Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa
File:                     323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (raw, json)
Hash identifier:          5nlDnUveeTsnmPMGz5gaQxOu5igBITIM73rcBeqaSFs=
Subject key identifier:   B0:D4:EA:11:AD:75:40:7B:76:B7:F4:75:60:23:74:7D:9F:77:22:C1
Certificate issuer:       /CN=D9E9FED4F7C00847DC06901C384D2C908C0095A1
Certificate serial:       33CF8CAE1DFD477FB367E5CE82751CF692450A86
Authority key identifier: D9:E9:FE:D4:F7:C0:08:47:DC:06:90:1C:38:4D:2C:90:8C:00:95:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa
Signing time:             Fri 29 Dec 2023 19:03:13 +0000
ROA not before:           Fri 29 Dec 2023 18:58:13 +0000
ROA not after:            Fri 27 Dec 2024 19:03:13 +0000
asID:                     263637
IP address blocks:        2804:1078::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:8c:ae:1d:fd:47:7f:b3:67:e5:ce:82:75:1c:f6:92:45:0a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9E9FED4F7C00847DC06901C384D2C908C0095A1
        Validity
            Not Before: Dec 29 18:58:13 2023 GMT
            Not After : Dec 27 19:03:13 2024 GMT
        Subject: CN=B0D4EA11AD75407B76B7F4756023747D9F7722C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bc:5e:50:62:d8:d1:b2:51:59:92:d1:fb:6a:
                    4c:2f:52:47:db:a6:1a:0b:b5:d7:c2:02:96:36:f8:
                    1f:68:1a:19:11:ee:dd:25:c8:e3:43:4c:79:3c:35:
                    cb:80:84:ab:16:39:f6:81:65:ce:e0:dd:e1:d7:17:
                    67:a4:13:07:61:5d:f7:97:02:4f:90:49:3d:4b:d4:
                    ac:05:99:76:eb:23:5c:96:77:9b:b8:98:34:54:2c:
                    99:ff:60:94:db:3e:08:d9:6f:d9:95:8b:22:88:ee:
                    ea:70:cc:73:9b:dd:9b:e4:db:70:5b:1d:db:59:95:
                    64:73:98:df:9c:bc:8e:c4:ed:62:c7:a5:28:e4:d0:
                    7a:f6:1e:eb:66:da:99:3c:51:c6:75:61:67:ce:9a:
                    51:fa:4c:51:08:89:db:0f:37:26:7b:fc:10:6a:b1:
                    06:c6:9a:0c:6c:85:1c:66:21:70:96:f2:42:a0:e8:
                    4b:db:65:4c:43:cf:1a:f6:7f:fb:d0:e4:04:4a:79:
                    eb:d8:02:e3:6f:66:af:cd:c1:9a:46:94:d6:41:00:
                    de:82:80:61:0a:c7:fd:28:74:a5:18:3d:8d:f7:9b:
                    67:53:cd:57:92:c1:35:ef:a6:d4:d2:c5:6b:84:18:
                    07:7b:7b:8a:f5:6b:d1:f3:e4:a1:70:b8:fe:08:6d:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D4:EA:11:AD:75:40:7B:76:B7:F4:75:60:23:74:7D:9F:77:22:C1
            X509v3 Authority Key Identifier:
                keyid:D9:E9:FE:D4:F7:C0:08:47:DC:06:90:1C:38:4D:2C:90:8C:00:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1078::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:83:f5:0c:e1:0c:60:58:e8:6a:0b:91:ed:74:62:71:e2:de:
         0e:ed:08:68:60:79:ea:ee:6b:9e:64:8c:74:8a:cb:fe:a4:2b:
         cf:b2:35:9d:45:2d:4e:bc:f6:6b:d1:e4:6f:46:7d:f0:7f:59:
         1d:ad:b7:7f:e7:b0:3c:37:07:48:d4:44:b2:07:a2:c3:e3:fb:
         14:86:39:79:46:48:1f:98:38:66:d1:c2:29:be:c8:49:d4:1e:
         63:8b:c1:8f:ab:40:fc:7a:aa:06:e5:a0:6f:04:69:8b:28:57:
         d6:b5:08:98:ed:7c:b6:d9:9b:c2:65:4e:c5:b3:03:4a:60:cb:
         34:64:e5:20:e3:66:5e:55:0e:45:d2:e8:81:d6:1e:82:27:5f:
         f3:7c:ce:02:06:e5:cb:c4:bb:6a:a0:e9:b1:40:99:d2:bf:7c:
         d6:78:94:23:79:d7:4b:b6:5d:f6:c2:67:f9:8b:be:6d:f8:fb:
         70:cb:2f:ee:b3:4f:08:99:71:a0:70:53:c4:3c:dd:22:5e:61:
         89:8b:80:e7:7c:c4:29:0f:af:82:24:5c:c7:8c:67:58:c4:6b:
         c0:e4:29:a0:96:98:e5:e6:3e:12:e6:c3:e4:c4:a6:ea:23:b9:
         dd:9e:be:95:b0:43:e4:ed:de:c8:c3:4a:77:30:f7:d2:a6:50:
         13:12:53:ed
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUM8+Mrh39R3+zZ+XOgnUc9pJFCoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlFOUZFRDRGN0MwMDg0N0RDMDY5MDFDMzg0RDJDOTA4
QzAwOTVBMTAeFw0yMzEyMjkxODU4MTNaFw0yNDEyMjcxOTAzMTNaMDMxMTAvBgNV
BAMTKEIwRDRFQTExQUQ3NTQwN0I3NkI3RjQ3NTYwMjM3NDdEOUY3NzIyQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlvF5QYtjRslFZktH7akwvUkfb
phoLtdfCApY2+B9oGhkR7t0lyONDTHk8NcuAhKsWOfaBZc7g3eHXF2ekEwdhXfeX
Ak+QST1L1KwFmXbrI1yWd5u4mDRULJn/YJTbPgjZb9mViyKI7upwzHOb3Zvk23Bb
HdtZlWRzmN+cvI7E7WLHpSjk0Hr2Hutm2pk8UcZ1YWfOmlH6TFEIidsPNyZ7/BBq
sQbGmgxshRxmIXCW8kKg6EvbZUxDzxr2f/vQ5ARKeevYAuNvZq/NwZpGlNZBAN6C
gGEKx/0odKUYPY33m2dTzVeSwTXvptTSxWuEGAd7e4r1a9Hz5KFwuP4IbTBfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsNTqEa11QHt2t/R1YCN0fZ93IsEwHwYDVR0j
BBgwFoAU2en+1PfACEfcBpAcOE0skIwAlaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5yOG9aMTFaSDd1ek5OSjVYR1VWdkRLN0VzdEw2WjJMQmJVQ1lnN1Jt
ZVAvMC9EOUU5RkVENEY3QzAwODQ3REMwNjkwMUMzODREMkM5MDhDMDA5NUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5RTlGRUQ0RjdDMDA4NDdE
QzA2OTAxQzM4NEQyQzkwOEMwMDk1QTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZucjhvWjExWkg3dXpOTko1WEdVVnZESzdFc3RMNloyTEJiVUNZZzdSbWVQLzAv
MzIzODMwMzQzYTMxMzAzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzYzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQeDANBgkqhkiG9w0BAQsFAAOCAQEAzoP1DOEM
YFjoaguR7XRiceLeDu0IaGB56u5rnmSMdIrL/qQrz7I1nUUtTrz2a9Hkb0Z98H9Z
Ha23f+ewPDcHSNREsgeiw+P7FIY5eUZIH5g4ZtHCKb7ISdQeY4vBj6tA/HqqBuWg
bwRpiyhX1rUImO18ttmbwmVOxbMDSmDLNGTlIONmXlUORdLogdYegidf83zOAgbl
y8S7aqDpsUCZ0r981niUI3nXS7Zd9sJn+Yu+bfj7cMsv7rNPCJlxoHBTxDzdIl5h
iYuA53zEKQ+vgiRcx4xnWMRrwOQpoJaY5eY+EubD5MSm6iO53Z6+lbBD5O3eyMNK
dzD30qZQExJT7Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:40 2025 by rpki-client