Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33322d3332203d3e20323638353834.roa
File:                     323830343a353337303a3a2f33322d3332203d3e20323638353834.roa (raw, json)
Hash identifier:          rmqY1K0btU57qApandAwdOfOHP2C13gufRf+jEvE5SM=
Subject key identifier:   1A:4A:3D:D1:2D:F3:B4:67:11:6D:DE:05:E6:BF:95:68:C8:10:C1:AF
Certificate issuer:       /CN=4BD795F092B94300EC0509053A12492273477784
Certificate serial:       15B347BE4C69D5D8BE230EB2E9C5F6DEEC13CCB6
Authority key identifier: 4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33322d3332203d3e20323638353834.roa
Signing time:             Tue 02 Jan 2024 17:16:07 +0000
ROA not before:           Tue 02 Jan 2024 17:11:07 +0000
ROA not after:            Tue 31 Dec 2024 17:16:07 +0000
asID:                     268584
IP address blocks:        2804:5370::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b3:47:be:4c:69:d5:d8:be:23:0e:b2:e9:c5:f6:de:ec:13:cc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD795F092B94300EC0509053A12492273477784
        Validity
            Not Before: Jan  2 17:11:07 2024 GMT
            Not After : Dec 31 17:16:07 2024 GMT
        Subject: CN=1A4A3DD12DF3B467116DDE05E6BF9568C810C1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:7a:97:90:65:09:e8:82:d3:2e:0e:40:37:
                    0e:0b:b1:c3:14:09:a9:e0:ac:e9:ba:05:78:00:e6:
                    b6:ff:62:35:bc:49:1a:d5:f1:28:03:16:0a:20:6b:
                    84:9c:11:f4:c6:b7:5c:24:52:2c:40:28:67:58:37:
                    92:d2:d5:2f:9d:10:d6:e1:c0:74:ce:dc:f9:e4:5b:
                    03:0c:1e:ba:07:16:08:b8:8a:b8:ee:bf:61:7f:2c:
                    08:fc:0b:71:53:5c:c8:9e:1b:e7:e2:8f:2f:2a:24:
                    7a:0e:c9:6a:6a:8d:2b:52:14:73:86:57:10:aa:73:
                    75:b1:b4:4e:89:ae:52:0e:b1:60:b0:8a:e9:ba:4b:
                    cb:22:ab:f4:36:0f:4e:43:e1:9d:b2:21:51:14:d2:
                    09:4d:05:61:8c:38:49:62:ec:95:22:3b:2b:7b:0f:
                    c2:2f:67:89:80:f9:63:86:3b:e3:4e:45:2c:a7:ce:
                    f5:b1:90:6f:5b:14:dc:93:9d:9a:de:cc:04:75:a4:
                    c9:99:e5:2c:80:34:fd:58:ea:30:0c:b0:05:60:41:
                    b6:f1:78:58:b2:84:f9:dc:c5:a8:7d:c6:d0:db:70:
                    c9:5a:54:8e:d8:d0:ce:8e:05:0d:c3:7b:89:05:31:
                    d9:64:43:ab:a6:2e:75:e1:6e:f0:f2:9e:8f:9a:45:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:3D:D1:2D:F3:B4:67:11:6D:DE:05:E6:BF:95:68:C8:10:C1:AF
            X509v3 Authority Key Identifier:
                keyid:4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/4BD795F092B94300EC0509053A12492273477784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33322d3332203d3e20323638353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5370::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:dc:c2:87:90:9f:20:e8:47:6b:71:43:b2:a5:16:31:50:67:
         cd:19:c8:65:a2:c1:50:f6:e0:4f:08:c3:7d:aa:89:69:96:f6:
         19:d1:f5:ce:15:58:f1:bf:b5:7b:40:78:47:ed:be:48:e5:03:
         ed:e9:05:ae:ad:74:eb:54:3c:e9:43:99:84:46:b3:58:c6:43:
         e1:05:cc:86:fd:0e:60:c1:d2:85:66:c3:ca:95:9b:ee:13:67:
         b4:b3:f2:75:f1:0f:54:8f:81:dd:e5:53:55:53:98:6e:64:a9:
         b5:ce:54:11:64:e4:1d:b9:72:92:42:5b:4e:12:aa:31:91:14:
         db:c3:b7:d5:b5:af:d0:7e:6f:6f:66:e2:cb:f8:a9:dd:0f:03:
         7a:3c:51:03:45:05:32:ce:3c:09:a6:41:50:18:16:d3:11:32:
         ca:c2:e7:3f:30:7f:d8:17:c6:c0:ee:54:a5:b8:ac:ca:09:55:
         95:d8:cc:9c:00:dd:5d:9a:41:34:9c:99:c9:d2:ab:38:c5:b0:
         0f:77:23:cb:2a:4a:2f:65:16:66:06:61:d1:5b:8d:4f:c2:3b:
         39:cb:f9:ad:82:f1:05:7c:26:2a:34:68:7e:31:7e:a4:7b:19:
         ed:fa:25:98:e4:1f:0c:2a:c8:20:64:25:59:5f:5c:69:54:09:
         06:ea:0b:ad
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFbNHvkxp1di+Iw6y6cX23uwTzLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJENzk1RjA5MkI5NDMwMEVDMDUwOTA1M0ExMjQ5MjI3
MzQ3Nzc4NDAeFw0yNDAxMDIxNzExMDdaFw0yNDEyMzExNzE2MDdaMDMxMTAvBgNV
BAMTKDFBNEEzREQxMkRGM0I0NjcxMTZEREUwNUU2QkY5NTY4QzgxMEMxQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlnqXkGUJ6ILTLg5ANw4LscMU
CangrOm6BXgA5rb/YjW8SRrV8SgDFgoga4ScEfTGt1wkUixAKGdYN5LS1S+dENbh
wHTO3PnkWwMMHroHFgi4irjuv2F/LAj8C3FTXMieG+fijy8qJHoOyWpqjStSFHOG
VxCqc3WxtE6JrlIOsWCwium6S8siq/Q2D05D4Z2yIVEU0glNBWGMOEli7JUiOyt7
D8IvZ4mA+WOGO+NORSynzvWxkG9bFNyTnZrezAR1pMmZ5SyANP1Y6jAMsAVgQbbx
eFiyhPncxah9xtDbcMlaVI7Y0M6OBQ3De4kFMdlkQ6umLnXhbvDyno+aRYdJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGko90S3ztGcRbd4F5r+VaMgQwa8wHwYDVR0j
BBgwFoAUS9eV8JK5QwDsBQkFOhJJInNHd4QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXF3OThLeUJvR1JYOVY5RUxqUEI4ajdwdkVEYnZnejIySHFBV2ptTlRC
V3cvMC80QkQ3OTVGMDkyQjk0MzAwRUMwNTA5MDUzQTEyNDkyMjczNDc3Nzg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCRDc5NUYwOTJCOTQzMDBF
QzA1MDkwNTNBMTI0OTIyNzM0Nzc3ODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVxdzk4S3lCb0dSWDlWOUVMalBCOGo3cHZFRGJ2Z3oyMkhxQVdqbU5UQld3LzAv
MzIzODMwMzQzYTM1MzMzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzUzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARTcDANBgkqhkiG9w0BAQsFAAOCAQEApdzCh5Cf
IOhHa3FDsqUWMVBnzRnIZaLBUPbgTwjDfaqJaZb2GdH1zhVY8b+1e0B4R+2+SOUD
7ekFrq1061Q86UOZhEazWMZD4QXMhv0OYMHShWbDypWb7hNntLPydfEPVI+B3eVT
VVOYbmSptc5UEWTkHblykkJbThKqMZEU28O31bWv0H5vb2biy/ip3Q8DejxRA0UF
Ms48CaZBUBgW0xEyysLnPzB/2BfGwO5UpbisyglVldjMnADdXZpBNJyZydKrOMWw
D3cjyypKL2UWZgZh0VuNT8I7Ocv5rYLxBXwmKjRofjF+pHsZ7folmOQfDCrIIGQl
WV9caVQJBuoLrQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:46:53 2025 by rpki-client