Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a313030303a3a2f33362d3336203d3e20323635323430.roa
File:                     323830343a326362633a313030303a3a2f33362d3336203d3e20323635323430.roa (raw, json)
Hash identifier:          Sox+eJRZVQSHxZexvY/bTL6iEqilntnCT8c5mUJj/Jo=
Subject key identifier:   F3:5C:11:2C:71:FA:8E:80:1A:2B:61:07:75:50:4B:62:92:8C:D9:4E
Certificate issuer:       /CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
Certificate serial:       1262D13B4D16708955A5077674089D845648123F
Authority key identifier: 42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a313030303a3a2f33362d3336203d3e20323635323430.roa
Signing time:             Mon 11 Sep 2023 12:21:39 +0000
ROA not before:           Mon 11 Sep 2023 12:16:39 +0000
ROA not after:            Mon 09 Sep 2024 12:21:39 +0000
asID:                     265240
IP address blocks:        2804:2cbc:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:62:d1:3b:4d:16:70:89:55:a5:07:76:74:08:9d:84:56:48:12:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
        Validity
            Not Before: Sep 11 12:16:39 2023 GMT
            Not After : Sep  9 12:21:39 2024 GMT
        Subject: CN=F35C112C71FA8E801A2B610775504B62928CD94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:83:58:34:6d:eb:67:e0:64:c1:db:d6:de:
                    ec:a0:9b:41:26:22:d3:0b:ce:a6:cb:57:4c:06:5a:
                    21:22:d5:8c:a1:6f:61:8c:24:29:7c:5d:e7:f3:9e:
                    fe:a1:1b:76:c2:e9:5c:90:4f:3c:a6:88:87:25:c9:
                    67:5d:ee:b9:92:66:32:15:b7:a5:8f:1c:92:f2:11:
                    d8:7d:3b:b2:41:c7:bf:61:43:82:75:32:95:bf:97:
                    9c:4e:e8:07:8c:21:49:97:29:be:aa:ec:99:ff:03:
                    36:51:f8:df:1a:60:d0:dc:36:55:69:ab:51:bd:14:
                    61:18:aa:3a:bf:fd:31:8e:b7:5b:df:53:d3:f6:ae:
                    76:a4:11:4c:ea:00:b5:51:36:f7:4c:98:3e:66:e1:
                    fc:11:50:74:bd:fc:ba:51:d8:7d:78:36:ca:38:73:
                    e0:54:80:ca:36:11:37:0c:5f:d2:a5:ef:1d:3a:90:
                    36:40:2c:22:23:e1:a6:6b:45:0b:ae:ea:6c:53:07:
                    02:97:06:2e:14:1a:29:6c:66:45:ed:10:65:1b:31:
                    9a:88:f4:51:0f:c3:c4:1c:9c:0d:fc:ee:37:5f:56:
                    70:52:4c:c8:5d:05:4a:07:4e:60:30:85:7b:23:12:
                    04:72:dc:4d:a7:8d:63:eb:e9:b6:49:b6:4b:6a:eb:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5C:11:2C:71:FA:8E:80:1A:2B:61:07:75:50:4B:62:92:8C:D9:4E
            X509v3 Authority Key Identifier:
                keyid:42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a313030303a3a2f33362d3336203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cbc:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:38:1b:a6:ef:98:72:f1:16:c9:32:1e:29:9d:17:b5:c8:
         cd:bc:7d:fc:5a:9b:7a:a3:8f:2b:c8:df:3a:d4:6f:bf:bb:af:
         6d:1f:48:08:c7:a1:68:4d:36:c1:f5:f1:24:d3:0f:cd:56:18:
         db:a9:59:a1:14:1d:96:1f:e2:7c:dd:ca:4c:8d:33:ce:d0:e1:
         85:a2:20:37:14:0c:d5:c7:93:bb:c6:59:55:ec:7e:5d:48:7c:
         6e:88:49:48:37:7d:61:fc:0d:67:0d:42:c6:03:26:23:c6:ca:
         d4:a6:87:04:3f:78:c4:57:52:70:59:f3:37:59:43:1a:f5:52:
         df:d8:00:dd:7d:9e:64:d9:24:90:c9:16:dd:a9:3e:68:7f:d9:
         3f:04:50:50:a7:72:e0:64:7c:29:e4:fa:f9:55:56:d7:ef:5f:
         41:b2:82:a4:ba:99:a1:fe:cf:1f:7b:69:26:66:5d:c3:78:29:
         d2:84:2b:c7:15:fb:75:69:04:2f:41:30:64:c4:8a:ed:c5:b2:
         ea:5e:a1:ec:31:81:71:66:b4:70:ab:78:af:20:4c:de:5b:ca:
         74:c4:d6:83:e8:05:ae:b3:ac:fe:52:01:d7:9b:37:fc:f7:8c:
         39:4f:1c:bf:68:6f:22:ac:c5:ac:8f:fc:d8:3b:e1:fa:34:67:
         05:1a:4d:d4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEmLRO00WcIlVpQd2dAidhFZIEj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJDODVBMzlFRDBEMzNBNzYxQjc4RThENzk3QkRENUQ0
NzZCMTFDNDAeFw0yMzA5MTExMjE2MzlaFw0yNDA5MDkxMjIxMzlaMDMxMTAvBgNV
BAMTKEYzNUMxMTJDNzFGQThFODAxQTJCNjEwNzc1NTA0QjYyOTI4Q0Q5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC524NYNG3rZ+BkwdvW3uygm0Em
ItMLzqbLV0wGWiEi1Yyhb2GMJCl8Xefznv6hG3bC6VyQTzymiIclyWdd7rmSZjIV
t6WPHJLyEdh9O7JBx79hQ4J1MpW/l5xO6AeMIUmXKb6q7Jn/AzZR+N8aYNDcNlVp
q1G9FGEYqjq//TGOt1vfU9P2rnakEUzqALVRNvdMmD5m4fwRUHS9/LpR2H14Nso4
c+BUgMo2ETcMX9Kl7x06kDZALCIj4aZrRQuu6mxTBwKXBi4UGilsZkXtEGUbMZqI
9FEPw8QcnA387jdfVnBSTMhdBUoHTmAwhXsjEgRy3E2njWPr6bZJtktq62QRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU81wRLHH6joAaK2EHdVBLYpKM2U4wHwYDVR0j
BBgwFoAUQshaOe0NM6dht46NeXvdXUdrEcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRGbUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJS
YlUvMC80MkM4NUEzOUVEMEQzM0E3NjFCNzhFOEQ3OTdCREQ1RDQ3NkIxMUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyQzg1QTM5RUQwRDMzQTc2
MUI3OEU4RDc5N0JERDVENDc2QjExQzQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0Rm1FOGZ6U1RLdEF1OEdiWHU0ZTdEMWNxdVdHcnluSjdaWGtiYmpiUmJVLzAv
MzIzODMwMzQzYTMyNjM2MjYzM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNTMyMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgELLwQMA0GCSqGSIb3DQEBCwUA
A4IBAQB8Hzgbpu+YcvEWyTIeKZ0XtcjNvH38Wpt6o48ryN861G+/u69tH0gIx6Fo
TTbB9fEk0w/NVhjbqVmhFB2WH+J83cpMjTPO0OGFoiA3FAzVx5O7xllV7H5dSHxu
iElIN31h/A1nDULGAyYjxsrUpocEP3jEV1JwWfM3WUMa9VLf2ADdfZ5k2SSQyRbd
qT5of9k/BFBQp3LgZHwp5Pr5VVbX719BsoKkupmh/s8fe2kmZl3DeCnShCvHFft1
aQQvQTBkxIrtxbLqXqHsMYFxZrRwq3ivIEzeW8p0xNaD6AWus6z+UgHXmzf894w5
Txy/aG8irMWsj/zYO+H6NGcFGk3U
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:02:59 2025 by rpki-client