Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3430303a3a2f33382d3338203d3e20323633333236.roa
File:                     323830343a313435383a3430303a3a2f33382d3338203d3e20323633333236.roa (raw, json)
Hash identifier:          z+QFyWFGsG0VosH8WzGnFbLkl9i7YA6bL3BrxtABbqY=
Subject key identifier:   2D:06:0D:D7:75:4D:FB:8E:6D:5F:55:84:DB:4D:22:E2:22:81:6A:BC
Certificate issuer:       /CN=DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228
Certificate serial:       23CBE4EDCC1C983263AB278CC9DB310DD4B49466
Authority key identifier: DB:5F:FB:AA:00:1B:E1:EF:6A:FC:52:EA:20:F6:4B:B3:3F:A3:E2:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3430303a3a2f33382d3338203d3e20323633333236.roa
Signing time:             Tue 19 Jul 2022 16:52:35 +0000
ROA not before:           Tue 19 Jul 2022 16:47:35 +0000
ROA not after:            Tue 18 Jul 2023 16:52:35 +0000
asID:                     263326
IP address blocks:        2804:1458:400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cb:e4:ed:cc:1c:98:32:63:ab:27:8c:c9:db:31:0d:d4:b4:94:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228
        Validity
            Not Before: Jul 19 16:47:35 2022 GMT
            Not After : Jul 18 16:52:35 2023 GMT
        Subject: CN=2D060DD7754DFB8E6D5F5584DB4D22E222816ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:58:2a:d6:0a:18:56:96:75:35:89:ff:f5:
                    e5:21:7d:00:64:04:80:00:29:5e:8b:f6:41:cf:9b:
                    6e:28:c8:b5:85:10:9f:c7:a2:64:61:98:21:47:55:
                    ea:c3:89:a2:cf:fe:05:db:3f:d5:12:37:ce:8a:d7:
                    3a:e6:a7:bc:1d:5d:72:a4:65:84:f0:7c:91:0f:22:
                    48:b3:04:bb:f7:0c:55:7d:09:c0:08:17:fd:6d:66:
                    14:94:6e:47:ec:96:1f:31:0a:09:f1:2b:6b:2e:49:
                    d9:b2:14:5a:85:6d:99:8f:44:20:4a:5c:c4:e6:2f:
                    86:71:b0:7f:ed:ae:b0:48:e1:dd:21:f4:49:d9:90:
                    17:f8:ad:1e:1c:89:5c:f1:f0:77:49:05:72:29:0c:
                    e1:a1:eb:6a:d2:a1:c6:39:16:24:a9:9f:72:8f:b6:
                    40:8f:1a:3f:c4:a7:9d:a5:69:a5:7a:3a:3a:0d:c5:
                    1c:77:83:47:fc:30:ad:c3:ef:c2:e0:d6:d2:0e:a8:
                    f8:58:c3:64:61:5a:31:4b:5e:5d:c9:d0:97:a3:6b:
                    dd:97:b0:19:e0:96:90:be:75:bb:52:3a:b4:c5:33:
                    35:07:f2:ba:83:02:b3:f5:14:9f:ca:68:31:a0:ed:
                    71:5b:6c:a6:4c:8a:62:d6:36:4f:9e:aa:a3:16:e3:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:0D:D7:75:4D:FB:8E:6D:5F:55:84:DB:4D:22:E2:22:81:6A:BC
            X509v3 Authority Key Identifier:
                keyid:DB:5F:FB:AA:00:1B:E1:EF:6A:FC:52:EA:20:F6:4B:B3:3F:A3:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3430303a3a2f33382d3338203d3e20323633333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1458:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         83:8d:4e:e1:53:ed:6f:5b:d2:dc:0e:73:ab:4c:65:ed:ac:e1:
         61:81:8a:c1:b5:ab:81:1c:52:9a:c9:54:5d:e1:49:68:3e:dd:
         47:48:bb:be:fc:2a:e6:b8:42:3f:4e:81:79:5b:9a:ad:3f:d7:
         c0:79:bc:d2:36:50:ff:87:65:04:3b:04:4e:f2:df:54:46:71:
         eb:f5:01:1a:02:a3:f2:b4:09:ae:0d:5d:cb:ec:7c:e7:c4:fb:
         3f:a7:68:41:25:d7:34:d8:e0:27:1a:33:f9:b0:e1:a4:b4:a1:
         f9:9c:2d:61:5f:1a:83:b2:c4:8d:c2:06:0c:d7:9c:a2:bf:1b:
         b8:fd:63:76:79:f2:7b:a6:e1:fa:fc:65:fc:51:a8:23:7c:3a:
         e1:8c:7b:3a:18:0f:65:ab:9a:a2:0b:15:70:fb:ad:f9:9d:3a:
         e8:b7:9b:90:c7:4e:e4:07:7a:19:14:c6:a5:a0:0c:79:31:d8:
         f0:29:e6:6b:62:6b:f2:09:7f:58:a4:c9:7d:02:c8:4a:47:fa:
         88:84:58:96:dc:a6:c3:69:c8:d0:6e:01:80:18:43:31:b3:38:
         6b:fd:64:7f:02:49:99:54:cb:49:18:5e:b0:28:f2:59:94:16:
         4e:a4:41:60:57:cf:bb:e5:c9:f2:1c:78:a1:5a:50:40:51:a6:
         bc:08:fd:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI8vk7cwcmDJjqyeMydsxDdS0lGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI1RkZCQUEwMDFCRTFFRjZBRkM1MkVBMjBGNjRCQjMz
RkEzRTIyODAeFw0yMjA3MTkxNjQ3MzVaFw0yMzA3MTgxNjUyMzVaMDMxMTAvBgNV
BAMTKDJEMDYwREQ3NzU0REZCOEU2RDVGNTU4NERCNEQyMkUyMjI4MTZBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/lgq1goYVpZ1NYn/9eUhfQBk
BIAAKV6L9kHPm24oyLWFEJ/HomRhmCFHVerDiaLP/gXbP9USN86K1zrmp7wdXXKk
ZYTwfJEPIkizBLv3DFV9CcAIF/1tZhSUbkfslh8xCgnxK2suSdmyFFqFbZmPRCBK
XMTmL4ZxsH/trrBI4d0h9EnZkBf4rR4ciVzx8HdJBXIpDOGh62rSocY5FiSpn3KP
tkCPGj/Ep52laaV6OjoNxRx3g0f8MK3D78Lg1tIOqPhYw2RhWjFLXl3J0Jeja92X
sBnglpC+dbtSOrTFMzUH8rqDArP1FJ/KaDGg7XFbbKZMimLWNk+eqqMW49xnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULQYN13VN+45tX1WE200i4iKBarwwHwYDVR0j
BBgwFoAU21/7qgAb4e9q/FLqIPZLsz+j4igwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmZWZGZzcWJ0QzdtSGtKRVl4M0hFbmo3NjNpZTFFMVdLdHB0Z01GdXBV
SmkvMC9EQjVGRkJBQTAwMUJFMUVGNkFGQzUyRUEyMEY2NEJCMzNGQTNFMjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCNUZGQkFBMDAxQkUxRUY2
QUZDNTJFQTIwRjY0QkIzM0ZBM0UyMjguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZmVmRmc3FidEM3bUhrSkVZeDNIRW5qNzYzaWUxRTFXS3RwdGdNRnVwVUppLzAv
MzIzODMwMzQzYTMxMzQzNTM4M2EzNDMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNl
MjAzMjM2MzMzMzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIoBBRYBDANBgkqhkiG9w0BAQsFAAOC
AQEAg41O4VPtb1vS3A5zq0xl7azhYYGKwbWrgRxSmslUXeFJaD7dR0i7vvwq5rhC
P06BeVuarT/XwHm80jZQ/4dlBDsETvLfVEZx6/UBGgKj8rQJrg1dy+x858T7P6do
QSXXNNjgJxoz+bDhpLSh+ZwtYV8ag7LEjcIGDNecor8buP1jdnnye6bh+vxl/FGo
I3w64Yx7OhgPZauaogsVcPut+Z066LebkMdO5Ad6GRTGpaAMeTHY8Cnma2Jr8gl/
WKTJfQLISkf6iIRYltymw2nI0G4BgBhDMbM4a/1kfwJJmVTLSRhesCjyWZQWTqRB
YFfPu+XJ8hx4oVpQQFGmvAj9IQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:53 2025 by rpki-client