Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/323830343a313334303a3a2f33322d3438203d3e20323633353234.roa
File:                     323830343a313334303a3a2f33322d3438203d3e20323633353234.roa (raw, json)
Hash identifier:          Zh2wU4f5bzdCFLCVThhTCnjOB5zge5XeXQI7VxWoiA8=
Subject key identifier:   4F:E5:81:EA:F1:53:87:7B:F4:8C:CC:37:47:A7:8D:75:EF:42:1E:4F
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       2ABF3EDB064B7697402E7AB5ECE871FF7E7DFC22
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/323830343a313334303a3a2f33322d3438203d3e20323633353234.roa
Signing time:             Wed 14 Feb 2024 18:38:41 +0000
ROA not before:           Wed 14 Feb 2024 18:33:41 +0000
ROA not after:            Wed 12 Feb 2025 18:38:41 +0000
asID:                     263524
IP address blocks:        2804:1340::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:bf:3e:db:06:4b:76:97:40:2e:7a:b5:ec:e8:71:ff:7e:7d:fc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Feb 14 18:33:41 2024 GMT
            Not After : Feb 12 18:38:41 2025 GMT
        Subject: CN=4FE581EAF153877BF48CCC3747A78D75EF421E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:d3:0e:c0:3e:e4:07:3e:61:83:e8:1b:fe:
                    f9:6b:db:4e:61:5a:09:d6:ef:5f:b6:9f:e1:b8:13:
                    07:42:0e:fa:87:6f:ea:77:c3:8b:bb:5f:4e:a1:98:
                    32:ac:25:40:8f:f3:6e:b0:e9:87:c5:05:73:1a:c9:
                    78:44:cc:eb:8c:44:04:b9:3b:b3:fc:0b:72:5c:7f:
                    32:3a:18:ea:e0:12:82:b3:fa:4a:5d:94:0b:d2:bd:
                    10:f9:98:1f:d0:af:c0:d6:85:af:9e:3d:62:be:b2:
                    36:90:7f:bd:f7:4f:8a:03:fc:23:57:83:94:83:c6:
                    ab:ad:d0:75:20:69:ae:d3:ba:46:f3:c4:d2:c9:cb:
                    fd:4f:03:69:10:3e:67:07:04:dc:ed:d4:4e:75:58:
                    48:66:d7:f0:29:0a:56:34:23:e1:56:ee:db:6f:e2:
                    87:40:83:ba:7f:39:9b:c4:5e:1d:68:e0:ca:c4:9e:
                    c3:9b:c8:94:d5:41:22:03:5d:3d:fc:c2:46:c7:a6:
                    16:8c:9e:82:1d:11:e8:7b:c8:a1:be:27:e9:dd:9c:
                    2b:7c:44:6c:b6:c3:22:a5:f4:af:a5:c0:3f:2b:60:
                    94:78:d1:4f:6d:23:20:1d:ed:83:6c:d3:ef:8e:46:
                    6f:8a:da:37:4e:7b:7a:37:d1:1d:73:6d:24:b7:39:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:81:EA:F1:53:87:7B:F4:8C:CC:37:47:A7:8D:75:EF:42:1E:4F
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/323830343a313334303a3a2f33322d3438203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1340::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:6a:33:cc:3c:9e:b2:cd:20:0c:0a:21:9b:77:a1:af:b3:13:
         4e:51:c7:71:d1:07:ec:1a:1c:4e:03:71:b8:aa:db:17:90:a3:
         7f:17:37:9c:4e:5a:34:b3:d6:4f:e7:68:72:a4:3e:ff:e3:ee:
         4c:ef:75:70:a6:d2:38:24:9f:67:10:a4:ba:64:fb:78:29:4f:
         46:97:8e:a7:65:a4:fd:58:6f:43:48:e9:b4:77:56:51:8e:3a:
         84:9d:29:2a:ca:e0:c7:00:dc:1b:20:1c:ce:f8:6d:57:c4:dc:
         11:04:13:41:d7:de:58:8a:46:e6:26:d6:b7:85:7e:bf:ad:a6:
         56:dd:6a:18:df:34:cf:6f:27:9d:97:65:59:e2:b9:20:4a:21:
         55:25:cd:d1:2e:b0:ba:64:16:5c:2d:0a:39:db:c3:02:c8:60:
         60:75:ed:b1:7e:47:90:5f:06:e4:7b:7d:3b:5e:8d:4f:a7:2d:
         2f:78:85:83:2c:eb:62:bf:00:e7:ad:4f:66:25:6a:fe:ca:78:
         77:b5:25:d1:b7:3b:17:69:07:65:62:ba:09:94:d0:08:fd:b2:
         89:31:46:fe:97:2f:02:53:41:a6:4b:0a:f9:d0:b8:cd:00:50:
         ff:43:7a:52:f0:b0:05:fe:f2:a0:6c:11:67:a3:b0:28:ab:cc:
         fc:9b:c0:32
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKr8+2wZLdpdALnq17Ohx/359/CIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGQTlDQzgwRTRERTRBMUE2ODBENkE0REUzQzcyODBD
MjYyNzI1ODAeFw0yNDAyMTQxODMzNDFaFw0yNTAyMTIxODM4NDFaMDMxMTAvBgNV
BAMTKDRGRTU4MUVBRjE1Mzg3N0JGNDhDQ0MzNzQ3QTc4RDc1RUY0MjFFNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVdMOwD7kBz5hg+gb/vlr205h
WgnW71+2n+G4EwdCDvqHb+p3w4u7X06hmDKsJUCP826w6YfFBXMayXhEzOuMRAS5
O7P8C3JcfzI6GOrgEoKz+kpdlAvSvRD5mB/Qr8DWha+ePWK+sjaQf733T4oD/CNX
g5SDxqut0HUgaa7TukbzxNLJy/1PA2kQPmcHBNzt1E51WEhm1/ApClY0I+FW7ttv
4odAg7p/OZvEXh1o4MrEnsObyJTVQSIDXT38wkbHphaMnoIdEeh7yKG+J+ndnCt8
RGy2wyKl9K+lwD8rYJR40U9tIyAd7YNs0++ORm+K2jdOe3o30R1zbSS3OVfhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUT+WB6vFTh3v0jMw3R6eNde9CHk8wHwYDVR0j
BBgwFoAUXPqcyA5N5KGmgNak3jxygMJiclgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBDNEpSUzk2OUE3clJ3Qk42RU1oajZ3OVZjWHVLZjNFWVlIWlR5Tkoy
TGkvMC81Q0ZBOUNDODBFNERFNEExQTY4MEQ2QTRERTNDNzI4MEMyNjI3MjU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDRkE5Q0M4MEU0REU0QTFB
NjgwRDZBNERFM0M3MjgwQzI2MjcyNTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQQzRKUlM5NjlBN3JSd0JONkVNaGo2dzlWY1h1S2YzRVlZSFpUeU5KMkxpLzAv
MzIzODMwMzQzYTMxMzMzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQTQDANBgkqhkiG9w0BAQsFAAOCAQEAhmozzDye
ss0gDAohm3ehr7MTTlHHcdEH7BocTgNxuKrbF5Cjfxc3nE5aNLPWT+docqQ+/+Pu
TO91cKbSOCSfZxCkumT7eClPRpeOp2Wk/VhvQ0jptHdWUY46hJ0pKsrgxwDcGyAc
zvhtV8TcEQQTQdfeWIpG5ibWt4V+v62mVt1qGN80z28nnZdlWeK5IEohVSXN0S6w
umQWXC0KOdvDAshgYHXtsX5HkF8G5Ht9O16NT6ctL3iFgyzrYr8A561PZiVq/sp4
d7Ul0bc7F2kHZWK6CZTQCP2yiTFG/pcvAlNBpksK+dC4zQBQ/0N6UvCwBf7yoGwR
Z6OwKKvM/JvAMg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:52 2025 by rpki-client