Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3131333a3a2f34382d3438203d3e20323632353838.roa
File:                     323830343a323930343a3131333a3a2f34382d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          Uxb02LtoSIfvGQ3ilOWecnkgyeZh9GCcYhMtYpxjrfE=
Subject key identifier:   30:AC:24:71:D2:EE:8A:94:03:D5:21:6A:4D:AE:32:BD:39:26:3B:F5
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       444833699FE495FFB5B7C1E8AEEE91DE9356991D
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3131333a3a2f34382d3438203d3e20323632353838.roa
Signing time:             Tue 12 Sep 2023 20:43:45 +0000
ROA not before:           Tue 12 Sep 2023 20:38:45 +0000
ROA not after:            Tue 10 Sep 2024 20:43:45 +0000
asID:                     262588
IP address blocks:        2804:2904:113::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:48:33:69:9f:e4:95:ff:b5:b7:c1:e8:ae:ee:91:de:93:56:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Sep 12 20:38:45 2023 GMT
            Not After : Sep 10 20:43:45 2024 GMT
        Subject: CN=30AC2471D2EE8A9403D5216A4DAE32BD39263BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:76:f0:93:03:e9:37:3d:17:8b:ca:4b:ea:
                    12:14:df:a3:2b:d0:a0:de:ed:b2:fc:b7:c1:5a:79:
                    4d:b2:ec:4a:90:39:ee:9e:2f:9a:2a:cc:f7:55:f1:
                    dc:2e:6e:7b:69:ed:ce:af:69:9d:06:e9:7b:04:b0:
                    2e:2b:d5:1a:b3:94:ee:80:91:71:e7:1c:ef:56:28:
                    8b:a4:36:8b:d7:c3:40:9d:77:dd:99:b9:8c:88:ca:
                    26:fb:2e:aa:f3:51:75:10:bc:74:01:41:5a:11:c9:
                    7a:cf:c3:d6:b5:c8:17:14:7c:e4:67:19:0e:0e:7f:
                    53:23:66:e9:9b:c5:38:0e:cc:de:b7:4f:cc:a7:26:
                    e8:9b:ce:6d:71:11:c5:ef:97:ca:bc:09:17:ec:72:
                    46:9d:70:f7:e4:a1:4b:8a:0c:fb:12:7e:8b:43:42:
                    cc:6c:2f:40:d9:d1:4e:d9:cf:67:1f:e1:7c:1e:00:
                    93:e9:0a:e4:68:87:11:c8:cf:7d:27:4e:a9:11:e8:
                    27:b1:4a:32:a0:a8:43:1c:3b:10:f2:39:f3:d5:15:
                    d7:0f:fd:37:a9:07:8b:8f:17:b7:cf:6d:75:41:b3:
                    98:cc:5c:91:81:9b:8b:1c:ef:14:27:81:fb:74:9a:
                    cc:6f:5e:86:9f:a8:9b:fc:e1:66:2e:96:c7:87:b5:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:24:71:D2:EE:8A:94:03:D5:21:6A:4D:AE:32:BD:39:26:3B:F5
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3131333a3a2f34382d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904:113::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:c7:0a:ce:57:66:a7:0e:4d:61:90:8b:02:d7:cc:ef:e1:29:
         a4:d4:90:b5:ff:92:a1:89:f4:6b:ba:fb:8b:8a:27:25:b7:69:
         ba:85:03:cf:69:1d:64:2c:4f:c4:49:04:32:8f:2a:ba:aa:e7:
         39:16:53:cf:a7:f5:bf:d1:d9:90:85:73:33:21:eb:9c:df:39:
         53:df:eb:35:dd:39:7b:d6:6b:68:5d:bc:51:93:f0:0c:4d:c1:
         67:c2:3b:1d:1c:88:c6:b2:6d:6f:e3:c6:c5:b5:0c:91:a1:1d:
         0d:c7:c2:a3:97:49:a8:b5:a7:f2:18:10:39:ea:84:ac:d8:ca:
         0b:20:e5:53:4d:26:24:da:6a:2d:77:bc:2d:68:9f:3f:f4:f1:
         9f:16:f1:a2:91:2f:b3:dd:44:d5:fa:1d:a8:5f:5f:80:53:a4:
         df:73:fd:76:73:c0:13:d3:0d:1e:3f:57:03:f0:14:c0:d8:49:
         12:92:1c:7a:44:36:af:e6:c7:2d:33:1f:55:9d:cc:39:a9:02:
         c9:8d:bb:8e:be:be:b2:b1:aa:ad:5d:da:57:a8:cc:93:68:26:
         9f:57:9d:ce:d4:11:62:03:00:6f:b4:81:f2:f8:87:d9:f4:a3:
         55:85:89:3d:51:e0:42:7e:62:a0:20:c6:72:c3:ee:c2:26:e1:
         94:ed:da:73
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUREgzaZ/klf+1t8Horu6R3pNWmR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgz
NTQ2QTU3RDAeFw0yMzA5MTIyMDM4NDVaFw0yNDA5MTAyMDQzNDVaMDMxMTAvBgNV
BAMTKDMwQUMyNDcxRDJFRThBOTQwM0Q1MjE2QTREQUUzMkJEMzkyNjNCRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBnbwkwPpNz0Xi8pL6hIU36Mr
0KDe7bL8t8FaeU2y7EqQOe6eL5oqzPdV8dwubntp7c6vaZ0G6XsEsC4r1RqzlO6A
kXHnHO9WKIukNovXw0Cdd92ZuYyIyib7LqrzUXUQvHQBQVoRyXrPw9a1yBcUfORn
GQ4Of1MjZumbxTgOzN63T8ynJuibzm1xEcXvl8q8CRfsckadcPfkoUuKDPsSfotD
QsxsL0DZ0U7Zz2cf4XweAJPpCuRohxHIz30nTqkR6CexSjKgqEMcOxDyOfPVFdcP
/TepB4uPF7fPbXVBs5jMXJGBm4sc7xQngft0msxvXoafqJv84WYulseHteH7AgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUMKwkcdLuipQD1SFqTa4yvTkmO/UwHwYDVR0j
BBgwFoAUXMAujik4r63qRnKJ1MeTWDVGpX0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB
LzAvNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgzNTQ2QTU3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0MwMkU4RTI5MzhBRkFERUE0
NjcyODlENEM3OTM1ODM1NDZBNTdELmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzAvMzIz
ODMwMzQzYTMyMzkzMDM0M2EzMTMxMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MjM2MzIzNTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCkEARMwDQYJKoZIhvcNAQELBQADggEB
ACHHCs5XZqcOTWGQiwLXzO/hKaTUkLX/kqGJ9Gu6+4uKJyW3abqFA89pHWQsT8RJ
BDKPKrqq5zkWU8+n9b/R2ZCFczMh65zfOVPf6zXdOXvWa2hdvFGT8AxNwWfCOx0c
iMaybW/jxsW1DJGhHQ3HwqOXSai1p/IYEDnqhKzYygsg5VNNJiTaai13vC1onz/0
8Z8W8aKRL7PdRNX6HahfX4BTpN9z/XZzwBPTDR4/VwPwFMDYSRKSHHpENq/mxy0z
H1WdzDmpAsmNu46+vrKxqq1d2leozJNoJp9Xnc7UEWIDAG+0gfL4h9n0o1WFiT1R
4EJ+YqAgxnLD7sIm4ZTt2nM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:18 2025 by rpki-client