Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa
File:                     323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa (raw, json)
Hash identifier:          C3Z7DXsFOcPSXTvbzk2uP+12okfn9coFemtLZBHVdZ0=
Subject key identifier:   62:67:FC:74:C3:FC:17:36:13:77:FD:29:1D:51:C7:4E:B3:5E:00:9D
Certificate issuer:       /CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
Certificate serial:       0C9A57AFC286F54209616C62C10E1D23A04F7C10
Authority key identifier: B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa
Signing time:             Tue 03 Oct 2023 20:11:44 +0000
ROA not before:           Tue 03 Oct 2023 20:06:44 +0000
ROA not after:            Tue 01 Oct 2024 20:11:44 +0000
asID:                     52756
IP address blocks:        2801:80:1c10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:57:af:c2:86:f5:42:09:61:6c:62:c1:0e:1d:23:a0:4f:7c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
        Validity
            Not Before: Oct  3 20:06:44 2023 GMT
            Not After : Oct  1 20:11:44 2024 GMT
        Subject: CN=6267FC74C3FC17361377FD291D51C74EB35E009D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:05:7c:5c:f3:52:01:f3:f7:3e:63:14:36:
                    f8:a7:db:65:46:8f:de:6b:dc:80:ea:d0:23:33:5f:
                    06:88:9f:ad:28:eb:86:d0:64:e1:13:5b:d5:ea:5e:
                    3b:c9:08:ad:be:67:ae:77:a5:a7:13:77:31:8e:2a:
                    1b:3a:24:d8:be:f4:a7:bc:6f:c0:cc:26:0a:f2:1b:
                    3f:62:f2:68:ca:39:a2:37:bc:e8:6b:6f:c4:1a:14:
                    d3:fa:7d:c3:c6:b7:4f:36:7e:6b:e5:9e:2f:93:64:
                    00:0a:bd:37:58:26:7b:ee:c2:e7:14:fb:0a:22:b3:
                    c1:6a:65:87:59:15:a6:9c:e6:76:89:e0:c3:1b:e7:
                    99:01:a8:8d:11:e9:00:71:70:e0:3a:3a:b6:18:26:
                    75:ca:fa:95:80:43:a3:24:9d:a1:28:ce:53:5c:08:
                    78:97:a1:7b:f9:b0:e8:31:d6:c7:f8:3c:f6:54:49:
                    2f:85:07:a4:8f:6d:5d:67:d1:41:36:9c:c0:bb:2c:
                    22:b1:b4:8f:10:27:a9:c9:d2:d5:d5:6f:c8:9e:14:
                    e0:fb:ef:0d:65:b9:51:3d:cb:90:3e:4e:13:bb:2b:
                    a5:d6:91:19:4a:dd:bd:7c:b3:63:1a:b9:d6:6e:68:
                    83:b8:16:84:27:31:26:57:d3:4a:04:c7:d7:2c:be:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:FC:74:C3:FC:17:36:13:77:FD:29:1D:51:C7:4E:B3:5E:00:9D
            X509v3 Authority Key Identifier:
                keyid:B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1c10::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:78:b5:b8:b1:81:76:8b:1b:9f:f7:c0:92:d4:b4:0c:f4:45:
         1b:31:53:6f:41:13:f4:ac:7f:25:0e:7f:6a:44:b1:53:b2:ed:
         9a:99:ff:1e:d3:71:e9:51:e5:63:08:96:83:34:cf:df:8e:1e:
         27:fc:47:a0:62:67:d3:70:94:7d:10:41:7c:ba:44:0e:61:1f:
         09:7e:4c:a0:e6:02:e1:e6:08:c3:61:b0:7b:72:98:eb:43:a0:
         d0:79:a3:37:2c:2d:61:62:e2:b1:f4:fc:22:98:94:a4:e7:1a:
         9b:99:78:89:c1:1b:f5:cb:5d:a3:25:55:fd:9e:ba:ef:fc:79:
         e9:d3:dd:2a:d6:a2:00:8f:c7:54:a7:b2:62:8e:3f:84:f1:4b:
         9d:03:42:af:97:a3:7e:d5:73:6a:72:d8:b3:dd:fb:aa:b2:b0:
         b4:0d:d9:c7:92:fd:99:55:e2:5d:d0:c8:f6:b6:11:ae:47:19:
         3b:00:cb:76:49:9c:ad:4c:02:0a:51:c6:fa:08:f7:b3:8b:09:
         e4:b5:d1:a0:48:61:90:89:08:a2:c3:f5:30:21:0b:4a:32:7a:
         d2:40:8f:de:7d:10:1a:db:cc:0d:ad:ab:de:de:eb:fb:5a:1f:
         95:d4:2b:26:a1:5d:3d:61:9e:d7:02:cc:7a:7c:ae:7e:b4:45:
         8f:0a:a8:42
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUDJpXr8KG9UIJYWxiwQ4dI6BPfBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlDRDUwMERBMkJDOEMyNzEwNDg2ODAyRDdGMUMwMDYx
MzZGRDZCNDAeFw0yMzEwMDMyMDA2NDRaFw0yNDEwMDEyMDExNDRaMDMxMTAvBgNV
BAMTKDYyNjdGQzc0QzNGQzE3MzYxMzc3RkQyOTFENTFDNzRFQjM1RTAwOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOwV8XPNSAfP3PmMUNvin22VG
j95r3IDq0CMzXwaIn60o64bQZOETW9XqXjvJCK2+Z653pacTdzGOKhs6JNi+9Ke8
b8DMJgryGz9i8mjKOaI3vOhrb8QaFNP6fcPGt082fmvlni+TZAAKvTdYJnvuwucU
+wois8FqZYdZFaac5naJ4MMb55kBqI0R6QBxcOA6OrYYJnXK+pWAQ6MknaEozlNc
CHiXoXv5sOgx1sf4PPZUSS+FB6SPbV1n0UE2nMC7LCKxtI8QJ6nJ0tXVb8ieFOD7
7w1luVE9y5A+ThO7K6XWkRlK3b18s2MaudZuaIO4FoQnMSZX00oEx9csvlbTAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUYmf8dMP8FzYTd/0pHVHHTrNeAJ0wHwYDVR0j
BBgwFoAUuc1QDaK8jCcQSGgC1/HABhNv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURhNXRDcmZtR3M0d3hTcXZaTlRoWWJCdDJhZk02cXhQNmNtYmV5eVk1
cVAvMC9COUNENTAwREEyQkM4QzI3MTA0ODY4MDJEN0YxQzAwNjEzNkZENkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5Q0Q1MDBEQTJCQzhDMjcx
MDQ4NjgwMkQ3RjFDMDA2MTM2RkQ2QjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEYTV0Q3JmbUdzNHd4U3F2Wk5UaFliQnQyYWZNNnF4UDZjbWJleXlZNXFQLzAv
MzIzODMwMzEzYTM4MzAzYTMxNjMzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMjM3MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAIAcEDANBgkqhkiG9w0BAQsFAAOCAQEA
wni1uLGBdosbn/fAktS0DPRFGzFTb0ET9Kx/JQ5/akSxU7Ltmpn/HtNx6VHlYwiW
gzTP344eJ/xHoGJn03CUfRBBfLpEDmEfCX5MoOYC4eYIw2Gwe3KY60Og0HmjNywt
YWLisfT8IpiUpOcam5l4icEb9ctdoyVV/Z667/x56dPdKtaiAI/HVKeyYo4/hPFL
nQNCr5ejftVzanLYs937qrKwtA3Zx5L9mVXiXdDI9rYRrkcZOwDLdkmcrUwCClHG
+gj3s4sJ5LXRoEhhkIkIosP1MCELSjJ60kCP3n0QGtvMDa2r3t7r+1ofldQrJqFd
PWGe1wLMenyufrRFjwqoQg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:13 2025 by rpki-client