Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/323830343a336663343a3a2f33322d313238203d3e20323635393133.roa
File:                     323830343a336663343a3a2f33322d313238203d3e20323635393133.roa (raw, json)
Hash identifier:          zDjIveVrf6tXiu4vGU20+uuDwLh3wlhRuCOpgsl3U/E=
Subject key identifier:   0B:7C:CA:E0:7E:E2:99:0F:EB:B0:AC:B5:4B:DC:4B:FF:47:9D:AA:6D
Certificate issuer:       /CN=62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7
Certificate serial:       23E0470D69B77FAC19EF59CCD0821CFCA88D0498
Authority key identifier: 62:E3:44:D1:7A:5F:C9:38:1E:6A:72:18:D1:E6:D0:DE:C5:EB:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/323830343a336663343a3a2f33322d313238203d3e20323635393133.roa
Signing time:             Tue 26 Mar 2024 19:51:16 +0000
ROA not before:           Tue 26 Mar 2024 19:46:16 +0000
ROA not after:            Tue 25 Mar 2025 19:51:16 +0000
asID:                     265913
IP address blocks:        2804:3fc4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e0:47:0d:69:b7:7f:ac:19:ef:59:cc:d0:82:1c:fc:a8:8d:04:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7
        Validity
            Not Before: Mar 26 19:46:16 2024 GMT
            Not After : Mar 25 19:51:16 2025 GMT
        Subject: CN=0B7CCAE07EE2990FEBB0ACB54BDC4BFF479DAA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:1c:b3:1e:b7:ef:2f:d9:50:14:cf:39:2e:
                    16:c1:af:8f:2a:a2:64:54:77:75:b9:09:f4:ef:a3:
                    80:f5:c0:69:32:1b:aa:7f:04:ed:76:f0:6b:cf:94:
                    eb:69:ae:60:7d:a4:ba:24:51:db:14:fa:7d:c5:85:
                    9f:95:c7:01:02:61:d0:dd:de:a5:3b:46:8c:26:14:
                    f8:2e:43:11:a7:e6:bf:dc:3d:b6:7e:bb:e9:fe:45:
                    56:8a:86:0e:dc:87:31:90:63:75:eb:9b:d1:3e:06:
                    5f:f9:1d:53:a6:a3:51:00:01:d1:4f:24:7f:a5:61:
                    10:10:0c:68:a2:c0:cb:56:a6:e9:66:c5:aa:39:6e:
                    40:f2:31:e5:54:09:0b:c0:0c:db:8b:59:37:af:e9:
                    01:67:f9:05:43:ef:ce:61:0d:e6:20:cc:f0:06:7c:
                    c8:59:dd:cb:03:08:b9:97:5b:77:8f:21:0a:91:bb:
                    e1:a2:1e:0f:d0:25:96:0f:f9:8a:ef:68:40:59:8c:
                    6f:aa:17:e4:0f:2e:76:fe:a0:bb:36:8d:ff:12:3c:
                    e9:06:21:9b:a3:3e:1b:6e:c3:0e:5f:53:60:0c:9c:
                    f6:f5:1d:1f:01:85:47:b6:ad:d7:22:a7:72:64:17:
                    66:79:f4:27:f6:7a:55:06:28:c7:6c:fd:55:d0:96:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7C:CA:E0:7E:E2:99:0F:EB:B0:AC:B5:4B:DC:4B:FF:47:9D:AA:6D
            X509v3 Authority Key Identifier:
                keyid:62:E3:44:D1:7A:5F:C9:38:1E:6A:72:18:D1:E6:D0:DE:C5:EB:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/323830343a336663343a3a2f33322d313238203d3e20323635393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:7a:25:68:08:5f:74:2b:49:6c:49:a3:60:cd:87:e9:e1:4c:
         fc:ad:d1:3b:ff:96:aa:51:68:ed:5d:89:cd:25:05:79:62:9d:
         22:a8:75:7f:b0:eb:e3:6b:2a:62:b3:96:85:9e:02:1a:1e:63:
         56:10:6c:a0:c1:14:ee:f4:af:46:66:fb:69:51:be:2b:dc:ee:
         b3:b9:ac:cc:6b:26:9d:53:86:4e:7a:5d:84:29:06:f9:1d:d0:
         70:ee:26:27:fa:e0:cc:ec:7e:04:ed:38:eb:e4:f8:ec:ab:7b:
         04:12:54:81:db:06:98:b8:78:2d:fc:bf:82:4c:eb:a0:b7:11:
         17:1c:85:d3:c0:5b:b9:70:e2:2d:ac:60:5b:50:a6:a1:bf:18:
         6c:33:90:08:13:8f:d8:1e:f8:a3:0b:38:5d:ae:f5:bb:d7:ac:
         e9:72:40:c7:21:c0:09:0d:0a:5d:24:f8:ad:60:d1:9d:78:7f:
         0e:d4:81:88:16:59:6b:2c:9a:3e:d1:71:83:6c:ee:0a:3f:b4:
         72:bd:b5:ce:6d:dd:ce:da:7f:d7:26:27:28:b7:72:d3:b0:b5:
         1a:14:c2:e3:e6:67:4b:aa:52:51:86:f3:32:09:5c:53:6b:38:
         c1:ee:c6:22:9f:35:b2:b4:b2:66:6a:02:b3:46:91:64:b2:b8:
         66:b8:33:7f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUI+BHDWm3f6wZ71nM0IIc/KiNBJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFMzQ0RDE3QTVGQzkzODFFNkE3MjE4RDFFNkQwREVD
NUVCNjNENzAeFw0yNDAzMjYxOTQ2MTZaFw0yNTAzMjUxOTUxMTZaMDMxMTAvBgNV
BAMTKDBCN0NDQUUwN0VFMjk5MEZFQkIwQUNCNTRCREM0QkZGNDc5REFBNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbxyzHrfvL9lQFM85LhbBr48q
omRUd3W5CfTvo4D1wGkyG6p/BO128GvPlOtprmB9pLokUdsU+n3FhZ+VxwECYdDd
3qU7RowmFPguQxGn5r/cPbZ+u+n+RVaKhg7chzGQY3Xrm9E+Bl/5HVOmo1EAAdFP
JH+lYRAQDGiiwMtWpulmxao5bkDyMeVUCQvADNuLWTev6QFn+QVD785hDeYgzPAG
fMhZ3csDCLmXW3ePIQqRu+GiHg/QJZYP+YrvaEBZjG+qF+QPLnb+oLs2jf8SPOkG
IZujPhtuww5fU2AMnPb1HR8BhUe2rdcip3JkF2Z59Cf2elUGKMds/VXQlkbZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUC3zK4H7imQ/rsKy1S9xL/0edqm0wHwYDVR0j
BBgwFoAUYuNE0XpfyTgeanIY0ebQ3sXrY9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2ZDR2JxbjdwQmZGaXZyUlVkempTUnJ2aTFuSmd4cmFvUVpvVHdtM3Rz
aEQvMC82MkUzNDREMTdBNUZDOTM4MUU2QTcyMThEMUU2RDBERUM1RUI2M0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYyRTM0NEQxN0E1RkM5Mzgx
RTZBNzIxOEQxRTZEMERFQzVFQjYzRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNmQ0dicW43cEJmRml2clJVZHpqU1JydmkxbkpneHJhb1Fab1R3bTN0c2hELzAv
MzIzODMwMzQzYTMzNjY2MzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzOTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBD/EMA0GCSqGSIb3DQEBCwUAA4IBAQCZeiVo
CF90K0lsSaNgzYfp4Uz8rdE7/5aqUWjtXYnNJQV5Yp0iqHV/sOvjaypis5aFngIa
HmNWEGygwRTu9K9GZvtpUb4r3O6zuazMayadU4ZOel2EKQb5HdBw7iYn+uDM7H4E
7Tjr5Pjsq3sEElSB2waYuHgt/L+CTOugtxEXHIXTwFu5cOItrGBbUKahvxhsM5AI
E4/YHvijCzhdrvW716zpckDHIcAJDQpdJPitYNGdeH8O1IGIFllrLJo+0XGDbO4K
P7RyvbXObd3O2n/XJicot3LTsLUaFMLj5mdLqlJRhvMyCVxTazjB7sYinzWytLJm
agKzRpFksrhmuDN/
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:39 2025 by rpki-client