Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa
File:                     323830343a323865303a3a2f33322d3438203d3e20323632353530.roa (raw, json)
Hash identifier:          I1LqNz8L4G4O1wI9AdBfi2kvWs1scBCV7kH6AEdCdM8=
Subject key identifier:   43:64:BB:93:6E:4A:AB:B8:96:0C:46:B6:24:94:CD:FD:75:16:78:5C
Certificate issuer:       /CN=1F8CB944B2B1D6FE87A33063025ACC8AE1770F42
Certificate serial:       10FAC99C0B7FABFCD03BC466DFD021AB3E9EF4FF
Authority key identifier: 1F:8C:B9:44:B2:B1:D6:FE:87:A3:30:63:02:5A:CC:8A:E1:77:0F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F8CB944B2B1D6FE87A33063025ACC8AE1770F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa
Signing time:             Wed 04 Sep 2024 17:40:23 +0000
ROA not before:           Wed 04 Sep 2024 17:35:23 +0000
ROA not after:            Wed 03 Sep 2025 17:40:23 +0000
asID:                     262550
IP address blocks:        2804:28e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fa:c9:9c:0b:7f:ab:fc:d0:3b:c4:66:df:d0:21:ab:3e:9e:f4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8CB944B2B1D6FE87A33063025ACC8AE1770F42
        Validity
            Not Before: Sep  4 17:35:23 2024 GMT
            Not After : Sep  3 17:40:23 2025 GMT
        Subject: CN=4364BB936E4AABB8960C46B62494CDFD7516785C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:5f:6b:e7:3a:0f:ad:0e:80:84:42:e4:e1:
                    d7:e6:fb:96:14:14:2a:d8:c4:00:42:b4:f4:f0:02:
                    a5:c9:de:14:b0:d5:f6:3d:27:d7:5b:7f:f7:10:92:
                    78:a6:ff:62:e7:e3:dc:fc:b8:81:24:12:1b:05:92:
                    aa:5f:13:56:20:19:dd:5c:48:da:a3:0c:90:e7:18:
                    8c:8a:83:06:64:40:88:74:ea:d8:72:01:d6:75:83:
                    a5:9d:7f:30:41:59:85:4e:1b:97:69:db:5a:bf:8e:
                    86:be:a0:20:20:39:12:30:5d:03:e9:b5:e0:42:34:
                    09:58:5e:ed:28:d4:29:b2:ff:0f:ab:33:0c:8f:82:
                    f5:a5:d0:ab:c1:ab:ef:4f:02:9b:77:61:de:be:38:
                    02:87:1f:93:c8:24:ac:05:de:2c:39:36:15:a5:74:
                    e0:9d:94:dd:fc:19:5c:4b:62:7c:5e:da:da:9a:69:
                    87:9c:da:4c:19:5c:2d:5e:04:ca:53:70:26:e1:15:
                    b1:41:dc:20:b8:b1:8d:7d:04:f3:f0:85:29:b0:78:
                    f2:db:96:d6:b1:91:e5:9b:84:23:9b:1c:d6:ed:6e:
                    6b:21:8d:c5:43:88:c7:bd:9a:d1:06:14:fb:6e:83:
                    57:82:e3:9a:15:b6:3c:14:0d:06:78:fa:a6:67:d7:
                    60:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:64:BB:93:6E:4A:AB:B8:96:0C:46:B6:24:94:CD:FD:75:16:78:5C
            X509v3 Authority Key Identifier:
                keyid:1F:8C:B9:44:B2:B1:D6:FE:87:A3:30:63:02:5A:CC:8A:E1:77:0F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/1F8CB944B2B1D6FE87A33063025ACC8AE1770F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F8CB944B2B1D6FE87A33063025ACC8AE1770F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:90:04:0c:fc:67:a0:e5:ed:5b:a4:d7:96:95:6b:95:94:
         5f:96:4b:79:08:92:fb:52:a2:97:91:32:17:94:6d:7a:c7:87:
         b8:d9:9d:5e:b6:98:2c:46:f5:bf:b8:fa:9f:20:d5:50:6a:b8:
         99:fa:4c:29:3b:86:90:39:05:ea:a0:39:52:11:63:e2:73:6e:
         92:80:2b:ee:f5:d1:87:91:09:ce:be:ea:3f:ef:19:32:03:bb:
         88:95:e4:df:bc:d8:95:ef:dd:d3:6b:9b:22:1c:da:62:b5:eb:
         29:38:65:82:1e:b3:50:6a:21:8e:0f:95:cd:45:e5:62:1c:6c:
         62:41:d4:9a:60:07:0f:14:08:77:fa:c7:e5:06:82:21:8f:36:
         f9:e0:c9:0a:ce:1b:a8:19:ab:14:b5:83:78:28:0d:cb:e0:90:
         17:03:ac:67:31:c8:d4:19:12:12:d8:7f:93:3f:a3:60:ac:33:
         e1:d0:f7:36:f0:86:93:b1:c5:7d:d2:ca:e9:64:e5:bb:6b:40:
         e3:95:b4:8d:0b:18:ec:fc:13:c0:c6:2a:8f:f1:1c:b5:37:2a:
         2d:c1:2a:12:d0:e2:05:a3:e6:57:3a:53:b1:91:82:a9:cc:72:
         46:48:db:cd:6e:15:12:4e:84:79:b0:9a:29:78:2e:02:c7:42:
         75:02:98:b6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEPrJnAt/q/zQO8Rm39Ahqz6e9P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY4Q0I5NDRCMkIxRDZGRTg3QTMzMDYzMDI1QUNDOEFF
MTc3MEY0MjAeFw0yNDA5MDQxNzM1MjNaFw0yNTA5MDMxNzQwMjNaMDMxMTAvBgNV
BAMTKDQzNjRCQjkzNkU0QUFCQjg5NjBDNDZCNjI0OTRDREZENzUxNjc4NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84F9r5zoPrQ6AhELk4dfm+5YU
FCrYxABCtPTwAqXJ3hSw1fY9J9dbf/cQknim/2Ln49z8uIEkEhsFkqpfE1YgGd1c
SNqjDJDnGIyKgwZkQIh06thyAdZ1g6WdfzBBWYVOG5dp21q/joa+oCAgORIwXQPp
teBCNAlYXu0o1Cmy/w+rMwyPgvWl0KvBq+9PApt3Yd6+OAKHH5PIJKwF3iw5NhWl
dOCdlN38GVxLYnxe2tqaaYec2kwZXC1eBMpTcCbhFbFB3CC4sY19BPPwhSmwePLb
ltaxkeWbhCObHNbtbmshjcVDiMe9mtEGFPtug1eC45oVtjwUDQZ4+qZn12AhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQ2S7k25Kq7iWDEa2JJTN/XUWeFwwHwYDVR0j
BBgwFoAUH4y5RLKx1v6HozBjAlrMiuF3D0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1Vv
emQvMC8xRjhDQjk0NEIyQjFENkZFODdBMzMwNjMwMjVBQ0M4QUUxNzcwRjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGOENCOTQ0QjJCMUQ2RkU4
N0EzMzA2MzAyNUFDQzhBRTE3NzBGNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFU3BmalFGb21KUThlRmhSUW1yQWhVMUNTN1BlSnNYTVdrSFJUYnNVb3pkLzAv
MzIzODMwMzQzYTMyMzg2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQo4DANBgkqhkiG9w0BAQsFAAOCAQEAHE2QBAz8
Z6Dl7Vuk15aVa5WUX5ZLeQiS+1Kil5EyF5RteseHuNmdXraYLEb1v7j6nyDVUGq4
mfpMKTuGkDkF6qA5UhFj4nNukoAr7vXRh5EJzr7qP+8ZMgO7iJXk37zYle/d02ub
IhzaYrXrKThlgh6zUGohjg+VzUXlYhxsYkHUmmAHDxQId/rH5QaCIY82+eDJCs4b
qBmrFLWDeCgNy+CQFwOsZzHI1BkSEth/kz+jYKwz4dD3NvCGk7HFfdLK6WTlu2tA
45W0jQsY7PwTwMYqj/EctTcqLcEqEtDiBaPmVzpTsZGCqcxyRkjbzW4VEk6EebCa
KXguAsdCdQKYtg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:49 2025 by rpki-client