Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/323830343a353165303a3a2f33332d3333203d3e20323638343832.roa
File:                     323830343a353165303a3a2f33332d3333203d3e20323638343832.roa (raw, json)
Hash identifier:          JKlNqjlHEOKNufYJIm99vHfeiqriJ8K9jRffW+jMWuc=
Subject key identifier:   EF:64:4D:9B:96:D7:72:26:1F:55:71:F0:95:14:59:36:D1:A1:30:56
Certificate issuer:       /CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
Certificate serial:       04A25F51B02BCB3EBF9706DDE1F0557863382EAB
Authority key identifier: 94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/323830343a353165303a3a2f33332d3333203d3e20323638343832.roa
Signing time:             Tue 02 May 2023 13:41:35 +0000
ROA not before:           Tue 02 May 2023 13:36:35 +0000
ROA not after:            Tue 30 Apr 2024 13:41:35 +0000
asID:                     268482
IP address blocks:        2804:51e0::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a2:5f:51:b0:2b:cb:3e:bf:97:06:dd:e1:f0:55:78:63:38:2e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
        Validity
            Not Before: May  2 13:36:35 2023 GMT
            Not After : Apr 30 13:41:35 2024 GMT
        Subject: CN=EF644D9B96D772261F5571F095145936D1A13056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:09:a4:6f:d8:fc:94:ad:80:f2:c0:e9:3e:cc:
                    85:dd:27:a5:00:47:31:05:7a:d6:57:c3:58:c4:fe:
                    14:ad:62:72:f0:e6:23:68:e8:71:3b:a6:3a:43:3b:
                    df:89:61:5d:8a:f8:37:7d:de:f0:08:4e:97:48:ac:
                    d7:74:32:00:2e:c0:ab:07:39:5f:c6:e7:46:59:68:
                    ac:fe:1c:bd:01:af:5e:98:89:bd:9d:09:e9:c1:68:
                    ba:98:2f:77:c6:20:aa:a8:e6:29:f9:a5:8e:3d:4d:
                    68:42:e9:f1:c8:28:64:91:a6:30:29:c2:15:89:90:
                    74:43:8d:98:5e:a8:94:ac:27:21:76:c8:ee:7d:11:
                    c6:0b:d2:cc:6a:a7:43:d0:6c:22:36:6b:1d:e1:09:
                    ed:c7:68:4d:4a:29:1c:d2:32:92:85:6d:2e:54:ff:
                    07:4f:53:17:93:ad:1f:02:ed:0a:ff:89:dc:a9:62:
                    da:e7:88:6d:97:43:2a:15:0c:5d:90:9f:e4:f8:db:
                    36:de:f5:91:03:e8:66:0f:6b:81:3b:50:c0:1d:44:
                    a6:65:7d:46:d1:cc:d2:64:7a:cb:32:ae:6d:5b:36:
                    29:83:38:ac:16:91:ee:16:3f:b0:5f:75:48:8a:c9:
                    83:06:e4:24:58:cb:17:ba:0c:97:27:1d:51:a5:1f:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:4D:9B:96:D7:72:26:1F:55:71:F0:95:14:59:36:D1:A1:30:56
            X509v3 Authority Key Identifier:
                keyid:94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/323830343a353165303a3a2f33332d3333203d3e20323638343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:e8:ff:90:1d:27:17:2c:8c:f4:85:6b:f9:b8:6e:35:01:5c:
         94:2b:62:72:10:63:1d:6e:eb:14:03:c6:fc:fb:d3:b2:2f:8c:
         00:1d:a8:3e:e8:d6:75:35:16:61:de:e5:7c:f9:32:40:31:c6:
         79:3f:54:76:93:1c:38:59:11:ed:df:b0:e9:b5:16:b2:6f:74:
         74:70:b6:b7:fa:62:aa:cb:6f:af:76:62:b7:37:fd:ba:73:ec:
         c3:8a:1f:ff:44:23:1b:40:7b:fc:3d:3a:ed:9f:cc:4f:02:8b:
         cc:db:f2:9d:2a:2d:2e:eb:a3:7a:01:ea:94:99:33:1e:cd:2e:
         5c:5d:9f:bf:6f:01:00:33:bd:38:15:8f:39:08:f5:b7:6c:2c:
         89:77:0f:ec:e5:93:74:48:43:01:f7:f1:df:20:5c:02:23:c9:
         4b:c5:e3:0e:e8:25:b9:9b:ab:58:46:a3:77:59:3c:be:04:1e:
         bf:32:25:d6:6e:70:74:41:c5:07:b5:58:9c:5e:a0:36:b7:7f:
         e6:51:9a:2b:de:4f:bc:30:c6:b1:8c:98:51:d2:3f:79:21:55:
         e9:ab:61:2a:77:12:df:27:61:cb:c7:44:a4:21:52:6b:a8:3a:
         fa:52:2a:d2:6e:4b:e9:0f:05:a1:e3:b3:db:41:f6:07:d4:c4:
         ff:15:f9:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBKJfUbAryz6/lwbd4fBVeGM4LqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRFNEQwQUEwM0IwNjA3RDczQjIyMTJDRUQzNzJGODEz
MzE1QkFBQzAeFw0yMzA1MDIxMzM2MzVaFw0yNDA0MzAxMzQxMzVaMDMxMTAvBgNV
BAMTKEVGNjQ0RDlCOTZENzcyMjYxRjU1NzFGMDk1MTQ1OTM2RDFBMTMwNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpCaRv2PyUrYDywOk+zIXdJ6UA
RzEFetZXw1jE/hStYnLw5iNo6HE7pjpDO9+JYV2K+Dd93vAITpdIrNd0MgAuwKsH
OV/G50ZZaKz+HL0Br16Yib2dCenBaLqYL3fGIKqo5in5pY49TWhC6fHIKGSRpjAp
whWJkHRDjZheqJSsJyF2yO59EcYL0sxqp0PQbCI2ax3hCe3HaE1KKRzSMpKFbS5U
/wdPUxeTrR8C7Qr/idypYtrniG2XQyoVDF2Qn+T42zbe9ZED6GYPa4E7UMAdRKZl
fUbRzNJkessyrm1bNimDOKwWke4WP7BfdUiKyYMG5CRYyxe6DJcnHVGlH0AZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU72RNm5bXciYfVXHwlRRZNtGhMFYwHwYDVR0j
BBgwFoAUlOTQqgOwYH1zsiEs7TcvgTMVuqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUxNaVoyckQzcXVNTnpwVUpteWV5Q2hOcmVWYzJXWENHZHlYYzhweTkx
MlkvMC85NEU0RDBBQTAzQjA2MDdENzNCMjIxMkNFRDM3MkY4MTMzMTVCQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0RTREMEFBMDNCMDYwN0Q3
M0IyMjEyQ0VEMzcyRjgxMzMxNUJBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FMTWlaMnJEM3F1TU56cFVKbXlleUNoTnJlVmMyV1hDR2R5WGM4cHk5MTJZLzAv
MzIzODMwMzQzYTM1MzE2NTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzQzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARR4AAwDQYJKoZIhvcNAQELBQADggEBAGTo/5Ad
JxcsjPSFa/m4bjUBXJQrYnIQYx1u6xQDxvz707IvjAAdqD7o1nU1FmHe5Xz5MkAx
xnk/VHaTHDhZEe3fsOm1FrJvdHRwtrf6YqrLb692Yrc3/bpz7MOKH/9EIxtAe/w9
Ou2fzE8Ci8zb8p0qLS7ro3oB6pSZMx7NLlxdn79vAQAzvTgVjzkI9bdsLIl3D+zl
k3RIQwH38d8gXAIjyUvF4w7oJbmbq1hGo3dZPL4EHr8yJdZucHRBxQe1WJxeoDa3
f+ZRmiveT7wwxrGMmFHSP3khVemrYSp3Et8nYcvHRKQhUmuoOvpSKtJuS+kPBaHj
s9tB9gfUxP8V+e4=
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:39 2025 by rpki-client