Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d3333203d3e20323636353435.roa
File:                     323830343a336461383a3a2f33322d3333203d3e20323636353435.roa (raw, json)
Hash identifier:          bFeoxe1MY9I07JPDY5dJ68V8+03Dsscz9308loy2QAM=
Subject key identifier:   51:93:5C:F1:9A:A2:1F:24:CB:11:F4:87:CF:C9:78:74:E6:36:12:49
Certificate issuer:       /CN=AE4BD7B21208D3203D6C59108B06FAB2772A5E68
Certificate serial:       561672BE6BCF10DA6F714646B334328895B09B99
Authority key identifier: AE:4B:D7:B2:12:08:D3:20:3D:6C:59:10:8B:06:FA:B2:77:2A:5E:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d3333203d3e20323636353435.roa
Signing time:             Tue 19 Mar 2024 23:31:28 +0000
ROA not before:           Tue 19 Mar 2024 23:26:28 +0000
ROA not after:            Tue 18 Mar 2025 23:31:28 +0000
asID:                     266545
IP address blocks:        2804:3da8::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:16:72:be:6b:cf:10:da:6f:71:46:46:b3:34:32:88:95:b0:9b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4BD7B21208D3203D6C59108B06FAB2772A5E68
        Validity
            Not Before: Mar 19 23:26:28 2024 GMT
            Not After : Mar 18 23:31:28 2025 GMT
        Subject: CN=51935CF19AA21F24CB11F487CFC97874E6361249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:17:a0:2e:27:ea:73:cc:21:b9:d4:08:73:
                    20:26:b0:49:24:24:3d:0b:f4:52:c4:76:8e:0e:2c:
                    35:12:a5:f3:a3:c5:0c:a8:75:bb:f0:a3:ce:59:23:
                    7b:f4:ac:1e:4c:cd:ec:14:5e:79:e1:7f:bd:a1:0c:
                    e1:f4:b4:76:91:0d:ce:2c:81:66:99:b5:39:21:b2:
                    2a:bc:a2:3a:ff:c8:41:21:bf:b8:d4:95:9d:a3:66:
                    5e:e5:ed:97:f5:77:de:5a:1a:2d:87:cb:a2:42:fb:
                    3e:b0:8e:3e:37:0c:52:57:52:2b:47:b9:ef:10:42:
                    9d:6b:18:ca:89:84:0f:86:25:6c:ec:e4:de:64:7c:
                    d9:fd:ae:61:06:6e:63:95:8a:9e:92:f5:1f:06:98:
                    29:f7:ae:68:03:1d:9b:96:5b:d3:27:18:18:7e:a5:
                    9e:9e:9d:12:52:12:3f:c3:c7:73:e9:e2:28:38:29:
                    b9:68:86:c6:66:84:c5:19:38:82:f6:84:5f:8b:5d:
                    0f:3e:50:45:e2:08:15:bd:c2:15:c1:02:1d:04:7f:
                    b6:a5:0d:81:97:96:51:b7:e3:06:e9:e6:02:19:9d:
                    c5:ef:75:75:58:c7:43:53:ab:e8:61:fa:98:14:26:
                    79:13:d1:ba:6d:f0:6e:d4:bc:c1:f0:19:34:3f:02:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:93:5C:F1:9A:A2:1F:24:CB:11:F4:87:CF:C9:78:74:E6:36:12:49
            X509v3 Authority Key Identifier:
                keyid:AE:4B:D7:B2:12:08:D3:20:3D:6C:59:10:8B:06:FA:B2:77:2A:5E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d3333203d3e20323636353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:04:d0:c0:96:95:e3:27:8e:94:f6:24:80:11:52:cf:34:6c:
         7b:4a:1e:67:0d:9b:f0:55:b9:b6:16:90:d3:d6:56:3a:be:1b:
         ba:23:e3:9e:10:17:2e:f7:b3:e4:f5:5c:e2:03:08:ba:e1:3f:
         dc:c9:93:2a:2e:2f:b4:40:04:db:8a:72:a0:fc:67:79:cd:c6:
         83:ba:f0:b7:47:d5:89:3b:83:14:b6:76:b3:6c:59:d0:f5:24:
         f0:10:ce:d6:d3:0b:35:34:c5:0b:7b:e7:d9:96:b0:ae:33:4d:
         2d:8a:fa:ef:4b:fe:c6:72:0d:f2:8e:15:cd:8a:47:64:4c:b2:
         4c:b3:17:1e:0b:b5:57:00:bc:34:16:e4:61:e1:7c:a9:b8:7c:
         22:ee:18:11:62:d4:e7:45:89:8d:56:66:63:43:df:f4:b8:29:
         97:5e:bc:68:0a:36:b5:61:51:56:f9:f2:26:4b:09:30:c0:a5:
         c4:98:17:19:4d:7d:e8:7d:80:6a:d8:13:99:01:76:cc:24:97:
         2c:41:f0:cf:63:9b:e1:cc:6f:10:7c:02:d5:49:c3:9f:c8:79:
         e1:aa:d2:cc:28:c1:fe:3d:25:a7:17:ac:1c:bf:2f:7c:e5:af:
         8b:2c:5e:8a:31:94:06:22:d5:30:fc:ee:ec:f1:d8:70:e1:bf:
         1b:17:87:5e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVhZyvmvPENpvcUZGszQyiJWwm5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0QkQ3QjIxMjA4RDMyMDNENkM1OTEwOEIwNkZBQjI3
NzJBNUU2ODAeFw0yNDAzMTkyMzI2MjhaFw0yNTAzMTgyMzMxMjhaMDMxMTAvBgNV
BAMTKDUxOTM1Q0YxOUFBMjFGMjRDQjExRjQ4N0NGQzk3ODc0RTYzNjEyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPABegLifqc8whudQIcyAmsEkk
JD0L9FLEdo4OLDUSpfOjxQyodbvwo85ZI3v0rB5MzewUXnnhf72hDOH0tHaRDc4s
gWaZtTkhsiq8ojr/yEEhv7jUlZ2jZl7l7Zf1d95aGi2Hy6JC+z6wjj43DFJXUitH
ue8QQp1rGMqJhA+GJWzs5N5kfNn9rmEGbmOVip6S9R8GmCn3rmgDHZuWW9MnGBh+
pZ6enRJSEj/Dx3Pp4ig4KblohsZmhMUZOIL2hF+LXQ8+UEXiCBW9whXBAh0Ef7al
DYGXllG34wbp5gIZncXvdXVYx0NTq+hh+pgUJnkT0bpt8G7UvMHwGTQ/AuIDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUZNc8ZqiHyTLEfSHz8l4dOY2EkkwHwYDVR0j
BBgwFoAUrkvXshII0yA9bFkQiwb6sncqXmgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFcyM05laTVEdnpYWGJ4d3I1NXd3c3RWc1MxdGVWbWZKQ3RwSEhSWEJh
TTYvMC9BRTRCRDdCMjEyMDhEMzIwM0Q2QzU5MTA4QjA2RkFCMjc3MkE1RTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFNEJEN0IyMTIwOEQzMjAz
RDZDNTkxMDhCMDZGQUIyNzcyQTVFNjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRXMjNOZWk1RHZ6WFhieHdyNTV3d3N0VnNTMXRlVm1mSkN0cEhIUlhCYU02LzAv
MzIzODMwMzQzYTMzNjQ2MTM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM2
MzUzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ9qDANBgkqhkiG9w0BAQsFAAOCAQEAKQTQwJaV
4yeOlPYkgBFSzzRse0oeZw2b8FW5thaQ09ZWOr4buiPjnhAXLvez5PVc4gMIuuE/
3MmTKi4vtEAE24pyoPxnec3Gg7rwt0fViTuDFLZ2s2xZ0PUk8BDO1tMLNTTFC3vn
2ZawrjNNLYr670v+xnIN8o4VzYpHZEyyTLMXHgu1VwC8NBbkYeF8qbh8Iu4YEWLU
50WJjVZmY0Pf9Lgpl168aAo2tWFRVvnyJksJMMClxJgXGU196H2AatgTmQF2zCSX
LEHwz2Ob4cxvEHwC1UnDn8h54arSzCjB/j0lpxesHL8vfOWviyxeijGUBiLVMPzu
7PHYcOG/GxeHXg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:03 2025 by rpki-client