Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a613030303a3a2f33352d3335203d3e20323635343835.roa
File:                     323830343a333464633a613030303a3a2f33352d3335203d3e20323635343835.roa (raw, json)
Hash identifier:          F9mR9NeN9cqCOP6u/siFoWZ6v+sH9Qju0vIDjW2uc6M=
Subject key identifier:   22:6F:99:CD:24:D8:2E:23:A9:55:44:DD:32:FE:D6:86:37:F4:71:56
Certificate issuer:       /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial:       633075667ECEEC49F6229F045173A895FDFD9FCE
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a613030303a3a2f33352d3335203d3e20323635343835.roa
Signing time:             Fri 23 Feb 2024 23:40:58 +0000
ROA not before:           Fri 23 Feb 2024 23:35:58 +0000
ROA not after:            Fri 21 Feb 2025 23:40:58 +0000
asID:                     265485
IP address blocks:        2804:34dc:a000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:30:75:66:7e:ce:ec:49:f6:22:9f:04:51:73:a8:95:fd:fd:9f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
        Validity
            Not Before: Feb 23 23:35:58 2024 GMT
            Not After : Feb 21 23:40:58 2025 GMT
        Subject: CN=226F99CD24D82E23A95544DD32FED68637F47156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:3a:68:07:6f:16:b7:df:41:f4:b6:d9:29:
                    21:a6:a3:e7:ec:1b:78:43:bd:d5:b0:b4:44:35:17:
                    31:a8:f8:8c:47:94:22:19:ce:1c:fe:93:4a:fc:c9:
                    31:d2:12:15:68:a4:df:1a:cc:16:c4:23:10:fe:ec:
                    fd:cf:44:70:dd:3d:0f:69:c7:21:99:49:14:f2:bb:
                    34:4d:0d:9c:c4:ee:b2:fd:a7:f5:e7:a1:31:75:df:
                    31:ab:47:f6:bc:45:9b:ab:3f:08:57:2c:75:32:e3:
                    34:97:59:79:e1:f2:e3:1b:8e:8d:72:cf:98:12:52:
                    45:24:0f:05:85:93:d5:cf:b0:4f:95:d4:62:2d:d0:
                    06:b0:2a:6d:dd:f8:5f:60:9b:3f:ee:f4:24:1a:b6:
                    b4:74:1f:31:a5:95:d5:c0:ed:89:51:46:6e:04:53:
                    b5:99:2b:fa:d0:8c:67:f0:4e:a2:b4:12:b9:f1:19:
                    28:63:fa:43:3a:96:a9:38:97:72:64:33:fc:54:7b:
                    03:86:98:42:30:81:49:76:80:9e:b9:7a:25:39:90:
                    5a:d0:3e:9f:51:29:e5:6e:07:cc:71:3f:5f:65:0b:
                    fd:ce:43:e2:dd:b9:a7:7e:bd:8b:2e:af:54:62:6b:
                    c0:95:e3:fd:ad:30:b5:87:2f:eb:38:18:24:b9:d5:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6F:99:CD:24:D8:2E:23:A9:55:44:DD:32:FE:D6:86:37:F4:71:56
            X509v3 Authority Key Identifier:
                keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a613030303a3a2f33352d3335203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34dc:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         dd:1d:7d:f5:89:e3:53:82:6f:ab:ff:cc:c9:c6:e9:19:3c:df:
         3e:8d:4f:96:61:1a:82:e2:7b:bb:62:5d:57:43:75:47:da:c6:
         1b:5e:52:5d:b0:5d:f9:73:16:55:e3:a7:27:25:25:1b:73:20:
         93:77:55:94:3e:30:c2:0e:49:09:12:23:c4:90:41:d3:ac:ca:
         01:ea:eb:78:72:11:31:97:98:c7:6a:b0:d6:f5:a7:2b:7a:bc:
         d7:29:b6:5a:22:e8:c7:25:38:00:51:64:9e:49:35:2a:b2:e7:
         6b:89:86:22:0b:79:5b:1c:a6:4b:24:af:d6:d4:c8:57:8e:06:
         65:11:7c:bc:ed:a0:9b:78:c0:28:e6:e4:4a:67:a8:2c:67:a8:
         c9:5f:3c:88:35:4e:5d:28:7e:0b:84:f8:df:3a:f8:66:de:2f:
         de:63:b2:6d:c5:af:61:69:23:b4:a6:47:cd:67:d1:bc:6f:f0:
         82:ef:a0:61:a2:24:74:0c:c4:e8:a2:2a:4b:eb:51:da:e6:78:
         88:91:50:70:f1:11:de:d2:17:6d:c0:03:f2:d9:45:f3:ae:75:
         29:0b:d4:d1:b2:e6:87:9c:26:9e:a6:fe:7a:61:5b:57:23:e3:
         2b:88:8b:a6:09:25:91:e5:f0:af:d8:4f:d6:0c:df:18:02:2c:
         86:e6:b7:5c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUYzB1Zn7O7En2Ip8EUXOolf39n84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZB
NjZCNkQ0NDAeFw0yNDAyMjMyMzM1NThaFw0yNTAyMjEyMzQwNThaMDMxMTAvBgNV
BAMTKDIyNkY5OUNEMjREODJFMjNBOTU1NDRERDMyRkVENjg2MzdGNDcxNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qDpoB28Wt99B9LbZKSGmo+fs
G3hDvdWwtEQ1FzGo+IxHlCIZzhz+k0r8yTHSEhVopN8azBbEIxD+7P3PRHDdPQ9p
xyGZSRTyuzRNDZzE7rL9p/XnoTF13zGrR/a8RZurPwhXLHUy4zSXWXnh8uMbjo1y
z5gSUkUkDwWFk9XPsE+V1GIt0AawKm3d+F9gmz/u9CQatrR0HzGlldXA7YlRRm4E
U7WZK/rQjGfwTqK0ErnxGShj+kM6lqk4l3JkM/xUewOGmEIwgUl2gJ65eiU5kFrQ
Pp9RKeVuB8xxP19lC/3OQ+Lduad+vYsur1Ria8CV4/2tMLWHL+s4GCS51eAVAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUIm+ZzSTYLiOpVUTdMv7Whjf0cVYwHwYDVR0j
BBgwFoAU20d1/xOHJluPS0MLcDUTFqZrbUQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzAvREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZBNjZCNkQ0NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjQ3NzVGRjEzODcyNjVCOEY0
QjQzMEI3MDM1MTMxNkE2NkI2RDQ0LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzAvMzIz
ODMwMzQzYTMzMzQ2NDYzM2E2MTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNkM2Uy
MDMyMzYzNTM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgENNygMA0GCSqGSIb3DQEBCwUAA4IB
AQDdHX31ieNTgm+r/8zJxukZPN8+jU+WYRqC4nu7Yl1XQ3VH2sYbXlJdsF35cxZV
46cnJSUbcyCTd1WUPjDCDkkJEiPEkEHTrMoB6ut4chExl5jHarDW9acrerzXKbZa
IujHJTgAUWSeSTUqsudriYYiC3lbHKZLJK/W1MhXjgZlEXy87aCbeMAo5uRKZ6gs
Z6jJXzyINU5dKH4LhPjfOvhm3i/eY7Jtxa9haSO0pkfNZ9G8b/CC76BhoiR0DMTo
oipL61Ha5niIkVBw8RHe0hdtwAPy2UXzrnUpC9TRsuaHnCaepv56YVtXI+MriIum
CSWR5fCv2E/WDN8YAiyG5rdc
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:43 2025 by rpki-client