Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/323830343a353233383a3a2f33322d3438203d3e20323638353033.roa
File:                     323830343a353233383a3a2f33322d3438203d3e20323638353033.roa (raw, json)
Hash identifier:          awnqJC7FKcAyYTahX8GZbE7J4e7qVafn/y7/LJOoeAE=
Subject key identifier:   A3:6A:04:7E:32:BD:F9:B3:67:22:99:F3:39:F0:D8:28:32:57:4A:DF
Certificate issuer:       /CN=B1E6131577682E5A01C8A3BF7F96884419291433
Certificate serial:       1700A89100F7316B0E63323E5736BE657170D20C
Authority key identifier: B1:E6:13:15:77:68:2E:5A:01:C8:A3:BF:7F:96:88:44:19:29:14:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E6131577682E5A01C8A3BF7F96884419291433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/323830343a353233383a3a2f33322d3438203d3e20323638353033.roa
Signing time:             Tue 17 Dec 2024 20:15:20 +0000
ROA not before:           Tue 17 Dec 2024 20:10:20 +0000
ROA not after:            Tue 16 Dec 2025 20:15:20 +0000
asID:                     268503
IP address blocks:        2804:5238::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:00:a8:91:00:f7:31:6b:0e:63:32:3e:57:36:be:65:71:70:d2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E6131577682E5A01C8A3BF7F96884419291433
        Validity
            Not Before: Dec 17 20:10:20 2024 GMT
            Not After : Dec 16 20:15:20 2025 GMT
        Subject: CN=A36A047E32BDF9B3672299F339F0D82832574ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:3f:b7:f0:fe:f9:4a:3b:f3:68:76:25:48:
                    50:d6:cd:5f:78:fb:5c:af:3e:4a:3a:05:3a:e6:b4:
                    49:7e:75:83:13:63:7e:96:b9:bb:fc:29:29:6d:17:
                    de:87:de:7a:af:9e:b3:0e:65:5b:a1:f8:70:26:7b:
                    76:c7:81:fd:da:4d:db:c7:bb:9d:c7:6b:f0:8d:27:
                    05:b0:99:a1:fb:9a:f1:28:f9:67:e2:e8:ca:70:2b:
                    f6:0a:2e:5e:5d:75:1f:4e:94:3c:63:6d:dc:b5:85:
                    e6:d9:d5:fa:06:90:a4:64:c9:9e:f5:4b:c8:a2:1a:
                    db:4a:db:9c:d7:c4:c9:d3:2a:7f:13:43:a7:36:23:
                    3e:e4:83:36:dd:b1:93:19:0e:71:07:79:db:aa:91:
                    72:8b:ed:96:ca:2c:07:41:46:01:31:eb:46:2d:87:
                    62:4f:d5:dc:74:f4:84:38:5b:e2:00:eb:20:80:a7:
                    f3:4d:08:57:d3:f3:dd:81:a3:51:06:f6:fb:8b:8e:
                    d7:96:2c:5d:b6:e0:1a:fa:a9:a7:b8:05:c0:27:bb:
                    02:5f:53:bd:4f:07:02:67:77:1b:4b:ac:5d:43:a9:
                    ef:96:c4:d2:09:ec:50:74:9f:d1:b2:a0:4b:ab:f4:
                    ce:25:82:4b:83:82:51:96:d0:48:b6:63:69:16:14:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6A:04:7E:32:BD:F9:B3:67:22:99:F3:39:F0:D8:28:32:57:4A:DF
            X509v3 Authority Key Identifier:
                keyid:B1:E6:13:15:77:68:2E:5A:01:C8:A3:BF:7F:96:88:44:19:29:14:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/B1E6131577682E5A01C8A3BF7F96884419291433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E6131577682E5A01C8A3BF7F96884419291433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/323830343a353233383a3a2f33322d3438203d3e20323638353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5238::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:52:85:2d:ae:15:6c:da:d7:cd:84:03:8d:af:49:bd:c5:
         d8:ed:29:5b:31:a1:4f:fc:52:68:d6:d0:b3:b3:9f:28:7a:e3:
         3d:2a:92:e0:d0:9a:c1:6f:49:a0:ef:6a:5b:cc:ca:e1:3d:21:
         16:36:43:81:4a:ff:37:47:e8:2d:e1:4f:c2:33:db:40:13:3d:
         2d:76:e4:80:8b:78:52:16:bd:a6:7a:c7:5e:46:e6:2e:a7:02:
         3f:c6:90:d1:73:80:7a:11:e3:01:0b:a9:fb:bb:84:02:ac:62:
         95:91:4b:ac:21:ee:5a:fa:97:c7:23:e2:3c:27:9d:09:a3:d8:
         11:9e:19:54:ed:6a:58:59:e9:3c:a0:ec:67:00:98:51:9b:69:
         c0:eb:5d:6a:a0:c3:01:e7:c1:90:f7:6c:f6:ac:e8:e6:ee:cb:
         97:ff:76:b9:d6:a3:4c:20:b8:25:a2:84:4d:4d:55:67:2d:4a:
         98:12:fd:08:36:eb:d1:74:c6:64:73:1c:7c:75:d1:59:35:b7:
         3a:e5:6d:97:8b:aa:e2:a6:63:16:ee:d7:05:d0:9a:25:35:f2:
         4a:3c:50:f5:bf:c1:cb:1d:60:7b:7e:b8:b0:e8:2d:c1:b9:e6:
         dd:d5:8d:d9:71:84:41:19:40:28:9f:aa:53:22:15:f9:0e:0b:
         69:ab:56:40
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFwCokQD3MWsOYzI+Vza+ZXFw0gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFFNjEzMTU3NzY4MkU1QTAxQzhBM0JGN0Y5Njg4NDQx
OTI5MTQzMzAeFw0yNDEyMTcyMDEwMjBaFw0yNTEyMTYyMDE1MjBaMDMxMTAvBgNV
BAMTKEEzNkEwNDdFMzJCREY5QjM2NzIyOTlGMzM5RjBEODI4MzI1NzRBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqj+38P75SjvzaHYlSFDWzV94
+1yvPko6BTrmtEl+dYMTY36Wubv8KSltF96H3nqvnrMOZVuh+HAme3bHgf3aTdvH
u53Ha/CNJwWwmaH7mvEo+Wfi6MpwK/YKLl5ddR9OlDxjbdy1hebZ1foGkKRkyZ71
S8iiGttK25zXxMnTKn8TQ6c2Iz7kgzbdsZMZDnEHeduqkXKL7ZbKLAdBRgEx60Yt
h2JP1dx09IQ4W+IA6yCAp/NNCFfT892Bo1EG9vuLjteWLF224Br6qae4BcAnuwJf
U71PBwJndxtLrF1Dqe+WxNIJ7FB0n9GyoEur9M4lgkuDglGW0Ei2Y2kWFNUxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUo2oEfjK9+bNnIpnzOfDYKDJXSt8wHwYDVR0j
BBgwFoAUseYTFXdoLloByKO/f5aIRBkpFDMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUFTRGduTUdXWU5Xb281ZWZvWEF6V0R5ZGszREhDeERwWDNLenhzTlVt
Q1gvMC9CMUU2MTMxNTc3NjgyRTVBMDFDOEEzQkY3Rjk2ODg0NDE5MjkxNDMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxRTYxMzE1Nzc2ODJFNUEw
MUM4QTNCRjdGOTY4ODQ0MTkyOTE0MzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VBU0Rnbk1HV1lOV29vNWVmb1hBeldEeWRrM0RIQ3hEcFgzS3p4c05VbUNYLzAv
MzIzODMwMzQzYTM1MzIzMzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARSODANBgkqhkiG9w0BAQsFAAOCAQEAK8FShS2u
FWza182EA42vSb3F2O0pWzGhT/xSaNbQs7OfKHrjPSqS4NCawW9JoO9qW8zK4T0h
FjZDgUr/N0foLeFPwjPbQBM9LXbkgIt4Uha9pnrHXkbmLqcCP8aQ0XOAehHjAQup
+7uEAqxilZFLrCHuWvqXxyPiPCedCaPYEZ4ZVO1qWFnpPKDsZwCYUZtpwOtdaqDD
AefBkPds9qzo5u7Ll/92udajTCC4JaKETU1VZy1KmBL9CDbr0XTGZHMcfHXRWTW3
OuVtl4uq4qZjFu7XBdCaJTXySjxQ9b/Byx1ge364sOgtwbnm3dWN2XGEQRlAKJ+q
UyIV+Q4LaatWQA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:42:42 2025 by rpki-client