Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/323830343a316565343a3a2f33322d3332203d3e20323634343532.roa
File:                     323830343a316565343a3a2f33322d3332203d3e20323634343532.roa (raw, json)
Hash identifier:          WLIHAde6VxF4s3Qj9HvOaQ/jiGWe2MhYEQiM/xy6dC8=
Subject key identifier:   4D:90:5D:DB:5C:A6:AE:E2:C5:2C:37:8E:05:3F:EF:F9:79:E4:FC:44
Certificate issuer:       /CN=5C955B38ED01E8D644F0AFE813D96DC3D299E919
Certificate serial:       0AD9D7BF2C66DD49E74A69F4B9F1C4D84E49C280
Authority key identifier: 5C:95:5B:38:ED:01:E8:D6:44:F0:AF:E8:13:D9:6D:C3:D2:99:E9:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C955B38ED01E8D644F0AFE813D96DC3D299E919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/323830343a316565343a3a2f33322d3332203d3e20323634343532.roa
Signing time:             Tue 06 Jun 2023 14:07:38 +0000
ROA not before:           Tue 06 Jun 2023 14:02:38 +0000
ROA not after:            Tue 04 Jun 2024 14:07:38 +0000
asID:                     264452
IP address blocks:        2804:1ee4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d9:d7:bf:2c:66:dd:49:e7:4a:69:f4:b9:f1:c4:d8:4e:49:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C955B38ED01E8D644F0AFE813D96DC3D299E919
        Validity
            Not Before: Jun  6 14:02:38 2023 GMT
            Not After : Jun  4 14:07:38 2024 GMT
        Subject: CN=4D905DDB5CA6AEE2C52C378E053FEFF979E4FC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:1b:01:38:cb:42:af:a7:6a:d6:3f:bf:85:
                    b9:fb:49:33:d7:0e:e3:27:3b:25:e7:99:d3:e0:0e:
                    bf:c1:8b:86:2b:1a:b3:ba:bd:03:7c:5c:9f:35:d1:
                    95:5c:b3:88:d4:f5:1f:66:49:d1:2a:98:0a:cc:d5:
                    ba:37:b2:0a:44:8f:f5:c0:f2:96:5b:e0:6f:10:10:
                    6a:46:b3:c8:a7:05:0c:18:59:8e:b7:8a:c5:95:32:
                    4c:e5:4a:f1:bf:d2:39:98:3b:cf:3a:e9:1a:0f:7f:
                    23:47:3a:57:c5:1f:4b:fb:7a:2f:20:7b:76:32:35:
                    22:4b:ed:8b:3b:a4:05:75:22:22:12:bc:6c:98:87:
                    8a:b1:5d:ae:d0:7c:38:46:5c:60:21:64:b8:97:7c:
                    44:8b:b5:0b:20:d1:eb:24:b1:a5:f3:b4:f4:2a:b5:
                    49:06:27:3b:50:28:63:ce:9a:ff:66:8c:6c:ce:9c:
                    f6:24:37:2d:47:c0:d7:43:77:95:df:e4:a7:14:59:
                    8d:ba:1c:4c:3a:a0:eb:74:38:8d:c3:46:c8:fa:91:
                    c0:d1:cc:e3:0d:9a:9c:70:bb:c7:e0:43:05:a4:69:
                    9f:e4:64:3e:e6:0d:11:ae:a1:0e:a8:2c:ab:7b:93:
                    fa:6e:9d:97:92:a0:e1:3e:67:8d:96:0b:25:ab:b0:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:90:5D:DB:5C:A6:AE:E2:C5:2C:37:8E:05:3F:EF:F9:79:E4:FC:44
            X509v3 Authority Key Identifier:
                keyid:5C:95:5B:38:ED:01:E8:D6:44:F0:AF:E8:13:D9:6D:C3:D2:99:E9:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/5C955B38ED01E8D644F0AFE813D96DC3D299E919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C955B38ED01E8D644F0AFE813D96DC3D299E919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2CBnTUntuGSFT9nuq8yKQCUSw686ir4gUfGccLT6fo/0/323830343a316565343a3a2f33322d3332203d3e20323634343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ee4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:3e:0f:15:ac:16:35:3b:24:10:39:c0:57:3f:20:4e:6f:
         6a:b1:e7:e9:5d:28:eb:fa:d4:0b:ad:3a:0f:9b:36:50:49:2d:
         eb:b3:7a:c9:6a:44:84:52:e0:bc:27:dc:87:7b:1d:14:66:c8:
         50:e0:4b:fa:32:c1:11:f9:d5:a3:7e:6e:dd:20:5e:cc:6c:7c:
         a4:68:30:d8:8a:13:8e:7c:c5:79:bf:43:4d:1b:0f:06:e7:d2:
         c4:60:9e:40:b8:e2:7f:27:f2:ee:92:e7:4d:1f:47:a6:34:9a:
         83:9a:bc:61:eb:51:07:f2:0b:f3:8b:71:37:ce:bd:1f:20:52:
         8a:56:ba:f4:bd:37:42:21:a0:03:ee:bc:ca:ba:e8:78:61:ae:
         cc:06:9e:a4:be:b2:9d:31:29:d5:4b:35:14:b4:33:ff:67:49:
         75:b5:af:55:62:68:dc:03:8d:17:c0:bb:66:c2:83:67:a5:b0:
         7e:58:ca:b2:00:ec:20:3f:10:c8:aa:fb:49:1b:a8:41:1c:4c:
         91:04:75:84:e1:29:f9:d7:db:4d:83:86:c6:e9:35:09:ef:1f:
         20:88:a7:99:f9:a2:63:a1:28:2a:e4:3e:5c:a6:e8:cb:7f:bf:
         3d:3e:e5:af:5b:d3:72:0c:58:0a:7f:e1:ad:7c:a9:b3:22:a3:
         57:f8:8a:85
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCtnXvyxm3UnnSmn0ufHE2E5JwoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5NTVCMzhFRDAxRThENjQ0RjBBRkU4MTNEOTZEQzNE
Mjk5RTkxOTAeFw0yMzA2MDYxNDAyMzhaFw0yNDA2MDQxNDA3MzhaMDMxMTAvBgNV
BAMTKDREOTA1RERCNUNBNkFFRTJDNTJDMzc4RTA1M0ZFRkY5NzlFNEZDNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNhsBOMtCr6dq1j+/hbn7STPX
DuMnOyXnmdPgDr/Bi4YrGrO6vQN8XJ810ZVcs4jU9R9mSdEqmArM1bo3sgpEj/XA
8pZb4G8QEGpGs8inBQwYWY63isWVMkzlSvG/0jmYO8866RoPfyNHOlfFH0v7ei8g
e3YyNSJL7Ys7pAV1IiISvGyYh4qxXa7QfDhGXGAhZLiXfESLtQsg0esksaXztPQq
tUkGJztQKGPOmv9mjGzOnPYkNy1HwNdDd5Xf5KcUWY26HEw6oOt0OI3DRsj6kcDR
zOMNmpxwu8fgQwWkaZ/kZD7mDRGuoQ6oLKt7k/punZeSoOE+Z42WCyWrsJIFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUTZBd21ymruLFLDeOBT/v+Xnk/EQwHwYDVR0j
BBgwFoAUXJVbOO0B6NZE8K/oE9ltw9KZ6RkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9EMkNCblRVbnR1R1NGVDludXE4eUtRQ1VTdzY4NmlyNGdVZkdjY0xUNmZv
LzAvNUM5NTVCMzhFRDAxRThENjQ0RjBBRkU4MTNEOTZEQzNEMjk5RTkxOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Qzk1NUIzOEVEMDFFOEQ2NDRG
MEFGRTgxM0Q5NkRDM0QyOTlFOTE5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E
MkNCblRVbnR1R1NGVDludXE4eUtRQ1VTdzY4NmlyNGdVZkdjY0xUNmZvLzAvMzIz
ODMwMzQzYTMxNjU2NTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0MzQz
NTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQe5DANBgkqhkiG9w0BAQsFAAOCAQEAe8s+DxWsFjU7
JBA5wFc/IE5varHn6V0o6/rUC606D5s2UEkt67N6yWpEhFLgvCfch3sdFGbIUOBL
+jLBEfnVo35u3SBezGx8pGgw2IoTjnzFeb9DTRsPBufSxGCeQLjifyfy7pLnTR9H
pjSag5q8YetRB/IL84txN869HyBSila69L03QiGgA+68yrroeGGuzAaepL6ynTEp
1Us1FLQz/2dJdbWvVWJo3AONF8C7ZsKDZ6WwfljKsgDsID8QyKr7SRuoQRxMkQR1
hOEp+dfbTYOGxuk1Ce8fIIinmfmiY6EoKuQ+XKboy3+/PT7lr1vTcgxYCn/hrXyp
syKjV/iKhQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:01 2025 by rpki-client