Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3336203d3e20323730323635.roa
File:                     323830343a363935633a3a2f33322d3336203d3e20323730323635.roa (raw, json)
Hash identifier:          4XgmenA/y+GUW5zQ/b6OAuS7THJ4OMq590L2WRx7kR0=
Subject key identifier:   83:91:A6:0F:D6:8D:13:DE:8D:F5:DE:1C:EC:02:C1:D1:08:B0:50:98
Certificate issuer:       /CN=838E68116DF7FA82100254E70121556A8E484E4B
Certificate serial:       5032B1A4C2F94FD661DC3747FB8E816CDED2E889
Authority key identifier: 83:8E:68:11:6D:F7:FA:82:10:02:54:E7:01:21:55:6A:8E:48:4E:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E68116DF7FA82100254E70121556A8E484E4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3336203d3e20323730323635.roa
Signing time:             Fri 14 Apr 2023 03:00:25 +0000
ROA not before:           Fri 14 Apr 2023 02:55:25 +0000
ROA not after:            Fri 12 Apr 2024 03:00:25 +0000
asID:                     270265
IP address blocks:        2804:695c::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:32:b1:a4:c2:f9:4f:d6:61:dc:37:47:fb:8e:81:6c:de:d2:e8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E68116DF7FA82100254E70121556A8E484E4B
        Validity
            Not Before: Apr 14 02:55:25 2023 GMT
            Not After : Apr 12 03:00:25 2024 GMT
        Subject: CN=8391A60FD68D13DE8DF5DE1CEC02C1D108B05098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:55:0b:c9:fa:ba:37:9e:68:56:6d:0e:ed:
                    71:1d:ad:77:ec:19:26:7d:87:98:49:68:54:f7:f2:
                    e3:2e:6e:3a:f4:e9:dc:64:85:1f:99:a6:6b:58:be:
                    e6:b6:d5:14:e8:3e:cf:e1:12:1d:41:7e:cd:89:c8:
                    11:d2:89:a0:8e:c9:27:7f:c0:37:6e:36:5f:3c:51:
                    6a:1a:48:75:3a:92:66:73:bb:d7:60:88:9c:6a:f8:
                    01:40:82:07:df:a9:b0:d9:76:37:52:1b:6b:e2:79:
                    2d:80:0f:b8:e9:12:52:78:6d:04:28:2c:d4:42:99:
                    65:fc:87:dd:8b:e4:bc:ea:9c:07:c8:a0:43:fc:73:
                    ad:ee:d2:3c:22:1c:9d:f5:fd:e5:18:d8:67:6e:50:
                    f9:07:88:61:e2:f8:96:2b:a8:2b:53:60:9d:be:c9:
                    b4:bb:12:a0:26:a5:f4:5e:55:b2:9c:ca:45:34:f3:
                    50:a7:62:c7:20:5a:ad:18:b4:89:1e:2b:1b:48:22:
                    2d:da:b1:4d:2c:1d:27:07:d8:66:bc:6f:c3:cf:73:
                    55:80:60:a8:c9:4c:51:83:4c:00:9f:d7:e7:31:4b:
                    0a:ff:f9:e9:cb:f7:dc:58:5b:3b:3d:f9:6e:f3:54:
                    19:3c:6c:95:a2:fb:7c:e7:44:a6:a5:a5:6d:dc:f8:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:91:A6:0F:D6:8D:13:DE:8D:F5:DE:1C:EC:02:C1:D1:08:B0:50:98
            X509v3 Authority Key Identifier:
                keyid:83:8E:68:11:6D:F7:FA:82:10:02:54:E7:01:21:55:6A:8E:48:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/838E68116DF7FA82100254E70121556A8E484E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E68116DF7FA82100254E70121556A8E484E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3336203d3e20323730323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:695c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:6b:ac:9a:3c:2b:d5:46:d7:6f:5d:69:d2:59:f6:b1:38:77:
         34:21:d4:d0:09:57:70:f6:b4:57:b4:19:e9:77:c9:5b:63:dd:
         0a:56:0a:dc:8f:3c:9c:94:b7:c9:ca:0a:dd:17:d3:91:af:f9:
         7e:a1:59:24:1c:cc:7d:f2:f5:25:7e:ee:61:f2:f9:32:90:5c:
         ca:8f:ec:bf:20:4a:c8:a9:e4:e0:6d:c3:e4:2c:af:81:ad:1b:
         d7:a0:5c:71:44:0e:d9:79:1d:04:b9:ad:74:5d:ad:8f:b6:38:
         58:f3:de:f7:b8:43:94:44:56:57:b7:b5:7c:b1:0a:ec:bd:61:
         d6:b7:6f:d4:a8:48:c0:e3:b0:40:71:16:1e:be:f1:3b:d5:70:
         78:2d:e2:7f:f5:eb:1c:ec:3f:c3:32:a8:41:38:6e:88:ab:67:
         cf:65:ad:14:2a:89:82:7f:fb:f7:14:de:02:cd:56:33:25:65:
         ab:b3:cb:02:68:59:22:63:ed:cf:74:75:ae:41:6e:52:0c:1a:
         b4:5d:fb:b5:d5:e6:ac:e7:9b:03:f8:52:79:8b:69:6b:e5:8c:
         3b:86:17:56:23:15:85:da:ca:e1:08:7b:5c:f1:34:b2:77:14:
         7d:a3:38:fd:40:e6:91:8c:0e:7b:a9:34:f2:e1:e3:81:72:8d:
         8d:1d:65:57
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUDKxpML5T9Zh3DdH+46BbN7S6IkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4RTY4MTE2REY3RkE4MjEwMDI1NEU3MDEyMTU1NkE4
RTQ4NEU0QjAeFw0yMzA0MTQwMjU1MjVaFw0yNDA0MTIwMzAwMjVaMDMxMTAvBgNV
BAMTKDgzOTFBNjBGRDY4RDEzREU4REY1REUxQ0VDMDJDMUQxMDhCMDUwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEVULyfq6N55oVm0O7XEdrXfs
GSZ9h5hJaFT38uMubjr06dxkhR+ZpmtYvua21RToPs/hEh1Bfs2JyBHSiaCOySd/
wDduNl88UWoaSHU6kmZzu9dgiJxq+AFAggffqbDZdjdSG2vieS2AD7jpElJ4bQQo
LNRCmWX8h92L5LzqnAfIoEP8c63u0jwiHJ31/eUY2GduUPkHiGHi+JYrqCtTYJ2+
ybS7EqAmpfReVbKcykU081CnYscgWq0YtIkeKxtIIi3asU0sHScH2Ga8b8PPc1WA
YKjJTFGDTACf1+cxSwr/+enL99xYWzs9+W7zVBk8bJWi+3znRKalpW3c+LZ1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUg5GmD9aNE96N9d4c7ALB0QiwUJgwHwYDVR0j
BBgwFoAUg45oEW33+oIQAlTnASFVao5ITkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp
ZTIvMC84MzhFNjgxMTZERjdGQTgyMTAwMjU0RTcwMTIxNTU2QThFNDg0RTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgzOEU2ODExNkRGN0ZBODIx
MDAyNTRFNzAxMjE1NTZBOEU0ODRFNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM5UjNDVnRFcWVHUUZESzNSN0I1SGVWTGo0YUhUcVF0VU01cjhTVm9raWUyLzAv
MzIzODMwMzQzYTM2MzkzNTYzM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMw
MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpXDANBgkqhkiG9w0BAQsFAAOCAQEAm2usmjwr
1UbXb11p0ln2sTh3NCHU0AlXcPa0V7QZ6XfJW2PdClYK3I88nJS3ycoK3RfTka/5
fqFZJBzMffL1JX7uYfL5MpBcyo/svyBKyKnk4G3D5Cyvga0b16BccUQO2XkdBLmt
dF2tj7Y4WPPe97hDlERWV7e1fLEK7L1h1rdv1KhIwOOwQHEWHr7xO9VweC3if/Xr
HOw/wzKoQThuiKtnz2WtFCqJgn/79xTeAs1WMyVlq7PLAmhZImPtz3R1rkFuUgwa
tF37tdXmrOebA/hSeYtpa+WMO4YXViMVhdrK4Qh7XPE0sncUfaM4/UDmkYwOe6k0
8uHjgXKNjR1lVw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:37 2025 by rpki-client