Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/0/323830343a356163303a3a2f33322d313238203d3e20323638373933.roa
File:                     323830343a356163303a3a2f33322d313238203d3e20323638373933.roa (raw, json)
Hash identifier:          qRLI0hgs7mXAx4hP1LmfXePQGFEiq7AOogg3gkRtKSM=
Subject key identifier:   A1:19:C5:04:83:67:CB:48:92:24:DF:61:6D:3E:79:26:AE:A8:70:0F
Certificate issuer:       /CN=A8C8A12BAC95E84CB8A4E1A437B5BC564D508118
Certificate serial:       616B10C93326EE4933BCCB42DA948E78A597B1AB
Authority key identifier: A8:C8:A1:2B:AC:95:E8:4C:B8:A4:E1:A4:37:B5:BC:56:4D:50:81:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C8A12BAC95E84CB8A4E1A437B5BC564D508118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/0/323830343a356163303a3a2f33322d313238203d3e20323638373933.roa
Signing time:             Mon 30 Jan 2023 18:09:01 +0000
ROA not before:           Mon 30 Jan 2023 18:04:01 +0000
ROA not after:            Mon 29 Jan 2024 18:09:01 +0000
asID:                     268793
IP address blocks:        2804:5ac0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6b:10:c9:33:26:ee:49:33:bc:cb:42:da:94:8e:78:a5:97:b1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C8A12BAC95E84CB8A4E1A437B5BC564D508118
        Validity
            Not Before: Jan 30 18:04:01 2023 GMT
            Not After : Jan 29 18:09:01 2024 GMT
        Subject: CN=A119C5048367CB489224DF616D3E7926AEA8700F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:06:49:86:17:72:d4:49:e6:97:85:b5:4c:
                    66:73:14:48:9a:f7:37:e6:63:85:7c:7f:f8:19:2b:
                    d0:75:4b:9a:b4:10:40:c3:53:bd:21:f9:7d:bf:e8:
                    65:61:86:2c:33:42:6c:61:bb:a6:24:59:23:84:f1:
                    32:a5:9f:13:ee:d3:8d:39:ab:ad:ad:e6:c2:8b:d0:
                    b2:68:23:93:4b:68:38:17:1b:57:ea:eb:cb:76:a4:
                    ab:5b:57:43:c2:6e:06:9d:ae:92:79:81:dc:91:f5:
                    36:d3:7e:27:3b:d7:67:6a:ae:6b:e3:aa:00:77:a7:
                    a4:6a:df:0c:37:26:96:20:62:9a:12:44:f3:a8:b4:
                    ab:4f:9a:d5:ba:4d:b7:bb:c8:97:a8:9a:55:39:4d:
                    c0:b6:df:e0:25:6d:55:0c:42:47:a7:8a:f7:75:2d:
                    17:3a:e6:6e:b0:47:84:d9:a6:6d:10:ab:70:6b:e9:
                    f7:e6:9a:c8:e2:de:35:7a:55:cd:c0:8d:68:8f:b7:
                    8b:85:27:46:1b:cb:b8:39:65:1b:c7:03:93:02:29:
                    01:92:6e:cf:c5:9f:fe:ad:b1:37:af:26:17:8c:58:
                    8a:f8:f2:29:8d:f6:7e:b6:a7:71:a6:61:07:56:c5:
                    a0:80:cc:0c:d9:41:d7:1b:31:6b:19:74:e5:99:69:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:C5:04:83:67:CB:48:92:24:DF:61:6D:3E:79:26:AE:A8:70:0F
            X509v3 Authority Key Identifier:
                keyid:A8:C8:A1:2B:AC:95:E8:4C:B8:A4:E1:A4:37:B5:BC:56:4D:50:81:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/0/A8C8A12BAC95E84CB8A4E1A437B5BC564D508118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C8A12BAC95E84CB8A4E1A437B5BC564D508118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/0/323830343a356163303a3a2f33322d313238203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:35:2b:6c:0f:47:94:1f:79:b2:ff:9e:3b:4e:5c:fb:10:08:
         eb:57:01:0d:3b:eb:cb:8a:c1:0c:56:f5:68:0a:50:0a:0f:7b:
         dc:b9:0f:a6:81:2b:6b:8d:36:32:f7:0f:69:99:52:23:7e:94:
         18:5c:2a:85:4e:36:da:c9:a0:90:3b:21:45:30:b5:68:62:69:
         39:7d:65:2d:5a:e2:d2:3c:e7:e0:54:c6:79:4e:95:ec:a3:0b:
         8b:7d:f0:10:f9:f9:f4:57:51:bb:4d:f1:16:ce:78:cb:e2:54:
         90:1d:36:38:7d:3b:dd:88:5f:c2:20:19:aa:6d:4c:ef:0e:dd:
         61:fe:dc:6e:3c:22:b6:dd:08:0e:7d:03:04:16:72:61:73:57:
         e2:86:2d:d3:44:ce:e1:5d:19:c2:d3:db:9c:7b:24:e3:3b:bf:
         85:5a:69:8f:0b:e8:c7:0a:b0:f3:46:66:db:f5:7f:d3:67:ea:
         09:ac:1a:7a:ec:f4:cc:c3:89:a2:e1:e7:99:59:57:bc:b9:55:
         c2:5b:69:44:8a:f2:ea:6f:37:88:e4:8e:a0:a6:12:a4:38:6e:
         0c:7a:76:c6:11:4f:cb:30:d9:0a:e6:c7:ea:fc:28:17:93:a7:
         8b:a5:db:e3:08:03:d8:6b:35:25:16:f1:d0:91:96:0d:0e:1e:
         3c:e2:92:a4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYWsQyTMm7kkzvMtC2pSOeKWXsaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThDOEExMkJBQzk1RTg0Q0I4QTRFMUE0MzdCNUJDNTY0
RDUwODExODAeFw0yMzAxMzAxODA0MDFaFw0yNDAxMjkxODA5MDFaMDMxMTAvBgNV
BAMTKEExMTlDNTA0ODM2N0NCNDg5MjI0REY2MTZEM0U3OTI2QUVBODcwMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8QZJhhdy1Enml4W1TGZzFEia
9zfmY4V8f/gZK9B1S5q0EEDDU70h+X2/6GVhhiwzQmxhu6YkWSOE8TKlnxPu0405
q62t5sKL0LJoI5NLaDgXG1fq68t2pKtbV0PCbgadrpJ5gdyR9TbTfic712dqrmvj
qgB3p6Rq3ww3JpYgYpoSRPOotKtPmtW6Tbe7yJeomlU5TcC23+AlbVUMQkenivd1
LRc65m6wR4TZpm0Qq3Br6ffmmsji3jV6Vc3AjWiPt4uFJ0Yby7g5ZRvHA5MCKQGS
bs/Fn/6tsTevJheMWIr48imN9n62p3GmYQdWxaCAzAzZQdcbMWsZdOWZaULtAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUoRnFBINny0iSJN9hbT55Jq6ocA8wHwYDVR0j
BBgwFoAUqMihK6yV6Ey4pOGkN7W8Vk1QgRgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0
OWMvMC9BOEM4QTEyQkFDOTVFODRDQjhBNEUxQTQzN0I1QkM1NjRENTA4MTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E4QzhBMTJCQUM5NUU4NENC
OEE0RTFBNDM3QjVCQzU2NEQ1MDgxMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzAv
MzIzODMwMzQzYTM1NjE2MzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFrAMA0GCSqGSIb3DQEBCwUAA4IBAQAoNSts
D0eUH3my/547Tlz7EAjrVwENO+vLisEMVvVoClAKD3vcuQ+mgStrjTYy9w9pmVIj
fpQYXCqFTjbayaCQOyFFMLVoYmk5fWUtWuLSPOfgVMZ5TpXsowuLffAQ+fn0V1G7
TfEWznjL4lSQHTY4fTvdiF/CIBmqbUzvDt1h/txuPCK23QgOfQMEFnJhc1fihi3T
RM7hXRnC09uceyTjO7+FWmmPC+jHCrDzRmbb9X/TZ+oJrBp67PTMw4mi4eeZWVe8
uVXCW2lEivLqbzeI5I6gphKkOG4MenbGEU/LMNkK5sfq/CgXk6eLpdvjCAPYazUl
FvHQkZYNDh484pKk
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:46 2025 by rpki-client