Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3a2f33322d3332203d3e20323633333236.roa
File:                     323830343a313435383a3a2f33322d3332203d3e20323633333236.roa (raw, json)
Hash identifier:          PjHSx187EQV7qS/Dg1skvsMjJ3MI9uDHdvgEygD6mfE=
Subject key identifier:   9B:1F:C8:CE:C8:C2:5E:56:C2:2F:BF:68:0A:BE:D3:5A:1B:54:15:A5
Certificate issuer:       /CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
Certificate serial:       0D41BD1776A8D925E01F5B40AAFD34B31547B120
Authority key identifier: 11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3a2f33322d3332203d3e20323633333236.roa
Signing time:             Tue 05 Sep 2023 14:41:37 +0000
ROA not before:           Tue 05 Sep 2023 14:36:37 +0000
ROA not after:            Tue 03 Sep 2024 14:41:37 +0000
asID:                     263326
IP address blocks:        2804:1458::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:41:bd:17:76:a8:d9:25:e0:1f:5b:40:aa:fd:34:b3:15:47:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
        Validity
            Not Before: Sep  5 14:36:37 2023 GMT
            Not After : Sep  3 14:41:37 2024 GMT
        Subject: CN=9B1FC8CEC8C25E56C22FBF680ABED35A1B5415A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:8d:6a:5e:02:aa:09:7c:2f:e9:32:65:0a:
                    18:7f:b1:cc:2a:9a:eb:fd:dd:c6:aa:54:bc:e6:73:
                    78:da:82:bf:19:6f:39:b3:d6:bd:aa:bd:d6:10:ad:
                    a6:c8:ed:88:73:d4:0d:fc:8d:af:f5:3f:54:e9:a2:
                    d8:5e:64:8f:10:c2:40:83:e1:4e:ff:44:a9:24:1f:
                    dd:c1:e3:ae:89:b6:4f:c2:c7:ab:bc:6d:ed:19:6d:
                    bf:88:a4:ff:4b:49:c1:ea:6c:43:dd:76:33:48:8b:
                    60:76:84:e0:75:e8:78:6b:19:3b:bf:f8:29:74:1e:
                    8a:fd:43:43:9c:1e:ef:67:a1:de:9c:fa:73:7d:27:
                    c1:1b:3b:b7:bd:1b:bf:aa:8e:65:b2:a2:7f:6b:81:
                    b9:0f:63:a2:2f:d6:c0:1f:46:de:95:13:8f:61:9c:
                    38:a3:ad:d5:f5:35:57:b2:cd:cc:fe:6f:c2:7d:11:
                    24:1a:12:0e:eb:b4:2a:15:5a:70:ea:35:69:02:2b:
                    3e:12:8a:a1:f9:cb:dc:48:96:5c:b4:81:29:68:94:
                    cc:ca:b8:e1:48:a0:96:d2:a5:85:56:3d:c6:3d:03:
                    e6:8a:e2:cf:b0:a3:94:77:05:03:ea:8c:96:22:49:
                    2a:4a:9f:7a:be:d6:2d:9d:fa:00:c7:86:a0:6e:a8:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1F:C8:CE:C8:C2:5E:56:C2:2F:BF:68:0A:BE:D3:5A:1B:54:15:A5
            X509v3 Authority Key Identifier:
                keyid:11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/323830343a313435383a3a2f33322d3332203d3e20323633333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1458::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:0a:5e:50:b2:a2:ea:77:cd:e7:b6:19:03:74:26:8f:ea:
         79:77:fa:4f:2b:90:43:1b:61:46:19:8f:b4:54:29:39:23:18:
         ec:98:04:fd:89:c2:50:55:05:ac:8d:db:57:03:b7:c5:cc:68:
         1e:a1:a7:09:7e:79:5f:b3:9d:93:e6:bb:79:62:0e:3b:eb:ad:
         e0:ba:d7:5b:ef:f8:ac:1b:a3:1c:1b:96:6d:6a:f1:30:66:f3:
         2f:b1:7a:42:cd:20:d8:30:57:5e:2f:ff:f6:76:b7:57:72:d5:
         01:5f:b0:3a:43:fb:3d:94:fc:7d:cb:fe:0c:f9:32:14:d1:1b:
         84:ae:6d:d1:24:75:fd:42:fd:39:41:7e:3d:b6:35:9f:c5:bb:
         8e:83:a2:fb:71:38:9a:49:1c:45:22:07:85:ab:5e:43:a8:17:
         fb:25:97:e2:8a:66:6f:60:7d:12:6e:3f:69:19:b6:ba:10:ea:
         9a:e2:6b:6e:ca:f4:d8:65:e9:9b:ed:76:87:68:b0:53:8e:0f:
         84:43:8c:cc:77:e9:fb:ad:e3:81:f9:c4:e7:54:a8:10:d4:81:
         b4:e8:16:64:8c:50:68:d2:4a:b5:72:7a:34:b1:12:97:27:9d:
         db:c3:c1:66:78:06:e1:b4:41:a6:00:40:bf:62:92:30:e5:c4:
         fe:36:09:1b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDUG9F3ao2SXgH1tAqv00sxVHsSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBQ0NFOTY5NDBERTBFMjZDQzc5Q0M5REUwMkZGNDM0
RjMzQzI2NzAeFw0yMzA5MDUxNDM2MzdaFw0yNDA5MDMxNDQxMzdaMDMxMTAvBgNV
BAMTKDlCMUZDOENFQzhDMjVFNTZDMjJGQkY2ODBBQkVEMzVBMUI1NDE1QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wo1qXgKqCXwv6TJlChh/scwq
muv93caqVLzmc3jagr8Zbzmz1r2qvdYQrabI7Yhz1A38ja/1P1TpotheZI8QwkCD
4U7/RKkkH93B466Jtk/Cx6u8be0Zbb+IpP9LScHqbEPddjNIi2B2hOB16HhrGTu/
+Cl0Hor9Q0OcHu9nod6c+nN9J8EbO7e9G7+qjmWyon9rgbkPY6Iv1sAfRt6VE49h
nDijrdX1NVeyzcz+b8J9ESQaEg7rtCoVWnDqNWkCKz4SiqH5y9xIlly0gSlolMzK
uOFIoJbSpYVWPcY9A+aK4s+wo5R3BQPqjJYiSSpKn3q+1i2d+gDHhqBuqAoJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmx/IzsjCXlbCL79oCr7TWhtUFaUwHwYDVR0j
BBgwFoAUEazOlpQN4OJsx5zJ3gL/Q08zwmcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmZWZGZzcWJ0QzdtSGtKRVl4M0hFbmo3NjNpZTFFMVdLdHB0Z01GdXBV
SmkvMC8xMUFDQ0U5Njk0MERFMEUyNkNDNzlDQzlERTAyRkY0MzRGMzNDMjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExQUNDRTk2OTQwREUwRTI2
Q0M3OUNDOURFMDJGRjQzNEYzM0MyNjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZmVmRmc3FidEM3bUhrSkVZeDNIRW5qNzYzaWUxRTFXS3RwdGdNRnVwVUppLzAv
MzIzODMwMzQzYTMxMzQzNTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzMzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUWDANBgkqhkiG9w0BAQsFAAOCAQEANcwKXlCy
oup3zee2GQN0Jo/qeXf6TyuQQxthRhmPtFQpOSMY7JgE/YnCUFUFrI3bVwO3xcxo
HqGnCX55X7Odk+a7eWIOO+ut4LrXW+/4rBujHBuWbWrxMGbzL7F6Qs0g2DBXXi//
9na3V3LVAV+wOkP7PZT8fcv+DPkyFNEbhK5t0SR1/UL9OUF+PbY1n8W7joOi+3E4
mkkcRSIHhateQ6gX+yWX4opmb2B9Em4/aRm2uhDqmuJrbsr02GXpm+12h2iwU44P
hEOMzHfp+63jgfnE51SoENSBtOgWZIxQaNJKtXJ6NLESlyed28PBZngG4bRBpgBA
v2KSMOXE/jYJGw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:35 2025 by rpki-client