Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653030303a3a2f33352d3335203d3e20323637303237.roa
File:                     323830343a343730383a653030303a3a2f33352d3335203d3e20323637303237.roa (raw, json)
Hash identifier:          P/aGZkVyTVK1Q9LWQyR4ppeaEryXzJkpqWWBIoZy1h8=
Subject key identifier:   C8:3D:89:D2:6F:EE:EC:C3:3D:28:8F:7A:C9:57:C3:EA:C2:1F:82:1A
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       5A4F394B1590284DB6035F07D9247B395F275C37
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653030303a3a2f33352d3335203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:01 +0000
ROA not before:           Fri 08 Nov 2024 14:19:01 +0000
ROA not after:            Fri 07 Nov 2025 14:24:01 +0000
asID:                     267027
IP address blocks:        2804:4708:e000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:39:4b:15:90:28:4d:b6:03:5f:07:d9:24:7b:39:5f:27:5c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:01 2024 GMT
            Not After : Nov  7 14:24:01 2025 GMT
        Subject: CN=C83D89D26FEEECC33D288F7AC957C3EAC21F821A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:24:44:fa:f8:e0:ae:fd:48:82:27:b9:48:
                    a7:30:c5:10:45:a3:0b:67:7f:de:4d:c9:90:1d:c3:
                    4f:66:d6:75:e0:d7:72:2f:d8:1e:ea:63:83:14:b1:
                    44:a1:7d:bb:c5:15:82:cd:dd:83:71:cd:6b:62:22:
                    81:8f:32:c0:6e:d9:b1:a2:e6:25:df:f4:03:6f:2d:
                    27:26:77:dd:6f:ef:61:78:81:66:54:3c:b7:fa:af:
                    fb:ad:25:82:81:c1:2f:d0:3e:bf:4e:91:0f:96:e8:
                    e5:ee:55:32:c8:9c:02:5e:a3:d8:fd:c2:3e:7c:9e:
                    b2:12:b2:ec:30:46:3d:6b:f7:c4:1b:45:1d:00:f8:
                    c5:7c:38:26:87:a5:20:9e:40:5f:a1:4b:a7:e4:11:
                    eb:49:47:7a:44:06:2b:67:37:56:08:3a:80:ad:b2:
                    e6:cf:54:31:dd:71:6f:f9:11:36:9e:1d:50:fc:a3:
                    e2:f8:30:b6:51:8e:ca:63:3b:cf:95:54:28:ef:6b:
                    58:6a:9f:f8:1e:c6:26:cb:95:df:fe:8d:ad:72:33:
                    d3:b3:fb:b1:40:64:a3:ad:24:80:72:42:b0:7e:70:
                    e8:ae:e5:a4:9c:8d:65:12:18:7a:45:0e:ac:b2:9e:
                    5f:32:c3:a5:08:61:ad:52:97:f3:24:db:d5:02:22:
                    40:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3D:89:D2:6F:EE:EC:C3:3D:28:8F:7A:C9:57:C3:EA:C2:1F:82:1A
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653030303a3a2f33352d3335203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:67:2e:5e:67:35:07:54:c8:61:c1:ae:6a:63:19:d2:32:
         e0:58:73:a5:3e:ab:91:bc:12:5c:a3:a5:27:79:9c:42:57:b1:
         05:b0:b7:70:40:24:1a:6c:a8:bc:e3:a2:09:04:ce:15:09:57:
         07:30:0d:4e:70:cb:c3:0d:d0:7a:db:02:57:6c:ee:08:60:c8:
         87:36:78:58:87:9e:2d:d0:de:d3:b4:e0:7b:11:6a:32:79:be:
         a7:f4:67:ab:aa:d1:12:43:3a:0a:89:3a:0d:08:5d:8d:37:66:
         f1:2e:e5:e6:5d:ae:44:0a:45:e8:c7:fc:28:6f:ed:1b:0f:90:
         8f:60:cf:6d:c2:ae:fc:fb:34:3d:21:e2:bf:a7:6a:e2:13:20:
         62:7a:c5:70:00:dd:1a:3f:9b:b7:fd:dd:75:54:4e:2f:ac:01:
         88:fb:99:45:5c:43:03:2e:1a:32:80:0e:93:f7:1a:f3:22:02:
         1e:77:26:5f:8a:20:62:ec:c2:b4:78:d4:2c:b9:14:8b:ad:bc:
         25:83:f6:4d:48:f8:c9:17:fc:c3:ec:66:53:46:08:41:31:7c:
         05:99:a0:09:95:50:20:4d:b8:0b:94:50:54:bc:32:bc:3a:66:
         8b:ee:2b:3a:ab:6c:26:12:9b:71:4f:cc:a4:da:1b:a5:22:00:
         40:0a:56:fe
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWk85SxWQKE22A18H2SR7OV8nXDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M4MUJDMDUyRjI0NTFCQUMxNkZBNDIyNTREMTY4NkUw
Rjk3QkU3QjAeFw0yNDExMDgxNDE5MDFaFw0yNTExMDcxNDI0MDFaMDMxMTAvBgNV
BAMTKEM4M0Q4OUQyNkZFRUVDQzMzRDI4OEY3QUM5NTdDM0VBQzIxRjgyMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGCRE+vjgrv1Igie5SKcwxRBF
owtnf95NyZAdw09m1nXg13Iv2B7qY4MUsUShfbvFFYLN3YNxzWtiIoGPMsBu2bGi
5iXf9ANvLScmd91v72F4gWZUPLf6r/utJYKBwS/QPr9OkQ+W6OXuVTLInAJeo9j9
wj58nrISsuwwRj1r98QbRR0A+MV8OCaHpSCeQF+hS6fkEetJR3pEBitnN1YIOoCt
subPVDHdcW/5ETaeHVD8o+L4MLZRjspjO8+VVCjva1hqn/gexibLld/+ja1yM9Oz
+7FAZKOtJIByQrB+cOiu5aScjWUSGHpFDqyynl8yw6UIYa1Sl/Mk29UCIkBzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUyD2J0m/u7MM9KI96yVfD6sIfghowHwYDVR0j
BBgwFoAUzIG8BS8kUbrBb6QiVNFobg+XvnswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC9DQzgxQkMwNTJGMjQ1MUJBQzE2RkE0MjI1NEQxNjg2RTBGOTdCRTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDODFCQzA1MkYyNDUxQkFD
MTZGQTQyMjU0RDE2ODZFMEY5N0JFN0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAv
MzIzODMwMzQzYTM0MzczMDM4M2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNzMwMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgERwjgMA0GCSqGSIb3DQEBCwUA
A4IBAQAwamcuXmc1B1TIYcGuamMZ0jLgWHOlPquRvBJco6UneZxCV7EFsLdwQCQa
bKi846IJBM4VCVcHMA1OcMvDDdB62wJXbO4IYMiHNnhYh54t0N7TtOB7EWoyeb6n
9GerqtESQzoKiToNCF2NN2bxLuXmXa5ECkXox/wob+0bD5CPYM9twq78+zQ9IeK/
p2riEyBiesVwAN0aP5u3/d11VE4vrAGI+5lFXEMDLhoygA6T9xrzIgIedyZfiiBi
7MK0eNQsuRSLrbwlg/ZNSPjJF/zD7GZTRghBMXwFmaAJlVAgTbgLlFBUvDK8OmaL
7is6q2wmEptxT8yk2hulIgBAClb+
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:22 2025 by rpki-client