Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3130383a3a2f34382d3438203d3e20323639303834.roa
File:                     323830343a356633383a3130383a3a2f34382d3438203d3e20323639303834.roa (raw, json)
Hash identifier:          gF2PxD6CK8tMKZe9ahjcYYHB3y6wC9C0+vvVObzakFg=
Subject key identifier:   E8:A4:91:9D:EB:C5:EF:75:44:F0:DB:08:6C:26:25:98:07:06:55:F1
Certificate issuer:       /CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
Certificate serial:       4ACD13CC58180D3536D12A549EFF8462A57A1A50
Authority key identifier: FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3130383a3a2f34382d3438203d3e20323639303834.roa
Signing time:             Mon 29 May 2023 17:29:05 +0000
ROA not before:           Mon 29 May 2023 17:24:05 +0000
ROA not after:            Mon 27 May 2024 17:29:05 +0000
asID:                     269084
IP address blocks:        2804:5f38:108::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cd:13:cc:58:18:0d:35:36:d1:2a:54:9e:ff:84:62:a5:7a:1a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Validity
            Not Before: May 29 17:24:05 2023 GMT
            Not After : May 27 17:29:05 2024 GMT
        Subject: CN=E8A4919DEBC5EF7544F0DB086C262598070655F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:3f:ce:9e:7e:f7:34:24:91:2e:92:7b:bd:
                    63:40:a4:18:47:eb:96:3c:f2:f5:9c:a0:4d:d7:92:
                    5f:5f:7f:8a:89:cd:02:d9:ec:68:35:84:4b:74:1e:
                    01:43:e7:8d:1b:fd:43:91:9f:02:fa:2f:e1:82:68:
                    6a:8e:f2:a5:cc:e1:48:31:86:01:cd:22:9c:72:ec:
                    b7:61:22:35:62:d4:d7:4f:d0:bd:b4:b1:15:e1:61:
                    b7:54:a3:98:4b:84:03:24:8c:22:bb:a6:b1:9b:01:
                    c2:c3:06:92:3c:8f:80:f7:e3:ea:83:cb:07:e5:39:
                    65:78:70:83:3c:84:a2:51:36:8e:c6:b2:37:45:d3:
                    b2:6a:0b:65:b3:7b:27:2b:b7:b9:fc:02:ba:c8:45:
                    a5:88:66:6b:ee:61:4f:5f:43:57:e5:0c:26:8e:a9:
                    e2:ba:2d:82:56:3b:99:54:cc:f8:80:06:c0:1c:8d:
                    f3:cf:ad:65:cb:ae:55:df:0f:2b:42:8e:12:5d:22:
                    78:e4:f5:fa:2b:8d:84:f4:2a:52:26:f7:b4:49:70:
                    9d:e2:f9:10:80:d6:2c:56:b0:92:17:f1:e7:4f:69:
                    8b:3a:b0:7f:23:ba:a8:98:9f:e2:5e:65:e3:2e:89:
                    2a:d6:19:a3:4a:3a:52:2a:9c:74:55:1c:9e:a0:68:
                    0c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A4:91:9D:EB:C5:EF:75:44:F0:DB:08:6C:26:25:98:07:06:55:F1
            X509v3 Authority Key Identifier:
                keyid:FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3130383a3a2f34382d3438203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f38:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:93:47:dc:e1:f7:2b:fd:76:e0:34:c3:60:52:07:c2:4f:
         d8:ea:1e:b4:ef:1b:f6:47:e9:fc:bc:49:e5:e7:d4:12:c3:92:
         9b:be:16:2a:d5:8e:14:05:e5:30:b9:3d:71:c7:66:9f:7d:2d:
         62:da:0a:64:a8:f1:78:46:3b:71:4c:6e:3c:69:41:14:48:74:
         9e:5c:a7:38:bb:8c:78:38:9c:80:9e:27:97:52:4d:ce:3f:48:
         34:c9:64:3a:7e:43:a7:27:dd:f6:c1:3c:a4:85:76:2e:75:a2:
         d8:68:a0:50:b6:0f:ac:31:04:f0:46:89:d4:92:27:8e:1b:a7:
         ac:10:52:3a:04:8d:e8:ea:a5:b7:df:3f:10:c9:42:ba:14:e8:
         d7:0b:1d:dd:94:05:c8:94:ee:e5:6b:8b:63:a2:cf:15:23:10:
         40:39:92:f7:54:62:13:43:76:a4:2f:4f:1f:3f:c2:ce:81:b0:
         bf:20:67:f8:3e:33:50:c1:75:68:67:3e:c3:09:f6:72:ca:5e:
         9a:61:da:27:87:d6:ef:ba:a2:53:f6:6f:02:a0:e6:aa:5c:f3:
         94:0a:db:31:6f:52:17:f1:6a:96:e8:6f:87:9d:6e:1b:71:50:
         2c:84:c7:ed:1d:22:3e:5f:43:a9:5b:1d:7d:1b:eb:28:e2:6b:
         94:d3:67:61
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUSs0TzFgYDTU20SpUnv+EYqV6GlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5MUFCRTJCOUM0NkUwNjUwQjk4N0NBOTM2NkNGMDg0
Q0VBQUE5NjAeFw0yMzA1MjkxNzI0MDVaFw0yNDA1MjcxNzI5MDVaMDMxMTAvBgNV
BAMTKEU4QTQ5MTlERUJDNUVGNzU0NEYwREIwODZDMjYyNTk4MDcwNjU1RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0T/Onn73NCSRLpJ7vWNApBhH
65Y88vWcoE3Xkl9ff4qJzQLZ7Gg1hEt0HgFD540b/UORnwL6L+GCaGqO8qXM4Ugx
hgHNIpxy7LdhIjVi1NdP0L20sRXhYbdUo5hLhAMkjCK7prGbAcLDBpI8j4D34+qD
ywflOWV4cIM8hKJRNo7GsjdF07JqC2Wzeycrt7n8ArrIRaWIZmvuYU9fQ1flDCaO
qeK6LYJWO5lUzPiABsAcjfPPrWXLrlXfDytCjhJdInjk9forjYT0KlIm97RJcJ3i
+RCA1ixWsJIX8edPaYs6sH8juqiYn+JeZeMuiSrWGaNKOlIqnHRVHJ6gaAypAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU6KSRnevF73VE8NsIbCYlmAcGVfEwHwYDVR0j
BBgwFoAU/JGr4rnEbgZQuYfKk2bPCEzqqpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhVWG9NRlA3NmEzYjNUR3RWSFZLUEQ2QTdoTmpXUUcxcURnOUxOMVJS
b3AvMC9GQzkxQUJFMkI5QzQ2RTA2NTBCOTg3Q0E5MzY2Q0YwODRDRUFBQTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDOTFBQkUyQjlDNDZFMDY1
MEI5ODdDQTkzNjZDRjA4NENFQUFBOTYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIVVhvTUZQNzZhM2IzVEd0VkhWS1BENkE3aE5qV1FHMXFEZzlMTjFSUm9wLzAv
MzIzODMwMzQzYTM1NjYzMzM4M2EzMTMwMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzkzMDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBF84AQgwDQYJKoZIhvcNAQELBQAD
ggEBAEohk0fc4fcr/XbgNMNgUgfCT9jqHrTvG/ZH6fy8SeXn1BLDkpu+FirVjhQF
5TC5PXHHZp99LWLaCmSo8XhGO3FMbjxpQRRIdJ5cpzi7jHg4nICeJ5dSTc4/SDTJ
ZDp+Q6cn3fbBPKSFdi51othooFC2D6wxBPBGidSSJ44bp6wQUjoEjejqpbffPxDJ
QroU6NcLHd2UBciU7uVri2OizxUjEEA5kvdUYhNDdqQvTx8/ws6BsL8gZ/g+M1DB
dWhnPsMJ9nLKXpph2ieH1u+6olP2bwKg5qpc85QK2zFvUhfxapbob4edbhtxUCyE
x+0dIj5fQ6lbHX0b6yjia5TTZ2E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:54 2025 by rpki-client