Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3332203d3e20323638313236.roa
File:                     323830343a353836343a3a2f33322d3332203d3e20323638313236.roa (raw, json)
Hash identifier:          2Lwu8AnjJQw+HZYInlui2HzYvrmn2mLtHhCgSty7fFQ=
Subject key identifier:   4D:B6:9E:71:23:F4:03:62:C4:12:3E:64:4D:A5:80:4C:A7:9A:35:EA
Certificate issuer:       /CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
Certificate serial:       70F0FA159F65308B8492B41C77129013B8598AB3
Authority key identifier: 08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3332203d3e20323638313236.roa
Signing time:             Sat 08 Apr 2023 15:11:32 +0000
ROA not before:           Sat 08 Apr 2023 15:06:32 +0000
ROA not after:            Sat 06 Apr 2024 15:11:32 +0000
asID:                     268126
IP address blocks:        2804:5864::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f0:fa:15:9f:65:30:8b:84:92:b4:1c:77:12:90:13:b8:59:8a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Validity
            Not Before: Apr  8 15:06:32 2023 GMT
            Not After : Apr  6 15:11:32 2024 GMT
        Subject: CN=4DB69E7123F40362C4123E644DA5804CA79A35EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:38:f1:54:8e:7e:dc:59:b2:1c:eb:92:6c:9e:
                    5b:f4:04:08:93:99:c6:a1:d9:bf:72:ae:bc:78:2d:
                    53:d4:b6:2b:ff:60:b7:c4:ac:b5:0e:b9:d0:85:0c:
                    92:8f:47:2b:a6:8c:7a:76:98:9e:42:af:4e:1d:3b:
                    bf:1d:96:2f:55:27:7c:ab:bb:02:19:6f:00:3f:6b:
                    5f:d0:86:d0:d5:f3:e5:45:28:11:05:69:30:56:81:
                    62:41:66:cd:d8:47:1c:b6:f8:61:fa:1d:79:90:91:
                    5b:53:0b:50:e9:b8:10:ae:af:2d:d4:b2:76:64:18:
                    f7:3f:23:f7:78:60:0e:54:fa:c0:38:34:9d:7d:f2:
                    2d:c5:1e:68:0d:0d:cc:17:97:de:06:14:00:d6:e9:
                    ac:2e:2b:b8:6b:b9:e5:04:fa:16:9c:62:5c:45:85:
                    12:72:0b:11:1a:d4:30:59:b3:cc:a3:fe:f6:ed:93:
                    50:8d:02:16:c6:cc:c1:b9:0f:89:e8:5e:79:ef:55:
                    77:99:35:87:e4:aa:45:96:9c:d6:81:d6:75:d2:4c:
                    7d:2c:f4:b4:90:7a:05:66:10:e4:3d:d4:cc:35:19:
                    ef:30:21:fb:3c:36:2f:3f:5c:17:47:3a:37:2c:85:
                    f9:bf:91:cb:8d:9a:bc:cb:0a:f6:70:21:de:ac:3c:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B6:9E:71:23:F4:03:62:C4:12:3E:64:4D:A5:80:4C:A7:9A:35:EA
            X509v3 Authority Key Identifier:
                keyid:08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3332203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5864::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:35:03:74:25:b4:0b:86:cd:18:ec:03:d2:bb:cb:cc:b6:
         2f:e0:90:ff:8b:6f:f8:da:1b:d1:31:30:37:ce:e8:b8:63:ce:
         b3:ee:26:5f:62:41:dc:50:62:62:51:c4:ba:b4:83:ee:98:e3:
         d4:3f:e9:68:8c:9f:8f:8f:eb:b4:50:52:d5:16:d9:c9:d1:ee:
         c3:d2:93:a1:a3:b7:0a:8a:b8:e5:51:44:07:77:dd:f6:2e:ce:
         39:df:28:2c:36:f2:21:9c:2c:ca:1f:fc:21:05:b2:eb:f2:73:
         b2:0b:e3:69:d6:71:c3:d0:56:19:df:13:9b:9e:2c:39:a6:a7:
         7c:d4:87:5e:10:7c:25:2c:70:2b:b7:6e:08:6e:82:d6:e4:f0:
         ca:87:1e:b2:71:25:e9:93:9b:7f:b3:2b:f1:4c:ce:13:f3:ad:
         ec:70:e7:14:84:d7:57:b7:f1:4a:84:cb:cc:fc:1b:e8:9b:be:
         b0:ea:3a:5c:19:6d:a7:89:3a:76:17:9a:8e:ab:f5:23:34:b9:
         93:6e:7e:cc:ac:ad:8a:a1:5b:e6:0d:27:cc:94:da:29:8b:8c:
         da:df:0d:4e:fb:03:20:74:bb:6e:49:df:c7:3e:b8:db:c0:53:
         b1:8c:fd:ae:6c:48:46:ab:14:e4:5c:38:6e:54:03:4e:bd:f0:
         1c:7b:9d:f1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcPD6FZ9lMIuEkrQcdxKQE7hZirMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4MDE5REFCMTE2NzZDNEU5NURCNkQ0NUI3QzRCMUU2
QUExQ0I2NDAeFw0yMzA0MDgxNTA2MzJaFw0yNDA0MDYxNTExMzJaMDMxMTAvBgNV
BAMTKDREQjY5RTcxMjNGNDAzNjJDNDEyM0U2NDREQTU4MDRDQTc5QTM1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOPFUjn7cWbIc65Jsnlv0BAiT
mcah2b9yrrx4LVPUtiv/YLfErLUOudCFDJKPRyumjHp2mJ5Cr04dO78dli9VJ3yr
uwIZbwA/a1/QhtDV8+VFKBEFaTBWgWJBZs3YRxy2+GH6HXmQkVtTC1DpuBCury3U
snZkGPc/I/d4YA5U+sA4NJ198i3FHmgNDcwXl94GFADW6awuK7hrueUE+hacYlxF
hRJyCxEa1DBZs8yj/vbtk1CNAhbGzMG5D4noXnnvVXeZNYfkqkWWnNaB1nXSTH0s
9LSQegVmEOQ91Mw1Ge8wIfs8Ni8/XBdHOjcshfm/kcuNmrzLCvZwId6sPN3FAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTbaecSP0A2LEEj5kTaWATKeaNeowHwYDVR0j
BBgwFoAUCIAZ2rEWdsTpXbbUW3xLHmqhy2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1Vh
akEvMC8wODgwMTlEQUIxMTY3NkM0RTk1REI2RDQ1QjdDNEIxRTZBQTFDQjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4ODAxOURBQjExNjc2QzRF
OTVEQjZENDVCN0M0QjFFNkFBMUNCNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3TXFmellQSFlybWNrVWJQMWR0TVF5bjhUeDNRdWg1N05TYTJGZ2tVYWpBLzAv
MzIzODMwMzQzYTM1MzgzNjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYZDANBgkqhkiG9w0BAQsFAAOCAQEAEYo1A3Ql
tAuGzRjsA9K7y8y2L+CQ/4tv+Nob0TEwN87ouGPOs+4mX2JB3FBiYlHEurSD7pjj
1D/paIyfj4/rtFBS1RbZydHuw9KToaO3Coq45VFEB3fd9i7OOd8oLDbyIZwsyh/8
IQWy6/JzsgvjadZxw9BWGd8Tm54sOaanfNSHXhB8JSxwK7duCG6C1uTwyocesnEl
6ZObf7Mr8UzOE/Ot7HDnFITXV7fxSoTLzPwb6Ju+sOo6XBltp4k6dheajqv1IzS5
k25+zKytiqFb5g0nzJTaKYuM2t8NTvsDIHS7bknfxz6428BTsYz9rmxIRqsU5Fw4
blQDTr3wHHud8Q==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:14:22 2025 by rpki-client