Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/323830343a6363343a3a2f33322d3438203d3e203532353531.roa
File:                     323830343a6363343a3a2f33322d3438203d3e203532353531.roa (raw, json)
Hash identifier:          sANJ77qyFc8uR9cvq5VQxUNSkqPPl7PEWi80EKDDvgk=
Subject key identifier:   1B:21:28:24:50:79:72:20:23:96:3C:E6:74:D9:00:6B:76:FC:4B:C3
Certificate issuer:       /CN=2EDDA86030532DE49CB7043239B46E667884503B
Certificate serial:       085BAB1740C647D6A706CF1C426691FEDDD81EB8
Authority key identifier: 2E:DD:A8:60:30:53:2D:E4:9C:B7:04:32:39:B4:6E:66:78:84:50:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EDDA86030532DE49CB7043239B46E667884503B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/323830343a6363343a3a2f33322d3438203d3e203532353531.roa
Signing time:             Thu 31 Aug 2023 20:48:13 +0000
ROA not before:           Thu 31 Aug 2023 20:43:13 +0000
ROA not after:            Thu 29 Aug 2024 20:48:13 +0000
asID:                     52551
IP address blocks:        2804:cc4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5b:ab:17:40:c6:47:d6:a7:06:cf:1c:42:66:91:fe:dd:d8:1e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EDDA86030532DE49CB7043239B46E667884503B
        Validity
            Not Before: Aug 31 20:43:13 2023 GMT
            Not After : Aug 29 20:48:13 2024 GMT
        Subject: CN=1B2128245079722023963CE674D9006B76FC4BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:fe:05:9c:a1:f4:e1:31:ef:dd:5f:e0:a0:
                    fd:a0:1f:86:67:59:22:34:60:ff:f0:5b:4f:eb:46:
                    88:97:37:21:38:a7:22:26:86:83:8d:bf:36:75:36:
                    95:97:9e:a2:41:91:2e:01:c3:f9:02:d8:53:ea:4f:
                    d2:c6:ba:c4:ee:1c:ec:14:a8:98:44:a0:78:c1:85:
                    18:e2:fb:5b:c5:cf:67:3c:bb:88:cc:41:29:46:7b:
                    cf:d6:f9:e0:52:bd:c6:7f:97:3a:ec:8d:dc:80:d0:
                    25:d7:c4:f5:5e:7f:45:4b:bb:f2:b6:d7:fa:fa:d8:
                    ae:5f:42:e8:f5:86:76:25:34:3f:51:11:b1:71:1e:
                    37:98:6d:ca:95:4e:eb:84:2f:7f:dc:6f:53:8c:93:
                    ce:b0:44:4a:f5:11:6c:0b:9b:91:4d:eb:b5:e6:40:
                    c8:73:4d:21:46:c4:8f:5f:cd:b2:4d:53:7f:d8:9d:
                    4e:ad:92:32:b0:fb:5f:b3:0e:da:0f:52:c7:6e:5d:
                    8a:27:cb:e6:75:26:b5:a9:85:37:66:f5:49:d3:77:
                    bd:a9:13:2c:8a:a8:c7:d2:66:9f:22:32:6e:4f:6d:
                    5f:8a:90:c1:f0:c8:ad:31:6d:b0:5c:88:02:3d:21:
                    3d:29:78:1d:43:20:27:54:07:35:7b:ad:5b:ec:e8:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:21:28:24:50:79:72:20:23:96:3C:E6:74:D9:00:6B:76:FC:4B:C3
            X509v3 Authority Key Identifier:
                keyid:2E:DD:A8:60:30:53:2D:E4:9C:B7:04:32:39:B4:6E:66:78:84:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/2EDDA86030532DE49CB7043239B46E667884503B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EDDA86030532DE49CB7043239B46E667884503B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/323830343a6363343a3a2f33322d3438203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:15:c2:15:36:a2:c5:38:7f:89:aa:c4:bc:75:77:2d:83:30:
         f1:a8:98:25:d8:f1:5a:29:b9:a7:eb:ab:5a:c9:c2:35:dc:fb:
         a2:1a:2c:c1:81:5b:95:34:a3:d6:53:82:9f:b2:09:2d:b0:fc:
         80:40:6d:ba:9e:02:80:68:1a:4e:bd:38:72:4b:6c:bb:ec:94:
         bf:97:97:ac:c4:d3:4f:a5:58:5b:a0:6a:48:15:4b:a8:35:02:
         44:10:50:d6:cb:f5:63:8a:0e:85:6a:30:1c:c8:2b:7b:9c:c7:
         2c:b5:7a:75:c1:d0:c8:7f:5f:c0:70:bd:fd:fe:2a:3f:b9:79:
         2d:c8:32:0e:c4:92:15:15:5f:4e:d1:85:68:37:07:09:ca:16:
         54:2a:0a:10:da:be:66:1e:85:0e:1d:51:1b:b6:1d:6e:77:d5:
         3e:21:98:70:c4:0b:54:6b:47:c1:84:5a:b2:de:aa:e4:3a:f1:
         39:1a:5c:24:a0:43:68:ea:a5:02:e5:50:3d:0b:5b:46:d6:32:
         ee:30:78:23:3e:57:e3:b1:5a:bf:ba:0b:d8:04:e1:ce:e4:20:
         26:8e:b5:ac:5c:54:9f:6e:24:29:4d:38:6d:83:89:8a:81:91:
         ca:9c:07:6c:36:a8:47:91:f0:8d:d7:bd:50:37:e3:a1:e8:be:
         c3:45:10:22
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUCFurF0DGR9anBs8cQmaR/t3YHrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVEREE4NjAzMDUzMkRFNDlDQjcwNDMyMzlCNDZFNjY3
ODg0NTAzQjAeFw0yMzA4MzEyMDQzMTNaFw0yNDA4MjkyMDQ4MTNaMDMxMTAvBgNV
BAMTKDFCMjEyODI0NTA3OTcyMjAyMzk2M0NFNjc0RDkwMDZCNzZGQzRCQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpP4FnKH04THv3V/goP2gH4Zn
WSI0YP/wW0/rRoiXNyE4pyImhoONvzZ1NpWXnqJBkS4Bw/kC2FPqT9LGusTuHOwU
qJhEoHjBhRji+1vFz2c8u4jMQSlGe8/W+eBSvcZ/lzrsjdyA0CXXxPVef0VLu/K2
1/r62K5fQuj1hnYlND9REbFxHjeYbcqVTuuEL3/cb1OMk86wREr1EWwLm5FN67Xm
QMhzTSFGxI9fzbJNU3/YnU6tkjKw+1+zDtoPUsduXYony+Z1JrWphTdm9UnTd72p
EyyKqMfSZp8iMm5PbV+KkMHwyK0xbbBciAI9IT0peB1DICdUBzV7rVvs6PuBAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUGyEoJFB5ciAjljzmdNkAa3b8S8MwHwYDVR0j
BBgwFoAULt2oYDBTLeSctwQyObRuZniEUDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZXZGl1TEExckx6djFOOEI4d3c1S2FReVY5M0s2eWpWSnJSamliRDlM
ZWMvMS8yRUREQTg2MDMwNTMyREU0OUNCNzA0MzIzOUI0NkU2Njc4ODQ1MDNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJFRERBODYwMzA1MzJERTQ5
Q0I3MDQzMjM5QjQ2RTY2Nzg4NDUwM0IuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2V2RpdUxBMXJMenYxTjhCOHd3NUthUXlWOTNLNnlqVkpyUmppYkQ5TGVjLzEv
MzIzODMwMzQzYTYzNjMzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNTM1
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAzEMA0GCSqGSIb3DQEBCwUAA4IBAQB5FcIVNqLFOH+J
qsS8dXctgzDxqJgl2PFaKbmn66taycI13PuiGizBgVuVNKPWU4KfsgktsPyAQG26
ngKAaBpOvThyS2y77JS/l5esxNNPpVhboGpIFUuoNQJEEFDWy/Vjig6FajAcyCt7
nMcstXp1wdDIf1/AcL39/io/uXktyDIOxJIVFV9O0YVoNwcJyhZUKgoQ2r5mHoUO
HVEbth1ud9U+IZhwxAtUa0fBhFqy3qrkOvE5GlwkoENo6qUC5VA9C1tG1jLuMHgj
PlfjsVq/ugvYBOHO5CAmjrWsXFSfbiQpTThtg4mKgZHKnAdsNqhHkfCN171QN+Oh
6L7DRRAi
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:01 2025 by rpki-client