Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/323830343a313863343a3a2f33322d3438203d3e203533303439.roa
File:                     323830343a313863343a3a2f33322d3438203d3e203533303439.roa (raw, json)
Hash identifier:          nYTlyy22oe7Qb5CHRj/uMyckH8wrJcOgiOF7n62gItk=
Subject key identifier:   E4:0E:3B:C6:58:A2:BB:78:C2:17:E6:65:D6:C6:73:BD:32:34:9C:12
Certificate issuer:       /CN=52BE1FF4DCE390617E93DF50EEC88C54A818E8B7
Certificate serial:       1BEF817A0CCC32BC7E21DDAD4391D547C6BC5D76
Authority key identifier: 52:BE:1F:F4:DC:E3:90:61:7E:93:DF:50:EE:C8:8C:54:A8:18:E8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52BE1FF4DCE390617E93DF50EEC88C54A818E8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/323830343a313863343a3a2f33322d3438203d3e203533303439.roa
Signing time:             Fri 26 Jul 2024 17:30:03 +0000
ROA not before:           Fri 26 Jul 2024 17:25:03 +0000
ROA not after:            Fri 25 Jul 2025 17:30:03 +0000
asID:                     53049
IP address blocks:        2804:18c4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ef:81:7a:0c:cc:32:bc:7e:21:dd:ad:43:91:d5:47:c6:bc:5d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52BE1FF4DCE390617E93DF50EEC88C54A818E8B7
        Validity
            Not Before: Jul 26 17:25:03 2024 GMT
            Not After : Jul 25 17:30:03 2025 GMT
        Subject: CN=E40E3BC658A2BB78C217E665D6C673BD32349C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:0f:b9:89:66:e1:72:e1:59:59:4b:e0:06:
                    49:29:03:60:01:5a:67:d7:c4:9f:c2:b0:04:6a:eb:
                    f4:3b:31:d2:2f:a3:8f:1f:ac:c4:6a:09:00:b5:19:
                    ce:08:d3:a9:7c:21:a9:4f:92:57:09:c8:c0:a0:40:
                    ce:dc:a2:eb:5e:23:e8:c2:dd:55:69:62:b4:85:c6:
                    c0:70:21:82:d3:ed:19:52:51:e8:58:d5:27:07:a2:
                    2d:7e:25:6b:15:37:36:ba:1c:3f:d4:55:90:f4:e5:
                    08:a9:79:6f:c0:6b:0b:a6:d9:34:cc:32:5c:e9:de:
                    ff:7c:72:80:d5:ef:8a:6b:1d:aa:2f:6a:c4:1f:0d:
                    52:11:0c:53:70:89:6c:d5:f2:b5:8b:bb:8a:d5:93:
                    52:92:33:ac:10:7c:fd:df:af:50:56:f2:6a:1c:31:
                    b7:61:a2:ce:f7:6a:18:d1:69:df:fd:9b:23:9a:35:
                    c7:05:f8:f1:aa:03:95:63:22:e7:2b:e7:04:e5:00:
                    19:ed:fe:23:5a:13:6c:b4:1e:46:88:6c:b1:d5:e8:
                    3a:3b:22:05:61:7e:9f:88:ca:a5:63:fa:8a:1d:9e:
                    2a:c5:71:a9:d3:40:d5:e8:f8:fd:85:ee:d6:1d:d8:
                    36:fe:d0:61:c9:cf:2d:ed:32:b7:05:a7:12:a1:12:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0E:3B:C6:58:A2:BB:78:C2:17:E6:65:D6:C6:73:BD:32:34:9C:12
            X509v3 Authority Key Identifier:
                keyid:52:BE:1F:F4:DC:E3:90:61:7E:93:DF:50:EE:C8:8C:54:A8:18:E8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/52BE1FF4DCE390617E93DF50EEC88C54A818E8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52BE1FF4DCE390617E93DF50EEC88C54A818E8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/323830343a313863343a3a2f33322d3438203d3e203533303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:4d:49:c0:0f:39:fc:70:5f:25:68:dd:b0:56:5f:e5:7e:59:
         8c:95:dc:f7:b7:8a:30:ad:80:c9:40:53:d2:da:3c:1d:83:80:
         09:f5:a2:ee:72:a3:9e:fc:6d:25:e3:c3:68:0d:6e:db:6c:76:
         64:3d:59:f8:e3:25:fa:f4:27:c4:36:53:12:b5:74:05:26:fd:
         ff:fd:73:83:e2:e7:23:47:2f:eb:64:7d:15:c7:ee:27:27:ba:
         9c:55:0c:86:45:f5:dc:00:aa:e4:6f:08:b3:8e:b8:f6:f6:39:
         1b:ca:55:20:05:38:7f:27:c2:72:a1:e5:d5:cb:58:43:04:68:
         89:d1:89:16:68:12:31:be:67:d5:ac:c6:3d:0b:72:ee:97:04:
         2e:c7:0d:a0:aa:2e:04:02:a2:37:c2:dd:05:57:58:5b:db:22:
         6b:fb:a9:de:40:c0:22:85:18:9f:80:6b:4d:20:07:6b:f5:43:
         c1:4d:f7:23:b3:49:ba:49:8f:f0:d3:1d:f4:9b:d8:2d:66:b2:
         ae:69:af:22:91:b0:fe:00:6a:a5:2e:46:bd:e7:3a:b4:b4:1d:
         09:b5:15:5a:67:89:1f:c0:b5:a7:de:a4:34:59:de:db:63:bc:
         6a:cc:d8:40:54:c0:1d:f8:e2:f1:c3:f5:76:f7:34:52:e5:b1:
         aa:42:1d:2e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUG++BegzMMrx+Id2tQ5HVR8a8XXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJCRTFGRjREQ0UzOTA2MTdFOTNERjUwRUVDODhDNTRB
ODE4RThCNzAeFw0yNDA3MjYxNzI1MDNaFw0yNTA3MjUxNzMwMDNaMDMxMTAvBgNV
BAMTKEU0MEUzQkM2NThBMkJCNzhDMjE3RTY2NUQ2QzY3M0JEMzIzNDlDMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzA+5iWbhcuFZWUvgBkkpA2AB
WmfXxJ/CsARq6/Q7MdIvo48frMRqCQC1Gc4I06l8IalPklcJyMCgQM7couteI+jC
3VVpYrSFxsBwIYLT7RlSUehY1ScHoi1+JWsVNza6HD/UVZD05QipeW/Aawum2TTM
Mlzp3v98coDV74prHaovasQfDVIRDFNwiWzV8rWLu4rVk1KSM6wQfP3fr1BW8moc
Mbdhos73ahjRad/9myOaNccF+PGqA5VjIucr5wTlABnt/iNaE2y0HkaIbLHV6Do7
IgVhfp+IyqVj+oodnirFcanTQNXo+P2F7tYd2Db+0GHJzy3tMrcFpxKhEmMRAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU5A47xliiu3jCF+Zl1sZzvTI0nBIwHwYDVR0j
BBgwFoAUUr4f9NzjkGF+k99Q7siMVKgY6LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlidUZTZFV2akphYnRWRHFjb2pXV1FVQ0tYTlJGNmpuU2ZNTUZxQ0d6
TG0vMC81MkJFMUZGNERDRTM5MDYxN0U5M0RGNTBFRUM4OEM1NEE4MThFOEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyQkUxRkY0RENFMzkwNjE3
RTkzREY1MEVFQzg4QzU0QTgxOEU4QjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpYnVGU2RVdmpKYWJ0VkRxY29qV1dRVUNLWE5SRjZqblNmTU1GcUNHekxtLzAv
MzIzODMwMzQzYTMxMzg2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMw
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGMQwDQYJKoZIhvcNAQELBQADggEBAKNNScAPOfxw
XyVo3bBWX+V+WYyV3Pe3ijCtgMlAU9LaPB2DgAn1ou5yo578bSXjw2gNbttsdmQ9
WfjjJfr0J8Q2UxK1dAUm/f/9c4Pi5yNHL+tkfRXH7icnupxVDIZF9dwAquRvCLOO
uPb2ORvKVSAFOH8nwnKh5dXLWEMEaInRiRZoEjG+Z9Wsxj0Lcu6XBC7HDaCqLgQC
ojfC3QVXWFvbImv7qd5AwCKFGJ+Aa00gB2v1Q8FN9yOzSbpJj/DTHfSb2C1msq5p
ryKRsP4AaqUuRr3nOrS0HQm1FVpniR/AtafepDRZ3ttjvGrM2EBUwB344vHD9Xb3
NFLlsapCHS4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:28:18 2025 by rpki-client