Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/323830343a353261343a3a2f33322d3438203d3e20323638353331.roa
File:                     323830343a353261343a3a2f33322d3438203d3e20323638353331.roa (raw, json)
Hash identifier:          YkicfE4fDtpcMl6Hm9fc1HfTZGO66SN0yHEzoA2c/xA=
Subject key identifier:   56:33:27:E6:96:92:82:A3:94:AB:4E:C0:9B:3E:78:D7:21:5D:10:3E
Certificate issuer:       /CN=0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C
Certificate serial:       3BCDEAF150F97253FE07612F8BC7F78BA27C45D0
Authority key identifier: 0D:EA:FC:F0:1F:09:2E:BA:06:C4:F4:AF:45:6F:5A:11:AF:CF:89:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/323830343a353261343a3a2f33322d3438203d3e20323638353331.roa
Signing time:             Mon 16 Oct 2023 18:08:59 +0000
ROA not before:           Mon 16 Oct 2023 18:03:59 +0000
ROA not after:            Mon 14 Oct 2024 18:08:59 +0000
asID:                     268531
IP address blocks:        2804:52a4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cd:ea:f1:50:f9:72:53:fe:07:61:2f:8b:c7:f7:8b:a2:7c:45:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C
        Validity
            Not Before: Oct 16 18:03:59 2023 GMT
            Not After : Oct 14 18:08:59 2024 GMT
        Subject: CN=563327E6969282A394AB4EC09B3E78D7215D103E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:af:4a:65:9f:71:a9:da:7e:82:98:9b:d6:
                    b6:54:ac:59:85:1f:32:59:c3:3c:1d:39:f1:87:b6:
                    b0:6a:53:88:23:83:a5:a5:c1:43:74:a0:6b:26:f5:
                    1b:90:b0:17:a2:09:cc:ac:11:7f:a8:61:82:97:8c:
                    04:6d:48:40:83:13:1e:d0:32:7a:3d:3a:23:6e:9b:
                    6a:58:28:86:54:44:62:8f:78:08:28:a7:c0:0a:95:
                    87:a0:39:a0:3f:ea:2f:f6:3f:e9:a0:e1:ef:97:20:
                    7d:26:43:bc:5a:3c:05:59:69:0b:59:37:61:c0:cc:
                    aa:6a:f2:1b:9b:02:8e:16:22:59:7e:26:91:b2:9b:
                    0a:eb:88:21:63:60:56:21:c7:b9:67:2d:d7:36:b7:
                    70:81:6b:e3:b8:3d:ad:22:6a:28:bf:d5:0d:a0:3d:
                    6a:53:12:1b:a2:41:b9:57:51:c4:4f:35:8d:7e:4e:
                    3d:cb:5c:44:ba:e1:41:f6:88:98:c4:dc:39:8d:39:
                    18:75:ae:b5:05:29:5a:99:45:a8:d9:ec:df:45:cb:
                    57:cd:b2:99:c8:3e:cc:d0:e4:40:93:eb:99:4e:99:
                    d9:50:df:ee:08:fb:f0:8f:c1:22:1d:eb:95:e2:dd:
                    3b:9c:4f:0c:84:94:a2:a8:ad:7f:1c:5a:3b:6b:90:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:27:E6:96:92:82:A3:94:AB:4E:C0:9B:3E:78:D7:21:5D:10:3E
            X509v3 Authority Key Identifier:
                keyid:0D:EA:FC:F0:1F:09:2E:BA:06:C4:F4:AF:45:6F:5A:11:AF:CF:89:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/323830343a353261343a3a2f33322d3438203d3e20323638353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:b1:96:d1:4b:60:78:26:d9:1e:8c:72:ac:04:da:24:b9:
         16:99:81:06:1b:9f:ff:2e:3a:de:79:7e:ae:7f:81:96:0c:0f:
         7b:93:b2:ef:3b:03:f1:d5:35:8a:38:73:54:c2:8e:cb:ed:e8:
         65:99:e5:03:a2:74:7d:1e:b9:ac:01:c8:11:8a:10:9e:67:83:
         06:77:1f:80:3b:f1:77:3e:82:56:52:10:8d:78:d4:9e:c6:73:
         3b:3b:fd:be:0c:6d:5b:32:e4:1c:a0:d8:c5:17:e2:34:39:fd:
         3c:2d:a6:00:7d:96:c4:50:9f:be:13:b3:ef:a0:b8:01:34:5e:
         cb:59:28:ff:4e:c9:b6:70:9a:b0:2d:e9:ec:4d:7c:40:ec:19:
         8a:fb:2f:39:d4:63:ab:6e:e8:22:e5:4f:59:51:2d:33:8b:99:
         fa:ae:29:43:55:04:0a:40:a8:c6:2d:49:c2:e0:a3:27:72:9a:
         b4:f5:29:7b:1a:cb:28:84:41:dc:79:fb:d4:a1:5b:b4:9e:1a:
         cc:6e:68:e3:1d:08:3d:fe:23:3a:0d:bb:e6:6a:8f:0f:7f:4c:
         46:d5:0a:15:f1:91:c1:b6:3f:81:27:1e:04:b2:70:96:81:f9:
         9b:6f:b7:4f:27:c5:e6:63:65:93:57:4b:cd:62:23:2b:53:8e:
         9d:61:41:87
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO83q8VD5clP+B2Evi8f3i6J8RdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFQUZDRjAxRjA5MkVCQTA2QzRGNEFGNDU2RjVBMTFB
RkNGODk2QzAeFw0yMzEwMTYxODAzNTlaFw0yNDEwMTQxODA4NTlaMDMxMTAvBgNV
BAMTKDU2MzMyN0U2OTY5MjgyQTM5NEFCNEVDMDlCM0U3OEQ3MjE1RDEwM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePa9KZZ9xqdp+gpib1rZUrFmF
HzJZwzwdOfGHtrBqU4gjg6WlwUN0oGsm9RuQsBeiCcysEX+oYYKXjARtSECDEx7Q
Mno9OiNum2pYKIZURGKPeAgop8AKlYegOaA/6i/2P+mg4e+XIH0mQ7xaPAVZaQtZ
N2HAzKpq8hubAo4WIll+JpGymwrriCFjYFYhx7lnLdc2t3CBa+O4Pa0iaii/1Q2g
PWpTEhuiQblXUcRPNY1+Tj3LXES64UH2iJjE3DmNORh1rrUFKVqZRajZ7N9Fy1fN
spnIPszQ5ECT65lOmdlQ3+4I+/CPwSId65Xi3TucTwyElKKorX8cWjtrkDzVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVjMn5paSgqOUq07Amz541yFdED4wHwYDVR0j
BBgwFoAUDer88B8JLroGxPSvRW9aEa/PiWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHplS3NkVVhieW12OUFzblRFVGlLQXhScUNiWGNIdHB0ZFc1QmY4M3dt
MzQvMC8wREVBRkNGMDFGMDkyRUJBMDZDNEY0QUY0NTZGNUExMUFGQ0Y4OTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBERUFGQ0YwMUYwOTJFQkEw
NkM0RjRBRjQ1NkY1QTExQUZDRjg5NkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR6ZUtzZFVYYnltdjlBc25URVRpS0F4UnFDYlhjSHRwdGRXNUJmODN3bTM0LzAv
MzIzODMwMzQzYTM1MzI2MTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzUzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARSpDANBgkqhkiG9w0BAQsFAAOCAQEAaxixltFL
YHgm2R6McqwE2iS5FpmBBhuf/y463nl+rn+BlgwPe5Oy7zsD8dU1ijhzVMKOy+3o
ZZnlA6J0fR65rAHIEYoQnmeDBncfgDvxdz6CVlIQjXjUnsZzOzv9vgxtWzLkHKDY
xRfiNDn9PC2mAH2WxFCfvhOz76C4ATRey1ko/07JtnCasC3p7E18QOwZivsvOdRj
q27oIuVPWVEtM4uZ+q4pQ1UECkCoxi1JwuCjJ3KatPUpexrLKIRB3Hn71KFbtJ4a
zG5o4x0IPf4jOg275mqPD39MRtUKFfGRwbY/gSceBLJwloH5m2+3TyfF5mNlk1dL
zWIjK1OOnWFBhw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:14:29 2025 by rpki-client