Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33342d3334203d3e20323638363136.roa
File:                     323830343a353365633a3a2f33342d3334203d3e20323638363136.roa (raw, json)
Hash identifier:          1lWjs9klYblguipSlHEnqLW0e4NdUaPK7ynpP0B//ac=
Subject key identifier:   11:01:03:3B:F1:9E:A3:38:65:D8:EF:92:E7:13:A9:E2:08:5D:7F:B5
Certificate issuer:       /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial:       14BA5968556E9885B0FAD1DE4B77E035DA00323B
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33342d3334203d3e20323638363136.roa
Signing time:             Tue 05 Sep 2023 14:04:37 +0000
ROA not before:           Tue 05 Sep 2023 13:59:37 +0000
ROA not after:            Tue 03 Sep 2024 14:04:37 +0000
asID:                     268616
IP address blocks:        2804:53ec::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ba:59:68:55:6e:98:85:b0:fa:d1:de:4b:77:e0:35:da:00:32:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
        Validity
            Not Before: Sep  5 13:59:37 2023 GMT
            Not After : Sep  3 14:04:37 2024 GMT
        Subject: CN=1101033BF19EA33865D8EF92E713A9E2085D7FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e7:60:85:96:70:45:53:de:f5:43:4b:c7:71:
                    74:0a:ce:de:f7:e9:f2:5e:2a:5c:b4:70:33:63:a5:
                    50:57:e1:49:b5:47:3d:70:da:9b:d9:c1:9b:1c:53:
                    11:ef:fd:dd:42:78:a3:5f:9e:be:39:9b:4c:ae:bc:
                    2d:02:65:53:11:27:f5:20:94:d7:0d:e6:ab:f3:49:
                    1c:3b:48:72:73:c5:74:1f:3c:a4:ca:9d:d3:ea:2b:
                    6b:a7:99:ea:4c:05:32:4a:1f:50:69:86:0c:33:88:
                    01:a5:90:e3:52:a9:f9:a7:e0:c3:5f:77:b5:50:a9:
                    31:7e:7e:d9:24:9d:8a:9c:45:80:64:9d:a2:8f:f4:
                    66:ad:1d:5b:a3:89:d8:fd:1b:b3:2e:dc:05:bc:18:
                    29:4d:06:aa:aa:b2:73:6d:62:13:30:84:0b:b2:8b:
                    06:45:ae:26:49:5d:fe:85:73:f7:6e:52:55:96:91:
                    66:fe:0b:3b:fb:d8:69:03:af:86:b5:a6:cc:83:e1:
                    38:18:26:8c:b4:b8:23:83:de:17:71:62:9b:5c:03:
                    88:82:6d:2d:1b:51:35:63:1b:b1:c5:cd:7b:83:4c:
                    a9:58:31:d1:e0:ae:81:a8:a0:35:37:a3:74:7f:7b:
                    fe:a0:a9:20:af:4f:99:bb:c2:85:ea:0d:e0:20:6f:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:03:3B:F1:9E:A3:38:65:D8:EF:92:E7:13:A9:E2:08:5D:7F:B5
            X509v3 Authority Key Identifier:
                keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33342d3334203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53ec::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:d5:01:89:15:03:6c:83:6c:0f:9e:e0:8c:57:b4:99:9b:
         29:c5:89:21:03:cd:f0:37:52:b1:1a:98:49:f1:6c:8e:f1:aa:
         71:10:31:8c:2a:6b:0f:1c:fa:e9:d9:97:27:7c:bb:ed:48:b3:
         9e:c4:05:82:c1:04:65:6d:12:dc:56:f7:ef:ab:fb:6b:ff:1a:
         92:26:48:67:4f:1a:a4:0b:40:7b:4e:f3:17:44:4d:d3:a8:6f:
         ba:de:e6:54:a5:58:9b:7f:03:da:a3:aa:2a:84:96:75:bf:44:
         e3:63:34:3c:f6:83:d5:af:8a:da:d8:a9:f4:09:d8:8a:f9:df:
         aa:26:8e:87:f7:ae:d8:3a:b4:fc:d1:cf:74:42:77:75:4f:59:
         a0:88:f3:85:15:2a:e4:b0:cb:17:06:f7:4c:bd:b7:c4:53:e5:
         cb:3f:92:8b:b1:96:3c:c9:e3:12:27:2f:88:c6:53:6b:e8:4f:
         e1:45:85:e4:2a:a1:34:db:5b:95:68:3e:c8:27:df:73:8e:0f:
         d8:54:f7:b3:09:b6:9e:b6:cd:03:ec:55:01:e0:5c:ba:f0:20:
         dc:19:01:09:d3:4f:9d:64:db:12:4e:a5:28:24:5c:90:7d:63:
         a6:ad:ef:3e:fd:86:ff:2d:9b:32:b3:12:0d:f4:31:71:12:8e:
         d8:0f:f2:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFLpZaFVumIWw+tHeS3fgNdoAMjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwNzM0QTUyOEQwREQxRUEwOUY2QkI1OTFFM0IwMjNF
REI5RUREQTAeFw0yMzA5MDUxMzU5MzdaFw0yNDA5MDMxNDA0MzdaMDMxMTAvBgNV
BAMTKDExMDEwMzNCRjE5RUEzMzg2NUQ4RUY5MkU3MTNBOUUyMDg1RDdGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj52CFlnBFU971Q0vHcXQKzt73
6fJeKly0cDNjpVBX4Um1Rz1w2pvZwZscUxHv/d1CeKNfnr45m0yuvC0CZVMRJ/Ug
lNcN5qvzSRw7SHJzxXQfPKTKndPqK2unmepMBTJKH1BphgwziAGlkONSqfmn4MNf
d7VQqTF+ftkknYqcRYBknaKP9GatHVujidj9G7Mu3AW8GClNBqqqsnNtYhMwhAuy
iwZFriZJXf6Fc/duUlWWkWb+Czv72GkDr4a1psyD4TgYJoy0uCOD3hdxYptcA4iC
bS0bUTVjG7HFzXuDTKlYMdHgroGooDU3o3R/e/6gqSCvT5m7woXqDeAgb6NLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEQEDO/Geozhl2O+S5xOp4ghdf7UwHwYDVR0j
BBgwFoAUQgc0pSjQ3R6gn2u1keOwI+257dowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWczbkhFNHM0QXl4TE0xRWprak4xdHpjMm9Nb2k1WTlYNG1LVWdkblZU
OWMvMC80MjA3MzRBNTI4RDBERDFFQTA5RjZCQjU5MUUzQjAyM0VEQjlFRERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMDczNEE1MjhEMEREMUVB
MDlGNkJCNTkxRTNCMDIzRURCOUVEREEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVnM25IRTRzNEF5eExNMUVqa2pOMXR6YzJvTW9pNVk5WDRtS1VnZG5WVDljLzAv
MzIzODMwMzQzYTM1MzM2NTYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4
MzYzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKART7AAwDQYJKoZIhvcNAQELBQADggEBAInS1QGJ
FQNsg2wPnuCMV7SZmynFiSEDzfA3UrEamEnxbI7xqnEQMYwqaw8c+unZlyd8u+1I
s57EBYLBBGVtEtxW9++r+2v/GpImSGdPGqQLQHtO8xdETdOob7re5lSlWJt/A9qj
qiqElnW/RONjNDz2g9WvitrYqfQJ2Ir536omjof3rtg6tPzRz3RCd3VPWaCI84UV
KuSwyxcG90y9t8RT5cs/kouxljzJ4xInL4jGU2voT+FFheQqoTTbW5VoPsgn33OO
D9hU97MJtp62zQPsVQHgXLrwINwZAQnTT51k2xJOpSgkXJB9Y6at7z79hv8tmzKz
Eg30MXESjtgP8nY=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:32 2025 by rpki-client