Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/323830343a343230383a3a2f33322d313238203d3e20323637343733.roa
File:                     323830343a343230383a3a2f33322d313238203d3e20323637343733.roa (raw, json)
Hash identifier:          aXm5F670PG6G8wQR/f+1kEjjCijpAu0A1Do7oVtH9yI=
Subject key identifier:   8B:BE:72:FE:69:7F:00:B0:34:60:40:78:EB:2B:25:EE:BF:B2:73:F0
Certificate issuer:       /CN=D63944944C9213940D0D5EABDAE9B471306B6760
Certificate serial:       4C9389CFE495C32992A6E3BE30B6E01BD98FD965
Authority key identifier: D6:39:44:94:4C:92:13:94:0D:0D:5E:AB:DA:E9:B4:71:30:6B:67:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63944944C9213940D0D5EABDAE9B471306B6760.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/323830343a343230383a3a2f33322d313238203d3e20323637343733.roa
Signing time:             Wed 04 Sep 2024 19:09:43 +0000
ROA not before:           Wed 04 Sep 2024 19:04:43 +0000
ROA not after:            Wed 03 Sep 2025 19:09:43 +0000
asID:                     267473
IP address blocks:        2804:4208::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:93:89:cf:e4:95:c3:29:92:a6:e3:be:30:b6:e0:1b:d9:8f:d9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63944944C9213940D0D5EABDAE9B471306B6760
        Validity
            Not Before: Sep  4 19:04:43 2024 GMT
            Not After : Sep  3 19:09:43 2025 GMT
        Subject: CN=8BBE72FE697F00B034604078EB2B25EEBFB273F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:e5:19:f0:0c:25:97:15:37:e8:d9:38:f1:
                    0f:43:41:1d:10:73:cf:31:af:2b:de:2c:a4:4d:36:
                    ca:d1:c7:57:f9:e1:59:95:2d:b9:86:7c:e3:46:b7:
                    67:ca:7e:82:ff:27:f8:37:94:37:a0:10:95:1a:c8:
                    01:ad:7b:99:78:05:a0:9d:b3:45:11:37:af:83:ae:
                    d8:70:3c:58:2a:0e:cf:9c:9e:47:73:a7:50:84:6a:
                    93:c8:32:62:93:7e:4e:a0:85:09:10:80:a1:ff:e3:
                    16:ac:c4:e3:dc:85:70:29:71:f0:10:72:a5:d6:09:
                    86:e9:e6:3a:50:c4:a3:6c:99:46:38:a9:90:8d:12:
                    09:11:50:ee:40:c0:ce:b2:4c:bb:03:79:83:1f:94:
                    ad:29:95:59:9d:36:37:b9:72:a0:83:74:68:15:2f:
                    e2:6f:26:73:e6:de:11:13:ae:3b:ca:95:4a:93:73:
                    56:a5:e0:35:04:37:36:b8:81:ab:2c:72:66:e2:3e:
                    99:e4:63:58:f2:1f:15:ca:66:d9:86:81:ab:52:1d:
                    31:9e:35:1b:6d:e4:18:86:03:6a:16:e0:13:43:8c:
                    5a:5e:75:8c:b6:a6:32:14:fc:ea:d6:d9:5c:34:8d:
                    86:69:66:2b:6b:e7:59:1c:3a:1f:5f:00:0e:85:41:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BE:72:FE:69:7F:00:B0:34:60:40:78:EB:2B:25:EE:BF:B2:73:F0
            X509v3 Authority Key Identifier:
                keyid:D6:39:44:94:4C:92:13:94:0D:0D:5E:AB:DA:E9:B4:71:30:6B:67:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/D63944944C9213940D0D5EABDAE9B471306B6760.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63944944C9213940D0D5EABDAE9B471306B6760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/323830343a343230383a3a2f33322d313238203d3e20323637343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4208::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:28:12:9c:31:73:81:3b:7f:a1:5f:e9:a9:29:8d:b7:3b:81:
         26:35:d4:e9:3a:b5:b3:d5:43:5a:4c:59:50:c5:dc:da:e6:bf:
         6c:85:70:39:72:bb:c4:49:6c:42:24:a4:f8:b4:84:77:b0:d6:
         62:5f:9b:87:88:4c:1b:b8:e6:96:72:62:9f:ab:49:c4:b2:71:
         b2:ab:c6:a4:78:31:2d:d9:60:a5:49:b6:17:d8:d4:de:cf:f2:
         47:cb:92:3e:05:f6:9c:6e:93:ed:95:67:90:0e:b4:6c:eb:8b:
         be:9e:8b:e8:6d:13:52:89:60:d6:b8:4a:b3:89:e2:d6:e0:eb:
         43:2d:21:2c:91:e9:1c:6d:01:30:29:7b:29:7a:b3:f1:33:d7:
         5c:10:55:3c:5a:a9:e2:92:a0:86:cd:6d:74:b8:ac:d6:46:b9:
         51:57:2a:cd:31:b4:b3:31:4b:85:b7:92:50:d5:4b:41:22:07:
         62:91:75:71:b1:a3:53:2a:8c:15:f0:90:16:43:08:f6:76:e4:
         c4:61:fe:dc:c4:3b:77:ed:a5:f6:0a:10:bb:d1:cc:ee:da:ff:
         8c:f5:ce:8f:80:db:a8:68:49:06:61:b1:1b:b3:5f:34:e7:0e:
         35:8b:1e:78:51:06:60:7d:a5:29:26:e8:64:eb:57:67:aa:9d:
         0f:4d:0f:f4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUTJOJz+SVwymSpuO+MLbgG9mP2WUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzOTQ0OTQ0QzkyMTM5NDBEMEQ1RUFCREFFOUI0NzEz
MDZCNjc2MDAeFw0yNDA5MDQxOTA0NDNaFw0yNTA5MDMxOTA5NDNaMDMxMTAvBgNV
BAMTKDhCQkU3MkZFNjk3RjAwQjAzNDYwNDA3OEVCMkIyNUVFQkZCMjczRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHeUZ8AwllxU36Nk48Q9DQR0Q
c88xryveLKRNNsrRx1f54VmVLbmGfONGt2fKfoL/J/g3lDegEJUayAGte5l4BaCd
s0URN6+DrthwPFgqDs+cnkdzp1CEapPIMmKTfk6ghQkQgKH/4xasxOPchXApcfAQ
cqXWCYbp5jpQxKNsmUY4qZCNEgkRUO5AwM6yTLsDeYMflK0plVmdNje5cqCDdGgV
L+JvJnPm3hETrjvKlUqTc1al4DUENza4gasscmbiPpnkY1jyHxXKZtmGgatSHTGe
NRtt5BiGA2oW4BNDjFpedYy2pjIU/OrW2Vw0jYZpZitr51kcOh9fAA6FQRAJAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUi75y/ml/ALA0YEB46ysl7r+yc/AwHwYDVR0j
BBgwFoAU1jlElEySE5QNDV6r2um0cTBrZ2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFTUDdpd0hLNFBialFIVExqWDNKQXZKcmNLbnd2ZEtlTGJ0WFhWdUZj
cG4vMC9ENjM5NDQ5NDRDOTIxMzk0MEQwRDVFQUJEQUU5QjQ3MTMwNkI2NzYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2Mzk0NDk0NEM5MjEzOTQw
RDBENUVBQkRBRTlCNDcxMzA2QjY3NjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxU1A3aXdISzRQYmpRSFRMalgzSkF2SnJjS253dmRLZUxidFhYVnVGY3BuLzAv
MzIzODMwMzQzYTM0MzIzMDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEIIMA0GCSqGSIb3DQEBCwUAA4IBAQArKBKc
MXOBO3+hX+mpKY23O4EmNdTpOrWz1UNaTFlQxdza5r9shXA5crvESWxCJKT4tIR3
sNZiX5uHiEwbuOaWcmKfq0nEsnGyq8akeDEt2WClSbYX2NTez/JHy5I+BfacbpPt
lWeQDrRs64u+novobRNSiWDWuEqzieLW4OtDLSEskekcbQEwKXsperPxM9dcEFU8
WqnikqCGzW10uKzWRrlRVyrNMbSzMUuFt5JQ1UtBIgdikXVxsaNTKowV8JAWQwj2
duTEYf7cxDt37aX2ChC70czu2v+M9c6PgNuoaEkGYbEbs1805w41ix54UQZgfaUp
Juhk61dnqp0PTQ/0
-----END CERTIFICATE-----
Generated at Tue Apr 15 01:40:06 2025 by rpki-client