Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064313a3a2f34382d3438203d3e20323632333136.roa
File:                     323830343a3763303a323064313a3a2f34382d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          Wxhq88548JhfPaYHLtvrxOvgiz5rygb743uwq/2aF/0=
Subject key identifier:   99:DF:DD:44:5B:C5:05:95:43:61:00:A3:04:8C:81:22:33:8B:33:CB
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       523B6EEC07D418705DC1920F6BEBFFE62D56284E
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064313a3a2f34382d3438203d3e20323632333136.roa
Signing time:             Thu 14 Sep 2023 13:11:50 +0000
ROA not before:           Thu 14 Sep 2023 13:06:50 +0000
ROA not after:            Thu 12 Sep 2024 13:11:50 +0000
asID:                     262316
IP address blocks:        2804:7c0:20d1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3b:6e:ec:07:d4:18:70:5d:c1:92:0f:6b:eb:ff:e6:2d:56:28:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 14 13:06:50 2023 GMT
            Not After : Sep 12 13:11:50 2024 GMT
        Subject: CN=99DFDD445BC50595436100A3048C8122338B33CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:64:59:da:53:53:1f:10:53:4a:3d:d8:6e:
                    c5:6f:be:68:12:82:ba:bd:56:9f:ea:ef:25:84:86:
                    a9:cf:41:3f:41:d6:df:f9:e8:6f:f2:f0:83:bf:4e:
                    dd:3e:53:d2:46:9d:62:80:5e:db:39:03:15:84:23:
                    31:c6:67:25:6a:1c:e6:df:97:b8:61:7d:b0:98:cc:
                    59:aa:cb:d7:8b:47:55:22:3a:11:1f:4e:9b:92:02:
                    a0:dc:23:a8:b1:e3:fa:9b:c1:37:2d:8f:07:43:c6:
                    92:bc:2b:fc:2e:b3:f2:16:1e:3e:62:06:f8:bc:6d:
                    62:fe:93:6b:72:1b:7f:11:b2:a1:d1:d9:f6:0d:d9:
                    73:0f:ff:ac:13:29:d3:02:a2:47:0b:6b:70:3f:d4:
                    ee:a9:da:a2:fe:32:32:94:e6:95:20:5a:ad:f4:3d:
                    b3:61:fe:a3:d7:7b:a6:bc:d1:85:fe:34:47:1f:0c:
                    8d:8a:af:c8:7f:95:04:e7:e0:79:75:4c:4e:fe:a9:
                    aa:d9:24:28:03:e9:6a:c1:80:20:75:9b:37:ec:e6:
                    53:b3:a2:e9:8d:ae:9b:9a:cf:c8:ce:98:c4:4c:e4:
                    6e:60:f4:d1:92:b7:2e:1b:9c:79:a0:75:8e:aa:5e:
                    8c:47:c2:82:e6:a1:6d:86:57:c4:0f:6a:b6:f6:fa:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DF:DD:44:5B:C5:05:95:43:61:00:A3:04:8C:81:22:33:8B:33:CB
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064313a3a2f34382d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:20d1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:83:e6:d4:f6:e6:8e:f9:04:2b:18:4e:d1:1d:be:42:32:5a:
         23:ed:df:9b:98:98:b4:07:74:8e:8d:9f:ec:6e:d0:08:94:b6:
         3f:fc:ae:07:c3:fa:95:28:6a:fb:25:41:10:ab:59:a9:bf:42:
         71:f8:a4:a4:e0:d6:7d:00:48:89:61:45:1a:73:bd:14:71:7a:
         ff:04:fe:75:e2:2e:ad:0d:c0:e1:fd:5a:65:c3:60:d4:c6:da:
         6c:20:dd:5f:7f:0d:81:c0:81:ea:28:28:10:8f:26:a5:40:e8:
         fd:48:e2:42:6a:49:ac:d9:d2:5d:e2:81:ec:dd:cf:0c:d9:c4:
         0f:bd:bd:1d:a0:63:b9:f1:96:54:66:e4:24:72:55:10:b7:bc:
         d3:d9:78:90:93:e4:9f:e8:e5:8e:4e:52:49:5d:44:69:49:f3:
         30:e4:bc:8c:af:56:50:94:db:88:40:b6:01:b5:f6:46:45:5d:
         55:68:c3:e5:0b:6c:29:2a:0e:a9:ca:70:83:49:ac:8f:f1:50:
         83:1d:7a:52:18:f0:c0:5d:7d:46:f6:de:1b:3a:fc:6a:90:cd:
         f0:02:5f:7e:cf:3c:9e:fb:5e:87:f7:cc:de:44:92:fe:30:75:
         4a:aa:51:9a:2f:0a:2a:6f:87:fc:23:a0:50:be:1b:b2:ff:d7:
         a8:32:3b:bd
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUUjtu7AfUGHBdwZIPa+v/5i1WKE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QTEzMkZCOEY5QzFCOThBOUNEQ0YxNTFFQTgyMzUw
QTFFMDgwODAeFw0yMzA5MTQxMzA2NTBaFw0yNDA5MTIxMzExNTBaMDMxMTAvBgNV
BAMTKDk5REZERDQ0NUJDNTA1OTU0MzYxMDBBMzA0OEM4MTIyMzM4QjMzQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZh2RZ2lNTHxBTSj3YbsVvvmgS
grq9Vp/q7yWEhqnPQT9B1t/56G/y8IO/Tt0+U9JGnWKAXts5AxWEIzHGZyVqHObf
l7hhfbCYzFmqy9eLR1UiOhEfTpuSAqDcI6ix4/qbwTctjwdDxpK8K/wus/IWHj5i
Bvi8bWL+k2tyG38RsqHR2fYN2XMP/6wTKdMCokcLa3A/1O6p2qL+MjKU5pUgWq30
PbNh/qPXe6a80YX+NEcfDI2Kr8h/lQTn4Hl1TE7+qarZJCgD6WrBgCB1mzfs5lOz
oumNrpuaz8jOmMRM5G5g9NGSty4bnHmgdY6qXoxHwoLmoW2GV8QParb2+n7nAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUmd/dRFvFBZVDYQCjBIyBIjOLM8swHwYDVR0j
BBgwFoAUzWoTL7j5wbmKnNzxUeqCNQoeCAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DRDZBMTMyRkI4RjlDMUI5OEE5Q0RDRjE1MUVBODIzNTBBMUUwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkExMzJGQjhGOUMxQjk4
QTlDRENGMTUxRUE4MjM1MEExRTA4MDguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzIzODMwMzQzYTM3NjMzMDNhMzIzMDY0MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzIzMzMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBAfAINEwDQYJKoZIhvcNAQELBQAD
ggEBAI6D5tT25o75BCsYTtEdvkIyWiPt35uYmLQHdI6Nn+xu0AiUtj/8rgfD+pUo
avslQRCrWam/QnH4pKTg1n0ASIlhRRpzvRRxev8E/nXiLq0NwOH9WmXDYNTG2mwg
3V9/DYHAgeooKBCPJqVA6P1I4kJqSazZ0l3igezdzwzZxA+9vR2gY7nxllRm5CRy
VRC3vNPZeJCT5J/o5Y5OUkldRGlJ8zDkvIyvVlCU24hAtgG19kZFXVVow+ULbCkq
DqnKcINJrI/xUIMdelIY8MBdfUb23hs6/GqQzfACX37PPJ77Xof3zN5Ekv4wdUqq
UZovCipvh/wjoFC+G7L/16gyO70=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:12 2025 by rpki-client