:6d:19:d4:11:89:ad:06:a7:6e:e6:27:72:58:
                    2d:72:3a:2d:0b:99:5e:0b:62:53:f9:93:67:7a:4c:
                    cb:0a:5c:41:ac:2e:a2:8d:1d:e4:62:6c:8a:72:e4:
                    9f:9f:51:42:92:2c:73:28:c9:44:60:0b:b2:86:2f:
                    a5:97:08:30:1d:15:0d:9a:7d:93:c7:97:c1:0e:63:
                    64:98:2d:45:9c:b1:0d:37:01:8e:8c:d7:8d:2c:02:
                    80:17:e2:d9:bd:be:fc:cd:e3:6c:ce:34:d6:9b:fb:
                    34:48:79:6c:9c:41:98:0b:ec:e0:48:28:fb:53:c3:
                    6b:9b:8f:71:7e:37:da:c6:e7:d5:5c:3a:80:a8:b4:
                    c1:6f:3c:29:b1:93:0c:de:ec:0e:c6:d7:3c:5c:f7:
                    9f:76:fd:a8:db:39:58:95:ae:13:c5:2a:98:d0:55:
                    15:05:08:21:19:1f:f3:1e:b5:e5:73:59:67:2e:c8:
                    e9:02:8a:99:56:de:e9:ab:b7:03:c4:6d:24:be:0c:
                    0e:c7:c6:c9:d2:02:b8:38:55:18:3f:0c:e2:ec:d9:
                    70:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:80:D8:B8:C4:3B:B3:D4:7A:0A:CB:66:44:4F:48:AE:A0:EB:70:06
            X509v3 Authority Key Identifier:
                keyid:CA:2E:6F:E1:B3:E5:12:77:CE:3A:06:31:54:7E:5C:15:EC:CB:2F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3a2f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4aac::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:ab:6a:3e:b8:87:bb:44:b5:ee:84:82:8f:9e:22:a8:e5:
         63:d1:92:ea:85:43:05:bd:b6:cd:e5:cf:cc:b9:d1:99:9b:c1:
         55:5e:01:c4:73:83:0a:00:ad:d4:43:4a:6d:09:b3:38:a0:03:
         dc:a0:59:1c:f0:0c:3a:7f:63:46:99:89:60:a6:3f:5c:43:7e:
         d6:58:24:44:9e:01:f0:11:c8:a6:df:9d:9c:f9:54:ca:92:9e:
         d0:f2:4e:80:95:39:c7:50:b9:29:6e:2c:e1:92:e0:44:7a:69:
         64:6d:e4:11:bf:d9:bb:f1:07:ee:6d:45:9d:6a:df:8e:98:6c:
         4c:f1:03:9c:84:e1:60:ac:6b:f4:f5:ed:b9:68:98:1a:1a:2c:
         f7:85:69:ac:15:72:c9:7a:3d:42:fd:9e:c1:4c:64:87:95:50:
         cf:6f:62:a3:6e:a2:04:44:12:02:9c:8b:e5:2a:9b:fe:a8:c4:
         56:77:27:0a:2e:e9:a4:f8:54:4c:4a:ae:77:c3:1c:36:4f:64:
         d7:19:61:37:8f:4f:cf:f5:f0:9b:f5:55:09:d8:6b:72:50:db:
         c4:54:c3:31:7c:12:c2:69:4b:3a:e6:19:e8:0b:dc:6f:01:0d:
         7a:d1:fe:d1:5c:dd:f6:02:0b:8c:34:58:e2:0e:97:9a:3c:3e:
         cc:4b:3a:65
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQdecLD+XPtjigmNygYlShZyhFKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyRTZGRTFCM0U1MTI3N0NFM0EwNjMxNTQ3RTVDMTVF
Q0NCMkYzRjAeFw0yMjExMTcwMTUzMTZaFw0yMzExMTYwMTU4MTZaMDMxMTAvBgNV
BAMTKDU4ODBEOEI4QzQzQkIzRDQ3QTBBQ0I2NjQ0NEY0OEFFQTBFQjcwMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zsaXY9h3OaT2GfNyRDIZO7OS
3zZ9vov+YO4sobSUrzVSO6qmuY6pCljEZFESbRnUEYmtBqdu5idyWC1yOi0LmV4L
YlP5k2d6TMsKXEGsLqKNHeRibIpy5J+fUUKSLHMoyURgC7KGL6WXCDAdFQ2afZPH
l8EOY2SYLUWcsQ03AY6M140sAoAX4tm9vvzN42zONNab+zRIeWycQZgL7OBIKPtT
w2ubj3F+N9rG59VcOoCotMFvPCmxkwze7A7G1zxc9592/ajbOViVrhPFKpjQVRUF
CCEZH/MeteVzWWcuyOkCiplW3umrtwPEbSS+DA7HxsnSArg4VRg/DOLs2XDtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWIDYuMQ7s9R6CstmRE9IrqDrcAYwHwYDVR0j
BBgwFoAUyi5v4bPlEnfOOgYxVH5cFezLLz8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC9DQTJFNkZFMUIzRTUxMjc3Q0UzQTA2MzE1NDdFNUMxNUVDQ0IyRjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBMkU2RkUxQjNFNTEyNzdD
RTNBMDYzMTU0N0U1QzE1RUNDQjJGM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzIzODMwMzQzYTM0NjE2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKrDANBgkqhkiG9w0BAQsFAAOCAQEAYLeraj64
h7tEte6Ego+eIqjlY9GS6oVDBb22zeXPzLnRmZvBVV4BxHODCgCt1ENKbQmzOKAD
3KBZHPAMOn9jRpmJYKY/XEN+1lgkRJ4B8BHIpt+dnPlUypKe0PJOgJU5x1C5KW4s
4ZLgRHppZG3kEb/Zu/EH7m1FnWrfjphsTPEDnIThYKxr9PXtuWiYGhos94VprBVy
yXo9Qv2ewUxkh5VQz29io26iBEQSApyL5Sqb/qjEVncnCi7ppPhUTEqud8McNk9k
1xlhN49Pz/Xwm/VVCdhrclDbxFTDMXwSwmlLOuYZ6AvcbwENetH+0Vzd9gILjDRY
4g6Xmjw+zEs6ZQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:52 2025 by rpki-client