Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/323830343a333534383a3a2f33322d3438203d3e20323636323739.roa
File:                     323830343a333534383a3a2f33322d3438203d3e20323636323739.roa (raw, json)
Hash identifier:          LuIWs2A8Vl1PKVNRmWO+s0IHi8/cznRFPmXbG4gzM5M=
Subject key identifier:   32:23:88:5A:00:2D:F5:35:C5:14:25:F1:7C:1B:CA:4A:AE:37:18:47
Certificate issuer:       /CN=5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2
Certificate serial:       6DFFB4E0967DBF08A4FDE26C12E3D52DAC8A9F8C
Authority key identifier: 5B:C9:A4:A7:6F:3F:26:D6:30:8F:79:23:AE:9C:F7:E1:00:89:62:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/323830343a333534383a3a2f33322d3438203d3e20323636323739.roa
Signing time:             Fri 01 Oct 2021 16:22:58 +0000
ROA not before:           Fri 01 Oct 2021 16:17:58 +0000
ROA not after:            Fri 30 Sep 2022 16:22:58 +0000
asID:                     266279
IP address blocks:        2804:3548::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ff:b4:e0:96:7d:bf:08:a4:fd:e2:6c:12:e3:d5:2d:ac:8a:9f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2
        Validity
            Not Before: Oct  1 16:17:58 2021 GMT
            Not After : Sep 30 16:22:58 2022 GMT
        Subject: CN=3082010A0282010100C7DCEB7E7C905957A8A1D0DE72A4CB7AB5919690D3C8F2837EE5AD9B8D34DD1A56D7C57DF1EB3BDDEA4EA00A75A2BB35A8A2781A37E197591621B4BD253BB4E4167EAFEA2854C1C8ABC4EB30B8D2B086D7C93D4C920FD7126DF473FB83CCE555A8F62A136E72A00BA28793209C17B540AFBB0CBAFBC891F577B9A94A373CF6524D89BE2F5A12BFCC04B6F8904C14B876584E7BCEC87026664A75AAD1B421F84FFFEFD6A42E0B54ACC77EDCA6AE3ABD514B4B62D11788459A849EE9D66D1F723609F8AD1AF9A982D44B0740B16B252E70E0505C3B450EC860C89991DFE63950FD55068212550928D8963388D9782C93EA1CAC2673DD62E49641838E7068258C210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:eb:7e:7c:90:59:57:a8:a1:d0:de:72:a4:
                    cb:7a:b5:91:96:90:d3:c8:f2:83:7e:e5:ad:9b:8d:
                    34:dd:1a:56:d7:c5:7d:f1:eb:3b:dd:ea:4e:a0:0a:
                    75:a2:bb:35:a8:a2:78:1a:37:e1:97:59:16:21:b4:
                    bd:25:3b:b4:e4:16:7e:af:ea:28:54:c1:c8:ab:c4:
                    eb:30:b8:d2:b0:86:d7:c9:3d:4c:92:0f:d7:12:6d:
                    f4:73:fb:83:cc:e5:55:a8:f6:2a:13:6e:72:a0:0b:
                    a2:87:93:20:9c:17:b5:40:af:bb:0c:ba:fb:c8:91:
                    f5:77:b9:a9:4a:37:3c:f6:52:4d:89:be:2f:5a:12:
                    bf:cc:04:b6:f8:90:4c:14:b8:76:58:4e:7b:ce:c8:
                    70:26:66:4a:75:aa:d1:b4:21:f8:4f:ff:ef:d6:a4:
                    2e:0b:54:ac:c7:7e:dc:a6:ae:3a:bd:51:4b:4b:62:
                    d1:17:88:45:9a:84:9e:e9:d6:6d:1f:72:36:09:f8:
                    ad:1a:f9:a9:82:d4:4b:07:40:b1:6b:25:2e:70:e0:
                    50:5c:3b:45:0e:c8:60:c8:99:91:df:e6:39:50:fd:
                    55:06:82:12:55:09:28:d8:96:33:88:d9:78:2c:93:
                    ea:1c:ac:26:73:dd:62:e4:96:41:83:8e:70:68:25:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:23:88:5A:00:2D:F5:35:C5:14:25:F1:7C:1B:CA:4A:AE:37:18:47
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A4:A7:6F:3F:26:D6:30:8F:79:23:AE:9C:F7:E1:00:89:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/323830343a333534383a3a2f33322d3438203d3e20323636323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3548::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:f2:1d:da:4d:8b:db:f6:68:47:d2:5c:72:8e:29:d0:19:32:
         da:74:bd:96:77:ea:60:5a:99:ba:63:a6:14:93:ef:a4:34:d7:
         d1:64:26:04:fb:79:46:76:e8:bb:7c:55:83:52:1f:2c:4d:a8:
         79:d2:b6:ff:34:21:1d:01:8f:77:f1:6d:57:43:69:f2:9f:9a:
         4a:3d:a8:02:13:72:5e:44:3e:aa:f2:d9:84:0b:a9:77:d9:0b:
         f8:3c:9f:7f:dc:04:e3:2c:29:9c:54:d7:a8:c1:09:66:79:1b:
         a5:60:8e:07:f3:cc:ef:36:10:28:5d:ec:34:99:9b:9a:61:bc:
         10:94:0a:9d:60:b4:e9:4b:d0:45:17:5a:a0:19:56:26:2f:00:
         d5:6a:2d:64:b1:66:6c:18:07:46:49:c9:0d:02:7b:06:4c:e4:
         43:f0:00:64:f6:5b:55:6c:63:ad:0a:4f:07:23:5d:b2:97:b4:
         f2:a9:94:36:14:92:e4:25:ed:bb:0e:c1:7a:95:28:fe:db:7f:
         b1:8f:2b:8e:49:61:85:ee:87:a9:9a:b3:05:4c:cb:7d:1c:c3:
         e3:2c:35:e3:1c:58:d5:57:2b:de:a8:cf:94:b0:13:62:c2:07:
         68:48:d5:4a:a0:ca:de:e6:79:4e:2a:7c:98:e1:27:2a:ea:2d:
         a5:79:1c:d2
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUbf+04JZ9vwik/eJsEuPVLayKn4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJDOUE0QTc2RjNGMjZENjMwOEY3OTIzQUU5Q0Y3RTEw
MDg5NjJEMjAeFw0yMTEwMDExNjE3NThaFw0yMjA5MzAxNjIyNThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdEQ0VCN0U3QzkwNTk1N0E4
QTFEMERFNzJBNENCN0FCNTkxOTY5MEQzQzhGMjgzN0VFNUFEOUI4RDM0REQxQTU2
RDdDNTdERjFFQjNCRERFQTRFQTAwQTc1QTJCQjM1QThBMjc4MUEzN0UxOTc1OTE2
MjFCNEJEMjUzQkI0RTQxNjdFQUZFQTI4NTRDMUM4QUJDNEVCMzBCOEQyQjA4NkQ3
QzkzRDRDOTIwRkQ3MTI2REY0NzNGQjgzQ0NFNTU1QThGNjJBMTM2RTcyQTAwQkEy
ODc5MzIwOUMxN0I1NDBBRkJCMENCQUZCQzg5MUY1NzdCOUE5NEEzNzNDRjY1MjRE
ODlCRTJGNUExMkJGQ0MwNEI2Rjg5MDRDMTRCODc2NTg0RTdCQ0VDODcwMjY2NjRB
NzVBQUQxQjQyMUY4NEZGRkVGRDZBNDJFMEI1NEFDQzc3RURDQTZBRTNBQkQ1MTRC
NEI2MkQxMTc4ODQ1OUE4NDlFRTlENjZEMUY3MjM2MDlGOEFEMUFGOUE5ODJENDRC
MDc0MEIxNkIyNTJFNzBFMDUwNUMzQjQ1MEVDODYwQzg5OTkxREZFNjM5NTBGRDU1
MDY4MjEyNTUwOTI4RDg5NjMzODhEOTc4MkM5M0VBMUNBQzI2NzNERDYyRTQ5NjQx
ODM4RTcwNjgyNThDMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx9zrfnyQWVeoodDecqTLerWRlpDTyPKDfuWtm4003RpW18V98es7
3epOoAp1ors1qKJ4Gjfhl1kWIbS9JTu05BZ+r+ooVMHIq8TrMLjSsIbXyT1Mkg/X
Em30c/uDzOVVqPYqE25yoAuih5MgnBe1QK+7DLr7yJH1d7mpSjc89lJNib4vWhK/
zAS2+JBMFLh2WE57zshwJmZKdarRtCH4T//v1qQuC1Ssx37cpq46vVFLS2LRF4hF
moSe6dZtH3I2CfitGvmpgtRLB0CxayUucOBQXDtFDshgyJmR3+Y5UP1VBoISVQko
2JYziNl4LJPqHKwmc91i5JZBg45waCWMIQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FDIjiFoALfU1xRQl8XwbykquNxhHMB8GA1UdIwQYMBaAFFvJpKdvPybWMI95I66c
9+EAiWLSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VUbTlTSGp1azFZNGU3
OHk1cFB0RVRYUkVDa2pOUmk3RkI1elg1Y3Y2dU5zLzAvNUJDOUE0QTc2RjNGMjZE
NjMwOEY3OTIzQUU5Q0Y3RTEwMDg5NjJEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81QkM5QTRBNzZGM0YyNkQ2MzA4Rjc5MjNBRTlDRjdFMTAwODk2
MkQyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FVG05U0hqdWsxWTRlNzh5NXBQ
dEVUWFJFQ2tqTlJpN0ZCNXpYNWN2NnVOcy8wLzMyMzgzMDM0M2EzMzM1MzQzODNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjMyMzczOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
NUgwDQYJKoZIhvcNAQELBQADggEBAIbyHdpNi9v2aEfSXHKOKdAZMtp0vZZ36mBa
mbpjphST76Q019FkJgT7eUZ26Lt8VYNSHyxNqHnStv80IR0Bj3fxbVdDafKfmko9
qAITcl5EPqry2YQLqXfZC/g8n3/cBOMsKZxU16jBCWZ5G6VgjgfzzO82EChd7DSZ
m5phvBCUCp1gtOlL0EUXWqAZViYvANVqLWSxZmwYB0ZJyQ0CewZM5EPwAGT2W1Vs
Y60KTwcjXbKXtPKplDYUkuQl7bsOwXqVKP7bf7GPK45JYYXuh6maswVMy30cw+Ms
NeMcWNVXK96oz5SwE2LCB2hI1Uqgyt7meU4qfJjhJyrqLaV5HNI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:19 2025 by rpki-client