Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/323830343a373333303a633030303a3a2f33342d3334203d3e20323730393031.roa
File:                     323830343a373333303a633030303a3a2f33342d3334203d3e20323730393031.roa (raw, json)
Hash identifier:          aFG2rxOqGmXwVjB614wg506U+Pn8JkbWBx0MJJ9bqmY=
Subject key identifier:   FF:EA:37:11:36:43:76:76:C1:D9:F5:84:93:9A:15:D2:CF:07:04:83
Certificate issuer:       /CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
Certificate serial:       4E42B55CC08331370B493F703CD5711EE2D154A0
Authority key identifier: 5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/323830343a373333303a633030303a3a2f33342d3334203d3e20323730393031.roa
Signing time:             Mon 22 May 2023 18:59:21 +0000
ROA not before:           Mon 22 May 2023 18:54:21 +0000
ROA not after:            Mon 20 May 2024 18:59:21 +0000
asID:                     270901
IP address blocks:        2804:7330:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:42:b5:5c:c0:83:31:37:0b:49:3f:70:3c:d5:71:1e:e2:d1:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
        Validity
            Not Before: May 22 18:54:21 2023 GMT
            Not After : May 20 18:59:21 2024 GMT
        Subject: CN=FFEA371136437676C1D9F584939A15D2CF070483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:30:be:4f:39:88:7d:d7:a1:08:7d:f5:6b:
                    fa:e9:ea:31:5f:0b:fe:ef:c9:b7:d7:31:fb:31:b3:
                    46:3c:91:20:91:9e:bc:78:95:14:43:5e:c2:40:8b:
                    43:31:c0:97:c0:02:e1:54:94:a4:55:57:ec:bd:bb:
                    6c:87:8f:a9:20:23:16:b2:2f:0c:6c:35:c4:bf:f5:
                    7c:8a:dc:7a:45:36:b4:5c:c3:6f:ba:f4:81:d7:d1:
                    d3:29:49:72:76:59:53:78:70:0f:99:33:b4:a3:20:
                    5d:2a:38:0c:2c:33:1a:c9:31:5c:7b:6b:bb:e2:3c:
                    e0:8d:22:72:48:a2:c0:c2:a1:28:5b:40:77:47:2b:
                    b1:2c:90:d5:80:58:1d:4e:3d:bb:2a:c9:de:6e:62:
                    60:24:84:33:78:f2:48:88:a9:50:72:06:aa:6a:79:
                    09:f8:28:f6:32:63:42:56:59:53:8f:c1:16:eb:f3:
                    e1:11:39:e2:99:fa:ee:93:b6:2a:f1:fa:f9:f8:7d:
                    a2:24:30:0d:f8:06:31:38:70:bb:c3:c1:5e:d0:a4:
                    2e:d5:d3:e1:92:9d:66:f2:70:0f:da:b8:30:f0:a0:
                    2e:45:fd:a3:24:95:02:da:26:70:a4:0f:6b:0b:0a:
                    67:70:eb:e8:75:bf:53:2f:80:19:ff:57:61:64:ca:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EA:37:11:36:43:76:76:C1:D9:F5:84:93:9A:15:D2:CF:07:04:83
            X509v3 Authority Key Identifier:
                keyid:5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/323830343a373333303a633030303a3a2f33342d3334203d3e20323730393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7330:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:48:95:27:e3:28:94:63:ea:c4:bb:8f:b6:a1:22:c1:11:
         b9:3e:08:c5:f2:1d:a3:df:b3:13:1a:d0:a2:a3:7a:21:e9:69:
         78:e5:11:e1:30:fb:3d:85:e5:7e:81:02:38:e0:21:b4:ee:84:
         00:c1:2b:87:c7:82:a2:a3:79:d6:06:93:86:4a:36:c8:a0:93:
         2e:5e:18:22:2d:d3:dd:33:23:50:b2:61:52:50:58:54:f6:76:
         01:f8:90:d2:e4:fb:4a:55:96:bf:82:a6:58:74:11:0c:81:78:
         9d:8b:25:74:7f:24:ef:d5:99:6c:7a:5b:14:d2:fc:dc:3f:13:
         ee:a2:05:ee:26:2c:1c:02:46:77:05:5b:01:fc:cf:48:8e:59:
         16:21:c1:ef:96:59:10:50:df:ae:82:17:f9:10:d6:68:e1:c5:
         6f:54:d3:f4:6f:07:27:b0:9c:62:c2:3f:a1:d6:b5:9b:33:f5:
         ac:e1:76:85:9c:3f:54:22:84:47:53:40:31:a6:90:82:89:f9:
         3c:b3:fc:73:d1:3e:7c:e6:56:0e:84:66:23:72:9b:ff:ef:ea:
         35:05:b8:64:74:a4:64:5b:f4:b9:5e:8f:b3:57:90:a2:11:db:
         ce:9d:fc:fa:72:cc:82:e3:f7:09:b7:4c:77:5e:0c:12:87:ed:
         54:3a:1d:b9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTkK1XMCDMTcLST9wPNVxHuLRVKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZFQURDNjY5N0MzM0ZEQzAxRTEyNzdCMkQ5QzMxQ0Yx
QjI3QjU2NDAeFw0yMzA1MjIxODU0MjFaFw0yNDA1MjAxODU5MjFaMDMxMTAvBgNV
BAMTKEZGRUEzNzExMzY0Mzc2NzZDMUQ5RjU4NDkzOUExNUQyQ0YwNzA0ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DDC+TzmIfdehCH31a/rp6jFf
C/7vybfXMfsxs0Y8kSCRnrx4lRRDXsJAi0MxwJfAAuFUlKRVV+y9u2yHj6kgIxay
LwxsNcS/9XyK3HpFNrRcw2+69IHX0dMpSXJ2WVN4cA+ZM7SjIF0qOAwsMxrJMVx7
a7viPOCNInJIosDCoShbQHdHK7EskNWAWB1OPbsqyd5uYmAkhDN48kiIqVByBqpq
eQn4KPYyY0JWWVOPwRbr8+EROeKZ+u6Ttirx+vn4faIkMA34BjE4cLvDwV7QpC7V
0+GSnWbycA/auDDwoC5F/aMklQLaJnCkD2sLCmdw6+h1v1MvgBn/V2Fkyno1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/+o3ETZDdnbB2fWEk5oV0s8HBIMwHwYDVR0j
BBgwFoAUX+rcZpfDP9wB4Sd7LZwxzxsntWQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZMQVh5dU54QVRydlRwWHZqaXJWTFpOampSRHZlOGd4b0tSNmdKS01S
YW8vMC81RkVBREM2Njk3QzMzRkRDMDFFMTI3N0IyRDlDMzFDRjFCMjdCNTY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGRUFEQzY2OTdDMzNGREMw
MUUxMjc3QjJEOUMzMUNGMUIyN0I1NjQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGTEFYeXVOeEFUcnZUcFh2amlyVkxaTmpqUkR2ZThneG9LUjZnSktNUmFvLzAv
MzIzODMwMzQzYTM3MzMzMzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEczDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCC9EiVJ+MolGPqxLuPtqEiwRG5PgjF8h2j37MTGtCio3oh6Wl45RHhMPs9
heV+gQI44CG07oQAwSuHx4Kio3nWBpOGSjbIoJMuXhgiLdPdMyNQsmFSUFhU9nYB
+JDS5PtKVZa/gqZYdBEMgXidiyV0fyTv1ZlselsU0vzcPxPuogXuJiwcAkZ3BVsB
/M9IjlkWIcHvllkQUN+ughf5ENZo4cVvVNP0bwcnsJxiwj+h1rWbM/Ws4XaFnD9U
IoRHU0AxppCCifk8s/xz0T585lYOhGYjcpv/7+o1BbhkdKRkW/S5Xo+zV5CiEdvO
nfz6csyC4/cJt0x3XgwSh+1UOh25
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:41 2025 by rpki-client