Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a3a2f33322d3332203d3e20323638373239.roa
File:                     323830343a353964383a3a2f33322d3332203d3e20323638373239.roa (raw, json)
Hash identifier:          J8ZINc2MVGqfWad2lf3/5Q1NkMzVrxOAHlEQhVF2vlo=
Subject key identifier:   7F:4D:C5:52:C1:CF:AB:E4:AB:BB:67:32:16:B4:18:CF:79:A3:86:C7
Certificate issuer:       /CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
Certificate serial:       677A19E57793ABB1368336D7596B3A279436125A
Authority key identifier: 8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a3a2f33322d3332203d3e20323638373239.roa
Signing time:             Tue 26 Dec 2023 16:59:15 +0000
ROA not before:           Tue 26 Dec 2023 16:54:15 +0000
ROA not after:            Tue 24 Dec 2024 16:59:15 +0000
asID:                     268729
IP address blocks:        2804:59d8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7a:19:e5:77:93:ab:b1:36:83:36:d7:59:6b:3a:27:94:36:12:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
        Validity
            Not Before: Dec 26 16:54:15 2023 GMT
            Not After : Dec 24 16:59:15 2024 GMT
        Subject: CN=7F4DC552C1CFABE4ABBB673216B418CF79A386C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:e8:6d:49:78:71:3a:a2:95:71:e6:ac:f6:
                    6c:1c:f5:72:e4:31:85:73:c4:86:db:e5:26:5e:2c:
                    01:54:c8:ba:51:1a:24:76:f3:06:96:e9:f0:10:51:
                    bf:a5:a4:db:78:16:69:3e:54:9e:f7:0f:0b:3f:ce:
                    85:6e:3d:58:d4:a1:4a:65:ac:62:47:a7:7a:5a:56:
                    a9:d4:5f:e7:f4:66:e5:3e:6c:ee:a4:3a:f2:5d:73:
                    26:1a:d3:99:42:2c:92:24:ca:36:8e:bf:9d:fd:96:
                    dd:5e:8d:36:35:50:8f:0d:47:1a:0c:92:5d:28:dd:
                    40:78:8c:fc:6f:2a:f7:0b:e2:46:a4:0a:56:11:e8:
                    74:1a:c6:75:fd:44:1a:76:e1:22:14:20:ac:54:ef:
                    5e:c2:94:e4:60:86:9a:3a:9e:6c:75:dc:77:a4:c2:
                    b7:b6:55:df:c3:ee:99:d0:9e:e3:da:b9:1b:65:bc:
                    23:19:68:24:9e:d8:47:bd:a0:45:92:38:79:27:e3:
                    e1:23:ab:9d:bc:fe:cc:4d:8b:51:99:ba:ec:23:84:
                    03:04:ac:ca:cb:88:2d:de:81:5e:9b:62:69:7a:9f:
                    c0:54:73:1c:8e:92:62:e6:2b:4e:cc:ed:3b:7a:d4:
                    2e:c6:f7:cc:ee:4d:06:c2:b8:cf:dd:c4:87:3b:6b:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4D:C5:52:C1:CF:AB:E4:AB:BB:67:32:16:B4:18:CF:79:A3:86:C7
            X509v3 Authority Key Identifier:
                keyid:8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a3a2f33322d3332203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:0f:aa:69:e2:f7:56:e1:d7:bc:cd:95:58:d6:bb:9d:12:
         96:13:dc:48:5f:92:36:76:99:4b:d4:f4:73:7b:ec:80:50:d8:
         93:47:98:5b:b3:66:c8:bd:9e:83:ee:37:76:74:b4:cb:6d:f8:
         5f:f4:ad:0f:52:1e:90:ad:41:65:f7:e6:51:c1:d9:67:aa:30:
         5c:63:8d:66:1e:3b:e9:71:85:ee:dd:ae:9a:2d:67:7f:ab:45:
         59:ec:c5:1c:4b:38:c3:1f:54:09:0c:fd:bf:ce:8f:5c:19:7e:
         78:c3:e7:7b:ed:af:0b:5b:20:4e:16:fe:ca:82:c4:a7:15:70:
         08:53:9d:3f:01:24:18:62:3b:6e:59:03:ef:1a:94:f1:46:de:
         e7:07:26:ae:1c:7e:73:a8:ed:93:19:e3:4a:ef:86:15:c7:d2:
         d3:ea:15:12:71:1c:3d:3d:5a:52:cd:ee:bd:53:a9:e3:ef:f8:
         be:d5:c7:71:90:c8:8e:40:33:32:4c:67:d5:88:26:9b:80:3d:
         8e:f2:56:8c:5b:18:b9:3e:e7:01:3b:28:3a:7f:35:0f:44:0f:
         36:cc:74:ad:5e:aa:46:f1:98:81:51:c2:81:7d:47:f5:c6:b4:
         0e:01:6d:59:86:d2:be:97:cd:eb:04:be:9c:da:fd:9d:b4:e6:
         35:72:4d:37
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZ3oZ5XeTq7E2gzbXWWs6J5Q2ElowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVERTlFOEZCRjczQzZEOEZFQzNGN0Q4MkRFRjFFMUIy
QjA0QUVEMTAeFw0yMzEyMjYxNjU0MTVaFw0yNDEyMjQxNjU5MTVaMDMxMTAvBgNV
BAMTKDdGNERDNTUyQzFDRkFCRTRBQkJCNjczMjE2QjQxOENGNzlBMzg2QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6+htSXhxOqKVceas9mwc9XLk
MYVzxIbb5SZeLAFUyLpRGiR28waW6fAQUb+lpNt4Fmk+VJ73Dws/zoVuPVjUoUpl
rGJHp3paVqnUX+f0ZuU+bO6kOvJdcyYa05lCLJIkyjaOv539lt1ejTY1UI8NRxoM
kl0o3UB4jPxvKvcL4kakClYR6HQaxnX9RBp24SIUIKxU717ClORghpo6nmx13Hek
wre2Vd/D7pnQnuPauRtlvCMZaCSe2Ee9oEWSOHkn4+Ejq528/sxNi1GZuuwjhAME
rMrLiC3egV6bYml6n8BUcxyOkmLmK07M7Tt61C7G98zuTQbCuM/dxIc7a//7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUf03FUsHPq+Sru2cyFrQYz3mjhscwHwYDVR0j
BBgwFoAUjt6ej79zxtj+w/fYLe8eGysErtEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZTZ3NiOU53UDJCdmdMZDhhMVlVOUJ2c25UaFVLc1AyYWNKNGVOWXc2
YXkvMC84RURFOUU4RkJGNzNDNkQ4RkVDM0Y3RDgyREVGMUUxQjJCMDRBRUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhFREU5RThGQkY3M0M2RDhG
RUMzRjdEODJERUYxRTFCMkIwNEFFRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGU2dzYjlOd1AyQnZnTGQ4YTFZVTlCdnNuVGhVS3NQMmFjSjRlTll3NmF5LzAv
MzIzODMwMzQzYTM1Mzk2NDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzczMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARZ2DANBgkqhkiG9w0BAQsFAAOCAQEAf7QPqmni
91bh17zNlVjWu50SlhPcSF+SNnaZS9T0c3vsgFDYk0eYW7NmyL2eg+43dnS0y234
X/StD1IekK1BZffmUcHZZ6owXGONZh476XGF7t2umi1nf6tFWezFHEs4wx9UCQz9
v86PXBl+eMPne+2vC1sgThb+yoLEpxVwCFOdPwEkGGI7blkD7xqU8Ube5wcmrhx+
c6jtkxnjSu+GFcfS0+oVEnEcPT1aUs3uvVOp4+/4vtXHcZDIjkAzMkxn1Ygmm4A9
jvJWjFsYuT7nATsoOn81D0QPNsx0rV6qRvGYgVHCgX1H9ca0DgFtWYbSvpfN6wS+
nNr9nbTmNXJNNw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:15 2025 by rpki-client