Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a3a2f33322d3332203d3e20323636313938.roa
File:                     323830343a336333633a3a2f33322d3332203d3e20323636313938.roa (raw, json)
Hash identifier:          vdMGq3tFi2gaThVeUkkwVqHREgHDWumoOezjmQEh7i8=
Subject key identifier:   E8:D3:9C:2A:84:7E:C1:6D:A6:61:B8:3D:DF:4C:46:17:CE:B6:1A:4D
Certificate issuer:       /CN=08569896B950AF614AD919489CA9496B4E462F59
Certificate serial:       18939385E54E2332ECE96C30748376233154EE78
Authority key identifier: 08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a3a2f33322d3332203d3e20323636313938.roa
Signing time:             Tue 31 Oct 2023 20:43:54 +0000
ROA not before:           Tue 31 Oct 2023 20:38:54 +0000
ROA not after:            Tue 29 Oct 2024 20:43:54 +0000
asID:                     266198
IP address blocks:        2804:3c3c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:93:93:85:e5:4e:23:32:ec:e9:6c:30:74:83:76:23:31:54:ee:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08569896B950AF614AD919489CA9496B4E462F59
        Validity
            Not Before: Oct 31 20:38:54 2023 GMT
            Not After : Oct 29 20:43:54 2024 GMT
        Subject: CN=E8D39C2A847EC16DA661B83DDF4C4617CEB61A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:dd:5a:e6:56:c8:df:48:36:b7:3f:b8:22:
                    fe:ea:60:b7:eb:e2:3c:56:50:40:54:ec:e0:42:95:
                    a9:53:7e:49:69:6f:6c:0c:c1:e8:ea:52:11:00:e7:
                    fc:1e:7c:b1:07:57:bf:d9:2e:a9:6c:bc:aa:e7:5f:
                    36:7a:56:ba:01:08:64:88:ff:c5:57:1a:dd:ec:63:
                    83:63:14:fd:c8:c1:c0:a6:da:6c:16:5d:74:51:3a:
                    72:f0:fc:7e:e0:d6:9d:8a:90:ed:cd:97:2a:90:2e:
                    ff:4c:29:86:b1:97:3c:e9:5a:0a:87:07:e3:f4:32:
                    c8:89:39:d4:64:ee:cf:f8:ae:b7:1b:4a:e0:56:9b:
                    da:6d:48:9c:c4:86:c6:23:27:d9:49:82:45:d5:5a:
                    a5:04:bf:83:b4:ed:7f:82:b6:83:f1:f9:5d:db:ee:
                    5e:33:f7:2c:6b:7a:09:52:60:e0:78:6e:d0:72:64:
                    8c:25:b5:4b:d8:e8:23:d5:44:1f:1a:57:cd:ac:f9:
                    05:a8:f9:15:d4:b4:d0:f6:13:ea:0a:72:cf:ee:b6:
                    d6:2a:0a:07:ed:31:65:47:c8:de:22:dd:83:71:00:
                    be:ca:3b:f5:19:7b:64:25:0f:fd:2b:52:f5:21:94:
                    ac:2a:ed:74:c6:a6:30:7c:96:23:c5:29:b9:99:b0:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D3:9C:2A:84:7E:C1:6D:A6:61:B8:3D:DF:4C:46:17:CE:B6:1A:4D
            X509v3 Authority Key Identifier:
                keyid:08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/08569896B950AF614AD919489CA9496B4E462F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a3a2f33322d3332203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:a9:f6:e5:89:c5:f8:00:c3:70:26:78:40:36:d0:e0:aa:43:
         f9:a9:ae:ba:de:7b:13:fc:82:cb:ae:86:53:aa:18:6f:24:3b:
         7a:ff:48:56:4a:ce:9d:8e:cf:8d:63:c1:80:25:4e:46:bc:b1:
         c7:5b:e3:c1:1c:ca:a0:09:a4:19:f5:f0:cd:46:a1:99:66:96:
         05:d2:3b:8a:7a:d0:4d:60:31:ec:ce:27:99:aa:72:4a:6a:6c:
         66:b2:d8:b5:b2:ca:db:0f:c7:9f:41:ce:97:62:b8:99:96:59:
         16:a3:8c:71:98:67:dc:55:6c:c3:50:39:98:85:2f:8b:85:7e:
         3d:bd:3b:4d:76:6a:f4:26:d4:7d:20:51:c0:5f:92:fe:eb:f1:
         5b:19:38:d0:d4:e1:26:e0:64:cb:5b:1b:9e:b6:8a:b4:3c:39:
         64:f3:e9:ed:33:5c:f4:4d:35:a2:b4:ea:3c:d8:19:16:b9:dd:
         16:b3:20:b1:a0:1d:75:1a:15:e0:99:95:39:f5:77:43:fd:86:
         9d:2b:76:17:72:9f:af:a7:d9:6f:47:b7:b1:c5:9a:97:ea:1f:
         92:ff:9c:fb:47:2f:31:fb:ab:5c:08:23:4d:c5:4c:a8:77:56:
         fe:e9:65:95:f7:83:6f:db:f6:d9:6e:6f:23:04:05:ae:7a:a7:
         5f:5e:f6:3b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGJOTheVOIzLs6WwwdIN2IzFU7ngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg1Njk4OTZCOTUwQUY2MTRBRDkxOTQ4OUNBOTQ5NkI0
RTQ2MkY1OTAeFw0yMzEwMzEyMDM4NTRaFw0yNDEwMjkyMDQzNTRaMDMxMTAvBgNV
BAMTKEU4RDM5QzJBODQ3RUMxNkRBNjYxQjgzRERGNEM0NjE3Q0VCNjFBNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyN1a5lbI30g2tz+4Iv7qYLfr
4jxWUEBU7OBClalTfklpb2wMwejqUhEA5/wefLEHV7/ZLqlsvKrnXzZ6VroBCGSI
/8VXGt3sY4NjFP3IwcCm2mwWXXRROnLw/H7g1p2KkO3NlyqQLv9MKYaxlzzpWgqH
B+P0MsiJOdRk7s/4rrcbSuBWm9ptSJzEhsYjJ9lJgkXVWqUEv4O07X+CtoPx+V3b
7l4z9yxreglSYOB4btByZIwltUvY6CPVRB8aV82s+QWo+RXUtND2E+oKcs/uttYq
CgftMWVHyN4i3YNxAL7KO/UZe2QlD/0rUvUhlKwq7XTGpjB8liPFKbmZsDg3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6NOcKoR+wW2mYbg930xGF862Gk0wHwYDVR0j
BBgwFoAUCFaYlrlQr2FK2RlInKlJa05GL1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRpNHYyWjhIZzFueXR5YjRBbm1SaERxVDFQNWN6Vjg4SnZCYXhHYW1N
alIvMC8wODU2OTg5NkI5NTBBRjYxNEFEOTE5NDg5Q0E5NDk2QjRFNDYyRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4NTY5ODk2Qjk1MEFGNjE0
QUQ5MTk0ODlDQTk0OTZCNEU0NjJGNTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0aTR2Mlo4SGcxbnl0eWI0QW5tUmhEcVQxUDVjelY4OEp2QmF4R2FtTWpSLzAv
MzIzODMwMzQzYTMzNjMzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ8PDANBgkqhkiG9w0BAQsFAAOCAQEAC6n25YnF
+ADDcCZ4QDbQ4KpD+amuut57E/yCy66GU6oYbyQ7ev9IVkrOnY7PjWPBgCVORryx
x1vjwRzKoAmkGfXwzUahmWaWBdI7inrQTWAx7M4nmapySmpsZrLYtbLK2w/Hn0HO
l2K4mZZZFqOMcZhn3FVsw1A5mIUvi4V+Pb07TXZq9CbUfSBRwF+S/uvxWxk40NTh
JuBky1sbnraKtDw5ZPPp7TNc9E01orTqPNgZFrndFrMgsaAddRoV4JmVOfV3Q/2G
nSt2F3Kfr6fZb0e3scWal+ofkv+c+0cvMfurXAgjTcVMqHdW/ulllfeDb9v22W5v
IwQFrnqnX172Ow==
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:34:09 2025 by rpki-client