Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a313a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a313a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          vZyXNfpxSwc1KDnPqvXa2UHOAE2mnOh5nWbP3yZGcyo=
Subject key identifier:   84:21:2D:2F:40:61:0F:82:DD:EB:69:26:89:9E:3B:FE:8B:23:42:2B
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       31545084374DD4072A0989393CDD982D586288A2
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a313a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:51 +0000
ROA not before:           Mon 11 Nov 2024 20:56:51 +0000
ROA not after:            Mon 10 Nov 2025 21:01:51 +0000
asID:                     262725
IP address blocks:        2804:3360:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:54:50:84:37:4d:d4:07:2a:09:89:39:3c:dd:98:2d:58:62:88:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:51 2024 GMT
            Not After : Nov 10 21:01:51 2025 GMT
        Subject: CN=3082010A0282010100E6D652CDFE54E108EDFCF4D9C038602E8944A01CA97AC1D69D3990BE9B9EA4DD67B463B5393B05DD3CAE4615EF90AB84FBE573B755ECFFF4A6711C01558A56920E05772B733EF1862500BA232318B6722BD6B80EDE06CA43CB1A67428556DE849992C13B849E5F28A2C36B951B0A0B5E932B5E120F740C9CA22B0536E08DCD95AC0755AD0D1D96C1A37C0CAA1782B8581ECD47A23613E77F94CF3B4C84223F4D1E66F27163D9555EC4AE48699D5F1CE7E3C438AF395AFA1C00FEBE32C84FE9FD5F29DF6D173C803130A2A95C54E791F88203DBE0C420108F492EDF14FD80D74755DFA5B84E35319B6CB93B56424ADE6E76C06821CCC26E7C1E203FFA0F3D35650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:52:cd:fe:54:e1:08:ed:fc:f4:d9:c0:38:
                    60:2e:89:44:a0:1c:a9:7a:c1:d6:9d:39:90:be:9b:
                    9e:a4:dd:67:b4:63:b5:39:3b:05:dd:3c:ae:46:15:
                    ef:90:ab:84:fb:e5:73:b7:55:ec:ff:f4:a6:71:1c:
                    01:55:8a:56:92:0e:05:77:2b:73:3e:f1:86:25:00:
                    ba:23:23:18:b6:72:2b:d6:b8:0e:de:06:ca:43:cb:
                    1a:67:42:85:56:de:84:99:92:c1:3b:84:9e:5f:28:
                    a2:c3:6b:95:1b:0a:0b:5e:93:2b:5e:12:0f:74:0c:
                    9c:a2:2b:05:36:e0:8d:cd:95:ac:07:55:ad:0d:1d:
                    96:c1:a3:7c:0c:aa:17:82:b8:58:1e:cd:47:a2:36:
                    13:e7:7f:94:cf:3b:4c:84:22:3f:4d:1e:66:f2:71:
                    63:d9:55:5e:c4:ae:48:69:9d:5f:1c:e7:e3:c4:38:
                    af:39:5a:fa:1c:00:fe:be:32:c8:4f:e9:fd:5f:29:
                    df:6d:17:3c:80:31:30:a2:a9:5c:54:e7:91:f8:82:
                    03:db:e0:c4:20:10:8f:49:2e:df:14:fd:80:d7:47:
                    55:df:a5:b8:4e:35:31:9b:6c:b9:3b:56:42:4a:de:
                    6e:76:c0:68:21:cc:c2:6e:7c:1e:20:3f:fa:0f:3d:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:2D:2F:40:61:0F:82:DD:EB:69:26:89:9E:3B:FE:8B:23:42:2B
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a313a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:83:8d:2d:a0:95:57:34:84:83:35:28:3d:e0:4f:08:65:54:
         20:9b:da:ee:aa:ea:97:c3:88:e3:8c:4d:8d:ac:0f:dd:e7:93:
         cf:7a:6c:05:1f:b7:0e:ec:55:82:d9:91:9e:b3:cf:27:df:51:
         bb:84:7d:53:a7:a0:1a:13:75:78:3b:4f:1d:71:7f:4e:f5:f8:
         78:33:e8:63:55:b8:c5:f1:ac:11:fb:dd:90:65:48:76:00:de:
         c9:ba:05:20:5f:bd:78:60:15:c2:3a:d7:d0:df:67:42:da:ee:
         92:83:9b:ea:a1:13:d4:e9:ae:28:f7:d3:6f:bc:2a:f2:4c:62:
         42:f0:97:36:92:4d:1a:1c:96:71:21:e3:35:1c:03:b8:68:80:
         c4:2c:a8:b2:da:0a:5f:68:15:52:19:e4:29:47:49:14:be:73:
         68:1a:24:13:06:11:f0:c8:d9:6f:fe:6d:7b:73:cd:ac:0f:ea:
         3d:79:1b:53:32:dd:80:9b:d3:ab:95:c4:24:d4:49:80:0c:bc:
         a2:5f:03:d5:20:0b:01:f6:76:56:54:9b:6b:26:97:65:86:a4:
         e0:d8:1f:ed:20:91:22:0b:53:39:93:b8:a5:a4:2b:10:83:fa:
         f1:93:d0:87:69:a7:70:42:38:1c:9f:eb:e4:7b:99:0d:50:a4:
         bd:32:de:cb
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUMVRQhDdN1AcqCYk5PN2YLVhiiKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBERTBFNkUzRDYyMUY4MzE3MzAyNTg0OEE3ODIxNkE3
NUU1MDJDQzAeFw0yNDExMTEyMDU2NTFaFw0yNTExMTAyMTAxNTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTZENjUyQ0RGRTU0RTEwOEVE
RkNGNEQ5QzAzODYwMkU4OTQ0QTAxQ0E5N0FDMUQ2OUQzOTkwQkU5QjlFQTRERDY3
QjQ2M0I1MzkzQjA1REQzQ0FFNDYxNUVGOTBBQjg0RkJFNTczQjc1NUVDRkZGNEE2
NzExQzAxNTU4QTU2OTIwRTA1NzcyQjczM0VGMTg2MjUwMEJBMjMyMzE4QjY3MjJC
RDZCODBFREUwNkNBNDNDQjFBNjc0Mjg1NTZERTg0OTk5MkMxM0I4NDlFNUYyOEEy
QzM2Qjk1MUIwQTBCNUU5MzJCNUUxMjBGNzQwQzlDQTIyQjA1MzZFMDhEQ0Q5NUFD
MDc1NUFEMEQxRDk2QzFBMzdDMENBQTE3ODJCODU4MUVDRDQ3QTIzNjEzRTc3Rjk0
Q0YzQjRDODQyMjNGNEQxRTY2RjI3MTYzRDk1NTVFQzRBRTQ4Njk5RDVGMUNFN0Uz
QzQzOEFGMzk1QUZBMUMwMEZFQkUzMkM4NEZFOUZENUYyOURGNkQxNzNDODAzMTMw
QTJBOTVDNTRFNzkxRjg4MjAzREJFMEM0MjAxMDhGNDkyRURGMTRGRDgwRDc0NzU1
REZBNUI4NEUzNTMxOUI2Q0I5M0I1NjQyNEFERTZFNzZDMDY4MjFDQ0MyNkU3QzFF
MjAzRkZBMEYzRDM1NjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5tZSzf5U4Qjt/PTZwDhgLolEoBypesHWnTmQvpuepN1ntGO1OTsF
3TyuRhXvkKuE++Vzt1Xs//SmcRwBVYpWkg4FdytzPvGGJQC6IyMYtnIr1rgO3gbK
Q8saZ0KFVt6EmZLBO4SeXyiiw2uVGwoLXpMrXhIPdAycoisFNuCNzZWsB1WtDR2W
waN8DKoXgrhYHs1HojYT53+UzztMhCI/TR5m8nFj2VVexK5IaZ1fHOfjxDivOVr6
HAD+vjLIT+n9XynfbRc8gDEwoqlcVOeR+IID2+DEIBCPSS7fFP2A10dV36W4TjUx
m2y5O1ZCSt5udsBoIczCbnweID/6Dz01ZQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FIQhLS9AYQ+C3etpJomeO/6LI0IrMB8GA1UdIwQYMBaAFCDeDm49Yh+DFzAlhIp4
IWp15QLMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvMjBERTBFNkUzRDYyMUY4
MzE3MzAyNTg0OEE3ODIxNkE3NUU1MDJDQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMERFMEU2RTNENjIxRjgzMTczMDI1ODQ4QTc4MjE2QTc1RTUw
MkNDLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8wLzMyMzgzMDM0M2EzMzMzMzYzMDNh
MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzNzMyMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBDNgAAEwDQYJKoZIhvcNAQELBQADggEBAEGDjS2glVc0hIM1KD3gTwhlVCCb
2u6q6pfDiOOMTY2sD93nk896bAUftw7sVYLZkZ6zzyffUbuEfVOnoBoTdXg7Tx1x
f071+Hgz6GNVuMXxrBH73ZBlSHYA3sm6BSBfvXhgFcI619DfZ0La7pKDm+qhE9Tp
rij302+8KvJMYkLwlzaSTRoclnEh4zUcA7hogMQsqLLaCl9oFVIZ5ClHSRS+c2ga
JBMGEfDI2W/+bXtzzawP6j15G1My3YCb06uVxCTUSYAMvKJfA9UgCwH2dlZUm2sm
l2WGpODYH+0gkSILUzmTuKWkKxCD+vGT0Idpp3BCOByf6+R7mQ1QpL0y3ss=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:01 2025 by rpki-client