Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a383030303a3a2f33332d3333203d3e20323632363633.roa
File:                     323830343a373166383a383030303a3a2f33332d3333203d3e20323632363633.roa (raw, json)
Hash identifier:          A/+Y7AHM8vNgfwzW2rkQ2oq+dYme1jxVYvv5rR58a7A=
Subject key identifier:   DA:83:33:2D:1F:63:76:2D:5D:96:05:9F:90:E1:D7:5F:DF:95:97:E4
Certificate issuer:       /CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
Certificate serial:       7C962EFCE89722FB0B9F8ACD292B4D596C4B7839
Authority key identifier: 4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a383030303a3a2f33332d3333203d3e20323632363633.roa
Signing time:             Sat 03 Feb 2024 15:58:11 +0000
ROA not before:           Sat 03 Feb 2024 15:53:11 +0000
ROA not after:            Sat 01 Feb 2025 15:58:11 +0000
asID:                     262663
IP address blocks:        2804:71f8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:96:2e:fc:e8:97:22:fb:0b:9f:8a:cd:29:2b:4d:59:6c:4b:78:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
        Validity
            Not Before: Feb  3 15:53:11 2024 GMT
            Not After : Feb  1 15:58:11 2025 GMT
        Subject: CN=DA83332D1F63762D5D96059F90E1D75FDF9597E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:5c:bd:c2:99:74:7c:9e:64:ed:f5:49:d2:
                    50:78:65:73:40:ac:c6:79:a4:50:fd:70:ce:49:fd:
                    e4:a7:9a:14:9f:ea:21:0e:4b:44:03:44:76:b9:c2:
                    8c:f7:1e:51:13:73:b2:ec:28:a7:6a:2f:04:56:da:
                    8b:19:86:43:01:6e:d6:02:1d:58:e9:bd:bf:80:86:
                    75:1a:1c:e1:75:b4:41:ed:25:29:db:02:b9:42:b3:
                    b6:1f:3d:45:22:6d:ad:13:57:60:61:42:9c:40:ec:
                    2d:3c:8a:fc:21:37:d4:14:f0:42:b5:36:44:dc:21:
                    b1:e8:37:fd:f2:04:82:81:4a:bb:2f:3b:31:62:02:
                    72:1e:ec:96:0e:51:43:dc:27:37:c6:1d:37:e6:32:
                    0a:ae:95:3c:1a:06:64:74:a8:37:5b:f4:2c:c4:98:
                    19:0e:a5:eb:d2:f5:2f:cb:ba:87:55:cd:3f:87:50:
                    eb:36:5e:be:f5:64:59:6f:e9:34:7c:0b:f1:c8:71:
                    f1:4e:6a:09:c9:14:b6:99:82:e7:f3:3f:d6:46:60:
                    5f:57:6f:f1:1e:a1:13:6f:ed:18:8a:a5:d3:c9:08:
                    b7:c1:59:cb:c6:0d:b4:19:00:ab:7f:11:13:a8:3d:
                    af:d8:8b:80:7c:49:b0:5f:68:78:80:ec:95:ca:ac:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:83:33:2D:1F:63:76:2D:5D:96:05:9F:90:E1:D7:5F:DF:95:97:E4
            X509v3 Authority Key Identifier:
                keyid:4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a383030303a3a2f33332d3333203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71f8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:7d:18:d3:b5:38:64:64:4a:d3:c8:ab:40:8c:63:cf:08:6c:
         e0:b5:ef:dd:e1:55:69:19:b1:b5:55:c0:22:5d:dc:f2:f1:bf:
         8c:cf:76:ab:fb:9a:08:14:7d:81:4a:9a:e4:0d:a0:34:0f:5b:
         12:08:88:2d:1f:b1:fd:34:26:0a:c3:ad:b5:06:32:89:cf:8c:
         95:49:60:44:c5:9b:2b:ef:66:24:61:21:6d:2f:14:66:84:bd:
         ea:ba:53:e2:b0:3d:f6:63:5a:ba:b2:29:35:2d:83:7b:cc:eb:
         02:c5:a0:0a:db:c6:9c:86:df:ae:f4:45:91:c5:5e:5d:a2:0d:
         bf:b9:6c:03:ec:b8:90:f4:45:b7:a3:82:f1:54:d1:66:2f:24:
         c0:ed:53:16:35:7c:73:94:19:bb:0a:04:7a:2e:db:6f:6f:be:
         4f:be:6f:4c:66:bb:c2:b2:cc:e2:41:d1:fa:e4:b2:af:be:41:
         2c:3d:54:63:18:6c:82:f6:62:65:cf:cf:8b:3a:f3:ff:97:05:
         63:f4:b8:8c:5f:d9:b4:fb:30:42:50:8f:89:bb:cc:95:ef:c8:
         8f:90:a5:d3:0f:25:21:6e:79:a2:14:2f:e8:2f:cb:7d:58:12:
         b2:4f:5a:63:fc:e8:4e:6a:70:ba:af:2d:8e:b5:ab:7f:8f:50:
         20:43:63:15
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfJYu/OiXIvsLn4rNKStNWWxLeDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUyNkRCOUFEMUYzN0ZDMTYxNkQwQTIzQTQ3NUIwOERB
QTJGRjI2NjAeFw0yNDAyMDMxNTUzMTFaFw0yNTAyMDExNTU4MTFaMDMxMTAvBgNV
BAMTKERBODMzMzJEMUY2Mzc2MkQ1RDk2MDU5RjkwRTFENzVGREY5NTk3RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06Vy9wpl0fJ5k7fVJ0lB4ZXNA
rMZ5pFD9cM5J/eSnmhSf6iEOS0QDRHa5woz3HlETc7LsKKdqLwRW2osZhkMBbtYC
HVjpvb+AhnUaHOF1tEHtJSnbArlCs7YfPUUiba0TV2BhQpxA7C08ivwhN9QU8EK1
NkTcIbHoN/3yBIKBSrsvOzFiAnIe7JYOUUPcJzfGHTfmMgqulTwaBmR0qDdb9CzE
mBkOpevS9S/LuodVzT+HUOs2Xr71ZFlv6TR8C/HIcfFOagnJFLaZgufzP9ZGYF9X
b/EeoRNv7RiKpdPJCLfBWcvGDbQZAKt/EROoPa/Yi4B8SbBfaHiA7JXKrH3FAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU2oMzLR9jdi1dlgWfkOHXX9+Vl+QwHwYDVR0j
BBgwFoAUTibbmtHzf8FhbQojpHWwjaov8mYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlpMYnVrOXFpaThaV2lSR1RjVm4zZGFtSGV1aHBDbmV4M1ZrNllXOWZT
Ym0vMC80RTI2REI5QUQxRjM3RkMxNjE2RDBBMjNBNDc1QjA4REFBMkZGMjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFMjZEQjlBRDFGMzdGQzE2
MTZEMEEyM0E0NzVCMDhEQUEyRkYyNjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaTGJ1azlxaWk4WldpUkdUY1ZuM2RhbUhldWhwQ25leDNWazZZVzlmU2JtLzAv
MzIzODMwMzQzYTM3MzE2NjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMjM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEcfiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBjfRjTtThkZErTyKtAjGPPCGzgte/d4VVpGbG1VcAiXdzy8b+Mz3ar+5oI
FH2BSprkDaA0D1sSCIgtH7H9NCYKw621BjKJz4yVSWBExZsr72YkYSFtLxRmhL3q
ulPisD32Y1q6sik1LYN7zOsCxaAK28acht+u9EWRxV5dog2/uWwD7LiQ9EW3o4Lx
VNFmLyTA7VMWNXxzlBm7CgR6Lttvb75Pvm9MZrvCssziQdH65LKvvkEsPVRjGGyC
9mJlz8+LOvP/lwVj9LiMX9m0+zBCUI+Ju8yV78iPkKXTDyUhbnmiFC/oL8t9WBKy
T1pj/OhOanC6ry2Otat/j1AgQ2MV
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:25 2025 by rpki-client