Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666666653a3a2f34382d3438203d3e20323639373139.roa
File:                     323830343a363864343a666666653a3a2f34382d3438203d3e20323639373139.roa (raw, json)
Hash identifier:          zqos0AtZ8ueE4I3GL0nqoCK8fnTx4bx4YMqkhcVv9VY=
Subject key identifier:   5A:11:02:56:96:31:86:71:CA:3A:98:72:65:42:66:A8:26:3D:46:8A
Certificate issuer:       /CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
Certificate serial:       270C9255FFBC43A32F6695BA3C8683F077EF2A39
Authority key identifier: 0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666666653a3a2f34382d3438203d3e20323639373139.roa
Signing time:             Fri 23 Aug 2024 15:24:30 +0000
ROA not before:           Fri 23 Aug 2024 15:19:30 +0000
ROA not after:            Fri 22 Aug 2025 15:24:30 +0000
asID:                     269719
IP address blocks:        2804:68d4:fffe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0c:92:55:ff:bc:43:a3:2f:66:95:ba:3c:86:83:f0:77:ef:2a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
        Validity
            Not Before: Aug 23 15:19:30 2024 GMT
            Not After : Aug 22 15:24:30 2025 GMT
        Subject: CN=5A11025696318671CA3A9872654266A8263D468A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:6c:7f:2f:d3:cf:76:af:1f:d0:66:f2:7b:
                    99:47:75:17:73:e1:62:67:ca:6c:8e:2d:74:53:06:
                    0e:03:b5:8b:14:3e:d7:fa:ab:9c:a2:49:d4:a8:0d:
                    6b:54:9c:e3:f5:31:74:22:02:10:13:0b:ba:5e:d8:
                    1c:55:f4:75:11:b1:5e:e8:33:49:b7:00:1d:c5:0a:
                    dd:88:ef:6f:d4:3a:c2:78:2b:32:9d:11:28:35:a4:
                    62:fd:dd:d2:25:00:cc:2f:14:83:bb:d8:8b:d9:e3:
                    46:20:8b:6c:bd:51:bd:65:4c:f8:47:a2:99:0e:11:
                    42:dd:45:a3:12:5d:9a:d6:dc:55:ad:eb:b9:6c:62:
                    2b:b5:7e:8c:a7:da:ef:6b:a0:d8:ba:d3:d1:6c:1b:
                    82:85:90:3d:ad:aa:bf:4b:12:a5:b6:c0:1e:e9:45:
                    07:e6:b8:76:8c:0c:3c:2b:62:53:15:db:23:6e:2a:
                    db:f7:db:00:55:b3:c7:34:6c:73:68:8c:30:a1:d6:
                    07:50:50:25:ea:27:a8:86:d2:b0:17:d7:d2:7d:e2:
                    c2:9f:1d:9e:06:a5:ae:93:2a:f3:7f:b4:8a:60:16:
                    ac:f8:b1:05:2c:9e:3d:45:1a:8e:08:ab:8d:43:cd:
                    a4:6d:bf:1b:74:87:87:e1:38:1a:e9:b4:6c:41:f4:
                    f8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:11:02:56:96:31:86:71:CA:3A:98:72:65:42:66:A8:26:3D:46:8A
            X509v3 Authority Key Identifier:
                keyid:0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666666653a3a2f34382d3438203d3e20323639373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68d4:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:45:c5:c0:bd:7c:78:1f:9f:4a:25:3f:aa:7b:8e:86:b8:
         73:97:21:9b:f3:0a:d4:63:63:8f:55:6b:d3:d5:e1:13:6c:7e:
         c4:a4:33:38:23:ba:05:ac:04:a7:c1:ee:d3:9e:2d:6c:16:71:
         80:85:76:42:a4:95:d9:39:55:71:eb:b7:6d:c0:86:b8:7d:af:
         63:0b:21:a7:51:53:aa:f5:61:f0:c9:88:56:d1:37:3f:54:3f:
         24:96:59:74:eb:bc:5f:9b:7a:0a:07:54:7a:90:36:3c:f4:c6:
         8b:8a:f1:be:b4:d0:27:c6:11:e4:11:eb:86:e6:64:1c:23:b8:
         40:6c:31:da:1a:c3:00:70:21:e2:ac:9e:8c:e1:0e:fb:72:51:
         7b:e9:fb:03:45:40:1b:4f:f6:00:a7:7a:c0:11:46:85:27:83:
         37:bb:47:1d:b5:44:1b:a7:3b:34:0c:16:65:74:b3:cb:d8:6b:
         85:12:19:99:9c:75:38:25:e7:b1:19:e4:e2:5c:1a:37:73:f7:
         1a:36:8c:6c:00:7b:0d:5f:b4:a0:59:0c:8a:e2:8a:96:17:cf:
         ba:8e:dd:3d:31:1c:44:76:bf:0d:22:e5:86:4d:61:30:44:b7:
         11:1a:b3:0f:00:a7:76:c8:13:8b:89:5d:ee:c0:eb:3d:67:71:
         1f:80:60:7a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUJwySVf+8Q6MvZpW6PIaD8HfvKjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM3RUIzRTYwRDZGNDZGN0Y1OTZCNkQwRTk5RTg2Qjky
QzdCMzQ2MzAeFw0yNDA4MjMxNTE5MzBaFw0yNTA4MjIxNTI0MzBaMDMxMTAvBgNV
BAMTKDVBMTEwMjU2OTYzMTg2NzFDQTNBOTg3MjY1NDI2NkE4MjYzRDQ2OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbmx/L9PPdq8f0Gbye5lHdRdz
4WJnymyOLXRTBg4DtYsUPtf6q5yiSdSoDWtUnOP1MXQiAhATC7pe2BxV9HURsV7o
M0m3AB3FCt2I72/UOsJ4KzKdESg1pGL93dIlAMwvFIO72IvZ40Ygi2y9Ub1lTPhH
opkOEULdRaMSXZrW3FWt67lsYiu1foyn2u9roNi609FsG4KFkD2tqr9LEqW2wB7p
RQfmuHaMDDwrYlMV2yNuKtv32wBVs8c0bHNojDCh1gdQUCXqJ6iG0rAX19J94sKf
HZ4Gpa6TKvN/tIpgFqz4sQUsnj1FGo4Iq41DzaRtvxt0h4fhOBrptGxB9PjfAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUWhECVpYxhnHKOphyZUJmqCY9RoowHwYDVR0j
BBgwFoAUDH6z5g1vRvf1lrbQ6Z6GuSx7NGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0pENDNVVW83SjNDV2NXNmNheW92RUhFcjRQTVNFQ2Y1WG1Uc0pDYk5G
RG0vMC8wQzdFQjNFNjBENkY0NkY3RjU5NkI2RDBFOTlFODZCOTJDN0IzNDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDN0VCM0U2MEQ2RjQ2RjdG
NTk2QjZEMEU5OUU4NkI5MkM3QjM0NjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKRDQzVVVvN0ozQ1djVzZjYXlvdkVIRXI0UE1TRUNmNVhtVHNKQ2JORkRtLzAv
MzIzODMwMzQzYTM2Mzg2NDM0M2E2NjY2NjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTM3MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEaNT//jANBgkqhkiG9w0BAQsF
AAOCAQEAacxFxcC9fHgfn0olP6p7joa4c5chm/MK1GNjj1Vr09XhE2x+xKQzOCO6
BawEp8Hu054tbBZxgIV2QqSV2TlVceu3bcCGuH2vYwshp1FTqvVh8MmIVtE3P1Q/
JJZZdOu8X5t6CgdUepA2PPTGi4rxvrTQJ8YR5BHrhuZkHCO4QGwx2hrDAHAh4qye
jOEO+3JRe+n7A0VAG0/2AKd6wBFGhSeDN7tHHbVEG6c7NAwWZXSzy9hrhRIZmZx1
OCXnsRnk4lwaN3P3GjaMbAB7DV+0oFkMiuKKlhfPuo7dPTEcRHa/DSLlhk1hMES3
ERqzDwCndsgTi4ld7sDrPWdxH4Bgeg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:31 2025 by rpki-client