Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/323830343a6239633a3a2f33322d3438203d3e20323632343439.roa
File:                     323830343a6239633a3a2f33322d3438203d3e20323632343439.roa (raw, json)
Hash identifier:          j7stxsjhiA+EmBdM/T74oEDc51vDD0/PRdqSlU87Bpc=
Subject key identifier:   02:A6:8C:B4:32:38:E1:FE:FB:88:15:5B:E0:0B:C3:84:C4:C9:1B:81
Certificate issuer:       /CN=E5604C75AF5ED2866EC50D3E1EAE07B98B2537B7
Certificate serial:       08E92F752F3A1FEDF0150BFD03596C592B94EF77
Authority key identifier: E5:60:4C:75:AF:5E:D2:86:6E:C5:0D:3E:1E:AE:07:B9:8B:25:37:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5604C75AF5ED2866EC50D3E1EAE07B98B2537B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/323830343a6239633a3a2f33322d3438203d3e20323632343439.roa
Signing time:             Tue 23 Nov 2021 22:40:35 +0000
ROA not before:           Tue 23 Nov 2021 22:35:35 +0000
ROA not after:            Tue 11 Nov 2031 22:40:35 +0000
asID:                     262449
IP address blocks:        2804:b9c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e9:2f:75:2f:3a:1f:ed:f0:15:0b:fd:03:59:6c:59:2b:94:ef:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5604C75AF5ED2866EC50D3E1EAE07B98B2537B7
        Validity
            Not Before: Nov 23 22:35:35 2021 GMT
            Not After : Nov 11 22:40:35 2031 GMT
        Subject: CN=02A68CB43238E1FEFB88155BE00BC384C4C91B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:80:11:de:86:31:95:b5:7a:7a:8b:dd:ef:83:
                    7a:95:bc:b8:7c:52:e7:59:e8:98:c5:b8:64:fe:c0:
                    0c:77:43:2b:ad:ab:e5:c7:a0:a4:f7:f7:73:fd:a3:
                    39:f8:e8:89:1a:64:3e:08:b4:b6:95:c9:44:1e:94:
                    10:a4:40:cf:af:2b:f9:f3:96:b1:67:1c:d9:cc:7f:
                    da:fa:1f:cd:43:b3:69:67:b0:da:64:e5:8f:4e:63:
                    69:6a:d6:40:f6:cb:6e:ae:29:22:ed:5a:7b:48:60:
                    6a:66:15:18:2f:3e:48:b1:85:8e:6d:cd:47:d3:29:
                    0c:1d:f9:b5:df:3a:1e:65:9f:83:99:ca:f8:66:ab:
                    12:2e:13:1d:20:be:3c:b6:a9:81:23:42:f0:05:12:
                    18:68:72:36:f4:51:cd:e6:a6:13:7f:0d:76:59:12:
                    ff:f9:f3:4b:c3:59:f2:72:42:a5:56:49:af:89:02:
                    34:c1:f6:c7:cb:25:72:8d:b6:ee:60:10:67:f7:65:
                    f8:b9:9b:ae:48:3a:2c:80:2e:b6:75:e7:43:42:00:
                    45:d3:4a:a9:51:2b:63:32:a2:4a:1a:ed:a1:4d:8d:
                    2d:af:7e:c2:ed:ff:fa:fb:51:8b:e8:92:73:9c:a2:
                    67:f3:68:aa:6c:2a:1f:b5:d2:0a:d6:6c:57:ce:b0:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:8C:B4:32:38:E1:FE:FB:88:15:5B:E0:0B:C3:84:C4:C9:1B:81
            X509v3 Authority Key Identifier:
                keyid:E5:60:4C:75:AF:5E:D2:86:6E:C5:0D:3E:1E:AE:07:B9:8B:25:37:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/E5604C75AF5ED2866EC50D3E1EAE07B98B2537B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5604C75AF5ED2866EC50D3E1EAE07B98B2537B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/323830343a6239633a3a2f33322d3438203d3e20323632343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:42:05:f9:92:b5:ee:49:f8:cb:52:85:2f:df:8e:3d:c3:ef:
         44:88:7e:01:18:e3:f4:a7:81:2d:40:cd:15:ff:2f:56:fd:20:
         15:5f:8f:10:b3:02:34:06:df:87:44:26:ab:86:55:03:d0:f0:
         25:d1:92:8d:91:ce:46:83:3d:c5:62:a8:e3:50:8e:fa:c9:3f:
         40:0b:f5:60:9f:c3:72:76:55:4e:3d:d6:20:29:be:be:f4:3f:
         85:6b:fe:6f:40:4b:d7:3b:b7:54:de:00:c1:4e:cf:b5:4c:d3:
         c8:e8:e3:1e:c1:02:44:43:5d:49:8d:7d:5f:f1:19:04:8f:31:
         09:e8:a4:87:79:bb:78:62:52:4f:d8:1f:be:23:fe:cd:de:f4:
         2d:1e:ee:82:de:39:5e:0b:c7:5b:79:10:df:0b:f2:79:2e:97:
         11:9f:aa:cb:39:09:13:c0:0c:30:4f:a0:dc:ce:68:9b:7a:0c:
         8d:e5:50:96:c4:d1:5a:0c:ff:ee:92:d6:ae:7e:c1:3a:9f:d8:
         32:12:fb:ee:27:28:97:ba:bc:e7:35:b5:02:64:65:da:74:a0:
         f6:9f:74:05:7f:5f:39:f0:c3:4a:ad:25:bb:11:40:9d:76:d8:
         f4:da:e1:50:08:f8:26:1a:f3:55:7e:8e:a4:c7:f6:5f:f6:45:
         79:b3:23:c3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCOkvdS86H+3wFQv9A1lsWSuU73cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU2MDRDNzVBRjVFRDI4NjZFQzUwRDNFMUVBRTA3Qjk4
QjI1MzdCNzAeFw0yMTExMjMyMjM1MzVaFw0zMTExMTEyMjQwMzVaMDMxMTAvBgNV
BAMTKDAyQTY4Q0I0MzIzOEUxRkVGQjg4MTU1QkUwMEJDMzg0QzRDOTFCODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgBHehjGVtXp6i93vg3qVvLh8
UudZ6JjFuGT+wAx3Qyutq+XHoKT393P9ozn46IkaZD4ItLaVyUQelBCkQM+vK/nz
lrFnHNnMf9r6H81Ds2lnsNpk5Y9OY2lq1kD2y26uKSLtWntIYGpmFRgvPkixhY5t
zUfTKQwd+bXfOh5ln4OZyvhmqxIuEx0gvjy2qYEjQvAFEhhocjb0Uc3mphN/DXZZ
Ev/580vDWfJyQqVWSa+JAjTB9sfLJXKNtu5gEGf3Zfi5m65IOiyALrZ150NCAEXT
SqlRK2Myokoa7aFNjS2vfsLt//r7UYvoknOcomfzaKpsKh+10grWbFfOsAOtAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUAqaMtDI44f77iBVb4AvDhMTJG4EwHwYDVR0j
BBgwFoAU5WBMda9e0oZuxQ0+Hq4HuYslN7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJR
NkcvMC9FNTYwNEM3NUFGNUVEMjg2NkVDNTBEM0UxRUFFMDdCOThCMjUzN0I3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U1NjA0Qzc1QUY1RUQyODY2
RUM1MEQzRTFFQUUwN0I5OEIyNTM3QjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NzVnNYbmdHcmpnWmlmNEhKN0JZUDFHdWpzMzVEWlg2U0REamVDNVliUTZHLzAv
MzIzODMwMzQzYTYyMzk2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM0
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEC5wwDQYJKoZIhvcNAQELBQADggEBACJCBfmSte5J
+MtShS/fjj3D70SIfgEY4/SngS1AzRX/L1b9IBVfjxCzAjQG34dEJquGVQPQ8CXR
ko2RzkaDPcViqONQjvrJP0AL9WCfw3J2VU491iApvr70P4Vr/m9AS9c7t1TeAMFO
z7VM08jo4x7BAkRDXUmNfV/xGQSPMQnopId5u3hiUk/YH74j/s3e9C0e7oLeOV4L
x1t5EN8L8nkulxGfqss5CRPADDBPoNzOaJt6DI3lUJbE0VoM/+6S1q5+wTqf2DIS
++4nKJe6vOc1tQJkZdp0oPafdAV/Xznww0qtJbsRQJ122PTa4VAI+CYa81V+jqTH
9l/2RXmzI8M=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:50 2025 by rpki-client