Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3230383a3a2f34352d3435203d3e20323637323730.roa
File:                     323830343a346165343a3230383a3a2f34352d3435203d3e20323637323730.roa (raw, json)
Hash identifier:          cEzIwvctS3U+W1wNNwEu4g4d/KwWUPlZRNAlWtdvJGE=
Subject key identifier:   5A:A1:5A:0F:86:8D:1F:4C:02:3B:77:84:F3:B8:4F:A7:B0:D5:15:47
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       2134930A5905357755CA85358287D94A59AA2657
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3230383a3a2f34352d3435203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:40 +0000
ROA not before:           Wed 16 Aug 2023 18:39:40 +0000
ROA not after:            Wed 14 Aug 2024 18:44:40 +0000
asID:                     267270
IP address blocks:        2804:4ae4:208::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:34:93:0a:59:05:35:77:55:ca:85:35:82:87:d9:4a:59:aa:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:40 2023 GMT
            Not After : Aug 14 18:44:40 2024 GMT
        Subject: CN=5AA15A0F868D1F4C023B7784F3B84FA7B0D51547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:fd:35:53:f2:71:12:4b:7f:24:db:9a:2b:
                    4e:8b:30:de:79:bd:d0:37:a3:b8:c4:fd:5d:d3:db:
                    ec:a6:30:89:ca:2e:e5:45:54:69:9a:52:ce:20:bf:
                    92:96:ee:c6:46:8d:32:ef:e6:8a:13:20:6c:84:a1:
                    6e:ac:4d:c1:ee:39:68:60:34:af:f0:72:3a:82:ca:
                    69:d2:26:ca:74:d1:fc:cd:70:66:db:8f:da:5f:e5:
                    34:2c:90:17:90:0b:bd:82:53:52:ec:e5:ac:16:5a:
                    83:c7:ea:d8:22:68:27:8b:9a:fe:93:e5:98:52:5a:
                    ff:e1:37:b0:b5:d4:36:21:e7:67:e4:9f:82:36:ff:
                    d9:3f:b5:48:e7:ba:3f:8e:42:93:87:67:af:14:e9:
                    ed:fe:0b:ed:08:28:f8:6a:7a:ce:f9:da:b6:40:34:
                    5d:83:c2:ca:ea:a0:8d:29:98:ae:a1:2e:6b:a6:3c:
                    90:f3:42:05:98:4b:18:58:f1:a9:ad:2c:b2:90:14:
                    83:f9:b8:65:01:f8:56:d2:6d:44:d9:95:b8:b9:b8:
                    aa:07:87:e4:7a:03:a2:bf:19:ef:c4:17:9f:68:b0:
                    10:29:89:8f:93:c0:6c:a1:5a:a0:54:2e:db:31:5c:
                    a3:6d:f3:ae:f2:1a:64:82:a5:4e:33:81:ed:35:e8:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A1:5A:0F:86:8D:1F:4C:02:3B:77:84:F3:B8:4F:A7:B0:D5:15:47
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3230383a3a2f34352d3435203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4:208::/45

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:94:d8:d7:c5:5c:3e:77:36:83:15:fd:2d:f3:b7:e1:b2:
         b9:ac:21:24:5d:d0:54:b2:19:61:17:b3:af:40:2f:0a:be:53:
         a9:3c:21:68:39:b3:6d:01:09:ae:cc:3c:6c:5e:a2:1c:5a:bb:
         c4:29:c6:80:43:01:27:10:ca:54:86:f9:6a:90:da:69:d7:0f:
         59:0d:47:75:28:28:d7:05:51:7e:a5:16:c9:c3:7c:fe:31:26:
         89:2e:60:28:f1:9b:8b:6f:3c:76:11:c6:68:2d:92:c1:92:06:
         3d:d0:1a:14:d2:6b:ee:e4:78:cf:e2:1d:77:71:aa:d3:41:6c:
         c0:ad:f2:22:96:4e:7b:71:60:99:b4:80:45:12:1a:c1:ac:2c:
         b5:80:b8:f7:fc:c6:d4:80:88:41:f0:df:77:77:5f:12:5a:1c:
         dc:57:e7:00:3b:12:f9:07:d8:8f:13:26:02:80:31:36:1f:a3:
         48:c5:33:35:04:5b:c4:a6:83:ee:27:ef:f0:6a:4d:33:7d:1f:
         f0:9d:29:8a:a3:a9:2c:4a:29:61:1a:fe:69:54:39:e5:71:fb:
         3d:df:0d:32:d1:19:53:ca:45:b2:89:6a:97:03:46:61:c6:da:
         fd:af:f2:01:3b:94:88:d5:f3:9d:16:72:fe:63:af:45:09:37:
         7e:8b:ea:c3
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUITSTClkFNXdVyoU1gofZSlmqJlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFCMzJBMERGRDM1QTc2MUEwRTQ3NzNCRjIwOTk3OEYx
OENCQThGOTAeFw0yMzA4MTYxODM5NDBaFw0yNDA4MTQxODQ0NDBaMDMxMTAvBgNV
BAMTKDVBQTE1QTBGODY4RDFGNEMwMjNCNzc4NEYzQjg0RkE3QjBENTE1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmv01U/JxEkt/JNuaK06LMN55
vdA3o7jE/V3T2+ymMInKLuVFVGmaUs4gv5KW7sZGjTLv5ooTIGyEoW6sTcHuOWhg
NK/wcjqCymnSJsp00fzNcGbbj9pf5TQskBeQC72CU1Ls5awWWoPH6tgiaCeLmv6T
5ZhSWv/hN7C11DYh52fkn4I2/9k/tUjnuj+OQpOHZ68U6e3+C+0IKPhqes752rZA
NF2DwsrqoI0pmK6hLmumPJDzQgWYSxhY8amtLLKQFIP5uGUB+FbSbUTZlbi5uKoH
h+R6A6K/Ge/EF59osBApiY+TwGyhWqBULtsxXKNt867yGmSCpU4zge016IULAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUWqFaD4aNH0wCO3eE87hPp7DVFUcwHwYDVR0j
BBgwFoAUgbMqDf01p2Gg5Hc78gmXjxjLqPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWp2VWhhc3haWkxCeW5Qb0EydGVhTnVqVmI4bXZxbmdxd1ozWTJwS2ll
Rk4vMC84MUIzMkEwREZEMzVBNzYxQTBFNDc3M0JGMjA5OTc4RjE4Q0JBOEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgxQjMyQTBERkQzNUE3NjFB
MEU0NzczQkYyMDk5NzhGMThDQkE4RjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlqdlVoYXN4WlpMQnluUG9BMnRlYU51alZiOG12cW5ncXdaM1kycEtpZUZOLzAv
MzIzODMwMzQzYTM0NjE2NTM0M2EzMjMwMzgzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM2MzczMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBErkAggwDQYJKoZIhvcNAQELBQAD
ggEBAFqwlNjXxVw+dzaDFf0t87fhsrmsISRd0FSyGWEXs69ALwq+U6k8IWg5s20B
Ca7MPGxeohxau8QpxoBDAScQylSG+WqQ2mnXD1kNR3UoKNcFUX6lFsnDfP4xJoku
YCjxm4tvPHYRxmgtksGSBj3QGhTSa+7keM/iHXdxqtNBbMCt8iKWTntxYJm0gEUS
GsGsLLWAuPf8xtSAiEHw33d3XxJaHNxX5wA7EvkH2I8TJgKAMTYfo0jFMzUEW8Sm
g+4n7/BqTTN9H/CdKYqjqSxKKWEa/mlUOeVx+z3fDTLRGVPKRbKJapcDRmHG2v2v
8gE7lIjV850Wcv5jr0UJN36L6sM=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:52 2025 by rpki-client