Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa
File:                     323830343a343332383a3a2f33322d3438203d3e20323637353532.roa (raw, json)
Hash identifier:          FnUPzivGE8Bn6iSkahAcsVeYPHdOGrLv2BXszbYTr4I=
Subject key identifier:   4A:3D:C5:F9:AE:E5:7E:78:21:8E:6C:19:A5:B5:26:81:C2:2B:B1:A1
Certificate issuer:       /CN=860668C5CBAB1C59B308B18605B1B2A88FAB05F1
Certificate serial:       1B822C5708E18FEA856E46ECE9199B276118DFFA
Authority key identifier: 86:06:68:C5:CB:AB:1C:59:B3:08:B1:86:05:B1:B2:A8:8F:AB:05:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa
Signing time:             Fri 24 Jan 2025 12:35:54 +0000
ROA not before:           Fri 24 Jan 2025 12:30:54 +0000
ROA not after:            Fri 23 Jan 2026 12:35:54 +0000
asID:                     267552
IP address blocks:        2804:4328::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:82:2c:57:08:e1:8f:ea:85:6e:46:ec:e9:19:9b:27:61:18:df:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860668C5CBAB1C59B308B18605B1B2A88FAB05F1
        Validity
            Not Before: Jan 24 12:30:54 2025 GMT
            Not After : Jan 23 12:35:54 2026 GMT
        Subject: CN=4A3DC5F9AEE57E78218E6C19A5B52681C22BB1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:5b:34:7f:88:f4:7b:9d:07:d5:51:46:7b:
                    ae:45:fa:ba:b3:70:dd:0e:9d:04:e8:c5:7c:00:b6:
                    15:cf:58:c4:56:91:31:ab:7a:58:08:3b:94:18:ff:
                    44:62:d1:0b:59:87:b1:9c:53:ef:7a:d7:a0:e3:c0:
                    5c:cf:11:9e:54:7b:2a:67:20:cd:71:44:9e:13:5f:
                    ff:4a:47:ac:6f:ba:6a:be:3e:82:13:02:c7:1e:71:
                    8c:a3:7a:57:2d:7e:b3:39:8c:41:a3:e5:f2:08:13:
                    31:45:7e:4a:9d:71:7d:93:d4:64:e7:b0:40:9f:58:
                    7e:fb:74:11:ba:e5:51:ce:8a:d5:4e:f9:f0:08:ce:
                    9e:74:18:a5:42:b6:ac:66:e7:50:d1:fd:98:9a:94:
                    f0:ec:d5:4a:a1:e0:62:17:a9:c9:7a:a1:3b:09:f6:
                    d5:31:d2:63:6a:a4:55:6f:2e:ff:a3:c6:6e:5f:e9:
                    bd:8e:fa:50:e8:50:c6:f1:83:37:08:c7:11:51:ce:
                    b6:07:67:98:8b:a8:ef:ff:b8:ee:f3:1f:59:38:9d:
                    35:9f:ec:0b:1b:7c:15:bb:d1:51:f2:9e:cb:14:52:
                    4a:43:00:2b:2f:4a:2a:dd:e6:f7:ca:2f:67:62:db:
                    26:ca:a4:dd:32:06:24:e7:02:b4:3e:e9:3a:f6:6a:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3D:C5:F9:AE:E5:7E:78:21:8E:6C:19:A5:B5:26:81:C2:2B:B1:A1
            X509v3 Authority Key Identifier:
                keyid:86:06:68:C5:CB:AB:1C:59:B3:08:B1:86:05:B1:B2:A8:8F:AB:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4328::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:3c:bb:c7:e3:60:98:fe:91:6d:3f:55:ff:2d:2e:54:9c:
         f5:73:b4:5e:44:96:f4:2d:07:9b:1f:0b:ce:ae:ac:0d:cb:a2:
         8a:dd:b8:9b:cc:91:38:24:2a:70:98:80:aa:89:71:e7:65:ba:
         d7:f7:10:35:52:85:e6:97:19:79:2c:df:c9:64:4a:e3:81:68:
         8f:1d:3e:b8:ee:fc:66:b9:3f:32:9e:fb:01:f7:25:84:51:b3:
         6b:bc:f5:d1:18:bd:63:44:ef:ac:ce:55:f5:db:ff:71:e2:9f:
         8d:07:fd:cb:fb:8c:e0:fe:c5:d4:6c:f1:29:f0:8b:58:60:f2:
         45:22:80:2e:2b:8b:19:3f:51:5d:7c:73:eb:21:17:9a:fe:ae:
         d2:03:91:49:d2:15:b0:67:c8:f8:83:eb:1a:7b:57:5d:9b:4e:
         b2:8f:c1:59:a3:b3:81:57:1d:4c:19:5b:25:f6:60:c4:d3:ab:
         1a:8f:ad:c3:e2:c6:c8:2f:f1:78:bb:1e:5e:8a:03:4c:90:1c:
         97:7c:b3:bd:fb:92:e1:20:7e:d8:43:fd:f1:9a:06:cf:c4:d8:
         af:85:c5:ed:5a:21:98:03:c0:d8:9e:5b:33:6a:76:cb:f6:b3:
         c1:86:50:42:4d:ae:60:7b:1d:e4:54:15:83:92:ea:1f:4a:c1:
         00:ff:30:28
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUG4IsVwjhj+qFbkbs6RmbJ2EY3/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYwNjY4QzVDQkFCMUM1OUIzMDhCMTg2MDVCMUIyQTg4
RkFCMDVGMTAeFw0yNTAxMjQxMjMwNTRaFw0yNjAxMjMxMjM1NTRaMDMxMTAvBgNV
BAMTKDRBM0RDNUY5QUVFNTdFNzgyMThFNkMxOUE1QjUyNjgxQzIyQkIxQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXMFs0f4j0e50H1VFGe65F+rqz
cN0OnQToxXwAthXPWMRWkTGrelgIO5QY/0Ri0QtZh7GcU+9616DjwFzPEZ5Ueypn
IM1xRJ4TX/9KR6xvumq+PoITAscecYyjelctfrM5jEGj5fIIEzFFfkqdcX2T1GTn
sECfWH77dBG65VHOitVO+fAIzp50GKVCtqxm51DR/ZialPDs1Uqh4GIXqcl6oTsJ
9tUx0mNqpFVvLv+jxm5f6b2O+lDoUMbxgzcIxxFRzrYHZ5iLqO//uO7zH1k4nTWf
7AsbfBW70VHynssUUkpDACsvSird5vfKL2di2ybKpN0yBiTnArQ+6Tr2avn9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSj3F+a7lfnghjmwZpbUmgcIrsaEwHwYDVR0j
BBgwFoAUhgZoxcurHFmzCLGGBbGyqI+rBfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNzUnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5a
aHAvMC84NjA2NjhDNUNCQUIxQzU5QjMwOEIxODYwNUIxQjJBODhGQUIwNUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MDY2OEM1Q0JBQjFDNTlC
MzA4QjE4NjA1QjFCMkE4OEZBQjA1RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jjc1J0Uzhrczk0VTJzZzFld0JwcUFSdmNtc0Q4Q2VIUXJ6M0NxZUVuWmhwLzAv
MzIzODMwMzQzYTM0MzMzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzUzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARDKDANBgkqhkiG9w0BAQsFAAOCAQEAXHw8u8fj
YJj+kW0/Vf8tLlSc9XO0XkSW9C0Hmx8Lzq6sDcuiit24m8yROCQqcJiAqolx52W6
1/cQNVKF5pcZeSzfyWRK44Fojx0+uO78Zrk/Mp77AfclhFGza7z10Ri9Y0TvrM5V
9dv/ceKfjQf9y/uM4P7F1GzxKfCLWGDyRSKALiuLGT9RXXxz6yEXmv6u0gORSdIV
sGfI+IPrGntXXZtOso/BWaOzgVcdTBlbJfZgxNOrGo+tw+LGyC/xeLseXooDTJAc
l3yzvfuS4SB+2EP98ZoGz8TYr4XF7VohmAPA2J5bM2p2y/azwYZQQk2uYHsd5FQV
g5LqH0rBAP8wKA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 23:20:28 2025 by rpki-client