Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/323830343a376231343a633030303a3a2f33342d3334203d3e20323731343039.roa
File:                     323830343a376231343a633030303a3a2f33342d3334203d3e20323731343039.roa (raw, json)
Hash identifier:          E6wvKVicGXM2wMana1QvScGwD4VYj/eEw+wZt78WwMc=
Subject key identifier:   A7:AC:E9:0C:DC:BE:BD:BA:24:48:EB:D7:2C:AB:49:11:2A:55:9B:CE
Certificate issuer:       /CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
Certificate serial:       0F5D9D23C360BA7D48BCF822CD038BA6F62A0B8C
Authority key identifier: A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/323830343a376231343a633030303a3a2f33342d3334203d3e20323731343039.roa
Signing time:             Mon 22 May 2023 19:19:32 +0000
ROA not before:           Mon 22 May 2023 19:14:32 +0000
ROA not after:            Mon 20 May 2024 19:19:32 +0000
asID:                     271409
IP address blocks:        2804:7b14:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5d:9d:23:c3:60:ba:7d:48:bc:f8:22:cd:03:8b:a6:f6:2a:0b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
        Validity
            Not Before: May 22 19:14:32 2023 GMT
            Not After : May 20 19:19:32 2024 GMT
        Subject: CN=A7ACE90CDCBEBDBA2448EBD72CAB49112A559BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d1:85:94:79:f7:58:93:a5:3e:be:d8:e5:6c:
                    20:a0:50:0e:86:b6:d1:07:13:47:4a:77:58:47:95:
                    c5:f8:ca:76:a2:d2:4d:ca:df:53:8a:ca:e3:fe:fa:
                    e0:b9:d7:d9:71:a8:f6:ab:0a:81:35:71:36:4f:5f:
                    b3:6c:02:8e:4a:56:4c:ae:71:b8:4c:8a:bc:85:fe:
                    b6:bd:93:85:52:58:f5:55:67:7e:30:ad:37:33:a5:
                    45:84:55:20:d4:a7:bd:38:c7:9b:00:aa:77:5e:76:
                    91:7c:7d:a3:41:32:1f:03:96:16:37:01:2c:8d:02:
                    1f:21:6c:1f:99:6c:c7:d3:9e:b5:bc:f4:72:ac:18:
                    27:24:bc:80:dd:98:3f:81:c3:69:51:19:10:4e:9d:
                    4b:93:30:d1:09:b4:b0:e8:73:4c:53:5c:58:07:17:
                    39:a4:e5:b6:2f:f1:3f:fe:5a:1c:ae:0a:bc:1f:fb:
                    ed:52:3e:14:a3:db:89:68:5d:4f:e4:ba:7d:c0:e2:
                    b5:7a:4f:5c:aa:a6:cc:d4:44:da:ce:74:8b:a1:74:
                    4c:2f:33:3c:c6:09:2d:e5:41:9c:0f:6a:d0:4f:14:
                    39:66:65:75:6b:8a:16:e8:ac:9e:55:de:84:63:39:
                    f1:22:02:bf:81:1b:b7:70:48:63:a0:5a:e4:f1:1a:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AC:E9:0C:DC:BE:BD:BA:24:48:EB:D7:2C:AB:49:11:2A:55:9B:CE
            X509v3 Authority Key Identifier:
                keyid:A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/323830343a376231343a633030303a3a2f33342d3334203d3e20323731343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b14:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:6a:8b:30:7c:2e:af:18:d8:cc:49:bf:28:8e:e4:43:ca:
         a9:e7:5b:9e:a3:0f:af:78:ba:ba:72:ed:7b:5f:57:14:8b:48:
         58:57:9c:c3:50:9e:72:20:34:92:25:1a:9b:b9:8e:06:68:69:
         e4:9c:d3:c6:fd:18:d1:3e:e0:57:a4:be:51:dc:c1:f5:62:e3:
         60:25:d6:59:2b:a2:c4:ea:19:15:48:86:86:32:cf:9e:08:94:
         a1:05:80:50:1a:e2:30:a8:92:b1:21:82:6d:c8:8b:96:5a:0b:
         88:2c:fa:f7:8b:0a:01:52:16:88:89:12:e6:69:00:a3:5a:43:
         98:2b:29:d1:ba:c9:55:01:94:5c:c1:c6:f1:c0:05:e4:d4:98:
         4b:93:3a:1c:9b:83:19:19:7f:43:e2:4b:50:a2:d9:e5:01:9e:
         f9:eb:20:da:3d:85:03:c8:f0:e8:7f:bc:90:8f:83:ec:e8:ce:
         bb:c6:63:4b:29:11:3b:93:ee:4c:6c:11:af:64:55:e8:65:8c:
         75:b4:05:bd:a1:d8:02:28:c4:78:e0:58:57:02:ef:6e:cb:f7:
         cd:e0:01:a8:e3:ff:21:0e:16:80:2f:f3:0b:64:4b:8d:e6:c3:
         52:b1:61:16:aa:85:22:1d:2a:cc:66:be:37:e3:5f:06:b0:7c:
         11:82:35:aa
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUD12dI8Ngun1IvPgizQOLpvYqC4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk1MjRBQ0QzQjEzNDU1RTkyQjg5RkZFREFFNUNERjQ3
RkUxNjNDNTAeFw0yMzA1MjIxOTE0MzJaFw0yNDA1MjAxOTE5MzJaMDMxMTAvBgNV
BAMTKEE3QUNFOTBDRENCRUJEQkEyNDQ4RUJENzJDQUI0OTExMkE1NTlCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD10YWUefdYk6U+vtjlbCCgUA6G
ttEHE0dKd1hHlcX4ynai0k3K31OKyuP++uC519lxqParCoE1cTZPX7NsAo5KVkyu
cbhMiryF/ra9k4VSWPVVZ34wrTczpUWEVSDUp704x5sAqndedpF8faNBMh8DlhY3
ASyNAh8hbB+ZbMfTnrW89HKsGCckvIDdmD+Bw2lRGRBOnUuTMNEJtLDoc0xTXFgH
Fzmk5bYv8T/+WhyuCrwf++1SPhSj24loXU/kun3A4rV6T1yqpszURNrOdIuhdEwv
MzzGCS3lQZwPatBPFDlmZXVrihborJ5V3oRjOfEiAr+BG7dwSGOgWuTxGj8BAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUp6zpDNy+vbokSOvXLKtJESpVm84wHwYDVR0j
BBgwFoAUqVJKzTsTRV6SuJ/+2uXN9H/hY8UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTRId2JVTkhtdXdvb1VOdmV4ZE5jTkpHRHRYbjFMa2dueUg1YUdFejVW
Rk4vMC9BOTUyNEFDRDNCMTM0NTVFOTJCODlGRkVEQUU1Q0RGNDdGRTE2M0M1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E5NTI0QUNEM0IxMzQ1NUU5
MkI4OUZGRURBRTVDREY0N0ZFMTYzQzUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E0SHdiVU5IbXV3b29VTnZleGROY05KR0R0WG4xTGtnbnlINWFHRXo1VkZOLzAv
MzIzODMwMzQzYTM3NjIzMTM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTM0MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEexTAMA0GCSqGSIb3DQEBCwUA
A4IBAQB+rGqLMHwurxjYzEm/KI7kQ8qp51ueow+veLq6cu17X1cUi0hYV5zDUJ5y
IDSSJRqbuY4GaGnknNPG/RjRPuBXpL5R3MH1YuNgJdZZK6LE6hkVSIaGMs+eCJSh
BYBQGuIwqJKxIYJtyIuWWguILPr3iwoBUhaIiRLmaQCjWkOYKynRuslVAZRcwcbx
wAXk1JhLkzocm4MZGX9D4ktQotnlAZ756yDaPYUDyPDof7yQj4Ps6M67xmNLKRE7
k+5MbBGvZFXoZYx1tAW9odgCKMR44FhXAu9uy/fN4AGo4/8hDhaAL/MLZEuN5sNS
sWEWqoUiHSrMZr43418GsHwRgjWq
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:16 2025 by rpki-client