Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3a2f34302d3430203d3e203631363636.roa
File:                     323830343a316361303a3a2f34302d3430203d3e203631363636.roa (raw, json)
Hash identifier:          jcY6vrfIJAPpYYqYnHkBGuFkkjl8JOWJEcN1JQOgQMk=
Subject key identifier:   FC:34:20:9D:82:59:80:C1:7F:BA:54:B1:AF:F4:05:87:CE:F0:FE:DE
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       494EFFDD901417980B969458CA419243B31F31F5
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3a2f34302d3430203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:55 +0000
ROA not before:           Thu 14 Dec 2023 13:15:55 +0000
ROA not after:            Thu 12 Dec 2024 13:20:55 +0000
asID:                     61666
IP address blocks:        2804:1ca0::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4e:ff:dd:90:14:17:98:0b:96:94:58:ca:41:92:43:b3:1f:31:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:55 2023 GMT
            Not After : Dec 12 13:20:55 2024 GMT
        Subject: CN=FC34209D825980C17FBA54B1AFF40587CEF0FEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:37:3c:f1:9e:7a:01:5e:ee:1d:cf:5c:fb:
                    60:e3:f9:0e:21:5b:c8:dd:d2:e2:2a:2d:b9:ed:e5:
                    a6:75:b5:e5:9c:d8:0a:1a:d4:25:c5:40:a8:2b:16:
                    7b:fd:1e:55:2d:88:72:6e:b2:09:6b:6d:3c:d1:dc:
                    52:66:ab:15:a0:22:10:d5:96:d3:fd:ba:c4:e5:60:
                    78:de:b7:4d:66:7e:a9:05:ab:bc:aa:69:0f:71:9d:
                    a1:77:1a:2d:55:7d:bf:46:01:b9:7b:f8:e9:1e:65:
                    9e:14:79:2e:f7:92:1c:e8:67:2c:13:ac:c4:ea:75:
                    2c:ee:66:ed:4a:3e:c8:29:68:58:49:29:c2:e3:5d:
                    cc:cb:81:e3:4d:13:a5:98:0c:f3:47:00:29:83:40:
                    45:65:eb:03:6c:e0:48:11:c6:36:b1:98:1b:e2:2b:
                    8a:a6:10:00:4d:d7:ea:d6:c9:f4:fe:4a:19:da:47:
                    bc:fc:01:81:37:3d:0e:7c:12:db:43:53:82:66:69:
                    70:8d:c9:de:ae:a9:60:31:ae:c1:99:0b:91:03:a4:
                    d6:94:74:db:33:6f:f3:d5:dc:d0:ef:8c:6d:4a:81:
                    d0:88:d8:04:f5:6a:6c:a7:09:e3:00:e3:96:b4:1e:
                    84:1c:37:45:ec:49:47:7e:8f:15:23:7d:30:b7:9f:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:34:20:9D:82:59:80:C1:7F:BA:54:B1:AF:F4:05:87:CE:F0:FE:DE
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3a2f34302d3430203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ca0::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:ad:ef:c7:a9:bb:9b:c8:52:11:6b:41:e4:df:bf:55:82:
         f2:da:a7:17:aa:f9:38:fb:9f:ff:f3:96:69:77:77:73:5a:2a:
         79:ba:3d:e2:ef:cb:08:1f:7b:af:b3:27:b0:22:c3:de:77:fc:
         46:3a:1d:29:5d:62:af:33:5a:e4:36:ab:e6:ad:09:80:9b:81:
         a9:61:01:d7:72:77:b8:ee:40:ff:09:4f:e8:f5:2b:5d:91:ea:
         e8:4d:e2:3f:9f:30:ec:c6:c0:24:82:11:40:b3:56:3e:c9:6f:
         7b:1c:b3:62:d9:8f:01:9d:10:77:7b:1c:01:6a:fa:6b:52:a7:
         16:14:92:43:b0:39:4f:2a:c3:5a:18:dd:ec:1c:24:d7:41:f8:
         64:41:79:7e:30:db:f9:b4:c0:15:5a:90:ef:c9:a6:cb:76:1c:
         fc:c0:bf:2e:38:b5:4f:ce:38:f6:9e:41:fc:37:1e:bd:09:10:
         fc:06:29:54:33:93:59:6d:c7:53:70:91:69:5e:07:22:67:e5:
         4f:a6:dc:1a:fd:ef:b7:27:90:65:3b:13:12:21:da:d0:38:e8:
         ed:e1:01:a7:91:ee:c1:23:7e:22:b1:f5:8d:39:a5:d1:c3:43:
         18:df:2e:7f:6f:9a:2b:35:8e:d8:6b:b0:44:62:0d:ef:40:d2:
         35:19:62:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSU7/3ZAUF5gLlpRYykGSQ7MfMfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2RUNFNjg1OTQxMzgwMDQxMEQ0QzkwRDM3M0IxRUY5
ODk3MTBBRTAeFw0yMzEyMTQxMzE1NTVaFw0yNDEyMTIxMzIwNTVaMDMxMTAvBgNV
BAMTKEZDMzQyMDlEODI1OTgwQzE3RkJBNTRCMUFGRjQwNTg3Q0VGMEZFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/jc88Z56AV7uHc9c+2Dj+Q4h
W8jd0uIqLbnt5aZ1teWc2Aoa1CXFQKgrFnv9HlUtiHJusglrbTzR3FJmqxWgIhDV
ltP9usTlYHjet01mfqkFq7yqaQ9xnaF3Gi1Vfb9GAbl7+OkeZZ4UeS73khzoZywT
rMTqdSzuZu1KPsgpaFhJKcLjXczLgeNNE6WYDPNHACmDQEVl6wNs4EgRxjaxmBvi
K4qmEABN1+rWyfT+ShnaR7z8AYE3PQ58EttDU4JmaXCNyd6uqWAxrsGZC5EDpNaU
dNszb/PV3NDvjG1KgdCI2AT1amynCeMA45a0HoQcN0XsSUd+jxUjfTC3n7+TAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/DQgnYJZgMF/ulSxr/QFh87w/t4wHwYDVR0j
BBgwFoAUzm7OaFlBOABBDUyQ03Ox75iXEK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVByamp6b0FVbmV5NENpdlk1eGYzZmY4b1k3WGV1Sms1VWFMYnNiOVRp
R20vMC9DRTZFQ0U2ODU5NDEzODAwNDEwRDRDOTBEMzczQjFFRjk4OTcxMEFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFNkVDRTY4NTk0MTM4MDA0
MTBENEM5MEQzNzNCMUVGOTg5NzEwQUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVQcmpqem9BVW5leTRDaXZZNXhmM2ZmOG9ZN1hldUprNVVhTGJzYjlUaUdtLzAv
MzIzODMwMzQzYTMxNjM2MTMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzYzMTM2
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGACgEHKAAMA0GCSqGSIb3DQEBCwUAA4IBAQANkq3vx6m7
m8hSEWtB5N+/VYLy2qcXqvk4+5//85Zpd3dzWip5uj3i78sIH3uvsyewIsPed/xG
Oh0pXWKvM1rkNqvmrQmAm4GpYQHXcne47kD/CU/o9StdkeroTeI/nzDsxsAkghFA
s1Y+yW97HLNi2Y8BnRB3exwBavprUqcWFJJDsDlPKsNaGN3sHCTXQfhkQXl+MNv5
tMAVWpDvyabLdhz8wL8uOLVPzjj2nkH8Nx69CRD8BilUM5NZbcdTcJFpXgciZ+VP
ptwa/e+3J5BlOxMSIdrQOOjt4QGnke7BI34isfWNOaXRw0MY3y5/b5orNY7Ya7BE
Yg3vQNI1GWJi
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:35:12 2025 by rpki-client