Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33332d3333203d3e20323732353636.roa (raw, json)
Hash identifier:          oqSibkPzLW6y6dSgf4LQ8p2kdmWCKly7T1HosZn+RJI=
Subject key identifier:   74:54:85:FD:43:7A:FF:1D:2C:9B:56:F6:E1:5F:A3:EC:73:E2:F1:9D
Certificate issuer:       /CN=4AAAD605DA9FBA4CF949EEC17E939B692C66159F
Certificate serial:       51B34A9191B1EB5749F39183C10A4AD295AB73A1
Authority key identifier: 4A:AA:D6:05:DA:9F:BA:4C:F9:49:EE:C1:7E:93:9B:69:2C:66:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa
Signing time:             Fri 31 Jan 2025 18:37:44 +0000
ROA not before:           Fri 31 Jan 2025 18:32:44 +0000
ROA not after:            Fri 30 Jan 2026 18:37:44 +0000
asID:                     272566
IP address blocks:        2804:853c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b3:4a:91:91:b1:eb:57:49:f3:91:83:c1:0a:4a:d2:95:ab:73:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAAD605DA9FBA4CF949EEC17E939B692C66159F
        Validity
            Not Before: Jan 31 18:32:44 2025 GMT
            Not After : Jan 30 18:37:44 2026 GMT
        Subject: CN=745485FD437AFF1D2C9B56F6E15FA3EC73E2F19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:25:9a:61:13:00:54:bf:92:69:05:86:d0:36:
                    11:8b:54:25:ed:7f:11:39:6d:62:1a:7b:5c:24:74:
                    1f:5e:79:45:9a:7e:51:3c:42:cb:a8:0c:dc:12:17:
                    80:81:b2:92:fd:9f:59:f1:8c:23:e5:e5:54:05:ed:
                    58:41:49:eb:9f:59:65:6f:b3:d8:8e:a7:6e:ff:64:
                    ab:18:20:97:a8:c8:2e:bb:1d:c4:39:ee:64:72:26:
                    cc:28:1a:eb:37:1e:5f:90:c6:d9:bc:db:f9:b3:f0:
                    96:e3:e8:a5:5d:81:77:eb:58:ce:e4:b1:63:f0:d1:
                    3e:2b:98:57:8c:0a:df:82:47:f5:34:14:03:53:a8:
                    14:96:c1:3b:1e:87:b7:4c:2e:90:50:53:1f:39:d2:
                    f9:5d:22:ab:85:ca:74:75:ef:a6:66:31:ab:7d:c6:
                    6b:3f:26:3b:4f:cc:48:40:85:56:cc:cc:d6:a8:91:
                    53:7b:ae:fd:1d:77:15:17:1f:59:7c:8e:64:33:30:
                    58:98:03:fc:a5:29:d2:dc:40:fe:de:76:86:7e:4c:
                    18:fd:0a:82:8f:e7:c5:b9:99:ee:a4:c1:aa:a1:ef:
                    72:2c:57:0d:d6:4e:2d:60:6d:7e:33:52:da:2d:93:
                    36:35:00:ae:cf:be:79:60:ca:da:0c:da:ac:9a:34:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:54:85:FD:43:7A:FF:1D:2C:9B:56:F6:E1:5F:A3:EC:73:E2:F1:9D
            X509v3 Authority Key Identifier:
                keyid:4A:AA:D6:05:DA:9F:BA:4C:F9:49:EE:C1:7E:93:9B:69:2C:66:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:83:21:ec:d7:e5:7c:48:1d:3d:3b:c9:e4:7b:9e:6d:d2:b3:
         71:e3:c1:59:5a:60:62:bb:7b:38:84:69:09:29:a3:64:90:4f:
         98:49:4c:06:c2:16:16:31:1f:af:ee:2a:77:52:ea:fb:e3:38:
         4c:67:03:90:51:61:8e:c9:03:92:98:69:a7:95:ee:b0:09:72:
         48:57:e9:34:d8:a9:40:e1:a2:02:19:e1:89:67:12:5f:83:04:
         b3:2a:f4:48:02:fc:ce:de:dc:64:8a:40:ba:5b:0c:68:7e:98:
         88:36:ac:bc:d3:c2:0a:fe:a5:e9:46:20:dd:9f:b0:1c:53:a6:
         60:da:83:b1:3a:9c:a5:c1:95:eb:e5:87:5f:05:9b:23:d8:79:
         bb:89:09:79:0e:a6:20:d4:fe:39:8c:9a:c9:32:a1:eb:e2:40:
         90:59:12:b1:45:e8:7e:1a:85:f0:0f:20:23:0a:bf:38:a9:7b:
         8b:6d:b0:2b:98:e4:4c:c4:3c:17:48:5a:ee:ab:0c:46:7d:80:
         58:7f:82:7f:e7:24:ed:24:21:d5:b7:f9:5b:05:cd:08:03:51:
         3c:55:da:8e:39:b3:76:cb:03:19:a4:80:49:94:68:0a:37:18:
         64:f4:8e:1f:2e:9d:fe:6a:9a:96:5d:63:d0:06:44:be:52:e2:
         00:b4:8c:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUbNKkZGx61dJ85GDwQpK0pWrc6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBQUQ2MDVEQTlGQkE0Q0Y5NDlFRUMxN0U5MzlCNjky
QzY2MTU5RjAeFw0yNTAxMzExODMyNDRaFw0yNjAxMzAxODM3NDRaMDMxMTAvBgNV
BAMTKDc0NTQ4NUZENDM3QUZGMUQyQzlCNTZGNkUxNUZBM0VDNzNFMkYxOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJZphEwBUv5JpBYbQNhGLVCXt
fxE5bWIae1wkdB9eeUWaflE8QsuoDNwSF4CBspL9n1nxjCPl5VQF7VhBSeufWWVv
s9iOp27/ZKsYIJeoyC67HcQ57mRyJswoGus3Hl+Qxtm82/mz8Jbj6KVdgXfrWM7k
sWPw0T4rmFeMCt+CR/U0FANTqBSWwTseh7dMLpBQUx850vldIquFynR176ZmMat9
xms/JjtPzEhAhVbMzNaokVN7rv0ddxUXH1l8jmQzMFiYA/ylKdLcQP7edoZ+TBj9
CoKP58W5me6kwaqh73IsVw3WTi1gbX4zUtotkzY1AK7PvnlgytoM2qyaNI/9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdFSF/UN6/x0sm1b24V+j7HPi8Z0wHwYDVR0j
BBgwFoAUSqrWBdqfukz5Se7BfpObaSxmFZ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VleldwYTg3VlRhOXZyYkJiMWY2ZFJuRFZhSmczdk1WREs3cGFLaGpr
YVQvMC80QUFBRDYwNURBOUZCQTRDRjk0OUVFQzE3RTkzOUI2OTJDNjYxNTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBQUFENjA1REE5RkJBNENG
OTQ5RUVDMTdFOTM5QjY5MkM2NjE1OUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1ZXpXcGE4N1ZUYTl2cmJCYjFmNmRSbkRWYUpnM3ZNVkRLN3BhS2hqa2FULzAv
MzIzODMwMzQzYTM4MzUzMzYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMy
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASFPAAwDQYJKoZIhvcNAQELBQADggEBAEGDIezX
5XxIHT07yeR7nm3Ss3HjwVlaYGK7eziEaQkpo2SQT5hJTAbCFhYxH6/uKndS6vvj
OExnA5BRYY7JA5KYaaeV7rAJckhX6TTYqUDhogIZ4YlnEl+DBLMq9EgC/M7e3GSK
QLpbDGh+mIg2rLzTwgr+pelGIN2fsBxTpmDag7E6nKXBlevlh18FmyPYebuJCXkO
piDU/jmMmskyoeviQJBZErFF6H4ahfAPICMKvzipe4ttsCuY5EzEPBdIWu6rDEZ9
gFh/gn/nJO0kIdW3+VsFzQgDUTxV2o45s3bLAxmkgEmUaAo3GGT0jh8unf5qmpZd
Y9AGRL5S4gC0jBI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:41 2025 by rpki-client