Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47ssP2DyrbMnaqcGDJyXhpPwWqxsL5TNex17n6dpbhDR/0/323830343a386339383a3a2f33322d3333203d3e20323733383130.roa
File:                     323830343a386339383a3a2f33322d3333203d3e20323733383130.roa (raw, json)
Hash identifier:          c2mg1xHdxvaeaKgvELa7mwAZsa7nl4nvWT/oqz7bFzI=
Subject key identifier:   4E:E8:09:D4:EE:03:18:6B:A7:A8:0E:EA:51:BE:C6:14:19:34:13:EB
Certificate issuer:       /CN=CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F
Certificate serial:       3B90F1D0A452D3865C654FB792C07ADB6F5970EB
Authority key identifier: CB:D3:C3:01:66:DF:D2:F8:DF:F4:BB:B7:56:68:13:A3:5A:D4:98:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47ssP2DyrbMnaqcGDJyXhpPwWqxsL5TNex17n6dpbhDR/0/323830343a386339383a3a2f33322d3333203d3e20323733383130.roa
Signing time:             Fri 13 Dec 2024 17:53:09 +0000
ROA not before:           Fri 13 Dec 2024 17:48:09 +0000
ROA not after:            Fri 12 Dec 2025 17:53:09 +0000
asID:                     273810
IP address blocks:        2804:8c98::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:90:f1:d0:a4:52:d3:86:5c:65:4f:b7:92:c0:7a:db:6f:59:70:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F
        Validity
            Not Before: Dec 13 17:48:09 2024 GMT
            Not After : Dec 12 17:53:09 2025 GMT
        Subject: CN=4EE809D4EE03186BA7A80EEA51BEC614193413EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:fa:0d:13:69:ea:57:12:27:97:38:26:0f:
                    1b:34:37:b7:bd:e1:b5:e6:90:e7:2d:29:ba:16:cc:
                    71:8c:aa:f8:b5:3f:8d:72:ce:0a:f0:53:20:c9:c2:
                    0e:22:c1:b4:59:7a:02:ad:db:d2:0c:42:e6:01:f0:
                    79:58:e3:3e:85:f3:4d:30:e6:72:05:d6:e3:4e:75:
                    5f:21:2e:1d:5c:3a:19:1b:1e:ea:eb:96:49:c9:82:
                    2d:37:0f:b6:2a:a1:f9:87:bb:41:e2:df:52:58:9a:
                    ba:50:41:5c:2c:da:fc:ad:1c:b8:5b:51:ad:48:15:
                    c2:89:ca:3b:c6:a4:92:67:b1:7a:7c:11:7c:c0:ca:
                    68:90:f8:5e:85:b7:4e:64:be:97:44:33:32:35:12:
                    14:6f:a8:4c:1c:bb:b8:af:95:ad:08:4c:40:6b:31:
                    00:62:1c:2c:1d:ae:4a:0e:98:89:4f:4d:1a:ef:71:
                    ed:b2:73:6d:9a:94:9a:9d:dd:c6:9a:58:0d:f0:6b:
                    e5:b0:1c:b4:32:72:ef:6f:77:a0:dc:20:3a:11:c5:
                    40:b2:ea:c4:8c:ff:b3:aa:03:80:4f:a9:6a:fc:a9:
                    26:1a:31:0c:31:77:2d:47:fe:36:8d:bd:9c:d2:39:
                    ef:fc:b9:8a:1e:e8:3b:db:58:d3:f4:f2:9a:0b:8f:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E8:09:D4:EE:03:18:6B:A7:A8:0E:EA:51:BE:C6:14:19:34:13:EB
            X509v3 Authority Key Identifier:
                keyid:CB:D3:C3:01:66:DF:D2:F8:DF:F4:BB:B7:56:68:13:A3:5A:D4:98:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47ssP2DyrbMnaqcGDJyXhpPwWqxsL5TNex17n6dpbhDR/0/CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBD3C30166DFD2F8DFF4BBB7566813A35AD4980F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47ssP2DyrbMnaqcGDJyXhpPwWqxsL5TNex17n6dpbhDR/0/323830343a386339383a3a2f33322d3333203d3e20323733383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c98::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:e8:da:3c:b1:a2:20:ae:5c:92:76:a6:8c:62:74:80:23:
         e0:16:ae:ba:ab:5b:dd:09:cd:6c:7d:65:48:bf:40:15:91:0f:
         ed:8d:9a:1e:4d:10:57:32:52:c4:8c:5d:de:1d:57:66:81:c5:
         a6:1e:a6:46:f2:de:52:e1:d0:b0:3f:06:12:50:1c:69:ba:70:
         4c:43:15:d4:35:8b:28:81:b9:1d:50:88:85:1c:a4:2d:1c:d1:
         bb:55:b0:86:a2:13:3b:66:9c:a2:4e:1f:ce:5a:43:c6:b3:f7:
         4e:8a:ed:a4:c6:b1:14:e7:25:e8:19:f3:c4:73:92:54:db:e5:
         04:12:b2:b9:a0:79:bc:2d:2e:41:1c:f7:a9:17:25:a8:76:a9:
         dc:cb:45:7d:c8:d4:b8:65:c6:55:4c:f3:6d:31:9c:66:67:7e:
         a9:5f:0f:ca:3c:7a:5c:0d:54:7b:57:22:16:8a:54:f5:fd:a6:
         c7:47:7b:a5:f8:53:22:82:aa:34:3b:ba:51:78:c2:67:fe:e8:
         ef:8a:05:dd:9b:19:a4:c7:3d:41:69:08:37:9a:c4:5f:9b:f0:
         27:15:63:02:d4:d8:99:c3:17:3a:ba:1d:8f:7f:c7:4b:d2:00:
         ef:ac:2e:e6:ce:7f:ef:d9:3f:ed:e7:e3:ab:6e:54:0f:56:67:
         3f:30:db:48
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO5Dx0KRS04ZcZU+3ksB6229ZcOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JEM0MzMDE2NkRGRDJGOERGRjRCQkI3NTY2ODEzQTM1
QUQ0OTgwRjAeFw0yNDEyMTMxNzQ4MDlaFw0yNTEyMTIxNzUzMDlaMDMxMTAvBgNV
BAMTKDRFRTgwOUQ0RUUwMzE4NkJBN0E4MEVFQTUxQkVDNjE0MTkzNDEzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIfoNE2nqVxInlzgmDxs0N7e9
4bXmkOctKboWzHGMqvi1P41yzgrwUyDJwg4iwbRZegKt29IMQuYB8HlY4z6F800w
5nIF1uNOdV8hLh1cOhkbHurrlknJgi03D7YqofmHu0Hi31JYmrpQQVws2vytHLhb
Ua1IFcKJyjvGpJJnsXp8EXzAymiQ+F6Ft05kvpdEMzI1EhRvqEwcu7ivla0ITEBr
MQBiHCwdrkoOmIlPTRrvce2yc22alJqd3caaWA3wa+WwHLQycu9vd6DcIDoRxUCy
6sSM/7OqA4BPqWr8qSYaMQwxdy1H/jaNvZzSOe/8uYoe6DvbWNP08poLj+n/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTugJ1O4DGGunqA7qUb7GFBk0E+swHwYDVR0j
BBgwFoAUy9PDAWbf0vjf9Lu3VmgTo1rUmA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdzc1AyRHlyYk1uYXFjR0RKeVhocFB3V3F4c0w1VE5leDE3bjZkcGJo
RFIvMC9DQkQzQzMwMTY2REZEMkY4REZGNEJCQjc1NjY4MTNBMzVBRDQ5ODBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRDNDMzAxNjZERkQyRjhE
RkY0QkJCNzU2NjgxM0EzNUFENDk4MEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3c3NQMkR5cmJNbmFxY0dESnlYaHBQd1dxeHNMNVROZXgxN242ZHBiaERSLzAv
MzIzODMwMzQzYTM4NjMzOTM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMz
MzgzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASMmDANBgkqhkiG9w0BAQsFAAOCAQEASnro2jyx
oiCuXJJ2poxidIAj4Bauuqtb3QnNbH1lSL9AFZEP7Y2aHk0QVzJSxIxd3h1XZoHF
ph6mRvLeUuHQsD8GElAcabpwTEMV1DWLKIG5HVCIhRykLRzRu1WwhqITO2acok4f
zlpDxrP3TortpMaxFOcl6BnzxHOSVNvlBBKyuaB5vC0uQRz3qRclqHap3MtFfcjU
uGXGVUzzbTGcZmd+qV8Pyjx6XA1Ue1ciFopU9f2mx0d7pfhTIoKqNDu6UXjCZ/7o
74oF3ZsZpMc9QWkIN5rEX5vwJxVjAtTYmcMXOrodj3/HS9IA76wu5s5/79k/7efj
q25UD1ZnPzDbSA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:06:56 2025 by rpki-client