Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33322d3335203d3e20323633363532.roa
File:                     323830343a313064633a3a2f33322d3335203d3e20323633363532.roa (raw, json)
Hash identifier:          6sOTXr/jWgLAGnc7J6PvlCJ9lQGkSWH+hYmZkDsYhDk=
Subject key identifier:   8C:57:C3:25:E7:DC:C0:8B:4D:78:5C:8C:5C:F0:90:6C:FD:9C:96:8E
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       176478EF7297BC4B376178FFD18369899942DA9F
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33322d3335203d3e20323633363532.roa
Signing time:             Tue 03 Dec 2024 18:44:55 +0000
ROA not before:           Tue 03 Dec 2024 18:39:55 +0000
ROA not after:            Tue 02 Dec 2025 18:44:55 +0000
asID:                     263652
IP address blocks:        2804:10dc::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:64:78:ef:72:97:bc:4b:37:61:78:ff:d1:83:69:89:99:42:da:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:39:55 2024 GMT
            Not After : Dec  2 18:44:55 2025 GMT
        Subject: CN=8C57C325E7DCC08B4D785C8C5CF0906CFD9C968E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:41:49:1b:3e:ec:61:3c:32:3a:a4:50:50:
                    6d:4e:72:60:09:10:7e:d7:97:70:a6:1e:2d:44:d3:
                    cd:7c:d9:a5:d0:02:82:55:5c:49:f2:df:1b:1c:29:
                    91:96:dd:08:ce:d9:bc:3d:13:d0:6e:8d:5f:9b:c2:
                    8b:ca:e2:f0:05:0f:70:9a:e8:23:54:5e:a8:58:a6:
                    3a:24:a0:35:01:a7:0e:ee:6a:14:1e:09:44:93:e6:
                    ac:80:1b:88:20:c0:80:83:09:dc:13:fc:e0:1b:f8:
                    16:83:f3:83:97:58:f4:80:7f:ac:a7:4e:70:c7:74:
                    7c:2d:4c:1b:d1:06:71:37:56:18:7b:16:50:cf:55:
                    3b:38:19:a3:2a:78:fc:a3:fc:e8:ae:31:f3:e4:a1:
                    ba:1c:1e:e9:a6:5a:3a:08:fe:dd:ce:dd:8c:bd:94:
                    33:81:57:48:24:83:6a:52:0a:89:10:93:21:b4:84:
                    cf:f9:94:24:e5:bf:f0:c2:9b:fd:07:5c:b9:0e:b9:
                    fb:95:68:23:38:cb:48:bb:d2:f0:d8:19:76:82:80:
                    b2:73:76:8e:d4:20:8a:da:3d:91:09:8c:70:b5:a2:
                    eb:41:01:2d:b9:ad:b4:09:89:57:71:4e:08:66:18:
                    57:75:5c:de:51:6a:39:49:26:1c:0d:b9:8f:c3:d5:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:57:C3:25:E7:DC:C0:8B:4D:78:5C:8C:5C:F0:90:6C:FD:9C:96:8E
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33322d3335203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:ad:cf:bd:eb:44:81:ac:7b:ad:f2:35:c8:05:53:c3:bc:
         28:8a:4a:de:3e:67:af:36:d0:7b:96:aa:8c:69:ed:05:b3:c0:
         e0:34:9b:c4:b2:71:67:fb:52:8c:6c:f7:be:40:ac:d0:f2:53:
         bf:02:31:ca:f4:b2:0f:e0:69:c3:fa:50:cf:5e:fa:15:a7:7b:
         e9:6e:0c:24:f3:26:51:85:d4:f8:c0:70:87:6c:86:ac:b8:c7:
         e8:61:74:85:a7:44:2f:46:19:e0:78:00:72:e8:b2:2f:44:6f:
         62:d5:a7:06:68:a6:82:b5:98:62:e1:1d:c1:5f:84:10:34:63:
         2a:0d:03:dc:16:57:53:40:ca:58:81:e7:51:ed:12:8a:0e:ed:
         6a:5c:fd:18:dc:85:53:28:b4:26:92:2a:20:fb:2a:0c:1a:3f:
         b0:8f:1e:66:3b:d7:36:1c:ad:50:db:02:95:62:c1:79:9c:81:
         4c:74:7f:7a:58:b4:32:ef:73:74:51:74:82:c3:81:41:d6:5d:
         24:84:21:c3:c1:4b:69:cb:14:ad:df:02:33:08:fa:c7:b6:7e:
         54:1f:5e:b5:24:a2:c1:ae:5a:18:63:6b:c9:e9:31:a2:cb:74:
         b3:26:55:f6:d7:f8:ba:29:2d:a9:a3:ec:b3:74:38:1f:85:f2:
         50:b2:1b:fd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUF2R473KXvEs3YXj/0YNpiZlC2p8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGM0U5OTE0OTQ0NkNFOTA4Q0RBMTY3OEZEOTE4MENE
NDAyMEQxNjAeFw0yNDEyMDMxODM5NTVaFw0yNTEyMDIxODQ0NTVaMDMxMTAvBgNV
BAMTKDhDNTdDMzI1RTdEQ0MwOEI0RDc4NUM4QzVDRjA5MDZDRkQ5Qzk2OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn40FJGz7sYTwyOqRQUG1OcmAJ
EH7Xl3CmHi1E08182aXQAoJVXEny3xscKZGW3QjO2bw9E9BujV+bwovK4vAFD3Ca
6CNUXqhYpjokoDUBpw7uahQeCUST5qyAG4ggwICDCdwT/OAb+BaD84OXWPSAf6yn
TnDHdHwtTBvRBnE3Vhh7FlDPVTs4GaMqePyj/OiuMfPkobocHummWjoI/t3O3Yy9
lDOBV0gkg2pSCokQkyG0hM/5lCTlv/DCm/0HXLkOufuVaCM4y0i70vDYGXaCgLJz
do7UIIraPZEJjHC1outBAS25rbQJiVdxTghmGFd1XN5RajlJJhwNuY/D1dWRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjFfDJefcwItNeFyMXPCQbP2clo4wHwYDVR0j
BBgwFoAUlvPpkUlEbOkIzaFnj9kYDNQCDRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMC85NkYzRTk5MTQ5NDQ2Q0U5MDhDREExNjc4RkQ5MTgwQ0Q0MDIwRDE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RjNFOTkxNDk0NDZDRTkw
OENEQTE2NzhGRDkxODBDRDQwMjBEMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzAv
MzIzODMwMzQzYTMxMzA2NDYzM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjMz
MzYzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQ3DANBgkqhkiG9w0BAQsFAAOCAQEAbQatz73r
RIGse63yNcgFU8O8KIpK3j5nrzbQe5aqjGntBbPA4DSbxLJxZ/tSjGz3vkCs0PJT
vwIxyvSyD+Bpw/pQz176Fad76W4MJPMmUYXU+MBwh2yGrLjH6GF0hadEL0YZ4HgA
cuiyL0RvYtWnBmimgrWYYuEdwV+EEDRjKg0D3BZXU0DKWIHnUe0Sig7talz9GNyF
Uyi0JpIqIPsqDBo/sI8eZjvXNhytUNsClWLBeZyBTHR/eli0Mu9zdFF0gsOBQdZd
JIQhw8FLacsUrd8CMwj6x7Z+VB9etSSiwa5aGGNryekxost0syZV9tf4uiktqaPs
s3Q4H4XyULIb/Q==
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:54:57 2025 by rpki-client