Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa
File:                     323830343a336465633a3a2f33332d3333203d3e20323636353633.roa (raw, json)
Hash identifier:          c5oBYW0s1hSfIY8L36WCy3KslD3kK1t/zf29ib76t1Q=
Subject key identifier:   71:B9:AF:3B:DB:93:27:7C:DD:E7:EC:C3:D0:87:6A:16:DD:31:9A:B0
Certificate issuer:       /CN=2C8F79E76852475DDED25004F5D935390FAB63C4
Certificate serial:       7ACEC9152A1ACB1EE846107DFCED6506CB349658
Authority key identifier: 2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa
Signing time:             Thu 20 Apr 2023 13:55:04 +0000
ROA not before:           Thu 20 Apr 2023 13:50:04 +0000
ROA not after:            Thu 18 Apr 2024 13:55:04 +0000
asID:                     266563
IP address blocks:        2804:3dec::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ce:c9:15:2a:1a:cb:1e:e8:46:10:7d:fc:ed:65:06:cb:34:96:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8F79E76852475DDED25004F5D935390FAB63C4
        Validity
            Not Before: Apr 20 13:50:04 2023 GMT
            Not After : Apr 18 13:55:04 2024 GMT
        Subject: CN=71B9AF3BDB93277CDDE7ECC3D0876A16DD319AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:83:89:de:26:1e:89:dc:87:1b:58:ed:c4:d5:
                    69:23:dd:fd:f9:d4:dd:29:8e:47:8c:a7:c0:87:b3:
                    d8:fe:b0:60:d5:07:2d:58:d2:94:05:f8:9b:bc:1e:
                    0b:45:94:04:1e:d5:bd:7a:af:d0:b9:8b:43:65:c9:
                    03:83:90:ca:e6:ad:f5:e9:2e:18:24:89:e5:1b:8e:
                    a3:1e:60:84:2a:32:21:8f:9d:0d:c0:b2:89:c5:e7:
                    9d:0a:02:39:54:fc:27:7e:84:b2:ac:8d:b1:2e:ed:
                    d7:6c:6e:5a:dc:d2:64:fa:cc:60:ff:60:31:e1:7b:
                    02:cb:45:c5:23:e7:51:a1:56:da:5a:eb:b1:49:e7:
                    f8:7e:a0:4b:1f:62:d2:f8:eb:94:13:c1:61:46:0c:
                    5e:76:1f:14:2c:da:c3:2e:ca:80:ab:2b:cc:db:8f:
                    a1:5f:45:4f:80:45:2b:56:4b:7a:0e:ae:14:7f:9f:
                    d0:5b:3d:39:ff:47:d2:51:0b:a7:07:8b:b0:c8:b2:
                    69:3b:0a:1e:eb:4d:7f:27:9e:04:6c:d0:9c:c5:90:
                    3a:68:35:32:85:eb:03:cd:83:a8:4b:f3:a4:46:08:
                    8c:c5:96:6d:c5:d5:1e:e2:3a:7a:85:65:f2:21:9a:
                    2b:6c:55:9e:b9:0f:b8:41:1b:1a:e8:67:f4:c4:b0:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B9:AF:3B:DB:93:27:7C:DD:E7:EC:C3:D0:87:6A:16:DD:31:9A:B0
            X509v3 Authority Key Identifier:
                keyid:2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/2C8F79E76852475DDED25004F5D935390FAB63C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a3a2f33332d3333203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dec::/33

    Signature Algorithm: sha256WithRSAEncryption
         45:48:c1:44:07:7f:f5:7f:8a:c0:4a:08:d4:3a:4f:18:b1:a2:
         9a:b6:6d:f3:3e:d1:06:61:26:a0:1c:6a:90:8c:d2:05:4d:fb:
         f2:23:ce:0b:67:ae:e7:4a:7c:23:e8:00:6f:23:05:79:be:5e:
         ce:62:37:1a:cd:b3:c2:ca:80:8c:a0:a4:d6:ef:69:f9:28:8f:
         e3:6d:b7:dd:5c:f2:71:0c:fc:17:42:79:ff:5d:0d:2a:e5:38:
         84:7d:c7:f2:76:00:b0:f6:03:cd:87:68:9f:67:72:6d:6a:56:
         f8:13:94:d0:99:89:06:4b:e7:1e:d5:69:e8:dc:a2:0c:9d:fc:
         7e:03:ca:8e:9f:6e:ad:d3:ff:b4:83:6f:9b:e7:86:77:ba:09:
         de:8d:9a:76:f2:ef:8f:b7:a7:9b:1d:e4:a3:72:bf:3b:65:5b:
         5a:e7:99:26:4f:da:5e:ed:b7:64:8f:aa:6c:d9:5c:42:51:58:
         fd:77:91:7b:a2:3b:af:d6:20:7f:ab:4b:e7:89:20:b1:cd:3b:
         61:03:5d:91:19:f3:8d:78:fd:a0:1e:ec:47:93:f8:8e:d4:55:
         91:47:c1:06:1d:08:e5:3f:db:53:df:eb:48:4a:e6:61:68:da:
         b9:56:26:a5:e0:d0:4a:3e:48:66:fd:16:98:bc:36:57:fb:18:
         36:0f:37:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUes7JFSoayx7oRhB9/O1lBss0llgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM4Rjc5RTc2ODUyNDc1RERFRDI1MDA0RjVEOTM1Mzkw
RkFCNjNDNDAeFw0yMzA0MjAxMzUwMDRaFw0yNDA0MTgxMzU1MDRaMDMxMTAvBgNV
BAMTKDcxQjlBRjNCREI5MzI3N0NEREU3RUNDM0QwODc2QTE2REQzMTlBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqg4neJh6J3IcbWO3E1Wkj3f35
1N0pjkeMp8CHs9j+sGDVBy1Y0pQF+Ju8HgtFlAQe1b16r9C5i0NlyQODkMrmrfXp
LhgkieUbjqMeYIQqMiGPnQ3AsonF550KAjlU/Cd+hLKsjbEu7ddsblrc0mT6zGD/
YDHhewLLRcUj51GhVtpa67FJ5/h+oEsfYtL465QTwWFGDF52HxQs2sMuyoCrK8zb
j6FfRU+ARStWS3oOrhR/n9BbPTn/R9JRC6cHi7DIsmk7Ch7rTX8nngRs0JzFkDpo
NTKF6wPNg6hL86RGCIzFlm3F1R7iOnqFZfIhmitsVZ65D7hBGxroZ/TEsCT1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcbmvO9uTJ3zd5+zD0IdqFt0xmrAwHwYDVR0j
BBgwFoAULI9552hSR13e0lAE9dk1OQ+rY8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXFiaVQ2Uk1wOXRoQ24xR29mVWFQcWhMN1N3Vlp4VTZYVjVHWXVOOXM4
Qm8vMS8yQzhGNzlFNzY4NTI0NzVEREVEMjUwMDRGNUQ5MzUzOTBGQUI2M0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDOEY3OUU3Njg1MjQ3NURE
RUQyNTAwNEY1RDkzNTM5MEZBQjYzQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVxYmlUNlJNcDl0aENuMUdvZlVhUHFoTDdTd1ZaeFU2WFY1R1l1TjlzOEJvLzEv
MzIzODMwMzQzYTMzNjQ2NTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzUzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ97AAwDQYJKoZIhvcNAQELBQADggEBAEVIwUQH
f/V/isBKCNQ6Txixopq2bfM+0QZhJqAcapCM0gVN+/IjzgtnrudKfCPoAG8jBXm+
Xs5iNxrNs8LKgIygpNbvafkoj+Ntt91c8nEM/BdCef9dDSrlOIR9x/J2ALD2A82H
aJ9ncm1qVvgTlNCZiQZL5x7Vaejcogyd/H4Dyo6fbq3T/7SDb5vnhne6Cd6Nmnby
74+3p5sd5KNyvztlW1rnmSZP2l7tt2SPqmzZXEJRWP13kXuiO6/WIH+rS+eJILHN
O2EDXZEZ8414/aAe7EeT+I7UVZFHwQYdCOU/21Pf60hK5mFo2rlWJqXg0Eo+SGb9
Fpi8Nlf7GDYPN74=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:34 2025 by rpki-client