Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d313238203d3e20323730363330.roa
File:                     323830343a366566383a3a2f33322d313238203d3e20323730363330.roa (raw, json)
Hash identifier:          J+mAB+ViOIIt3Bt47WxZpXKtsHPeDb/owL0S21mF8L0=
Subject key identifier:   FF:93:E9:85:84:EE:93:07:2F:25:C2:11:FD:05:99:0B:64:1C:09:95
Certificate issuer:       /CN=08476912059F2AC593011419116914BCC2250DEF
Certificate serial:       063FC59CAA52312974E1EACC8301D875A176F74F
Authority key identifier: 08:47:69:12:05:9F:2A:C5:93:01:14:19:11:69:14:BC:C2:25:0D:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08476912059F2AC593011419116914BCC2250DEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d313238203d3e20323730363330.roa
Signing time:             Thu 22 Aug 2024 17:57:44 +0000
ROA not before:           Thu 22 Aug 2024 17:52:44 +0000
ROA not after:            Thu 21 Aug 2025 17:57:44 +0000
asID:                     270630
IP address blocks:        2804:6ef8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3f:c5:9c:aa:52:31:29:74:e1:ea:cc:83:01:d8:75:a1:76:f7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08476912059F2AC593011419116914BCC2250DEF
        Validity
            Not Before: Aug 22 17:52:44 2024 GMT
            Not After : Aug 21 17:57:44 2025 GMT
        Subject: CN=FF93E98584EE93072F25C211FD05990B641C0995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:e0:cd:d9:31:69:70:b5:81:a4:34:88:e0:
                    90:fd:4f:f6:de:5c:00:83:45:d3:1c:ff:82:2c:e6:
                    3e:ee:85:57:9f:83:92:47:8a:d0:a1:bc:d4:98:f6:
                    fe:6d:74:05:52:e3:d1:bb:a5:07:8f:c4:2a:cf:73:
                    a0:0b:9f:97:38:5a:f2:c7:4c:36:ac:d0:7d:5c:14:
                    bd:b7:9c:5d:cf:8b:89:5b:71:b4:f4:42:bf:d4:9e:
                    a8:81:2c:43:75:5b:c2:6e:ed:c6:a7:09:cf:8e:01:
                    b4:15:3a:a0:93:77:17:e9:39:d4:9f:75:d9:6d:38:
                    c9:ba:a9:13:9f:ab:39:30:1f:1d:65:de:50:28:b9:
                    d9:fb:1a:fd:5a:21:87:62:32:32:d4:81:5d:97:ee:
                    01:c3:cb:d3:c1:12:50:f5:70:48:73:12:02:f6:74:
                    f9:de:31:16:da:41:3b:eb:b1:b5:c8:2d:d7:8c:a7:
                    d8:af:df:32:1b:c5:53:3e:69:0e:e0:0f:3c:5c:ea:
                    db:d4:de:e7:26:bc:d7:8d:71:3d:08:2b:6f:19:4a:
                    b3:94:c1:e6:6a:43:44:98:24:43:29:37:67:30:f9:
                    dc:3c:f9:d9:ce:11:68:4f:d9:10:83:04:3d:f8:0c:
                    4d:03:1f:ef:05:6a:f7:d2:9d:66:cd:58:08:95:12:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:93:E9:85:84:EE:93:07:2F:25:C2:11:FD:05:99:0B:64:1C:09:95
            X509v3 Authority Key Identifier:
                keyid:08:47:69:12:05:9F:2A:C5:93:01:14:19:11:69:14:BC:C2:25:0D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/08476912059F2AC593011419116914BCC2250DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08476912059F2AC593011419116914BCC2250DEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d313238203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:94:76:c3:28:17:cd:6c:3e:34:78:74:e0:ca:9f:ba:b4:ce:
         d7:26:bb:88:d5:12:d2:1d:08:d4:68:37:58:4a:02:8b:66:1c:
         fc:f3:e3:94:be:a4:a1:6e:78:c4:88:20:8f:4c:e4:f7:62:49:
         83:31:fb:3d:42:09:f2:bd:97:0f:4e:2c:36:4b:43:03:4f:5d:
         5a:bd:2e:97:8d:03:4d:19:8a:10:b0:55:1b:16:09:35:d0:fc:
         9c:d7:9c:79:29:7b:86:ab:38:3d:6f:57:7c:5f:b7:e7:da:8a:
         d8:72:49:4a:57:2a:cf:e2:dd:6b:da:80:b6:f7:6e:4c:da:7b:
         73:b6:32:f5:ff:16:50:c7:3f:62:13:35:ff:26:64:7b:15:53:
         94:c0:45:24:a2:11:63:c7:95:62:ed:8d:fb:25:2f:f2:75:8b:
         f5:4c:00:a9:c1:a5:20:01:c9:6a:42:7d:51:4a:00:1b:7a:2b:
         d6:13:78:37:09:e6:9d:66:b9:8b:9f:0f:f9:53:58:21:3f:57:
         3e:5d:1d:11:98:da:f2:5e:b0:06:14:d6:c6:7c:ee:3d:e6:c2:
         96:c1:f6:85:f7:66:62:49:b3:5a:f6:b5:f6:95:2a:f9:1e:a4:
         cc:85:bb:cf:59:74:2d:4b:c2:b5:02:e4:cc:9c:11:09:c6:61:
         73:f1:18:ae
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBj/FnKpSMSl04erMgwHYdaF2908wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0NzY5MTIwNTlGMkFDNTkzMDExNDE5MTE2OTE0QkND
MjI1MERFRjAeFw0yNDA4MjIxNzUyNDRaFw0yNTA4MjExNzU3NDRaMDMxMTAvBgNV
BAMTKEZGOTNFOTg1ODRFRTkzMDcyRjI1QzIxMUZEMDU5OTBCNjQxQzA5OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBODN2TFpcLWBpDSI4JD9T/be
XACDRdMc/4Is5j7uhVefg5JHitChvNSY9v5tdAVS49G7pQePxCrPc6ALn5c4WvLH
TDas0H1cFL23nF3Pi4lbcbT0Qr/UnqiBLEN1W8Ju7canCc+OAbQVOqCTdxfpOdSf
ddltOMm6qROfqzkwHx1l3lAoudn7Gv1aIYdiMjLUgV2X7gHDy9PBElD1cEhzEgL2
dPneMRbaQTvrsbXILdeMp9iv3zIbxVM+aQ7gDzxc6tvU3ucmvNeNcT0IK28ZSrOU
weZqQ0SYJEMpN2cw+dw8+dnOEWhP2RCDBD34DE0DH+8FavfSnWbNWAiVEodRAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU/5PphYTukwcvJcIR/QWZC2QcCZUwHwYDVR0j
BBgwFoAUCEdpEgWfKsWTARQZEWkUvMIlDe8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VYQ2N5TVlITmZ4SHFCOEtTTFV5bllyemFqdjJVVHdqcEM1aFU4UDZN
dG4vMC8wODQ3NjkxMjA1OUYyQUM1OTMwMTE0MTkxMTY5MTRCQ0MyMjUwREVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NDc2OTEyMDU5RjJBQzU5
MzAxMTQxOTExNjkxNEJDQzIyNTBERUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1WENjeU1ZSE5meEhxQjhLU0xVeW5ZcnphanYyVVR3anBDNWhVOFA2TXRuLzAv
MzIzODMwMzQzYTM2NjU2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNjMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBG74MA0GCSqGSIb3DQEBCwUAA4IBAQCYlHbD
KBfNbD40eHTgyp+6tM7XJruI1RLSHQjUaDdYSgKLZhz88+OUvqShbnjEiCCPTOT3
YkmDMfs9QgnyvZcPTiw2S0MDT11avS6XjQNNGYoQsFUbFgk10Pyc15x5KXuGqzg9
b1d8X7fn2orYcklKVyrP4t1r2oC2925M2ntztjL1/xZQxz9iEzX/JmR7FVOUwEUk
ohFjx5Vi7Y37JS/ydYv1TACpwaUgAclqQn1RSgAbeivWE3g3CeadZrmLnw/5U1gh
P1c+XR0RmNryXrAGFNbGfO495sKWwfaF92ZiSbNa9rX2lSr5HqTMhbvPWXQtS8K1
AuTMnBEJxmFz8Riu
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:31:36 2025 by rpki-client