Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/323830343a356164303a3a2f33322d3438203d3e20323638373938.roa
File:                     323830343a356164303a3a2f33322d3438203d3e20323638373938.roa (raw, json)
Hash identifier:          O6JkXEjGFjbo+cR6BZonBkDdRKGweS+y5XhZSDroAP4=
Subject key identifier:   50:F8:96:B0:36:93:76:7A:4E:06:CA:BA:1E:8D:9D:16:CB:C7:5E:E4
Certificate issuer:       /CN=2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0
Certificate serial:       15E449F9C4E104E393B4ABFA6DDB78BE0995B59C
Authority key identifier: 2D:F3:3D:7B:F9:AA:7A:D1:BF:99:8B:F3:42:E6:D4:16:96:7E:57:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/323830343a356164303a3a2f33322d3438203d3e20323638373938.roa
Signing time:             Thu 15 Feb 2024 16:54:21 +0000
ROA not before:           Thu 15 Feb 2024 16:49:21 +0000
ROA not after:            Thu 13 Feb 2025 16:54:21 +0000
asID:                     268798
IP address blocks:        2804:5ad0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:49:f9:c4:e1:04:e3:93:b4:ab:fa:6d:db:78:be:09:95:b5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0
        Validity
            Not Before: Feb 15 16:49:21 2024 GMT
            Not After : Feb 13 16:54:21 2025 GMT
        Subject: CN=50F896B03693767A4E06CABA1E8D9D16CBC75EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:25:ce:b4:8c:91:0b:0c:6e:c5:bc:7a:86:
                    0f:fa:5d:6d:2d:c2:00:16:c1:61:65:e2:0c:98:47:
                    1e:e0:f1:6a:87:e4:fc:77:ef:46:cf:0a:a7:29:8a:
                    74:2e:1d:7a:7f:22:c4:90:33:f9:f0:2b:04:42:22:
                    c7:e4:4e:8b:2c:ac:ac:2a:75:84:a1:81:19:8d:e3:
                    dc:f7:24:48:d0:d8:4f:c2:ab:eb:51:7d:ea:8f:95:
                    04:4c:a8:28:cf:48:35:74:1e:ba:96:06:d7:a8:3c:
                    6b:39:74:6e:22:56:04:51:2a:bc:dc:0e:1e:30:54:
                    4a:c3:d7:1d:86:92:3f:4b:12:a1:c6:57:c8:03:52:
                    0d:bd:25:da:45:29:f5:f1:b2:39:fd:3b:e8:f6:d6:
                    a3:b0:0b:25:ba:92:a1:9d:75:c7:2a:a7:b3:ec:a3:
                    34:be:eb:70:3a:a0:93:c4:52:85:73:5a:f5:92:69:
                    11:a7:9a:fd:45:a6:95:80:23:42:5a:93:f8:31:b3:
                    ee:d6:bd:d5:31:a7:a1:83:b2:06:b3:4a:b4:ef:ed:
                    c7:23:07:74:a7:80:8c:08:3c:b1:d7:53:45:87:42:
                    1b:3f:f8:5c:12:03:d7:64:63:af:7e:4b:f4:4f:be:
                    fe:98:af:f7:0c:24:85:fc:60:2e:bd:cc:4f:42:4c:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F8:96:B0:36:93:76:7A:4E:06:CA:BA:1E:8D:9D:16:CB:C7:5E:E4
            X509v3 Authority Key Identifier:
                keyid:2D:F3:3D:7B:F9:AA:7A:D1:BF:99:8B:F3:42:E6:D4:16:96:7E:57:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/323830343a356164303a3a2f33322d3438203d3e20323638373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:e3:20:0b:88:53:51:e6:d5:28:10:82:b5:29:d1:75:22:2b:
         26:02:c1:81:b7:b2:76:5f:c6:ab:09:6d:ba:3c:8c:26:71:d4:
         93:be:eb:9a:8d:1c:2b:03:30:d6:63:46:83:4f:7d:ee:03:39:
         e6:04:5d:e4:4a:03:39:8f:a1:57:31:ea:f5:34:24:3a:d3:43:
         76:9f:6f:e5:ec:ba:71:98:fb:7c:9e:5f:c5:f5:a4:f4:e5:96:
         f6:92:42:08:1a:7f:94:22:9d:34:99:72:01:ed:58:a3:a5:37:
         c5:ed:e8:8e:12:cd:74:cf:e3:02:e6:c9:b3:15:b0:93:ea:6e:
         b6:28:f0:1d:74:68:2f:4f:01:78:4f:7a:a4:02:e8:dd:99:53:
         62:eb:aa:f6:82:9b:fe:e2:a0:4d:25:57:9f:ec:ec:09:d4:e5:
         5c:e2:d9:20:ef:4a:f6:f0:4a:2d:03:28:26:16:a1:96:bd:4e:
         97:f2:05:e5:2d:0f:f8:f2:44:1c:b8:08:bf:da:31:fb:63:f9:
         26:2e:b2:84:29:9e:4c:1c:8b:d1:20:a3:56:a5:4d:ea:0e:ae:
         c0:4e:d2:2d:ea:da:71:c6:8c:05:78:31:69:66:8e:9e:93:17:
         4f:fb:84:4b:af:00:f8:ef:08:e1:e8:93:61:d3:40:1e:91:62:
         7a:51:c6:56
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFeRJ+cThBOOTtKv6bdt4vgmVtZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGMzNEN0JGOUFBN0FEMUJGOTk4QkYzNDJFNkQ0MTY5
NjdFNTdFMDAeFw0yNDAyMTUxNjQ5MjFaFw0yNTAyMTMxNjU0MjFaMDMxMTAvBgNV
BAMTKDUwRjg5NkIwMzY5Mzc2N0E0RTA2Q0FCQTFFOEQ5RDE2Q0JDNzVFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxiXOtIyRCwxuxbx6hg/6XW0t
wgAWwWFl4gyYRx7g8WqH5Px370bPCqcpinQuHXp/IsSQM/nwKwRCIsfkTossrKwq
dYShgRmN49z3JEjQ2E/Cq+tRfeqPlQRMqCjPSDV0HrqWBteoPGs5dG4iVgRRKrzc
Dh4wVErD1x2Gkj9LEqHGV8gDUg29JdpFKfXxsjn9O+j21qOwCyW6kqGddccqp7Ps
ozS+63A6oJPEUoVzWvWSaRGnmv1FppWAI0Jak/gxs+7WvdUxp6GDsgazSrTv7ccj
B3SngIwIPLHXU0WHQhs/+FwSA9dkY69+S/RPvv6Yr/cMJIX8YC69zE9CTKbjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUPiWsDaTdnpOBsq6Ho2dFsvHXuQwHwYDVR0j
BBgwFoAULfM9e/mqetG/mYvzQubUFpZ+V+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTRSVUxBTWVvNWtNVzZNSEsxQ1licTRta1pQVzZCcG1FYW9jaldraXZp
OTQvMC8yREYzM0Q3QkY5QUE3QUQxQkY5OThCRjM0MkU2RDQxNjk2N0U1N0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJERjMzRDdCRjlBQTdBRDFC
Rjk5OEJGMzQyRTZENDE2OTY3RTU3RTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk0UlVMQU1lbzVrTVc2TUhLMUNZYnE0bWtaUFc2QnBtRWFvY2pXa2l2aTk0LzAv
MzIzODMwMzQzYTM1NjE2NDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzczOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARa0DANBgkqhkiG9w0BAQsFAAOCAQEACuMgC4hT
UebVKBCCtSnRdSIrJgLBgbeydl/GqwltujyMJnHUk77rmo0cKwMw1mNGg0997gM5
5gRd5EoDOY+hVzHq9TQkOtNDdp9v5ey6cZj7fJ5fxfWk9OWW9pJCCBp/lCKdNJly
Ae1Yo6U3xe3ojhLNdM/jAubJsxWwk+putijwHXRoL08BeE96pALo3ZlTYuuq9oKb
/uKgTSVXn+zsCdTlXOLZIO9K9vBKLQMoJhahlr1Ol/IF5S0P+PJEHLgIv9ox+2P5
Ji6yhCmeTByL0SCjVqVN6g6uwE7SLeraccaMBXgxaWaOnpMXT/uES68A+O8I4eiT
YdNAHpFielHGVg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:22 2025 by rpki-client