Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ku5eVTtxk9qRnJVuV2bgN53Av9ixVQraM3X6VUHKA3V/0/323830343a376331383a3a2f33322d313238203d3e20323731343735.roa
File:                     323830343a376331383a3a2f33322d313238203d3e20323731343735.roa (raw, json)
Hash identifier:          bKzAgBcM9vQDBwr4xONFGSnPRfPXJw6omSieoaCKrDk=
Subject key identifier:   20:C6:F7:A2:0E:72:39:C1:02:02:52:C5:A3:18:5E:41:9D:B4:5B:BC
Certificate issuer:       /CN=09DB355A47E55D294EE96B632C5ED1A3B4B79735
Certificate serial:       245FE59A36ACAA5D0E58A988CC74B57E6D9951CD
Authority key identifier: 09:DB:35:5A:47:E5:5D:29:4E:E9:6B:63:2C:5E:D1:A3:B4:B7:97:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09DB355A47E55D294EE96B632C5ED1A3B4B79735.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ku5eVTtxk9qRnJVuV2bgN53Av9ixVQraM3X6VUHKA3V/0/323830343a376331383a3a2f33322d313238203d3e20323731343735.roa
Signing time:             Fri 22 Nov 2024 21:09:54 +0000
ROA not before:           Fri 22 Nov 2024 21:04:54 +0000
ROA not after:            Fri 21 Nov 2025 21:09:54 +0000
asID:                     271475
IP address blocks:        2804:7c18::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:e5:9a:36:ac:aa:5d:0e:58:a9:88:cc:74:b5:7e:6d:99:51:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09DB355A47E55D294EE96B632C5ED1A3B4B79735
        Validity
            Not Before: Nov 22 21:04:54 2024 GMT
            Not After : Nov 21 21:09:54 2025 GMT
        Subject: CN=20C6F7A20E7239C1020252C5A3185E419DB45BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:6e:19:1e:09:f7:26:ea:99:d1:d8:3b:6b:
                    9b:54:4d:52:bb:58:9c:61:6b:c3:df:f3:f6:08:73:
                    80:91:9f:c6:71:2f:f0:09:9b:8c:30:4c:21:30:23:
                    5a:21:34:ac:e3:95:da:56:cc:30:bc:b1:33:90:2f:
                    18:75:7a:d8:07:36:8b:bf:48:73:32:d7:00:28:c6:
                    b3:b9:59:4f:2e:26:47:1a:1c:b6:b4:0d:73:cb:84:
                    8f:4a:06:96:05:0b:df:94:26:a6:2b:1d:4b:3a:11:
                    22:93:07:ec:2d:f3:f1:c8:7a:1a:37:8b:65:49:ba:
                    23:b7:b1:25:2d:56:5d:c0:b2:d5:67:5b:5f:30:3a:
                    5a:d8:92:26:06:02:98:cb:cb:09:60:3c:39:83:b2:
                    19:42:2b:58:3c:4e:0f:2b:10:d0:4f:94:9c:4c:d5:
                    cb:f1:5e:cc:26:5b:a6:8b:64:a8:27:12:47:ef:0c:
                    e9:bc:5a:52:88:77:d9:9e:3b:d4:11:cf:6b:3d:ed:
                    44:6c:f8:ef:6c:8b:33:d9:43:c6:34:39:b9:f5:07:
                    2d:5f:54:8d:9e:7d:68:5c:98:36:08:eb:a4:ef:3b:
                    ab:08:ce:2c:c3:0d:76:ac:37:8f:2f:cd:ba:22:ba:
                    67:4f:d9:e8:d5:7b:14:77:4c:28:0b:3b:9c:b1:4b:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C6:F7:A2:0E:72:39:C1:02:02:52:C5:A3:18:5E:41:9D:B4:5B:BC
            X509v3 Authority Key Identifier:
                keyid:09:DB:35:5A:47:E5:5D:29:4E:E9:6B:63:2C:5E:D1:A3:B4:B7:97:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ku5eVTtxk9qRnJVuV2bgN53Av9ixVQraM3X6VUHKA3V/0/09DB355A47E55D294EE96B632C5ED1A3B4B79735.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09DB355A47E55D294EE96B632C5ED1A3B4B79735.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ku5eVTtxk9qRnJVuV2bgN53Av9ixVQraM3X6VUHKA3V/0/323830343a376331383a3a2f33322d313238203d3e20323731343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:71:a3:02:72:4d:21:5f:c3:61:8f:76:d5:5d:7a:8c:54:
         52:77:60:75:85:5d:81:90:b9:52:39:59:6b:fd:bb:a7:2d:5e:
         75:df:55:af:a9:90:b9:b0:90:f2:bd:50:85:2e:1a:95:71:08:
         d2:ca:b6:47:35:7d:82:14:51:78:f3:f5:34:fa:57:af:58:b1:
         ab:b0:f7:d7:e8:df:b3:fa:a8:fd:b6:dc:d1:d7:e7:aa:6a:c8:
         55:0c:28:17:4b:f6:f6:66:c6:4f:1b:68:a4:fb:cd:ce:bb:ca:
         dd:f9:53:31:82:4d:49:c6:b0:93:90:29:eb:a2:fa:ef:07:b5:
         64:0c:c9:5d:ee:80:f1:98:1f:91:e5:46:e2:f2:7b:47:b1:e0:
         9d:64:06:a8:68:e5:d4:a7:e6:87:16:31:ca:b8:c5:40:01:d6:
         20:7e:ad:a7:50:ce:ba:64:ea:24:20:23:1c:f6:69:d9:d6:37:
         f3:cf:46:06:d2:3e:e3:ef:79:1c:96:ba:59:94:41:38:13:22:
         ec:08:29:41:38:fa:99:a8:21:1f:b1:8a:f0:0d:71:74:59:64:
         00:44:4b:76:e0:eb:57:9d:8d:c0:bd:33:f8:3e:26:77:0e:14:
         5f:d3:d9:a0:f2:f1:d6:76:df:f2:7d:17:42:06:69:c4:9c:95:
         55:40:0a:65
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUJF/lmjasql0OWKmIzHS1fm2ZUc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlEQjM1NUE0N0U1NUQyOTRFRTk2QjYzMkM1RUQxQTNC
NEI3OTczNTAeFw0yNDExMjIyMTA0NTRaFw0yNTExMjEyMTA5NTRaMDMxMTAvBgNV
BAMTKDIwQzZGN0EyMEU3MjM5QzEwMjAyNTJDNUEzMTg1RTQxOURCNDVCQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfe24ZHgn3JuqZ0dg7a5tUTVK7
WJxha8Pf8/YIc4CRn8ZxL/AJm4wwTCEwI1ohNKzjldpWzDC8sTOQLxh1etgHNou/
SHMy1wAoxrO5WU8uJkcaHLa0DXPLhI9KBpYFC9+UJqYrHUs6ESKTB+wt8/HIeho3
i2VJuiO3sSUtVl3AstVnW18wOlrYkiYGApjLywlgPDmDshlCK1g8Tg8rENBPlJxM
1cvxXswmW6aLZKgnEkfvDOm8WlKId9meO9QRz2s97URs+O9sizPZQ8Y0Obn1By1f
VI2efWhcmDYI66TvO6sIzizDDXasN48vzboiumdP2ejVexR3TCgLO5yxS9SlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUIMb3og5yOcECAlLFoxheQZ20W7wwHwYDVR0j
BBgwFoAUCds1WkflXSlO6WtjLF7Ro7S3lzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWt1NWVWVHR4azlxUm5KVnVWMmJnTjUzQXY5aXhWUXJhTTNYNlZVSEtB
M1YvMC8wOURCMzU1QTQ3RTU1RDI5NEVFOTZCNjMyQzVFRDFBM0I0Qjc5NzM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5REIzNTVBNDdFNTVEMjk0
RUU5NkI2MzJDNUVEMUEzQjRCNzk3MzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVrdTVlVlR0eGs5cVJuSlZ1VjJiZ041M0F2OWl4VlFyYU0zWDZWVUhLQTNWLzAv
MzIzODMwMzQzYTM3NjMzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHwYMA0GCSqGSIb3DQEBCwUAA4IBAQAuVHGj
AnJNIV/DYY921V16jFRSd2B1hV2BkLlSOVlr/bunLV5131WvqZC5sJDyvVCFLhqV
cQjSyrZHNX2CFFF48/U0+levWLGrsPfX6N+z+qj9ttzR1+eqashVDCgXS/b2ZsZP
G2ik+83Ou8rd+VMxgk1JxrCTkCnrovrvB7VkDMld7oDxmB+R5Ubi8ntHseCdZAao
aOXUp+aHFjHKuMVAAdYgfq2nUM66ZOokICMc9mnZ1jfzz0YG0j7j73kclrpZlEE4
EyLsCClBOPqZqCEfsYrwDXF0WWQAREt24OtXnY3AvTP4PiZ3DhRf09mg8vHWdt/y
fRdCBmnEnJVVQApl
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:15 2025 by rpki-client