Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/323830343a343738383a3a2f33322d3332203d3e20323637303630.roa
File:                     323830343a343738383a3a2f33322d3332203d3e20323637303630.roa (raw, json)
Hash identifier:          OQePynFuSfrFhuKYxhHd4HGgAr0LsLzm1fLBk1vsaN0=
Subject key identifier:   B6:FF:3C:C7:31:F7:45:17:4D:9D:12:6D:B8:A4:8B:9B:F4:E5:37:9A
Certificate issuer:       /CN=E54A9C7B6751540C380B4080CC3F4CB26ED99480
Certificate serial:       4760A9A632FC3C26C162447BCAF3045B86135CDB
Authority key identifier: E5:4A:9C:7B:67:51:54:0C:38:0B:40:80:CC:3F:4C:B2:6E:D9:94:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/323830343a343738383a3a2f33322d3332203d3e20323637303630.roa
Signing time:             Mon 21 Oct 2024 17:42:26 +0000
ROA not before:           Mon 21 Oct 2024 17:37:26 +0000
ROA not after:            Mon 20 Oct 2025 17:42:26 +0000
asID:                     267060
IP address blocks:        2804:4788::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:60:a9:a6:32:fc:3c:26:c1:62:44:7b:ca:f3:04:5b:86:13:5c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54A9C7B6751540C380B4080CC3F4CB26ED99480
        Validity
            Not Before: Oct 21 17:37:26 2024 GMT
            Not After : Oct 20 17:42:26 2025 GMT
        Subject: CN=B6FF3CC731F745174D9D126DB8A48B9BF4E5379A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:6c:c7:cc:ce:da:40:89:80:0a:9f:f6:90:
                    aa:a4:67:0a:d6:65:56:83:98:bb:fa:ba:d4:2a:75:
                    1f:0c:59:d9:2d:42:6e:b1:c0:b9:6d:98:d8:1b:8b:
                    7d:95:62:90:bf:df:33:40:90:04:35:e2:1b:08:e1:
                    e0:68:50:27:26:d6:a4:65:7c:cc:24:2c:5c:38:eb:
                    c6:a8:78:25:9a:cb:9c:c3:90:40:d3:bc:d0:b0:a3:
                    ed:42:9f:ab:21:ce:09:ae:df:9f:e4:dd:01:62:1c:
                    a9:05:3e:1b:70:6f:51:c8:c2:7b:10:84:85:23:99:
                    fa:70:b5:91:94:79:64:d7:36:07:9a:e8:e4:1f:62:
                    1e:8d:75:a3:bc:12:c9:a7:43:ec:45:18:be:f7:4d:
                    67:a7:a8:fe:16:17:0b:6d:09:b9:13:b0:b3:b2:7f:
                    12:a6:07:69:7e:4f:3d:e5:81:da:3a:38:f8:c3:98:
                    fe:8e:25:95:a0:cd:40:cf:67:12:e2:75:e4:62:9f:
                    50:73:34:49:0b:cd:96:59:a5:dc:ca:48:fc:ad:f1:
                    dc:dc:a6:77:b8:5f:a1:b0:33:da:bc:74:fb:70:97:
                    ad:5b:18:da:36:22:5c:0d:ce:a6:bc:f8:96:02:39:
                    a6:f5:ec:85:33:68:0f:7b:c4:00:ed:13:01:76:7d:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:3C:C7:31:F7:45:17:4D:9D:12:6D:B8:A4:8B:9B:F4:E5:37:9A
            X509v3 Authority Key Identifier:
                keyid:E5:4A:9C:7B:67:51:54:0C:38:0B:40:80:CC:3F:4C:B2:6E:D9:94:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/323830343a343738383a3a2f33322d3332203d3e20323637303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4788::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:e0:f3:fe:3d:bb:7e:c2:2c:85:30:a2:79:a9:ba:8b:1d:bb:
         4b:c6:7f:0e:fa:d9:bb:58:89:14:32:ad:09:c2:85:18:b4:a7:
         d0:68:ca:b5:b0:8e:23:e9:4b:c0:5f:85:a2:d7:65:ce:7d:b1:
         22:02:39:e9:4a:72:4c:49:af:c1:31:c4:34:09:3c:ba:f1:11:
         57:6b:86:60:a4:3b:37:57:6d:0d:8c:a5:d4:05:bf:78:89:99:
         88:19:da:7a:e2:ac:dd:a8:e6:69:38:f7:de:a1:20:b7:e7:b4:
         7f:23:21:38:ef:15:eb:d8:46:90:f2:4e:cc:6f:11:29:ed:3f:
         24:8c:71:35:7a:ab:ae:f8:3d:a4:7d:b3:ba:99:26:d7:a8:14:
         84:91:c6:ca:7d:96:90:18:56:2f:00:57:02:1f:f4:fe:c7:34:
         52:61:03:1a:54:e9:6d:db:73:05:99:56:c0:f5:5f:64:96:1a:
         bb:ea:14:1c:b7:8c:fd:b1:3f:da:01:f5:7d:1e:bd:31:f5:3e:
         e2:c1:4e:fe:af:a3:d0:ea:7e:b2:6a:26:2e:04:db:0c:a3:35:
         73:f2:46:29:7c:52:3d:78:b9:dc:8c:9d:e7:f4:17:51:ba:6b:
         0b:52:6f:12:e7:a2:98:9e:ff:f6:44:ba:94:16:9c:bc:4a:9c:
         a3:ae:4a:c4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUR2CppjL8PCbBYkR7yvMEW4YTXNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU0QTlDN0I2NzUxNTQwQzM4MEI0MDgwQ0MzRjRDQjI2
RUQ5OTQ4MDAeFw0yNDEwMjExNzM3MjZaFw0yNTEwMjAxNzQyMjZaMDMxMTAvBgNV
BAMTKEI2RkYzQ0M3MzFGNzQ1MTc0RDlEMTI2REI4QTQ4QjlCRjRFNTM3OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdGzHzM7aQImACp/2kKqkZwrW
ZVaDmLv6utQqdR8MWdktQm6xwLltmNgbi32VYpC/3zNAkAQ14hsI4eBoUCcm1qRl
fMwkLFw468aoeCWay5zDkEDTvNCwo+1Cn6shzgmu35/k3QFiHKkFPhtwb1HIwnsQ
hIUjmfpwtZGUeWTXNgea6OQfYh6NdaO8EsmnQ+xFGL73TWenqP4WFwttCbkTsLOy
fxKmB2l+Tz3lgdo6OPjDmP6OJZWgzUDPZxLideRin1BzNEkLzZZZpdzKSPyt8dzc
pne4X6GwM9q8dPtwl61bGNo2IlwNzqa8+JYCOab17IUzaA97xADtEwF2fXFbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtv88xzH3RRdNnRJtuKSLm/TlN5owHwYDVR0j
BBgwFoAU5Uqce2dRVAw4C0CAzD9Msm7ZlIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHJLSGdacmZWOGpKRXIxMVh3TlhyTW1MdHc3R2hHTFVOMUQ0dVVGaGNI
ak0vMC9FNTRBOUM3QjY3NTE1NDBDMzgwQjQwODBDQzNGNENCMjZFRDk5NDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NEE5QzdCNjc1MTU0MEMz
ODBCNDA4MENDM0Y0Q0IyNkVEOTk0ODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRyS0hnWnJmVjhqSkVyMTFYd05Yck1tTHR3N0doR0xVTjFENHVVRmhjSGpNLzAv
MzIzODMwMzQzYTM0MzczODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzAzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHiDANBgkqhkiG9w0BAQsFAAOCAQEAKODz/j27
fsIshTCieam6ix27S8Z/DvrZu1iJFDKtCcKFGLSn0GjKtbCOI+lLwF+Fotdlzn2x
IgI56UpyTEmvwTHENAk8uvERV2uGYKQ7N1dtDYyl1AW/eImZiBnaeuKs3ajmaTj3
3qEgt+e0fyMhOO8V69hGkPJOzG8RKe0/JIxxNXqrrvg9pH2zupkm16gUhJHGyn2W
kBhWLwBXAh/0/sc0UmEDGlTpbdtzBZlWwPVfZJYau+oUHLeM/bE/2gH1fR69MfU+
4sFO/q+j0Op+smomLgTbDKM1c/JGKXxSPXi53Iyd5/QXUbprC1JvEueimJ7/9kS6
lBacvEqco65KxA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:35 2025 by rpki-client