Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/0/323830343a376261303a3a2f33322d313238203d3e20323731343433.roa
File:                     323830343a376261303a3a2f33322d313238203d3e20323731343433.roa (raw, json)
Hash identifier:          65q6iZuF6tmAv60cIIf+RZEAabzg7DnyfM1R6MtC4Kc=
Subject key identifier:   C5:23:48:A2:E2:12:88:D2:A5:5A:EE:85:B2:5B:48:DF:DA:F2:80:54
Certificate issuer:       /CN=EF2C32F6063E9D4EC4084756C20CF93271DDC5DA
Certificate serial:       3012A5E09E8051C3AFB0DF8E53B63F79AD18BCE4
Authority key identifier: EF:2C:32:F6:06:3E:9D:4E:C4:08:47:56:C2:0C:F9:32:71:DD:C5:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF2C32F6063E9D4EC4084756C20CF93271DDC5DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/0/323830343a376261303a3a2f33322d313238203d3e20323731343433.roa
Signing time:             Tue 07 Mar 2023 21:45:24 +0000
ROA not before:           Tue 07 Mar 2023 21:40:24 +0000
ROA not after:            Tue 05 Mar 2024 21:45:24 +0000
asID:                     271443
IP address blocks:        2804:7ba0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:12:a5:e0:9e:80:51:c3:af:b0:df:8e:53:b6:3f:79:ad:18:bc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF2C32F6063E9D4EC4084756C20CF93271DDC5DA
        Validity
            Not Before: Mar  7 21:40:24 2023 GMT
            Not After : Mar  5 21:45:24 2024 GMT
        Subject: CN=C52348A2E21288D2A55AEE85B25B48DFDAF28054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:10:f5:83:e9:80:c4:f5:9d:b2:c8:f2:ed:
                    a6:3c:b2:38:00:d9:6b:60:7e:9d:d0:7c:91:81:74:
                    06:d1:f0:bb:c2:af:09:1b:ad:82:44:fb:78:52:b6:
                    74:5b:c9:61:c5:46:77:9e:06:5e:bb:0f:a9:a0:26:
                    71:97:32:0a:d1:64:0e:42:fd:66:31:b9:ba:5c:db:
                    ae:c9:c4:6d:c6:15:10:3a:b9:96:9f:d1:9a:31:b0:
                    00:d0:06:e5:92:5f:ee:16:54:db:f8:ec:f3:15:c9:
                    5f:78:7f:1b:ab:d3:68:f9:22:dd:fe:78:eb:d8:6b:
                    61:82:f3:81:29:e4:67:8f:89:ef:7c:1e:e2:c5:94:
                    bc:03:85:3c:b2:ca:cc:66:76:61:a0:77:c1:58:22:
                    c6:ff:4e:3b:2c:b4:b1:d1:35:1f:2c:7a:58:35:a5:
                    1d:6f:23:1c:8b:61:88:cd:bc:8c:79:3d:fa:07:02:
                    42:bd:24:5f:5b:89:e5:6b:46:49:25:37:94:45:98:
                    af:1d:ae:a5:48:23:30:f6:74:03:62:53:2c:dd:bd:
                    c0:93:b1:e0:67:66:b7:b2:20:30:d6:05:dd:a1:af:
                    8e:13:6b:12:a3:52:de:7b:d7:87:5a:ba:55:b7:96:
                    a1:56:1f:74:ab:86:66:70:bc:39:1a:cb:d0:75:63:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:23:48:A2:E2:12:88:D2:A5:5A:EE:85:B2:5B:48:DF:DA:F2:80:54
            X509v3 Authority Key Identifier:
                keyid:EF:2C:32:F6:06:3E:9D:4E:C4:08:47:56:C2:0C:F9:32:71:DD:C5:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/0/EF2C32F6063E9D4EC4084756C20CF93271DDC5DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF2C32F6063E9D4EC4084756C20CF93271DDC5DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/0/323830343a376261303a3a2f33322d313238203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:ce:9c:87:26:71:58:17:a2:d8:64:d0:2f:b7:c9:18:2e:
         50:98:0d:85:44:7b:a3:53:00:52:be:ec:29:77:56:15:9f:ca:
         03:05:46:55:6e:fb:83:f6:ce:4e:a0:9f:89:2b:67:01:60:ed:
         23:e5:1b:23:b9:02:37:ba:99:0f:aa:b5:e5:6f:b8:8d:d8:26:
         25:e6:d4:96:9a:fd:10:c4:20:a4:5d:64:ba:9b:d5:8d:93:07:
         f5:a2:97:33:53:bd:0e:80:4b:2d:f6:44:e2:65:53:86:76:32:
         5c:70:ec:9f:f4:bb:87:74:3c:8e:3a:70:47:ef:e2:74:66:ca:
         b7:b8:ff:e2:e5:f2:ae:4e:d6:05:3b:22:ee:b1:2a:14:12:ed:
         08:9f:41:5c:1b:7a:e9:cb:21:c8:84:4e:d4:be:9f:ff:2a:10:
         b4:9c:39:b7:63:8b:2d:4c:ca:1d:fd:91:4c:32:18:51:26:d3:
         9b:67:20:e2:02:d9:be:f3:bc:ac:0b:57:f5:74:ff:71:c3:24:
         09:35:4d:06:22:00:30:b0:af:5c:a9:f3:6f:21:52:ce:ba:f0:
         91:a2:19:d4:ef:dc:c7:47:65:d6:9c:02:25:fd:32:06:50:3a:
         6c:c3:9d:22:9f:7e:fc:b6:32:1c:f3:57:0d:d8:07:5d:e4:8a:
         51:86:cb:98
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUMBKl4J6AUcOvsN+OU7Y/ea0YvOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYyQzMyRjYwNjNFOUQ0RUM0MDg0NzU2QzIwQ0Y5MzI3
MUREQzVEQTAeFw0yMzAzMDcyMTQwMjRaFw0yNDAzMDUyMTQ1MjRaMDMxMTAvBgNV
BAMTKEM1MjM0OEEyRTIxMjg4RDJBNTVBRUU4NUIyNUI0OERGREFGMjgwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYhD1g+mAxPWdssjy7aY8sjgA
2Wtgfp3QfJGBdAbR8LvCrwkbrYJE+3hStnRbyWHFRneeBl67D6mgJnGXMgrRZA5C
/WYxubpc267JxG3GFRA6uZaf0ZoxsADQBuWSX+4WVNv47PMVyV94fxur02j5It3+
eOvYa2GC84Ep5GePie98HuLFlLwDhTyyysxmdmGgd8FYIsb/TjsstLHRNR8selg1
pR1vIxyLYYjNvIx5PfoHAkK9JF9bieVrRkklN5RFmK8drqVIIzD2dANiUyzdvcCT
seBnZreyIDDWBd2hr44TaxKjUt5714daulW3lqFWH3SrhmZwvDkay9B1Y56xAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUxSNIouISiNKlWu6FsltI39rygFQwHwYDVR0j
BBgwFoAU7ywy9gY+nU7ECEdWwgz5MnHdxdowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxGankyNjUydnBWQm02b3VyQ3RDZFlTa3JBY3BYTXhiRjY2c2Eyb2Zy
cjkvMC9FRjJDMzJGNjA2M0U5RDRFQzQwODQ3NTZDMjBDRjkzMjcxRERDNURBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGMkMzMkY2MDYzRTlENEVD
NDA4NDc1NkMyMENGOTMyNzFEREM1REEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMRmp5MjY1MnZwVkJtNm91ckN0Q2RZU2tyQWNwWE14YkY2NnNhMm9mcnI5LzAv
MzIzODMwMzQzYTM3NjI2MTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHugMA0GCSqGSIb3DQEBCwUAA4IBAQC1es6c
hyZxWBei2GTQL7fJGC5QmA2FRHujUwBSvuwpd1YVn8oDBUZVbvuD9s5OoJ+JK2cB
YO0j5RsjuQI3upkPqrXlb7iN2CYl5tSWmv0QxCCkXWS6m9WNkwf1opczU70OgEst
9kTiZVOGdjJccOyf9LuHdDyOOnBH7+J0Zsq3uP/i5fKuTtYFOyLusSoUEu0In0Fc
G3rpyyHIhE7Uvp//KhC0nDm3Y4stTMod/ZFMMhhRJtObZyDiAtm+87ysC1f1dP9x
wyQJNU0GIgAwsK9cqfNvIVLOuvCRohnU79zHR2XWnAIl/TIGUDpsw50in378tjIc
81cN2Add5IpRhsuY
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:36:18 2025 by rpki-client