Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33332d3333203d3e20323638353834.roa
File:                     323830343a353337303a3a2f33332d3333203d3e20323638353834.roa (raw, json)
Hash identifier:          ke8G3IHv6LeDRLD+8iL+nSVUDl7zMx854alMMi0ZeEM=
Subject key identifier:   66:2D:66:14:89:5A:73:51:A7:78:0D:91:E3:F9:E0:89:E0:DE:70:25
Certificate issuer:       /CN=4BD795F092B94300EC0509053A12492273477784
Certificate serial:       21B24B08B30585CE218047CAD1350C79F4BEF481
Authority key identifier: 4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33332d3333203d3e20323638353834.roa
Signing time:             Tue 02 Jan 2024 17:16:09 +0000
ROA not before:           Tue 02 Jan 2024 17:11:09 +0000
ROA not after:            Tue 31 Dec 2024 17:16:09 +0000
asID:                     268584
IP address blocks:        2804:5370::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b2:4b:08:b3:05:85:ce:21:80:47:ca:d1:35:0c:79:f4:be:f4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD795F092B94300EC0509053A12492273477784
        Validity
            Not Before: Jan  2 17:11:09 2024 GMT
            Not After : Dec 31 17:16:09 2024 GMT
        Subject: CN=662D6614895A7351A7780D91E3F9E089E0DE7025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:e2:11:1d:20:18:19:e6:90:5b:3b:72:ba:
                    27:ab:3b:72:80:45:2c:70:30:90:20:f1:cf:95:26:
                    8d:f4:fb:6d:a8:67:49:85:2b:12:7e:2e:6c:7a:4f:
                    f1:0e:ce:ec:f8:c1:31:cc:9a:8b:c5:2f:a0:93:17:
                    38:67:c6:be:bd:dd:67:c9:eb:cf:0c:ff:9c:a9:0f:
                    f3:5f:61:28:7f:be:40:9c:1e:f9:0f:5b:81:63:8d:
                    e1:ab:5d:53:40:e0:a3:16:5a:c5:d2:2a:3a:12:04:
                    ea:ad:39:e9:fd:2a:bb:08:e9:de:c3:c5:bf:30:77:
                    cd:b4:0c:15:10:4a:3a:46:87:0a:30:be:d7:01:34:
                    72:0c:de:ed:d4:50:a5:60:42:3c:74:04:b1:b8:6e:
                    00:13:e0:73:9b:19:56:17:46:05:ff:7b:28:04:fc:
                    37:f3:b3:e9:0f:2f:02:d8:cd:d2:d3:d2:d8:7f:6f:
                    7f:1d:d9:57:3f:6c:cd:8e:ce:f4:2d:ef:ca:26:54:
                    18:2c:33:92:98:b9:e3:d6:dd:fd:01:bb:3e:c7:61:
                    3d:7b:47:82:a7:f3:f6:a0:9a:74:8a:31:f6:11:41:
                    77:1b:76:57:cb:61:55:20:50:da:ba:5a:f6:50:d6:
                    5e:0f:2a:32:45:ec:5d:93:41:8d:1d:cf:78:44:84:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2D:66:14:89:5A:73:51:A7:78:0D:91:E3:F9:E0:89:E0:DE:70:25
            X509v3 Authority Key Identifier:
                keyid:4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/4BD795F092B94300EC0509053A12492273477784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33332d3333203d3e20323638353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5370::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:58:9c:7c:dc:2f:d7:35:34:1d:8c:11:69:b3:ef:97:df:
         1a:8b:4f:c8:b0:b6:aa:72:4c:23:b5:ea:b6:92:39:52:86:31:
         bc:31:3f:6c:ad:1a:76:b4:7f:57:a6:28:21:72:9e:e8:d0:58:
         ad:27:2f:15:69:c8:df:57:d1:fc:52:f9:81:70:50:60:72:08:
         74:cd:af:94:ab:66:fa:d1:1d:68:7a:ca:fe:64:be:68:fc:98:
         77:3d:a9:f6:1f:25:37:cf:14:26:4d:65:22:a3:b1:76:2d:29:
         5d:17:5b:0e:da:1b:9e:7d:18:d2:7b:ad:48:3b:0a:25:ea:3e:
         c4:ec:4f:28:a6:56:4f:98:a0:ba:50:5c:ad:71:f3:c0:44:da:
         24:12:8c:ac:2e:a3:37:d0:c8:9d:56:fa:73:fb:08:ae:65:e8:
         8c:9e:0a:60:83:64:30:f7:c4:8a:f6:ff:ac:7c:2d:c4:40:4e:
         bf:b5:bc:10:4d:09:01:a4:fe:34:ee:c2:ab:33:e7:75:f0:fa:
         b1:16:71:75:61:7c:7f:1a:58:a5:07:80:a5:18:8b:dc:11:ea:
         4c:d0:36:a0:4e:96:46:27:7a:b9:4b:04:cc:ad:da:19:26:85:
         86:4d:cc:d3:ea:b6:fb:03:7b:0b:d0:54:c0:20:df:2e:ef:be:
         14:d4:3f:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIbJLCLMFhc4hgEfK0TUMefS+9IEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJENzk1RjA5MkI5NDMwMEVDMDUwOTA1M0ExMjQ5MjI3
MzQ3Nzc4NDAeFw0yNDAxMDIxNzExMDlaFw0yNDEyMzExNzE2MDlaMDMxMTAvBgNV
BAMTKDY2MkQ2NjE0ODk1QTczNTFBNzc4MEQ5MUUzRjlFMDg5RTBERTcwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmGuIRHSAYGeaQWztyuierO3KA
RSxwMJAg8c+VJo30+22oZ0mFKxJ+Lmx6T/EOzuz4wTHMmovFL6CTFzhnxr693WfJ
688M/5ypD/NfYSh/vkCcHvkPW4FjjeGrXVNA4KMWWsXSKjoSBOqtOen9KrsI6d7D
xb8wd820DBUQSjpGhwowvtcBNHIM3u3UUKVgQjx0BLG4bgAT4HObGVYXRgX/eygE
/Dfzs+kPLwLYzdLT0th/b38d2Vc/bM2OzvQt78omVBgsM5KYuePW3f0Buz7HYT17
R4Kn8/agmnSKMfYRQXcbdlfLYVUgUNq6WvZQ1l4PKjJF7F2TQY0dz3hEhPl7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZi1mFIlac1GneA2R4/ngieDecCUwHwYDVR0j
BBgwFoAUS9eV8JK5QwDsBQkFOhJJInNHd4QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXF3OThLeUJvR1JYOVY5RUxqUEI4ajdwdkVEYnZnejIySHFBV2ptTlRC
V3cvMC80QkQ3OTVGMDkyQjk0MzAwRUMwNTA5MDUzQTEyNDkyMjczNDc3Nzg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCRDc5NUYwOTJCOTQzMDBF
QzA1MDkwNTNBMTI0OTIyNzM0Nzc3ODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVxdzk4S3lCb0dSWDlWOUVMalBCOGo3cHZFRGJ2Z3oyMkhxQVdqbU5UQld3LzAv
MzIzODMwMzQzYTM1MzMzNzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzUzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARTcAAwDQYJKoZIhvcNAQELBQADggEBAE7wWJx8
3C/XNTQdjBFps++X3xqLT8iwtqpyTCO16raSOVKGMbwxP2ytGna0f1emKCFynujQ
WK0nLxVpyN9X0fxS+YFwUGByCHTNr5SrZvrRHWh6yv5kvmj8mHc9qfYfJTfPFCZN
ZSKjsXYtKV0XWw7aG559GNJ7rUg7CiXqPsTsTyimVk+YoLpQXK1x88BE2iQSjKwu
ozfQyJ1W+nP7CK5l6IyeCmCDZDD3xIr2/6x8LcRATr+1vBBNCQGk/jTuwqsz53Xw
+rEWcXVhfH8aWKUHgKUYi9wR6kzQNqBOlkYnerlLBMyt2hkmhYZNzNPqtvsDewvQ
VMAg3y7vvhTUPyY=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:35 2025 by rpki-client