Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33342d3334203d3e20323635343936.roa
File:                     323830343a333530383a343030303a3a2f33342d3334203d3e20323635343936.roa (raw, json)
Hash identifier:          iedHd6+CfRDoGCXwWShipWf1bq7O9qDIbRZNVexmoF4=
Subject key identifier:   11:86:74:2A:A0:DA:CA:80:0C:03:23:C7:25:EB:56:F1:A8:80:58:8C
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       5EACDF68E98C1FAD58E7812E31C3A0F48571A481
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33342d3334203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:35 +0000
ROA not before:           Mon 03 Apr 2023 10:51:35 +0000
ROA not after:            Mon 01 Apr 2024 10:56:35 +0000
asID:                     265496
IP address blocks:        2804:3508:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ac:df:68:e9:8c:1f:ad:58:e7:81:2e:31:c3:a0:f4:85:71:a4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:35 2023 GMT
            Not After : Apr  1 10:56:35 2024 GMT
        Subject: CN=1186742AA0DACA800C0323C725EB56F1A880588C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:33:67:2c:bf:9f:91:4e:c9:90:e8:f8:31:
                    d9:21:85:03:a9:9b:d7:a1:49:2b:fe:49:d9:cd:c3:
                    5c:02:47:e2:62:eb:27:f6:90:6e:d0:24:80:45:8e:
                    ab:0c:ef:38:32:10:a7:b5:d2:7f:db:14:88:53:b0:
                    97:d8:1e:66:f0:c2:df:ce:b1:ba:e9:83:85:21:39:
                    78:93:8c:0a:98:b4:41:82:1d:01:60:99:4d:2a:4b:
                    d2:94:f3:f7:06:ed:6b:91:c9:e3:a6:ac:51:0e:d9:
                    4d:92:d5:b6:b5:73:d7:97:ae:5d:6f:0e:b3:ff:60:
                    ae:06:ed:d0:dc:bb:f3:fa:ca:a2:60:64:49:5b:01:
                    b9:5b:39:8b:af:20:56:34:24:54:c8:cd:a1:5c:f3:
                    29:92:7c:27:8d:c7:8e:b6:e4:ec:77:4c:cc:fe:91:
                    b8:1c:72:71:4a:46:41:5e:c8:67:c0:0a:50:1b:56:
                    c4:39:af:6d:b0:51:bc:09:4b:be:00:cb:6a:24:14:
                    c4:1a:ad:14:87:9a:4d:40:44:db:4b:97:91:60:00:
                    1b:d7:b7:8f:77:5c:cf:92:30:a2:46:4c:72:a4:5a:
                    da:cb:1b:a5:c6:10:ce:0a:d3:ba:87:99:a3:df:8c:
                    c7:d9:e8:40:59:12:8d:17:6b:fd:1d:c8:f2:9d:cc:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:74:2A:A0:DA:CA:80:0C:03:23:C7:25:EB:56:F1:A8:80:58:8C
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33342d3334203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:df:f7:48:d1:16:29:87:57:5b:df:a6:b1:ba:e2:03:03:
         4f:29:c5:50:6b:6b:69:76:69:05:c1:1e:13:55:27:ed:3d:6c:
         2f:68:7d:a3:5b:c6:32:70:66:85:38:2c:06:8f:13:00:23:e4:
         2c:6d:f9:09:37:8d:f2:58:b2:99:2e:78:e2:91:4d:7e:47:05:
         b3:cc:98:55:89:c3:5b:38:ad:95:fd:0f:cd:e0:4a:5c:77:b2:
         32:03:f4:6f:c1:8d:7d:e2:2f:8a:ea:5e:88:6f:a4:4d:4c:0f:
         99:a7:64:05:5c:8d:79:4d:62:59:ab:57:ce:92:c4:8a:7e:92:
         64:03:49:d9:13:ca:68:10:27:9b:8d:0b:08:b0:02:a9:b5:89:
         57:7b:96:ca:6a:9c:e5:eb:26:e8:f2:03:72:e7:a4:5f:71:32:
         08:26:e9:fc:a7:c5:07:4a:d3:0f:57:05:85:23:dd:eb:bf:16:
         21:8c:6c:49:90:ea:f6:bf:45:9e:d6:26:fd:b9:cc:08:28:5e:
         a9:9f:85:99:a7:df:de:c9:99:ac:ef:1a:90:7c:c6:2d:e4:43:
         40:11:15:0b:28:ae:f9:fb:06:d0:a8:35:4c:e4:27:57:4d:e3:
         f3:3f:4e:66:f6:61:ce:7e:d3:50:6a:92:d2:c3:28:a0:c4:7d:
         f0:ad:2e:a9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXqzfaOmMH61Y54EuMcOg9IVxpIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ1M0UwRjM0Q0ZDODAyMEE4QkJBMkExN0NDREI3Q0FC
QzlDMDUxNzAeFw0yMzA0MDMxMDUxMzVaFw0yNDA0MDExMDU2MzVaMDMxMTAvBgNV
BAMTKDExODY3NDJBQTBEQUNBODAwQzAzMjNDNzI1RUI1NkYxQTg4MDU4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AzNnLL+fkU7JkOj4MdkhhQOp
m9ehSSv+SdnNw1wCR+Ji6yf2kG7QJIBFjqsM7zgyEKe10n/bFIhTsJfYHmbwwt/O
sbrpg4UhOXiTjAqYtEGCHQFgmU0qS9KU8/cG7WuRyeOmrFEO2U2S1ba1c9eXrl1v
DrP/YK4G7dDcu/P6yqJgZElbAblbOYuvIFY0JFTIzaFc8ymSfCeNx4625Ox3TMz+
kbgccnFKRkFeyGfAClAbVsQ5r22wUbwJS74Ay2okFMQarRSHmk1ARNtLl5FgABvX
t493XM+SMKJGTHKkWtrLG6XGEM4K07qHmaPfjMfZ6EBZEo0Xa/0dyPKdzOgPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEYZ0KqDayoAMAyPHJetW8aiAWIwwHwYDVR0j
BBgwFoAUFFPg80z8gCCou6KhfM23yrycBRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTY4UWtLaWc1bzZtcjR1VFRhZFZ3SGVvNll0TUVzemtLOXhRY3FZQjFh
QXYvMC8xNDUzRTBGMzRDRkM4MDIwQThCQkEyQTE3Q0NEQjdDQUJDOUMwNTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0NTNFMEYzNENGQzgwMjBB
OEJCQTJBMTdDQ0RCN0NBQkM5QzA1MTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk2OFFrS2lnNW82bXI0dVRUYWRWd0hlbzZZdE1Fc3prSzl4UWNxWUIxYUF2LzAv
MzIzODMwMzQzYTMzMzUzMDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENQhAMA0GCSqGSIb3DQEBCwUA
A4IBAQBqxt/3SNEWKYdXW9+msbriAwNPKcVQa2tpdmkFwR4TVSftPWwvaH2jW8Yy
cGaFOCwGjxMAI+QsbfkJN43yWLKZLnjikU1+RwWzzJhVicNbOK2V/Q/N4Epcd7Iy
A/RvwY194i+K6l6Ib6RNTA+Zp2QFXI15TWJZq1fOksSKfpJkA0nZE8poECebjQsI
sAKptYlXe5bKapzl6ybo8gNy56RfcTIIJun8p8UHStMPVwWFI93rvxYhjGxJkOr2
v0We1ib9ucwIKF6pn4WZp9/eyZms7xqQfMYt5ENAERULKK75+wbQqDVM5CdXTePz
P05m9mHOftNQapLSwyigxH3wrS6p
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:48:08 2025 by rpki-client