Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a3a2f33332d3333203d3e20323634313132.roa
File:                     323830343a323261303a3a2f33332d3333203d3e20323634313132.roa (raw, json)
Hash identifier:          ahKzbgMfJiwNHIeEiV1oluy4ppp9c2RGag4RS+I0xKM=
Subject key identifier:   CB:2A:BB:8F:95:ED:3F:47:2A:DA:E5:56:6E:29:AE:3A:F6:EF:2F:6C
Certificate issuer:       /CN=0639F3A84BD2153E38E0507CC3371338978DE9D0
Certificate serial:       3FD2878C21E72E9263952E18A856022D90B6DA8B
Authority key identifier: 06:39:F3:A8:4B:D2:15:3E:38:E0:50:7C:C3:37:13:38:97:8D:E9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0639F3A84BD2153E38E0507CC3371338978DE9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a3a2f33332d3333203d3e20323634313132.roa
Signing time:             Mon 07 Feb 2022 12:09:38 +0000
ROA not before:           Mon 07 Feb 2022 12:04:38 +0000
ROA not after:            Mon 06 Feb 2023 12:09:38 +0000
asID:                     264112
IP address blocks:        2804:22a0::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d2:87:8c:21:e7:2e:92:63:95:2e:18:a8:56:02:2d:90:b6:da:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0639F3A84BD2153E38E0507CC3371338978DE9D0
        Validity
            Not Before: Feb  7 12:04:38 2022 GMT
            Not After : Feb  6 12:09:38 2023 GMT
        Subject: CN=CB2ABB8F95ED3F472ADAE5566E29AE3AF6EF2F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:5c:f9:01:4d:17:ef:39:68:f9:ca:26:c9:
                    d1:0a:2d:ff:94:73:fb:c6:c0:9a:53:cb:19:42:79:
                    12:74:a0:ff:64:06:ad:e7:e5:e7:94:06:d1:d8:5c:
                    35:8e:7d:a4:9b:7c:ca:45:29:fc:7f:74:75:86:91:
                    66:99:83:86:ac:ca:d3:4b:21:63:e7:2c:2e:4a:f8:
                    14:af:90:02:d9:54:e3:73:b3:af:f5:18:f6:53:2b:
                    a9:58:02:46:38:6c:65:65:56:6d:9e:63:06:a8:0c:
                    40:0f:d7:2b:79:b7:e3:80:85:3c:f0:1e:0f:a5:9b:
                    e6:3c:8c:5e:f8:19:56:65:3f:2c:24:fc:3e:98:06:
                    80:9e:3e:60:75:6c:ab:97:48:a1:f9:09:50:b1:9e:
                    39:0d:72:66:a4:98:bd:8d:bf:d8:58:21:18:b9:c1:
                    c8:a3:76:89:e8:e3:3b:68:a6:20:d0:4f:f7:7e:fa:
                    50:0f:26:9c:8d:ba:b8:78:df:42:01:ee:d3:83:02:
                    09:4a:6c:5a:6d:88:9c:e0:31:50:34:7b:6e:1d:cb:
                    8e:fc:3f:fc:66:1a:bb:74:c4:7c:d3:e0:ac:7c:b9:
                    e6:39:dc:48:29:04:99:c9:8f:21:d7:15:ca:83:da:
                    04:7f:2a:ed:73:fe:60:08:0e:da:89:b7:c1:fe:ed:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2A:BB:8F:95:ED:3F:47:2A:DA:E5:56:6E:29:AE:3A:F6:EF:2F:6C
            X509v3 Authority Key Identifier:
                keyid:06:39:F3:A8:4B:D2:15:3E:38:E0:50:7C:C3:37:13:38:97:8D:E9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/0639F3A84BD2153E38E0507CC3371338978DE9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0639F3A84BD2153E38E0507CC3371338978DE9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a3a2f33332d3333203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:14:18:bd:20:68:7e:76:47:00:1b:17:92:11:93:97:65:21:
         02:b3:6d:63:d4:c9:c3:bf:fa:b1:2a:8d:05:26:89:ea:ad:7e:
         ff:75:4e:13:eb:4b:a0:44:4a:32:19:2b:f9:9c:e9:d7:78:42:
         5c:16:7e:33:05:43:8e:7a:b7:f7:b0:31:3c:d2:85:d5:0f:b4:
         a2:50:27:d0:32:15:e2:66:fb:27:70:22:bd:47:32:04:4e:fd:
         b4:f5:19:ca:47:c3:d6:3f:83:1d:3b:2d:87:c1:43:8f:fb:d1:
         69:a0:82:aa:5d:a0:c5:fa:af:23:b3:64:48:45:7b:76:18:58:
         52:16:9b:60:ef:9f:f9:8c:13:27:e5:98:fe:26:af:f5:dc:f2:
         50:e3:cf:95:12:b8:6c:43:77:52:d3:63:25:62:0a:51:fa:11:
         8e:ac:4f:4c:f9:0b:ba:c4:b3:2e:d6:25:c2:aa:84:89:e2:71:
         45:0e:0c:0e:d1:7d:15:50:33:85:e1:5f:a1:f6:e1:26:12:ed:
         bc:e6:77:16:16:a8:ec:47:ec:29:c3:68:87:37:3f:77:69:55:
         b4:48:a9:40:e8:d9:af:d6:7a:a6:88:70:3b:7f:ef:1f:e2:cc:
         61:6c:21:ca:4d:bd:40:d3:b4:41:1e:ac:ad:52:35:32:71:b1:
         5c:69:6d:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP9KHjCHnLpJjlS4YqFYCLZC22oswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYzOUYzQTg0QkQyMTUzRTM4RTA1MDdDQzMzNzEzMzg5
NzhERTlEMDAeFw0yMjAyMDcxMjA0MzhaFw0yMzAyMDYxMjA5MzhaMDMxMTAvBgNV
BAMTKENCMkFCQjhGOTVFRDNGNDcyQURBRTU1NjZFMjlBRTNBRjZFRjJGNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXFz5AU0X7zlo+comydEKLf+U
c/vGwJpTyxlCeRJ0oP9kBq3n5eeUBtHYXDWOfaSbfMpFKfx/dHWGkWaZg4asytNL
IWPnLC5K+BSvkALZVONzs6/1GPZTK6lYAkY4bGVlVm2eYwaoDEAP1yt5t+OAhTzw
Hg+lm+Y8jF74GVZlPywk/D6YBoCePmB1bKuXSKH5CVCxnjkNcmakmL2Nv9hYIRi5
wcijdono4ztopiDQT/d++lAPJpyNurh430IB7tODAglKbFptiJzgMVA0e24dy478
P/xmGrt0xHzT4Kx8ueY53EgpBJnJjyHXFcqD2gR/Ku1z/mAIDtqJt8H+7SglAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyyq7j5XtP0cq2uVWbimuOvbvL2wwHwYDVR0j
BBgwFoAUBjnzqEvSFT444FB8wzcTOJeN6dAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWly
VVAvMC8wNjM5RjNBODRCRDIxNTNFMzhFMDUwN0NDMzM3MTMzODk3OERFOUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA2MzlGM0E4NEJEMjE1M0Uz
OEUwNTA3Q0MzMzcxMzM4OTc4REU5RDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNc05EcGVBaHZ2OHdkaldIZ2o0eUh0dFZEY1ZNOFBYeXlkdHpZVDlpclVQLzAv
MzIzODMwMzQzYTMyMzI2MTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzEzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQioAAwDQYJKoZIhvcNAQELBQADggEBACgUGL0g
aH52RwAbF5IRk5dlIQKzbWPUycO/+rEqjQUmieqtfv91ThPrS6BESjIZK/mc6dd4
QlwWfjMFQ456t/ewMTzShdUPtKJQJ9AyFeJm+ydwIr1HMgRO/bT1GcpHw9Y/gx07
LYfBQ4/70WmggqpdoMX6ryOzZEhFe3YYWFIWm2Dvn/mMEyflmP4mr/Xc8lDjz5US
uGxDd1LTYyViClH6EY6sT0z5C7rEsy7WJcKqhInicUUODA7RfRVQM4XhX6H24SYS
7bzmdxYWqOxH7CnDaIc3P3dpVbRIqUDo2a/WeqaIcDt/7x/izGFsIcpNvUDTtEEe
rK1SNTJxsVxpbVM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:40:56 2025 by rpki-client