Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33342d3334203d3e20323638353834.roa
File:                     323830343a353337303a3a2f33342d3334203d3e20323638353834.roa (raw, json)
Hash identifier:          jSwrDseNvjFv3ntq3+ncHu6NTcIieYJrMPAdJK2L0GM=
Subject key identifier:   86:A6:B3:71:E4:78:A7:17:75:37:04:92:89:30:5B:46:69:7B:E2:3B
Certificate issuer:       /CN=4BD795F092B94300EC0509053A12492273477784
Certificate serial:       4F39EBDE7B15596D42572F8CFE031379B455AD03
Authority key identifier: 4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33342d3334203d3e20323638353834.roa
Signing time:             Tue 02 Jan 2024 17:16:08 +0000
ROA not before:           Tue 02 Jan 2024 17:11:08 +0000
ROA not after:            Tue 31 Dec 2024 17:16:08 +0000
asID:                     268584
IP address blocks:        2804:5370::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:39:eb:de:7b:15:59:6d:42:57:2f:8c:fe:03:13:79:b4:55:ad:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD795F092B94300EC0509053A12492273477784
        Validity
            Not Before: Jan  2 17:11:08 2024 GMT
            Not After : Dec 31 17:16:08 2024 GMT
        Subject: CN=86A6B371E478A7177537049289305B46697BE23B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:d4:f1:fd:28:9e:ca:6f:13:08:e5:9c:ed:
                    b3:bf:46:70:01:bd:1a:7d:d9:a5:16:f5:85:71:bc:
                    f8:94:45:15:50:8f:2e:f4:10:49:84:e1:58:ae:80:
                    15:0b:f8:73:cb:77:e9:6e:d4:a9:ea:32:57:e7:a0:
                    63:cb:ec:2a:8c:66:24:4d:da:05:24:51:84:d4:7d:
                    1e:51:e1:85:b4:35:94:3e:9b:cb:51:d9:ff:34:28:
                    07:41:5c:b6:9b:33:76:3f:d1:ec:d4:b6:0a:cb:b5:
                    f1:df:32:52:1c:e7:f2:7d:1b:a9:d1:0b:b0:93:da:
                    b2:77:70:c6:e6:0f:3e:2d:a1:1b:aa:f8:f9:a8:13:
                    dc:96:e2:83:b8:1c:1f:93:0b:72:c2:10:cd:b0:1e:
                    c0:e4:21:47:a3:c3:af:f6:c1:bf:1c:e3:12:15:bc:
                    6b:02:53:1d:5b:bf:81:30:38:a5:87:69:5e:73:9f:
                    dc:0d:ab:fc:d4:8e:bc:89:12:fd:1b:7a:3c:8b:98:
                    05:3a:67:15:a2:5c:7e:87:88:13:04:ae:48:21:60:
                    c5:31:cb:2a:d2:f1:0a:81:93:5a:25:a6:5a:a5:08:
                    94:b8:97:65:0d:61:88:b3:ea:dd:ab:ec:2f:11:13:
                    a6:02:b2:84:49:39:d2:5a:ca:f1:b3:d9:99:6e:cc:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A6:B3:71:E4:78:A7:17:75:37:04:92:89:30:5B:46:69:7B:E2:3B
            X509v3 Authority Key Identifier:
                keyid:4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/4BD795F092B94300EC0509053A12492273477784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/323830343a353337303a3a2f33342d3334203d3e20323638353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5370::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:c7:67:a9:99:7b:c4:b5:e5:5e:d4:11:6c:93:a0:c0:d4:4a:
         da:2e:fb:31:1e:f5:10:32:b1:3c:9e:f5:6c:e8:5b:6f:e8:14:
         b4:1c:a5:49:38:2b:83:6a:aa:35:f3:3e:7d:21:14:4c:f9:d9:
         bc:e9:f1:4f:97:da:1a:08:18:ac:3f:b4:7a:a6:7b:03:51:b6:
         56:bf:99:74:ef:c3:8f:9a:a7:1a:e4:02:59:ce:41:6c:a2:e6:
         17:de:87:a3:30:bc:0f:48:dd:70:07:0a:0f:ad:2c:b4:cb:51:
         f4:08:2e:8a:d9:b0:f2:71:18:2c:29:56:1e:16:68:cf:a0:4d:
         12:16:d8:a6:a8:8f:c7:bb:b1:47:c9:8c:ce:03:4f:fa:b3:92:
         c9:01:0c:16:69:e1:5a:22:ab:c1:99:ab:b6:fe:81:9b:3b:28:
         dc:37:4f:80:30:09:87:d3:58:95:73:4b:cf:f2:bc:64:65:0c:
         4b:01:34:04:7c:6b:d9:3e:16:5d:b3:b3:da:df:9f:66:68:2e:
         f2:93:fe:77:a2:e3:7c:5a:a6:bf:be:59:30:bc:3b:92:dd:9b:
         a0:3d:91:65:8e:9a:48:7f:43:f7:52:55:00:a3:49:37:16:bc:
         0b:d4:d5:19:81:7d:21:82:9e:d6:bc:04:b0:2b:c7:9e:a5:d0:
         cf:42:6e:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTznr3nsVWW1CVy+M/gMTebRVrQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJENzk1RjA5MkI5NDMwMEVDMDUwOTA1M0ExMjQ5MjI3
MzQ3Nzc4NDAeFw0yNDAxMDIxNzExMDhaFw0yNDEyMzExNzE2MDhaMDMxMTAvBgNV
BAMTKDg2QTZCMzcxRTQ3OEE3MTc3NTM3MDQ5Mjg5MzA1QjQ2Njk3QkUyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgtTx/Sieym8TCOWc7bO/RnAB
vRp92aUW9YVxvPiURRVQjy70EEmE4ViugBUL+HPLd+lu1KnqMlfnoGPL7CqMZiRN
2gUkUYTUfR5R4YW0NZQ+m8tR2f80KAdBXLabM3Y/0ezUtgrLtfHfMlIc5/J9G6nR
C7CT2rJ3cMbmDz4toRuq+PmoE9yW4oO4HB+TC3LCEM2wHsDkIUejw6/2wb8c4xIV
vGsCUx1bv4EwOKWHaV5zn9wNq/zUjryJEv0bejyLmAU6ZxWiXH6HiBMErkghYMUx
yyrS8QqBk1olplqlCJS4l2UNYYiz6t2r7C8RE6YCsoRJOdJayvGz2ZluzNPVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhqazceR4pxd1NwSSiTBbRml74jswHwYDVR0j
BBgwFoAUS9eV8JK5QwDsBQkFOhJJInNHd4QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXF3OThLeUJvR1JYOVY5RUxqUEI4ajdwdkVEYnZnejIySHFBV2ptTlRC
V3cvMC80QkQ3OTVGMDkyQjk0MzAwRUMwNTA5MDUzQTEyNDkyMjczNDc3Nzg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCRDc5NUYwOTJCOTQzMDBF
QzA1MDkwNTNBMTI0OTIyNzM0Nzc3ODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVxdzk4S3lCb0dSWDlWOUVMalBCOGo3cHZFRGJ2Z3oyMkhxQVdqbU5UQld3LzAv
MzIzODMwMzQzYTM1MzMzNzMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4
MzUzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARTcAAwDQYJKoZIhvcNAQELBQADggEBABbHZ6mZ
e8S15V7UEWyToMDUStou+zEe9RAysTye9WzoW2/oFLQcpUk4K4NqqjXzPn0hFEz5
2bzp8U+X2hoIGKw/tHqmewNRtla/mXTvw4+apxrkAlnOQWyi5hfeh6MwvA9I3XAH
Cg+tLLTLUfQILorZsPJxGCwpVh4WaM+gTRIW2Kaoj8e7sUfJjM4DT/qzkskBDBZp
4Voiq8GZq7b+gZs7KNw3T4AwCYfTWJVzS8/yvGRlDEsBNAR8a9k+Fl2zs9rfn2Zo
LvKT/nei43xapr++WTC8O5Ldm6A9kWWOmkh/Q/dSVQCjSTcWvAvU1RmBfSGCnta8
BLArx56l0M9Cbj0=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:30 2025 by rpki-client