Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3333203d3e20323634313935.roa
File:                     323830343a323430303a3a2f33322d3333203d3e20323634313935.roa (raw, json)
Hash identifier:          jU7Ad/Xwn4IGVmlgoa0xRe84z86FCTk3q2QZedrxda8=
Subject key identifier:   51:06:8A:F4:85:E5:E5:8C:B0:76:42:AF:D7:AF:71:82:3C:6A:24:6C
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       429C7C578394C0D3CE1DC7B98A2D57DD7D24EC08
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3333203d3e20323634313935.roa
Signing time:             Mon 10 Jul 2023 23:02:43 +0000
ROA not before:           Mon 10 Jul 2023 22:57:43 +0000
ROA not after:            Mon 08 Jul 2024 23:02:43 +0000
asID:                     264195
IP address blocks:        2804:2400::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9c:7c:57:83:94:c0:d3:ce:1d:c7:b9:8a:2d:57:dd:7d:24:ec:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 10 22:57:43 2023 GMT
            Not After : Jul  8 23:02:43 2024 GMT
        Subject: CN=51068AF485E5E58CB07642AFD7AF71823C6A246C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:15:24:ee:9b:74:33:38:b4:06:4c:fa:45:
                    1c:f6:01:a5:86:66:76:99:dd:87:f5:df:a8:3e:55:
                    c6:1e:e9:48:23:fd:a2:d8:78:c1:6d:e0:79:c8:d0:
                    9b:86:97:65:86:f6:9b:c1:22:23:67:86:60:88:60:
                    08:40:01:10:04:22:f8:61:0f:64:51:9b:13:5b:de:
                    24:2f:e4:bd:04:f5:64:43:b9:11:48:61:1d:2c:28:
                    24:d8:47:01:95:6f:20:8c:7e:a6:99:32:f4:30:7d:
                    b2:23:89:ca:e3:f2:9d:b0:ff:56:f3:02:9b:4d:bc:
                    8b:af:23:a6:a5:a8:c1:cc:6a:23:d6:35:5e:7c:e5:
                    ce:87:86:47:aa:e5:39:fb:66:bb:27:10:c0:12:cc:
                    ef:93:d0:7f:8c:1b:a6:66:64:f7:7a:e5:52:1d:e4:
                    69:ec:67:98:e4:c3:29:45:5f:b0:2b:63:d1:37:f2:
                    14:0f:9f:20:68:2f:13:bd:38:51:49:fd:f4:10:5d:
                    37:65:56:ad:3c:b8:ee:ea:ba:6b:01:e7:88:fd:34:
                    8b:14:f7:84:ea:59:64:ca:15:f8:6b:56:f5:3e:fc:
                    c4:c4:12:50:54:09:3d:1c:c8:4e:5a:c2:6e:83:9b:
                    3b:57:19:a4:77:fc:23:81:eb:18:d3:11:bc:d4:c1:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:8A:F4:85:E5:E5:8C:B0:76:42:AF:D7:AF:71:82:3C:6A:24:6C
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3333203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2400::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:3d:1a:02:bf:e6:c5:43:04:91:55:40:17:e7:cc:9f:69:6d:
         6d:4f:81:3f:73:dc:f9:f5:cf:29:1b:5e:3b:e9:77:be:23:db:
         dc:c3:41:58:76:33:d5:1e:4a:c5:e3:03:a6:fd:ff:7e:d4:6c:
         cc:19:f6:e8:5d:b6:fa:2a:4c:eb:e1:51:6f:e2:f7:5f:7c:0d:
         da:7a:99:e6:88:95:8a:6c:f7:ca:45:96:af:e1:de:e0:ba:d3:
         e5:9b:d3:9b:6d:0a:93:1c:71:24:9c:1f:66:1c:c2:6f:12:0e:
         79:ec:a1:ad:fd:75:06:fa:2d:f0:e0:9b:47:37:4f:e5:04:40:
         e4:b9:dc:81:dc:ce:b8:13:58:1d:83:1e:d8:39:09:94:bb:02:
         c0:70:0f:36:a2:56:ef:82:89:22:2a:d4:6d:13:0b:a0:1e:48:
         74:8f:f6:5b:61:51:8e:7a:51:5a:b7:7c:65:86:27:66:b0:af:
         45:47:5f:63:ac:7b:d1:78:fd:7e:bd:e3:51:3c:93:8d:de:02:
         10:d5:3b:55:90:87:79:b5:47:53:92:3b:56:cd:9a:bc:9a:4f:
         ab:9c:f1:9d:b4:63:a6:36:f8:15:cb:f0:d8:ba:a9:08:a9:f9:
         ea:d0:92:22:b4:0d:25:92:40:b5:11:8a:71:5b:3c:ec:d2:3f:
         ff:d0:4b:88
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQpx8V4OUwNPOHce5ii1X3X0k7AgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERCRkMzQTY1NDI4MzIyRTZCOEZCODJCNjBCNEZDNzk3
QTNGRURGNTAeFw0yMzA3MTAyMjU3NDNaFw0yNDA3MDgyMzAyNDNaMDMxMTAvBgNV
BAMTKDUxMDY4QUY0ODVFNUU1OENCMDc2NDJBRkQ3QUY3MTgyM0M2QTI0NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lRUk7pt0Mzi0Bkz6RRz2AaWG
ZnaZ3Yf136g+VcYe6Ugj/aLYeMFt4HnI0JuGl2WG9pvBIiNnhmCIYAhAARAEIvhh
D2RRmxNb3iQv5L0E9WRDuRFIYR0sKCTYRwGVbyCMfqaZMvQwfbIjicrj8p2w/1bz
AptNvIuvI6alqMHMaiPWNV585c6Hhkeq5Tn7ZrsnEMASzO+T0H+MG6ZmZPd65VId
5GnsZ5jkwylFX7ArY9E38hQPnyBoLxO9OFFJ/fQQXTdlVq08uO7qumsB54j9NIsU
94TqWWTKFfhrVvU+/MTEElBUCT0cyE5awm6DmztXGaR3/COB6xjTEbzUwdkFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUQaK9IXl5YywdkKv169xgjxqJGwwHwYDVR0j
BBgwFoAUTb/DplQoMi5rj7grYLT8eXo/7fUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlpMQXp1RldVeXMxWDlwenZKRkNvYmJRc0Jjd1BCdlJrZkdUeEVMUTNm
UVUvMC80REJGQzNBNjU0MjgzMjJFNkI4RkI4MkI2MEI0RkM3OTdBM0ZFREY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREQkZDM0E2NTQyODMyMkU2
QjhGQjgyQjYwQjRGQzc5N0EzRkVERjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JaTEF6dUZXVXlzMVg5cHp2SkZDb2JiUXNCY3dQQnZSa2ZHVHhFTFEzZlFVLzAv
MzIzODMwMzQzYTMyMzQzMDMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM0
MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQkADANBgkqhkiG9w0BAQsFAAOCAQEAGT0aAr/m
xUMEkVVAF+fMn2ltbU+BP3Pc+fXPKRteO+l3viPb3MNBWHYz1R5KxeMDpv3/ftRs
zBn26F22+ipM6+FRb+L3X3wN2nqZ5oiVimz3ykWWr+He4LrT5ZvTm20KkxxxJJwf
ZhzCbxIOeeyhrf11Bvot8OCbRzdP5QRA5LncgdzOuBNYHYMe2DkJlLsCwHAPNqJW
74KJIirUbRMLoB5IdI/2W2FRjnpRWrd8ZYYnZrCvRUdfY6x70Xj9fr3jUTyTjd4C
ENU7VZCHebVHU5I7Vs2avJpPq5zxnbRjpjb4Fcvw2LqpCKn56tCSIrQNJZJAtRGK
cVs87NI//9BLiA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:46:24 2025 by rpki-client