Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a3a2f33322d3438203d3e20323636333538.roa
File:                     323830343a333639383a3a2f33322d3438203d3e20323636333538.roa (raw, json)
Hash identifier:          uwooVf+Abgym8QzhKAiA5rB49uT0DOVlCJnAj5DWYJs=
Subject key identifier:   09:4C:86:D4:EA:20:E6:ED:F2:13:43:04:10:9E:19:5B:3C:38:08:04
Certificate issuer:       /CN=689A0904150851FE4D3E06A04569C2EE6143E398
Certificate serial:       4DEBCE6801F0F056A3B4F38FBF4E9C27A71F11DD
Authority key identifier: 68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a3a2f33322d3438203d3e20323636333538.roa
Signing time:             Tue 07 Nov 2023 14:22:36 +0000
ROA not before:           Tue 07 Nov 2023 14:17:36 +0000
ROA not after:            Tue 05 Nov 2024 14:22:36 +0000
asID:                     266358
IP address blocks:        2804:3698::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:eb:ce:68:01:f0:f0:56:a3:b4:f3:8f:bf:4e:9c:27:a7:1f:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689A0904150851FE4D3E06A04569C2EE6143E398
        Validity
            Not Before: Nov  7 14:17:36 2023 GMT
            Not After : Nov  5 14:22:36 2024 GMT
        Subject: CN=094C86D4EA20E6EDF2134304109E195B3C380804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:fd:c3:9a:eb:ab:6a:02:32:4e:3f:46:cf:
                    aa:db:b8:b5:1d:a5:0c:d5:b6:ca:2f:1e:60:54:15:
                    7c:cc:2f:aa:aa:eb:97:c7:8e:a2:21:e6:f3:09:47:
                    d8:65:f9:5b:17:2e:0e:70:a0:d7:12:d6:ce:c7:05:
                    c4:ec:ae:ce:02:28:0f:c0:77:cf:f3:6f:59:d5:1c:
                    a8:99:12:f9:df:8a:b7:8b:3e:83:69:59:ad:23:42:
                    0f:1e:e1:e4:0c:48:fd:5f:47:f9:9d:be:48:34:30:
                    eb:f1:05:27:2b:3b:11:bd:51:3e:70:54:69:f0:78:
                    78:53:ee:20:6f:67:65:36:74:8d:10:ab:4c:96:8c:
                    b3:25:83:43:21:80:37:73:a4:e9:1e:14:de:ab:d1:
                    a0:81:3a:44:60:a0:cf:b4:d6:8f:4b:2c:51:66:e3:
                    4b:8b:86:c5:73:43:de:c5:ea:1a:14:29:ef:bb:39:
                    ce:ec:12:6d:2e:8b:4a:14:c4:91:45:96:42:9f:1f:
                    a9:a8:ed:11:bf:5a:65:11:63:6b:3a:92:ba:3b:33:
                    7f:3f:39:32:d4:a5:d9:a6:49:87:70:95:e2:92:72:
                    6e:4c:e9:56:53:af:b0:a8:12:11:a2:73:d4:32:7c:
                    2b:b8:34:29:8f:ad:1a:34:92:ab:6c:0c:e5:8b:f1:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4C:86:D4:EA:20:E6:ED:F2:13:43:04:10:9E:19:5B:3C:38:08:04
            X509v3 Authority Key Identifier:
                keyid:68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/689A0904150851FE4D3E06A04569C2EE6143E398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a3a2f33322d3438203d3e20323636333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3698::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:32:43:2e:f3:db:0e:aa:1d:99:e5:65:f6:c4:c2:ed:c3:
         f7:12:29:f0:f9:d1:7d:04:36:3d:e4:85:ef:3a:f9:71:10:17:
         7c:11:b8:88:d0:2a:87:d4:e4:bf:1e:77:4e:3d:18:f9:9a:c4:
         39:1c:6c:d2:fd:05:80:6d:62:c3:1f:98:8d:be:95:8f:a3:81:
         1a:4c:d6:d7:54:53:f0:56:36:e1:c5:d8:e1:24:b4:ca:e3:c6:
         25:36:ff:65:79:54:38:c8:aa:97:d8:14:dc:74:07:0a:72:18:
         5d:82:56:78:1f:36:1e:4b:c9:f6:34:06:0a:62:51:51:73:25:
         16:58:ca:6a:23:19:da:e0:ca:51:a6:08:f8:71:cb:34:c2:f9:
         b2:ef:ef:37:22:f3:2a:dc:52:94:0b:c9:eb:3d:64:18:c1:56:
         95:dc:6c:a4:0d:02:de:87:6a:9b:76:1d:a6:44:04:7b:d6:37:
         08:de:d7:ac:4f:36:47:f6:bb:6a:a6:b1:3f:38:af:f1:c8:76:
         dd:1b:99:d5:8a:1c:49:7e:b7:f9:44:dd:56:47:e0:b6:52:88:
         c7:fb:b9:6c:a7:83:9c:50:cc:f5:fe:b9:40:17:7b:5d:a5:5c:
         29:68:fa:7d:e5:f7:cc:70:e3:54:c8:bc:c3:41:d4:d8:44:0b:
         65:4a:a6:0c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTevOaAHw8FajtPOPv06cJ6cfEd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg5QTA5MDQxNTA4NTFGRTREM0UwNkEwNDU2OUMyRUU2
MTQzRTM5ODAeFw0yMzExMDcxNDE3MzZaFw0yNDExMDUxNDIyMzZaMDMxMTAvBgNV
BAMTKDA5NEM4NkQ0RUEyMEU2RURGMjEzNDMwNDEwOUUxOTVCM0MzODA4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgf3DmuuragIyTj9Gz6rbuLUd
pQzVtsovHmBUFXzML6qq65fHjqIh5vMJR9hl+VsXLg5woNcS1s7HBcTsrs4CKA/A
d8/zb1nVHKiZEvnfireLPoNpWa0jQg8e4eQMSP1fR/mdvkg0MOvxBScrOxG9UT5w
VGnweHhT7iBvZ2U2dI0Qq0yWjLMlg0MhgDdzpOkeFN6r0aCBOkRgoM+01o9LLFFm
40uLhsVzQ97F6hoUKe+7Oc7sEm0ui0oUxJFFlkKfH6mo7RG/WmURY2s6kro7M38/
OTLUpdmmSYdwleKScm5M6VZTr7CoEhGic9QyfCu4NCmPrRo0kqtsDOWL8ZcPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUCUyG1Oog5u3yE0MEEJ4ZWzw4CAQwHwYDVR0j
BBgwFoAUaJoJBBUIUf5NPgagRWnC7mFD45gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRThnd0dRbVZzeUdNcUxYZk5oQUNabm0xa3BuVFY3UEhSVXlzNlZEZ0Y0
dDYvMC82ODlBMDkwNDE1MDg1MUZFNEQzRTA2QTA0NTY5QzJFRTYxNDNFMzk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY4OUEwOTA0MTUwODUxRkU0
RDNFMDZBMDQ1NjlDMkVFNjE0M0UzOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U4Z3dHUW1Wc3lHTXFMWGZOaEFDWm5tMWtwblRWN1BIUlV5czZWRGdGNHQ2LzAv
MzIzODMwMzQzYTMzMzYzOTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzMzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ2mDANBgkqhkiG9w0BAQsFAAOCAQEAHxEyQy7z
2w6qHZnlZfbEwu3D9xIp8PnRfQQ2PeSF7zr5cRAXfBG4iNAqh9Tkvx53Tj0Y+ZrE
ORxs0v0FgG1iwx+Yjb6Vj6OBGkzW11RT8FY24cXY4SS0yuPGJTb/ZXlUOMiql9gU
3HQHCnIYXYJWeB82HkvJ9jQGCmJRUXMlFljKaiMZ2uDKUaYI+HHLNML5su/vNyLz
KtxSlAvJ6z1kGMFWldxspA0C3odqm3YdpkQEe9Y3CN7XrE82R/a7aqaxPziv8ch2
3RuZ1YocSX63+UTdVkfgtlKIx/u5bKeDnFDM9f65QBd7XaVcKWj6feX3zHDjVMi8
w0HU2EQLZUqmDA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:02 2025 by rpki-client