Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3a2f33322d313238203d3e20323633303833.roa
File:                     323830313a62363a3a2f33322d313238203d3e20323633303833.roa (raw, json)
Hash identifier:          TZZ9i9noVRAp7TOzaddlhqVeaiXjNbWsNS8EXyJ13bA=
Subject key identifier:   CE:39:33:C6:89:7B:25:F4:79:53:65:99:FC:81:38:EF:36:61:FB:1E
Certificate issuer:       /CN=43A516A504F5064680E71E74458628230159DB80
Certificate serial:       5C15D2BF3390D78D8A7157B70B2A9B23271A9162
Authority key identifier: 43:A5:16:A5:04:F5:06:46:80:E7:1E:74:45:86:28:23:01:59:DB:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A516A504F5064680E71E74458628230159DB80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3a2f33322d313238203d3e20323633303833.roa
Signing time:             Mon 01 Apr 2024 20:13:46 +0000
ROA not before:           Mon 01 Apr 2024 20:08:46 +0000
ROA not after:            Mon 31 Mar 2025 20:13:46 +0000
asID:                     263083
IP address blocks:        2801:b6::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:15:d2:bf:33:90:d7:8d:8a:71:57:b7:0b:2a:9b:23:27:1a:91:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A516A504F5064680E71E74458628230159DB80
        Validity
            Not Before: Apr  1 20:08:46 2024 GMT
            Not After : Mar 31 20:13:46 2025 GMT
        Subject: CN=CE3933C6897B25F479536599FC8138EF3661FB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2f:3b:43:db:06:f3:4e:7e:8f:83:11:61:32:
                    39:04:98:8f:7d:de:27:00:10:ef:f8:46:f1:73:24:
                    ce:09:be:0a:a0:72:fd:ba:37:e2:f9:ee:a8:61:d9:
                    5a:1b:55:9a:0d:92:d1:fa:51:68:13:c3:6b:f1:f5:
                    e8:ff:fd:e6:3e:4f:58:c3:20:37:25:33:92:20:70:
                    2f:bb:c2:a5:ff:16:89:7f:d3:f7:86:a0:3e:7c:b2:
                    a0:6a:b0:ae:f3:e2:77:7b:b0:6a:c0:75:12:59:2d:
                    8d:6e:ae:ef:32:57:d5:14:73:3b:bf:1a:9d:5e:7d:
                    6a:77:39:6f:fd:02:63:26:1f:a6:f1:e6:59:a2:38:
                    bc:ca:68:a4:e3:89:37:53:90:98:6c:29:13:6f:43:
                    69:a4:2f:fd:e1:d0:94:6b:a6:f0:67:87:72:8c:26:
                    24:65:40:95:37:19:d7:09:a7:b1:a2:8a:51:9f:d3:
                    5d:dd:f7:af:72:aa:79:83:14:3c:dc:d1:f7:2d:a3:
                    4b:2d:b4:4d:83:b2:41:2e:3b:0e:0f:be:40:f6:04:
                    5a:36:f8:6f:54:03:e1:79:1d:99:d4:4a:0d:4b:18:
                    2b:37:94:f1:20:3d:0b:45:f8:64:69:f3:12:6c:8a:
                    ea:ab:b5:76:8e:b6:a6:a8:f9:ea:67:6a:10:8c:a6:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:39:33:C6:89:7B:25:F4:79:53:65:99:FC:81:38:EF:36:61:FB:1E
            X509v3 Authority Key Identifier:
                keyid:43:A5:16:A5:04:F5:06:46:80:E7:1E:74:45:86:28:23:01:59:DB:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/43A516A504F5064680E71E74458628230159DB80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A516A504F5064680E71E74458628230159DB80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3a2f33322d313238203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:82:3e:9d:df:33:44:d4:74:70:a7:f2:ac:a1:6b:48:83:05:
         03:f4:92:73:da:5b:fe:15:1e:09:8e:81:b7:54:e7:70:5f:77:
         59:7e:6b:aa:25:d9:7f:d6:f2:30:9d:86:a5:82:3d:45:35:19:
         28:7d:e1:3b:9e:10:cf:9f:d6:e1:61:c8:8a:78:72:a7:06:55:
         5d:aa:8e:46:9d:91:cb:c3:d1:fc:9c:d3:25:33:14:46:90:45:
         01:d1:e5:50:05:c6:cd:52:d7:54:8d:39:66:a0:dd:12:bc:34:
         f5:92:86:39:bd:02:3d:8e:11:9c:e9:c0:4f:1c:c7:49:82:1e:
         6c:2f:f8:33:cd:b7:f5:ee:75:60:d6:99:c8:56:50:af:ff:a8:
         b6:a6:e8:d4:82:3e:95:5b:80:bb:6d:9b:0c:45:9c:cb:11:27:
         b3:b6:ea:f3:66:99:ae:1f:41:29:80:3b:e0:f6:62:01:dc:f2:
         34:ba:48:7b:1f:87:78:6b:b9:a7:02:44:0b:8b:62:9c:0d:a0:
         45:08:b6:85:bd:19:2b:c4:e9:04:73:8b:cd:36:12:7a:6c:69:
         64:99:55:31:66:76:2c:89:c7:73:ba:ae:16:ea:63:2d:60:af:
         e6:cb:25:32:79:f4:5f:6e:68:84:9d:6c:99:85:c1:bd:de:4b:
         6d:f8:b4:2c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXBXSvzOQ142KcVe3CyqbIycakWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBNTE2QTUwNEY1MDY0NjgwRTcxRTc0NDU4NjI4MjMw
MTU5REI4MDAeFw0yNDA0MDEyMDA4NDZaFw0yNTAzMzEyMDEzNDZaMDMxMTAvBgNV
BAMTKENFMzkzM0M2ODk3QjI1RjQ3OTUzNjU5OUZDODEzOEVGMzY2MUZCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqLztD2wbzTn6PgxFhMjkEmI99
3icAEO/4RvFzJM4Jvgqgcv26N+L57qhh2VobVZoNktH6UWgTw2vx9ej//eY+T1jD
IDclM5IgcC+7wqX/Fol/0/eGoD58sqBqsK7z4nd7sGrAdRJZLY1uru8yV9UUczu/
Gp1efWp3OW/9AmMmH6bx5lmiOLzKaKTjiTdTkJhsKRNvQ2mkL/3h0JRrpvBnh3KM
JiRlQJU3GdcJp7GiilGf013d969yqnmDFDzc0fcto0sttE2DskEuOw4PvkD2BFo2
+G9UA+F5HZnUSg1LGCs3lPEgPQtF+GRp8xJsiuqrtXaOtqao+epnahCMpiULAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUzjkzxol7JfR5U2WZ/IE47zZh+x4wHwYDVR0j
BBgwFoAUQ6UWpQT1BkaA5x50RYYoIwFZ24AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt
OWIvMC80M0E1MTZBNTA0RjUwNjQ2ODBFNzFFNzQ0NTg2MjgyMzAxNTlEQjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQTUxNkE1MDRGNTA2NDY4
MEU3MUU3NDQ1ODYyODIzMDE1OURCODAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzROblo4MmEya0p2Yjlmd2FIZ2pKVm9vYk1WN1duWEs5SEQ0c1B4MVJUbTliLzAv
MzIzODMwMzEzYTYyMzYzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMyMzYzMzMw
MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgBALYwDQYJKoZIhvcNAQELBQADggEBALOCPp3fM0TU
dHCn8qyha0iDBQP0knPaW/4VHgmOgbdU53Bfd1l+a6ol2X/W8jCdhqWCPUU1GSh9
4TueEM+f1uFhyIp4cqcGVV2qjkadkcvD0fyc0yUzFEaQRQHR5VAFxs1S11SNOWag
3RK8NPWShjm9Aj2OEZzpwE8cx0mCHmwv+DPNt/XudWDWmchWUK//qLam6NSCPpVb
gLttmwxFnMsRJ7O26vNmma4fQSmAO+D2YgHc8jS6SHsfh3hruacCRAuLYpwNoEUI
toW9GSvE6QRzi802EnpsaWSZVTFmdiyJx3O6rhbqYy1gr+bLJTJ59F9uaISdbJmF
wb3eS234tCw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:37 2025 by rpki-client