Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa
File:                     323830343a336465633a3a2f33332d3333203d3e20323636353633.roa (raw, json)
Hash identifier:          De7D03Ah+uVslFjvZ8qTNDD39YiT53GxDxdWUerxgr4=
Subject key identifier:   4B:F6:47:17:87:68:C0:0A:12:CF:AE:3B:FE:CE:44:A7:C2:BF:94:FB
Certificate issuer:       /CN=057ED84860A4CE6FB5923E0903C9153590BFB516
Certificate serial:       541E554D74D69580231F88D8635ADBAFC5FC9784
Authority key identifier: 05:7E:D8:48:60:A4:CE:6F:B5:92:3E:09:03:C9:15:35:90:BF:B5:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/057ED84860A4CE6FB5923E0903C9153590BFB516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa
Signing time:             Wed 17 May 2023 12:36:08 +0000
ROA not before:           Wed 17 May 2023 12:31:08 +0000
ROA not after:            Wed 15 May 2024 12:36:08 +0000
asID:                     266563
IP address blocks:        2804:3dec::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1e:55:4d:74:d6:95:80:23:1f:88:d8:63:5a:db:af:c5:fc:97:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057ED84860A4CE6FB5923E0903C9153590BFB516
        Validity
            Not Before: May 17 12:31:08 2023 GMT
            Not After : May 15 12:36:08 2024 GMT
        Subject: CN=4BF647178768C00A12CFAE3BFECE44A7C2BF94FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:21:30:38:c5:54:2f:80:41:d0:c2:96:48:
                    0a:1c:a1:d8:9e:a5:00:3d:0c:a0:ba:be:ca:5a:30:
                    ab:93:5b:ff:88:07:d2:c8:88:5f:14:ce:5c:3a:8c:
                    1e:9d:8b:88:f1:aa:60:be:a7:14:20:34:66:51:98:
                    0d:c1:b3:6d:46:68:cc:c3:18:06:ae:31:c8:4c:66:
                    e1:0a:2c:31:08:f9:ea:2b:5d:df:b2:6d:bc:e0:dc:
                    12:d2:d1:f4:f9:b7:a2:03:b2:8b:fa:41:33:6c:6f:
                    dc:e2:47:42:87:a5:2b:e1:7f:44:37:d5:f9:29:11:
                    f1:59:f6:77:b9:90:15:15:76:2f:98:03:c2:a9:96:
                    34:70:13:2b:72:41:44:f9:ca:c2:f2:f4:33:96:b3:
                    a8:90:d3:d3:38:f3:7a:1b:cd:1e:06:e2:65:c3:8e:
                    7e:f7:05:60:c4:01:41:de:63:82:71:2d:a8:ab:43:
                    56:47:c4:10:c6:2e:60:c9:44:54:28:a5:d9:df:e8:
                    21:4a:dd:8f:2b:de:45:86:5c:ee:2a:41:b1:1b:7e:
                    18:fa:1c:81:9e:c2:49:cc:dd:db:d2:4d:e4:0a:ee:
                    a0:70:93:4e:3e:8d:ec:dd:07:f7:52:4a:08:88:c2:
                    1a:de:3c:ea:6e:23:75:79:76:66:e6:4e:26:c1:8d:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F6:47:17:87:68:C0:0A:12:CF:AE:3B:FE:CE:44:A7:C2:BF:94:FB
            X509v3 Authority Key Identifier:
                keyid:05:7E:D8:48:60:A4:CE:6F:B5:92:3E:09:03:C9:15:35:90:BF:B5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/057ED84860A4CE6FB5923E0903C9153590BFB516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/057ED84860A4CE6FB5923E0903C9153590BFB516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dec::/33

    Signature Algorithm: sha256WithRSAEncryption
         7f:67:de:75:e7:ff:c5:91:4a:6f:68:b5:7a:5f:d0:24:00:bc:
         e1:f3:f6:4d:18:f0:d3:99:7d:5c:a1:4d:7f:75:d0:3f:e2:82:
         58:ae:b3:a1:a3:21:2c:b2:f3:18:c7:5e:a4:b2:c8:96:4a:8c:
         01:eb:e1:fb:cd:f3:3c:6c:d1:34:7a:32:bd:f0:d6:14:f6:2a:
         63:f9:de:46:d6:04:70:d4:35:54:66:91:b1:56:fa:b5:30:53:
         8a:ba:b0:75:7e:b0:0b:5f:69:9c:aa:ee:3f:28:2e:c3:42:8d:
         63:65:f0:ae:f1:6b:58:10:c5:ad:e0:eb:09:e1:8a:ea:0a:86:
         97:9a:69:2b:69:ed:80:c3:93:02:18:6f:e5:25:63:7e:3b:7a:
         f0:09:f0:b9:26:c5:5f:fe:83:0b:2a:d3:13:01:b9:4a:ad:ed:
         66:02:8a:54:08:ca:a7:6e:fe:02:67:26:c0:bd:32:cc:54:09:
         e0:d1:f3:3f:61:7c:85:7c:bf:4b:d2:4c:37:b8:4c:d2:f4:9f:
         42:ab:1f:cb:0b:84:88:a7:7f:5e:25:df:65:91:39:36:15:c4:
         6c:6d:07:37:9b:93:c9:24:df:fd:93:73:74:93:61:81:39:4a:
         07:2c:f7:a9:c2:a3:95:6a:e9:12:47:c4:be:e9:e1:df:2a:eb:
         e2:b5:46:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVB5VTXTWlYAjH4jYY1rbr8X8l4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU3RUQ4NDg2MEE0Q0U2RkI1OTIzRTA5MDNDOTE1MzU5
MEJGQjUxNjAeFw0yMzA1MTcxMjMxMDhaFw0yNDA1MTUxMjM2MDhaMDMxMTAvBgNV
BAMTKDRCRjY0NzE3ODc2OEMwMEExMkNGQUUzQkZFQ0U0NEE3QzJCRjk0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHyEwOMVUL4BB0MKWSAocodie
pQA9DKC6vspaMKuTW/+IB9LIiF8Uzlw6jB6di4jxqmC+pxQgNGZRmA3Bs21GaMzD
GAauMchMZuEKLDEI+eorXd+ybbzg3BLS0fT5t6IDsov6QTNsb9ziR0KHpSvhf0Q3
1fkpEfFZ9ne5kBUVdi+YA8KpljRwEytyQUT5ysLy9DOWs6iQ09M483obzR4G4mXD
jn73BWDEAUHeY4JxLairQ1ZHxBDGLmDJRFQopdnf6CFK3Y8r3kWGXO4qQbEbfhj6
HIGewknM3dvSTeQK7qBwk04+jezdB/dSSgiIwhrePOpuI3V5dmbmTibBjXR5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUS/ZHF4dowAoSz647/s5Ep8K/lPswHwYDVR0j
BBgwFoAUBX7YSGCkzm+1kj4JA8kVNZC/tRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXFiaVQ2Uk1wOXRoQ24xR29mVWFQcWhMN1N3Vlp4VTZYVjVHWXVOOXM4
Qm8vMC8wNTdFRDg0ODYwQTRDRTZGQjU5MjNFMDkwM0M5MTUzNTkwQkZCNTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA1N0VEODQ4NjBBNENFNkZC
NTkyM0UwOTAzQzkxNTM1OTBCRkI1MTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVxYmlUNlJNcDl0aENuMUdvZlVhUHFoTDdTd1ZaeFU2WFY1R1l1TjlzOEJvLzAv
MzIzODMwMzQzYTMzNjQ2NTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzUzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ97AAwDQYJKoZIhvcNAQELBQADggEBAH9n3nXn
/8WRSm9otXpf0CQAvOHz9k0Y8NOZfVyhTX910D/iglius6GjISyy8xjHXqSyyJZK
jAHr4fvN8zxs0TR6Mr3w1hT2KmP53kbWBHDUNVRmkbFW+rUwU4q6sHV+sAtfaZyq
7j8oLsNCjWNl8K7xa1gQxa3g6wnhiuoKhpeaaStp7YDDkwIYb+UlY347evAJ8Lkm
xV/+gwsq0xMBuUqt7WYCilQIyqdu/gJnJsC9MsxUCeDR8z9hfIV8v0vSTDe4TNL0
n0KrH8sLhIinf14l32WROTYVxGxtBzebk8kk3/2Tc3STYYE5Sgcs96nCo5Vq6RJH
xL7p4d8q6+K1Rgo=
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:16:54 2025 by rpki-client