Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/323830343a356331633a3a2f33322d3334203d3e20323638383838.roa
File:                     323830343a356331633a3a2f33322d3334203d3e20323638383838.roa (raw, json)
Hash identifier:          gvMEXfu2k2vutFmA/AtEtMb2/9ycMNEIrQKk/5kMc/g=
Subject key identifier:   17:E1:FD:0A:7D:A3:4D:44:08:FC:A0:C8:EC:7F:99:BC:25:47:A4:69
Certificate issuer:       /CN=644F0E6C277C2D5FE0F38192DD116F10AC91E33A
Certificate serial:       0DEB09768A1C4980C0D8C7650D17275DB71D4BC3
Authority key identifier: 64:4F:0E:6C:27:7C:2D:5F:E0:F3:81:92:DD:11:6F:10:AC:91:E3:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/323830343a356331633a3a2f33322d3334203d3e20323638383838.roa
Signing time:             Fri 22 Sep 2023 18:11:44 +0000
ROA not before:           Fri 22 Sep 2023 18:06:44 +0000
ROA not after:            Fri 20 Sep 2024 18:11:44 +0000
asID:                     268888
IP address blocks:        2804:5c1c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:eb:09:76:8a:1c:49:80:c0:d8:c7:65:0d:17:27:5d:b7:1d:4b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644F0E6C277C2D5FE0F38192DD116F10AC91E33A
        Validity
            Not Before: Sep 22 18:06:44 2023 GMT
            Not After : Sep 20 18:11:44 2024 GMT
        Subject: CN=17E1FD0A7DA34D4408FCA0C8EC7F99BC2547A469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5a:2c:88:3e:de:55:1e:30:02:f0:c0:4b:b7:
                    57:8d:ed:87:c9:59:76:17:0a:22:ef:a5:25:2f:de:
                    9e:08:35:9e:72:30:d7:f9:f0:de:dc:25:d0:8a:55:
                    4a:ae:2b:f6:33:65:20:18:c0:69:47:b3:3b:ec:df:
                    af:85:c7:c2:75:26:85:28:c2:1d:51:7b:74:c5:ce:
                    b6:ac:47:f7:6e:c9:f3:23:1e:94:91:37:26:8d:39:
                    da:33:bb:33:af:d1:9e:82:51:42:71:a1:34:2d:6c:
                    66:77:12:80:de:e4:15:df:d4:2b:c3:89:e4:c1:2a:
                    68:08:aa:5b:ae:a4:2e:be:f3:d7:09:d9:64:8d:75:
                    52:fd:97:5b:e1:f2:05:99:32:dc:30:5f:e0:f4:05:
                    64:c2:40:28:c3:37:af:3c:d3:c6:54:aa:dd:c3:e8:
                    40:eb:ff:13:7e:fb:c8:f5:0d:5b:76:88:93:b9:b7:
                    6b:fb:bc:77:5c:7f:62:55:f6:39:67:53:31:00:ed:
                    6e:04:29:06:29:80:d3:e3:d0:f9:f3:7f:d0:d1:17:
                    4b:41:dd:e4:1f:b8:5e:6c:95:33:08:87:da:e6:f9:
                    44:be:a1:88:28:80:07:54:d7:e5:a9:b9:c6:03:90:
                    35:83:52:9a:7c:41:74:24:84:dc:0b:ef:06:f0:5d:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E1:FD:0A:7D:A3:4D:44:08:FC:A0:C8:EC:7F:99:BC:25:47:A4:69
            X509v3 Authority Key Identifier:
                keyid:64:4F:0E:6C:27:7C:2D:5F:E0:F3:81:92:DD:11:6F:10:AC:91:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/323830343a356331633a3a2f33322d3334203d3e20323638383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:24:a0:85:61:fc:56:9a:bf:af:7d:84:d8:b3:0e:50:19:38:
         66:04:2d:dd:18:f4:bc:03:46:60:38:3b:3e:ca:d8:f0:c6:2e:
         aa:ff:cf:2e:f5:ad:56:60:01:b1:63:d5:9e:9d:68:ce:cc:44:
         98:6a:ac:7f:47:09:5c:07:69:34:3f:88:4c:11:f5:25:df:46:
         ad:9b:17:80:73:b0:9f:bb:ce:94:24:d1:cc:50:29:65:75:c7:
         7f:8d:ac:e3:e2:2d:53:6a:9b:0b:3b:c0:f8:12:32:4a:f8:6d:
         9a:13:89:92:4e:a2:0e:1b:0e:79:d0:47:1f:3a:88:c9:8f:e9:
         57:f3:32:ba:6a:f7:f7:92:a2:79:62:bd:fc:e7:7d:f0:bf:19:
         91:05:8a:84:5d:76:cf:c5:b5:0f:77:85:a7:5f:35:f6:f8:15:
         ae:f9:c7:38:27:22:94:84:62:94:a0:d0:f3:45:09:af:ea:74:
         6f:b8:1c:b3:0a:1c:c0:8c:63:62:d6:85:4e:97:b4:99:cd:95:
         ec:25:00:dc:5b:dd:dc:ad:dc:8f:86:8c:68:09:37:9c:cb:0c:
         61:a8:7d:6c:37:0d:af:f2:cb:e6:78:45:32:02:56:f1:aa:c0:
         07:2c:71:3d:a0:a0:b8:fd:a4:26:35:79:24:fe:d3:d4:33:3a:
         b2:93:bb:a2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDesJdoocSYDA2MdlDRcnXbcdS8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0RjBFNkMyNzdDMkQ1RkUwRjM4MTkyREQxMTZGMTBB
QzkxRTMzQTAeFw0yMzA5MjIxODA2NDRaFw0yNDA5MjAxODExNDRaMDMxMTAvBgNV
BAMTKDE3RTFGRDBBN0RBMzRENDQwOEZDQTBDOEVDN0Y5OUJDMjU0N0E0NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsWiyIPt5VHjAC8MBLt1eN7YfJ
WXYXCiLvpSUv3p4INZ5yMNf58N7cJdCKVUquK/YzZSAYwGlHszvs36+Fx8J1JoUo
wh1Re3TFzrasR/duyfMjHpSRNyaNOdozuzOv0Z6CUUJxoTQtbGZ3EoDe5BXf1CvD
ieTBKmgIqluupC6+89cJ2WSNdVL9l1vh8gWZMtwwX+D0BWTCQCjDN68808ZUqt3D
6EDr/xN++8j1DVt2iJO5t2v7vHdcf2JV9jlnUzEA7W4EKQYpgNPj0Pnzf9DRF0tB
3eQfuF5slTMIh9rm+US+oYgogAdU1+WpucYDkDWDUpp8QXQkhNwL7wbwXag9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUF+H9Cn2jTUQI/KDI7H+ZvCVHpGkwHwYDVR0j
BBgwFoAUZE8ObCd8LV/g84GS3RFvEKyR4zowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzZrVmpaczF0cmNiU1dwWjdheUV0MVpnQ2lKeEtiQUpoU1dYOFpRMnZZ
cGkvMC82NDRGMEU2QzI3N0MyRDVGRTBGMzgxOTJERDExNkYxMEFDOTFFMzNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0NEYwRTZDMjc3QzJENUZF
MEYzODE5MkREMTE2RjEwQUM5MUUzM0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2a1ZqWnMxdHJjYlNXcFo3YXlFdDFaZ0NpSnhLYkFKaFNXWDhaUTJ2WXBpLzAv
MzIzODMwMzQzYTM1NjMzMTYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARcHDANBgkqhkiG9w0BAQsFAAOCAQEArSSghWH8
Vpq/r32E2LMOUBk4ZgQt3Rj0vANGYDg7PsrY8MYuqv/PLvWtVmABsWPVnp1ozsxE
mGqsf0cJXAdpND+ITBH1Jd9GrZsXgHOwn7vOlCTRzFApZXXHf42s4+ItU2qbCzvA
+BIySvhtmhOJkk6iDhsOedBHHzqIyY/pV/Myumr395KieWK9/Od98L8ZkQWKhF12
z8W1D3eFp1819vgVrvnHOCcilIRilKDQ80UJr+p0b7gcswocwIxjYtaFTpe0mc2V
7CUA3Fvd3K3cj4aMaAk3nMsMYah9bDcNr/LL5nhFMgJW8arAByxxPaCguP2kJjV5
JP7T1DM6spO7og==
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:34:02 2025 by rpki-client