Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538383a3a2f34382d3438203d3e20323636313532.roa
File:                     323830343a336237633a3538383a3a2f34382d3438203d3e20323636313532.roa (raw, json)
Hash identifier:          8mLRkLMqkSpSLj3wtLb8jxE3MISeiyyCfMOX66OCy28=
Subject key identifier:   B3:3E:56:6E:50:EA:F9:F5:AD:C6:15:EE:C1:38:7F:8D:B6:45:B2:E7
Certificate issuer:       /CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
Certificate serial:       05271310C57A0D1567B6D21AE6310096C837CC89
Authority key identifier: 43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538383a3a2f34382d3438203d3e20323636313532.roa
Signing time:             Fri 16 Dec 2022 23:03:04 +0000
ROA not before:           Fri 16 Dec 2022 22:58:04 +0000
ROA not after:            Fri 15 Dec 2023 23:03:04 +0000
asID:                     266152
IP address blocks:        2804:3b7c:588::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:27:13:10:c5:7a:0d:15:67:b6:d2:1a:e6:31:00:96:c8:37:cc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
        Validity
            Not Before: Dec 16 22:58:04 2022 GMT
            Not After : Dec 15 23:03:04 2023 GMT
        Subject: CN=B33E566E50EAF9F5ADC615EEC1387F8DB645B2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:ce:a3:44:d9:96:44:fd:74:41:fa:1f:05:
                    87:f2:c2:a0:04:ab:8e:08:00:49:a5:96:1c:fc:37:
                    34:65:96:f9:c4:10:8f:8c:aa:12:60:15:db:0a:65:
                    03:9c:c0:96:8c:46:65:df:f4:c7:fb:2c:29:4e:90:
                    ea:24:18:b0:f8:1f:10:24:93:73:17:e4:ee:34:62:
                    2f:8c:66:08:21:9b:4e:7c:ce:b3:6c:d6:dd:31:c8:
                    a4:8a:27:be:ca:d0:9a:c2:a9:4d:a9:31:88:24:02:
                    48:5b:62:1c:35:7e:e0:03:46:82:26:07:68:98:48:
                    27:1a:2a:cb:ca:f7:ca:fd:1a:a1:a2:79:cf:d1:0f:
                    bb:8c:ce:98:4d:55:b3:21:79:af:b9:91:3b:cf:9d:
                    c5:b9:34:42:79:dc:5d:ba:7b:ab:ef:82:20:dc:12:
                    1a:83:c3:1d:07:29:12:39:be:50:9c:fc:4d:7d:75:
                    43:19:11:fa:42:c8:31:c8:5e:07:fd:85:92:a4:9f:
                    8b:d0:36:55:74:11:75:47:20:67:e8:a4:f1:d7:55:
                    8b:d9:f4:16:2f:27:0b:9c:32:c6:5d:31:4c:eb:7a:
                    b4:7f:b0:b7:5c:f5:d9:83:75:47:51:11:79:ea:91:
                    06:09:20:e3:fe:8a:49:c8:8f:9c:61:13:03:3f:6c:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3E:56:6E:50:EA:F9:F5:AD:C6:15:EE:C1:38:7F:8D:B6:45:B2:E7
            X509v3 Authority Key Identifier:
                keyid:43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538383a3a2f34382d3438203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b7c:588::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:36:0c:d5:5e:8a:dd:f3:ae:8b:a1:46:fe:7a:0d:86:f3:4a:
         90:05:27:d0:68:c9:a4:50:9a:aa:9e:0e:de:dd:fa:b4:30:81:
         7b:9c:01:97:92:d5:7d:30:13:7c:08:22:f1:87:64:d8:b1:6f:
         9b:2e:4e:db:f7:44:6f:e4:d5:33:82:5c:25:80:73:29:ee:6c:
         41:19:af:55:5d:4d:cf:c2:a7:db:fa:84:81:93:82:73:b4:d1:
         e6:8a:fb:d2:40:c3:59:3c:2b:20:2a:ca:f5:66:dd:31:59:da:
         ef:f7:20:88:60:d0:48:aa:32:23:37:23:05:9d:43:cd:35:b9:
         89:ca:64:d0:eb:3d:65:31:31:7b:82:f7:2d:91:b5:c7:fb:9e:
         b9:fc:3f:64:fa:e3:2c:5d:b4:6e:04:4c:a4:05:62:8b:71:28:
         20:7a:5e:78:86:5d:c3:37:b7:b0:8c:91:ab:02:dd:57:8f:28:
         a7:8e:5a:49:82:20:4e:a5:55:ac:e9:cd:db:53:d6:f7:7d:d9:
         3f:78:38:64:68:e4:4b:32:58:4b:b4:05:1a:e3:8f:84:bb:89:
         f5:13:e2:6c:ae:0d:3d:73:e4:7f:ad:57:11:90:3a:17:a4:b2:
         a7:d8:45:d0:f7:c0:e7:1e:5e:38:7f:e0:7a:18:c9:e9:1a:68:
         32:4a:2c:5f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUBScTEMV6DRVnttIa5jEAlsg3zIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNDRkY1MERGQkNDOTM3NEVDMjBCQkY5NzVCQTk5OTUw
NTU0QTVBODAeFw0yMjEyMTYyMjU4MDRaFw0yMzEyMTUyMzAzMDRaMDMxMTAvBgNV
BAMTKEIzM0U1NjZFNTBFQUY5RjVBREM2MTVFRUMxMzg3RjhEQjY0NUIyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDec6jRNmWRP10QfofBYfywqAE
q44IAEmllhz8NzRllvnEEI+MqhJgFdsKZQOcwJaMRmXf9Mf7LClOkOokGLD4HxAk
k3MX5O40Yi+MZgghm058zrNs1t0xyKSKJ77K0JrCqU2pMYgkAkhbYhw1fuADRoIm
B2iYSCcaKsvK98r9GqGiec/RD7uMzphNVbMhea+5kTvPncW5NEJ53F26e6vvgiDc
EhqDwx0HKRI5vlCc/E19dUMZEfpCyDHIXgf9hZKkn4vQNlV0EXVHIGfopPHXVYvZ
9BYvJwucMsZdMUzrerR/sLdc9dmDdUdREXnqkQYJIOP+iknIj5xhEwM/bHujAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUsz5WblDq+fWtxhXuwTh/jbZFsucwHwYDVR0j
BBgwFoAUQ8/1DfvMk3TsILv5dbqZlQVUpagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhDc0htSkc0YXRhTkhYblMzWENYTWhqbnZHTEdBZ1pGaGlRdUd3QlZY
RmYvMC80M0NGRjUwREZCQ0M5Mzc0RUMyMEJCRjk3NUJBOTk5NTA1NTRBNUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQ0ZGNTBERkJDQzkzNzRF
QzIwQkJGOTc1QkE5OTk1MDU1NEE1QTguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYQ3NIbUpHNGF0YU5IWG5TM1hDWE1oam52R0xHQWdaRmhpUXVHd0JWWEZmLzAv
MzIzODMwMzQzYTMzNjIzNzYzM2EzNTM4MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzYzMTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBDt8BYgwDQYJKoZIhvcNAQELBQAD
ggEBAGU2DNVeit3zrouhRv56DYbzSpAFJ9BoyaRQmqqeDt7d+rQwgXucAZeS1X0w
E3wIIvGHZNixb5suTtv3RG/k1TOCXCWAcynubEEZr1VdTc/Cp9v6hIGTgnO00eaK
+9JAw1k8KyAqyvVm3TFZ2u/3IIhg0EiqMiM3IwWdQ801uYnKZNDrPWUxMXuC9y2R
tcf7nrn8P2T64yxdtG4ETKQFYotxKCB6XniGXcM3t7CMkasC3VePKKeOWkmCIE6l
VazpzdtT1vd92T94OGRo5EsyWEu0BRrjj4S7ifUT4myuDT1z5H+tVxGQOheksqfY
RdD3wOceXjh/4HoYyekaaDJKLF8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:36 2025 by rpki-client