Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a343030303a3a2f34382d3438203d3e20323634343634.roa
File:                     323830343a323031383a343030303a3a2f34382d3438203d3e20323634343634.roa (raw, json)
Hash identifier:          zyc5flTVfxl7K8l9iXa/17Po1gRbT+Q15f75qshYEWc=
Subject key identifier:   C5:B9:C6:BB:9F:D7:48:E1:39:FB:8C:A7:FB:69:D9:19:E2:B6:F9:8C
Certificate issuer:       /CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
Certificate serial:       5FE9D519FA34E79B4F9F8BDDEBD36C07D1253CCA
Authority key identifier: 91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a343030303a3a2f34382d3438203d3e20323634343634.roa
Signing time:             Fri 15 Oct 2021 13:00:00 +0000
ROA not before:           Fri 15 Oct 2021 12:55:00 +0000
ROA not after:            Sat 15 Oct 2022 13:00:00 +0000
asID:                     264464
IP address blocks:        2804:2018:4000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e9:d5:19:fa:34:e7:9b:4f:9f:8b:dd:eb:d3:6c:07:d1:25:3c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
        Validity
            Not Before: Oct 15 12:55:00 2021 GMT
            Not After : Oct 15 13:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:e0:07:65:eb:65:fa:e9:a6:79:95:14:82:
                    58:fa:dd:10:39:92:bf:62:d2:aa:cd:12:5b:4a:1d:
                    39:f3:d1:39:ab:64:26:a7:fe:be:6e:66:f9:ad:06:
                    8e:41:c8:3d:f9:df:f5:ab:b6:fc:46:81:4b:7e:d0:
                    d6:af:8c:74:9f:5e:ed:c0:86:31:d8:83:42:6f:c7:
                    d3:a8:3d:4e:c2:dc:1c:7b:7b:ec:d9:c2:d1:cf:fe:
                    d8:d0:eb:b4:b1:66:a4:7c:42:5c:b6:20:f4:de:73:
                    97:1d:0a:ec:18:5f:08:bc:ed:a4:77:21:09:67:5d:
                    14:28:0e:3d:c2:d8:b1:21:a4:cb:0c:6e:16:42:70:
                    2c:25:ea:02:21:de:f7:84:11:d9:13:ce:cc:41:1e:
                    72:78:77:06:a9:0a:ab:81:51:35:5f:5a:78:0a:db:
                    04:f9:a6:17:6d:8a:a6:f8:02:71:58:13:ef:1c:64:
                    2c:1a:9c:e3:b8:df:6d:ea:ff:87:e1:04:2a:9a:f0:
                    85:18:7b:1d:01:9d:6a:c8:fd:0a:c1:1a:67:42:01:
                    48:64:b4:16:ac:bf:d5:2e:39:85:1b:46:b5:1d:bb:
                    46:27:e7:b9:e1:03:aa:03:a7:8d:97:9a:c2:24:14:
                    cc:20:48:bd:c2:3f:77:a6:c0:fe:88:1e:ab:97:c8:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B9:C6:BB:9F:D7:48:E1:39:FB:8C:A7:FB:69:D9:19:E2:B6:F9:8C
            X509v3 Authority Key Identifier:
                keyid:91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a343030303a3a2f34382d3438203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2018:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:07:af:57:ec:63:ce:af:f1:ed:3f:87:c2:82:c3:e2:5c:
         35:9f:a4:a1:02:2c:b9:ee:be:9a:3c:8b:7c:be:0f:16:6c:92:
         d2:8b:65:2d:55:7a:de:d2:fd:fb:0d:d4:aa:f8:0d:72:55:9e:
         53:2c:b2:02:7c:13:7b:3e:8a:1f:72:93:ff:da:9d:d5:eb:bf:
         f4:45:d4:6e:a4:61:e6:43:c5:db:fd:5e:6a:fb:1d:d3:5d:45:
         d0:0e:26:f8:0c:02:86:b8:a8:8a:84:c5:52:d2:b3:4c:57:f4:
         b3:11:14:33:fd:d4:87:ee:71:f7:1a:c6:9a:5d:06:ff:59:37:
         5b:4d:34:01:40:9b:02:94:2e:51:85:69:91:71:dc:d7:76:13:
         c3:81:74:d5:04:d7:88:3a:3b:62:31:42:50:c9:7f:68:4e:94:
         3c:f2:f6:d7:29:6e:af:f4:b3:51:88:09:47:fe:bc:81:38:55:
         f2:5c:44:30:ff:84:b4:97:c9:89:0c:e8:83:d6:60:c1:58:f0:
         f9:0a:17:f7:c1:55:66:5f:f3:10:d6:0e:85:a3:72:7e:e1:26:
         fa:f9:bb:2e:cc:1c:92:4f:c0:c6:5d:cc:a8:f7:96:3c:09:a5:
         24:eb:df:17:f2:d6:e4:b1:e6:75:ca:2e:77:09:33:f0:04:b1:
         01:54:ba:13
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUX+nVGfo055tPn4vd69NsB9ElPMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFCMTgwOUEzMUY3REQ0MTI5MkFDRkNEMjQwNkQ3ODhB
NjY4MUI4MjAeFw0yMTEwMTUxMjU1MDBaFw0yMjEwMTUxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ5N0UwMDc2NUVCNjVGQUU5
QTY3OTk1MTQ4MjU4RkFERDEwMzk5MkJGNjJEMkFBQ0QxMjVCNEExRDM5RjNEMTM5
QUI2NDI2QTdGRUJFNkU2NkY5QUQwNjhFNDFDODNERjlERkY1QUJCNkZDNDY4MTRC
N0VEMEQ2QUY4Qzc0OUY1RUVEQzA4NjMxRDg4MzQyNkZDN0QzQTgzRDRFQzJEQzFD
N0I3QkVDRDlDMkQxQ0ZGRUQ4RDBFQkI0QjE2NkE0N0M0MjVDQjYyMEY0REU3Mzk3
MUQwQUVDMTg1RjA4QkNFREE0NzcyMTA5Njc1RDE0MjgwRTNEQzJEOEIxMjFBNENC
MEM2RTE2NDI3MDJDMjVFQTAyMjFERUY3ODQxMUQ5MTNDRUNDNDExRTcyNzg3NzA2
QTkwQUFCODE1MTM1NUY1QTc4MEFEQjA0RjlBNjE3NkQ4QUE2RjgwMjcxNTgxM0VG
MUM2NDJDMUE5Q0UzQjhERjZERUFGRjg3RTEwNDJBOUFGMDg1MTg3QjFEMDE5RDZB
QzhGRDBBQzExQTY3NDIwMTQ4NjRCNDE2QUNCRkQ1MkUzOTg1MUI0NkI1MURCQjQ2
MjdFN0I5RTEwM0FBMDNBNzhEOTc5QUMyMjQxNENDMjA0OEJEQzIzRjc3QTZDMEZF
ODgxRUFCOTdDODJGRkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArZfgB2XrZfrppnmVFIJY+t0QOZK/YtKqzRJbSh0589E5q2Qmp/6+
bmb5rQaOQcg9+d/1q7b8RoFLftDWr4x0n17twIYx2INCb8fTqD1Owtwce3vs2cLR
z/7Y0Ou0sWakfEJctiD03nOXHQrsGF8IvO2kdyEJZ10UKA49wtixIaTLDG4WQnAs
JeoCId73hBHZE87MQR5yeHcGqQqrgVE1X1p4CtsE+aYXbYqm+AJxWBPvHGQsGpzj
uN9t6v+H4QQqmvCFGHsdAZ1qyP0KwRpnQgFIZLQWrL/VLjmFG0a1HbtGJ+e54QOq
A6eNl5rCJBTMIEi9wj93psD+iB6rl8gv+wIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FMW5xruf10jhOfuMp/tp2RnitvmMMB8GA1UdIwQYMBaAFJGxgJox991BKSrPzSQG
14imaBuCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RtQll0R0Y4S2hES3JK
d3Y5OXF6RUhjd1V5OVRxNml5Q2tEYmJ0MVpoNExtLzAvOTFCMTgwOUEzMUY3REQ0
MTI5MkFDRkNEMjQwNkQ3ODhBNjY4MUI4Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MUIxODA5QTMxRjdERDQxMjkyQUNGQ0QyNDA2RDc4OEE2Njgx
QjgyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EbUJZdEdGOEtoREtySnd2OTlx
ekVIY3dVeTlUcTZpeUNrRGJidDFaaDRMbS8wLzMyMzgzMDM0M2EzMjMwMzEzODNh
MzQzMDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzQzNDM2MzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAoBCAYQAAwDQYJKoZIhvcNAQELBQADggEBAFsBB69X7GPOr/HtP4fC
gsPiXDWfpKECLLnuvpo8i3y+DxZsktKLZS1Vet7S/fsN1Kr4DXJVnlMssgJ8E3s+
ih9yk//andXrv/RF1G6kYeZDxdv9Xmr7HdNdRdAOJvgMAoa4qIqExVLSs0xX9LMR
FDP91IfucfcaxppdBv9ZN1tNNAFAmwKULlGFaZFx3Nd2E8OBdNUE14g6O2IxQlDJ
f2hOlDzy9tcpbq/0s1GICUf+vIE4VfJcRDD/hLSXyYkM6IPWYMFY8PkKF/fBVWZf
8xDWDoWjcn7hJvr5uy7MHJJPwMZdzKj3ljwJpSTr3xfy1uSx5nXKLncJM/AEsQFU
uhM=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:40 2025 by rpki-client