Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/323830343a366438383a3a2f33322d3438203d3e20323730353339.roa
File:                     323830343a366438383a3a2f33322d3438203d3e20323730353339.roa (raw, json)
Hash identifier:          BbmLVyUCPJYDpPdRmqid23C6liU9WR2wNEaTpaAaQas=
Subject key identifier:   EB:AE:A7:43:34:21:DB:23:63:62:AE:8B:F3:AE:5C:7F:50:F6:FF:FF
Certificate issuer:       /CN=1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014
Certificate serial:       14BF73970FB214749CEB955E53C2B049C66A5903
Authority key identifier: 1E:9B:C0:E3:4E:3E:1C:72:FC:CD:D8:85:9B:B1:0F:3C:E8:28:A0:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/323830343a366438383a3a2f33322d3438203d3e20323730353339.roa
Signing time:             Tue 25 Jan 2022 18:52:51 +0000
ROA not before:           Tue 25 Jan 2022 18:47:51 +0000
ROA not after:            Tue 24 Jan 2023 18:52:51 +0000
asID:                     270539
IP address blocks:        2804:6d88::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bf:73:97:0f:b2:14:74:9c:eb:95:5e:53:c2:b0:49:c6:6a:59:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014
        Validity
            Not Before: Jan 25 18:47:51 2022 GMT
            Not After : Jan 24 18:52:51 2023 GMT
        Subject: CN=EBAEA7433421DB236362AE8BF3AE5C7F50F6FFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:01:7d:a1:f2:d4:34:32:d4:91:9f:ae:11:f1:
                    7d:20:94:52:b4:15:ad:6b:d9:cb:7b:27:7c:5a:54:
                    56:d4:72:fa:bb:66:88:02:7d:88:b2:1e:9d:4c:00:
                    e5:84:24:2e:7e:02:4d:7a:84:aa:2b:be:42:ac:13:
                    e6:0c:1c:30:2c:a4:54:8c:a8:0b:9c:19:ee:d9:57:
                    47:e4:e2:3e:df:78:1c:b4:b5:d3:f7:28:f3:c1:fb:
                    b6:ba:4a:6e:6d:7a:fa:38:16:a8:83:1d:96:97:d2:
                    b8:0f:82:e6:45:d5:79:7f:51:cb:b5:a6:44:32:a9:
                    48:7d:58:95:57:16:4c:4b:3c:81:68:19:bc:78:a7:
                    ec:62:59:bc:dd:c2:35:f8:ee:f4:e6:ef:e3:ba:a2:
                    7e:f7:35:99:5c:cd:bb:83:38:9e:fc:7c:a2:11:a9:
                    7e:5b:43:a9:05:df:e7:ce:df:67:03:2e:71:2f:8c:
                    16:88:1a:fc:ae:9f:9f:4a:12:74:4c:a2:e8:fe:b6:
                    69:2a:23:c4:c2:9f:59:f2:66:73:21:6a:54:68:95:
                    70:74:ce:21:fd:80:61:4c:fd:93:d4:d5:07:cd:28:
                    bf:06:4a:db:bc:ea:b2:27:f7:14:cc:77:4e:24:f0:
                    03:27:fb:8b:37:9b:e6:38:7c:16:11:e1:59:3f:37:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AE:A7:43:34:21:DB:23:63:62:AE:8B:F3:AE:5C:7F:50:F6:FF:FF
            X509v3 Authority Key Identifier:
                keyid:1E:9B:C0:E3:4E:3E:1C:72:FC:CD:D8:85:9B:B1:0F:3C:E8:28:A0:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/323830343a366438383a3a2f33322d3438203d3e20323730353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:86:75:2e:90:9d:54:a8:82:98:63:fd:60:f5:5c:e2:86:30:
         75:ed:53:82:d4:27:9e:4d:03:4c:b4:45:d8:54:9f:b4:38:af:
         30:2d:7e:32:db:1c:30:1b:74:d8:97:78:46:42:cc:d6:ae:24:
         d8:4a:e4:8f:6c:37:4f:ad:d5:63:fd:39:a2:0e:df:6c:f0:70:
         e4:85:e4:70:1f:ec:05:5a:de:b9:af:6d:da:c6:fe:90:c5:b4:
         41:75:9c:e4:42:34:26:04:e5:22:df:fd:a2:94:81:af:9c:3d:
         62:47:04:f0:dd:32:3c:c0:e5:08:f9:60:eb:bd:15:46:89:2e:
         42:4d:17:bf:cd:86:96:8c:7a:00:14:73:a3:9c:26:62:cc:a1:
         ee:b0:2c:b6:1c:ef:e7:e7:b6:9e:68:08:90:1e:2b:09:ec:7b:
         10:c9:e9:27:19:c3:d7:ff:f2:76:3c:15:b8:e7:fb:d5:eb:36:
         ca:10:7b:2e:d8:9e:1a:0d:5c:41:f2:a4:b3:6b:7c:45:57:3b:
         e6:ac:90:cd:33:29:e8:be:9d:a0:a9:81:27:45:7f:0d:ae:59:
         18:31:4d:8c:79:c6:c1:44:07:38:4c:55:59:11:d9:bc:20:3e:
         4e:a7:5b:a5:55:e4:eb:72:3f:b3:67:61:26:08:31:e4:42:e2:
         55:0d:21:b0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFL9zlw+yFHSc65VeU8KwScZqWQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU5QkMwRTM0RTNFMUM3MkZDQ0REODg1OUJCMTBGM0NF
ODI4QTAxNDAeFw0yMjAxMjUxODQ3NTFaFw0yMzAxMjQxODUyNTFaMDMxMTAvBgNV
BAMTKEVCQUVBNzQzMzQyMURCMjM2MzYyQUU4QkYzQUU1QzdGNTBGNkZGRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgAX2h8tQ0MtSRn64R8X0glFK0
Fa1r2ct7J3xaVFbUcvq7ZogCfYiyHp1MAOWEJC5+Ak16hKorvkKsE+YMHDAspFSM
qAucGe7ZV0fk4j7feBy0tdP3KPPB+7a6Sm5tevo4FqiDHZaX0rgPguZF1Xl/Ucu1
pkQyqUh9WJVXFkxLPIFoGbx4p+xiWbzdwjX47vTm7+O6on73NZlczbuDOJ78fKIR
qX5bQ6kF3+fO32cDLnEvjBaIGvyun59KEnRMouj+tmkqI8TCn1nyZnMhalRolXB0
ziH9gGFM/ZPU1QfNKL8GStu86rIn9xTMd04k8AMn+4s3m+Y4fBYR4Vk/N76xAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU666nQzQh2yNjYq6L865cf1D2//8wHwYDVR0j
BBgwFoAUHpvA404+HHL8zdiFm7EPPOgooBQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1BOHdwb1B3U0ZjZDR0ZG0xcDFoaVhncTZYNEVEc1d3ZUxpd3VqUHZE
eGMvMC8xRTlCQzBFMzRFM0UxQzcyRkNDREQ4ODU5QkIxMEYzQ0U4MjhBMDE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFOUJDMEUzNEUzRTFDNzJG
Q0NERDg4NTlCQjEwRjNDRTgyOEEwMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNQTh3cG9Qd1NGY2Q0dGRtMXAxaGlYZ3E2WDRFRHNXd2VMaXd1alB2RHhjLzAv
MzIzODMwMzQzYTM2NjQzODM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzUzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARtiDANBgkqhkiG9w0BAQsFAAOCAQEARoZ1LpCd
VKiCmGP9YPVc4oYwde1TgtQnnk0DTLRF2FSftDivMC1+MtscMBt02Jd4RkLM1q4k
2Erkj2w3T63VY/05og7fbPBw5IXkcB/sBVreua9t2sb+kMW0QXWc5EI0JgTlIt/9
opSBr5w9YkcE8N0yPMDlCPlg670VRokuQk0Xv82Glox6ABRzo5wmYsyh7rAsthzv
5+e2nmgIkB4rCex7EMnpJxnD1//ydjwVuOf71es2yhB7LtieGg1cQfKks2t8RVc7
5qyQzTMp6L6doKmBJ0V/Da5ZGDFNjHnGwUQHOExVWRHZvCA+TqdbpVXk63I/s2dh
Jggx5ELiVQ0hsA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:02 2025 by rpki-client