Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a383030303a3a2f33332d3333203d3e20323638333436.roa
File:                     323830343a346662633a383030303a3a2f33332d3333203d3e20323638333436.roa (raw, json)
Hash identifier:          lq6zuuVe90nqnJ+8THQA4wv9co2n4+J3v+bv8FFeN+s=
Subject key identifier:   40:58:B0:36:77:E9:93:5B:56:51:4A:6F:AE:0E:19:BD:FD:21:9D:86
Certificate issuer:       /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial:       2F83A040BBBFFEFD7167BBFE26341CBE4FFA2D3D
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a383030303a3a2f33332d3333203d3e20323638333436.roa
Signing time:             Mon 22 May 2023 19:23:58 +0000
ROA not before:           Mon 22 May 2023 19:18:58 +0000
ROA not after:            Mon 20 May 2024 19:23:58 +0000
asID:                     268346
IP address blocks:        2804:4fbc:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:a0:40:bb:bf:fe:fd:71:67:bb:fe:26:34:1c:be:4f:fa:2d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
        Validity
            Not Before: May 22 19:18:58 2023 GMT
            Not After : May 20 19:23:58 2024 GMT
        Subject: CN=4058B03677E9935B56514A6FAE0E19BDFD219D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:59:97:27:bc:23:d5:18:de:4f:ec:84:a0:
                    64:eb:ae:70:a4:18:45:3b:d4:b1:28:0d:77:74:50:
                    18:c6:8a:cf:c7:db:59:f8:14:7c:bc:53:57:b3:2d:
                    ff:7d:f5:26:52:c6:e2:7f:0f:34:db:d4:33:07:44:
                    8d:7f:d7:b2:ca:53:b3:dc:e1:46:dd:eb:49:48:02:
                    4f:1a:a4:dc:fa:47:82:80:34:3e:99:e6:57:57:3c:
                    5b:a9:52:db:7a:20:2b:3e:16:ad:c7:2c:12:9a:1a:
                    b4:92:7a:a7:29:b8:68:e0:fe:60:cf:81:f6:b3:73:
                    ec:49:99:08:01:a4:b5:2a:9f:1d:56:5e:66:ac:ef:
                    03:c2:84:9f:7b:ec:79:70:3c:6e:51:a4:9d:43:94:
                    5b:0c:b5:2e:28:50:e2:49:3c:74:72:8e:d2:39:84:
                    fb:22:42:42:48:9a:cf:74:c7:31:25:b5:b5:54:f9:
                    91:47:74:67:18:36:8f:d2:9d:65:dd:4a:4e:19:22:
                    34:ef:70:06:cd:a3:6f:31:43:bc:b7:ad:26:13:dd:
                    5a:9d:eb:2b:63:f6:84:14:6b:5d:b9:3d:f5:56:e8:
                    3c:74:0b:ed:ef:0c:7a:36:1e:14:45:52:ad:3d:98:
                    03:1a:43:db:58:dd:f1:08:5a:51:49:9b:9d:82:a1:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:58:B0:36:77:E9:93:5B:56:51:4A:6F:AE:0E:19:BD:FD:21:9D:86
            X509v3 Authority Key Identifier:
                keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a383030303a3a2f33332d3333203d3e20323638333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fbc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:45:9b:97:c5:08:bb:1b:91:97:c8:75:38:6b:f1:fa:0d:73:
         d7:84:f5:f0:39:73:1d:f5:3c:38:be:ad:4d:62:70:03:1a:85:
         64:18:64:71:92:a3:d0:5a:bd:eb:64:fd:c3:ef:20:64:b0:f4:
         7a:9f:83:5b:55:3c:6d:db:90:47:44:c4:17:21:b7:5d:03:a9:
         1d:44:0b:3f:48:c6:45:b7:eb:5c:d6:6e:cd:39:7b:6b:b8:3e:
         23:aa:1a:7c:49:20:85:97:e8:62:43:04:9f:86:47:c5:fe:90:
         b1:9b:5a:76:ba:c9:9e:92:d4:15:93:d7:dc:e2:c0:d1:90:48:
         61:e5:3e:0a:94:db:1e:96:cc:40:2d:e7:d4:a3:47:cd:67:d2:
         69:e7:04:17:ea:a6:63:ba:a5:3f:7c:11:9b:43:e1:d8:9c:f2:
         d4:4e:1c:b1:d2:71:25:a2:7d:8f:7a:2a:b9:8e:ee:06:d8:31:
         fd:8a:72:eb:07:1d:0f:f2:34:ae:c5:96:eb:4a:b8:e8:86:ea:
         e2:4f:93:e5:56:91:74:bd:af:1e:7d:d1:bf:f2:91:d1:64:b5:
         d5:da:f7:e1:61:4d:7f:d3:da:0a:6a:47:36:3e:cb:2b:c1:50:
         8a:94:05:1e:97:96:7c:17:41:db:8a:b6:4c:cf:54:e8:5c:eb:
         29:59:46:20
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUL4OgQLu//v1xZ7v+JjQcvk/6LT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0MjkwRkM5MTMwNEI1QkY4MDk5MUJFQkEwNkY5MThD
NEZBRjVBRjAeFw0yMzA1MjIxOTE4NThaFw0yNDA1MjAxOTIzNThaMDMxMTAvBgNV
BAMTKDQwNThCMDM2NzdFOTkzNUI1NjUxNEE2RkFFMEUxOUJERkQyMTlEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfFmXJ7wj1RjeT+yEoGTrrnCk
GEU71LEoDXd0UBjGis/H21n4FHy8U1ezLf999SZSxuJ/DzTb1DMHRI1/17LKU7Pc
4Ubd60lIAk8apNz6R4KAND6Z5ldXPFupUtt6ICs+Fq3HLBKaGrSSeqcpuGjg/mDP
gfazc+xJmQgBpLUqnx1WXmas7wPChJ977HlwPG5RpJ1DlFsMtS4oUOJJPHRyjtI5
hPsiQkJIms90xzEltbVU+ZFHdGcYNo/SnWXdSk4ZIjTvcAbNo28xQ7y3rSYT3Vqd
6ytj9oQUa125PfVW6Dx0C+3vDHo2HhRFUq09mAMaQ9tY3fEIWlFJm52Coe1JAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQFiwNnfpk1tWUUpvrg4Zvf0hnYYwHwYDVR0j
BBgwFoAUCkKQ/JEwS1v4CZG+ugb5GMT69a8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDE3WjlMR2hEd1pyam5VTFMyZUs4TExDVnN3bXM1am1nWXNENkg2ZUJM
WmgvMC8wQTQyOTBGQzkxMzA0QjVCRjgwOTkxQkVCQTA2RjkxOEM0RkFGNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBBNDI5MEZDOTEzMDRCNUJG
ODA5OTFCRUJBMDZGOTE4QzRGQUY1QUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxN1o5TEdoRHdacmpuVUxTMmVLOExMQ1Zzd21zNWptZ1lzRDZINmVCTFpoLzAv
MzIzODMwMzQzYTM0NjY2MjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODMzMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygET7yAMA0GCSqGSIb3DQEBCwUA
A4IBAQAnRZuXxQi7G5GXyHU4a/H6DXPXhPXwOXMd9Tw4vq1NYnADGoVkGGRxkqPQ
Wr3rZP3D7yBksPR6n4NbVTxt25BHRMQXIbddA6kdRAs/SMZFt+tc1m7NOXtruD4j
qhp8SSCFl+hiQwSfhkfF/pCxm1p2usmektQVk9fc4sDRkEhh5T4KlNselsxALefU
o0fNZ9Jp5wQX6qZjuqU/fBGbQ+HYnPLUThyx0nElon2Peiq5ju4G2DH9inLrBx0P
8jSuxZbrSrjohuriT5PlVpF0va8efdG/8pHRZLXV2vfhYU1/09oKakc2PssrwVCK
lAUel5Z8F0HbirZMz1ToXOspWUYg
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:46:02 2025 by rpki-client