Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a633030303a3a2f33342d3334203d3e20323636393438.roa
File:                     323830343a343563343a633030303a3a2f33342d3334203d3e20323636393438.roa (raw, json)
Hash identifier:          vqI4RNdSfLMmHy+GxEto0w7Qjr7JCDTeDbfZ5z7qFTE=
Subject key identifier:   39:33:FF:74:6E:EA:A7:C8:81:E7:5E:4D:E5:E5:33:F4:78:FD:D8:C4
Certificate issuer:       /CN=21846FD68091A2016CCF764693C6904AC8FF62A9
Certificate serial:       0ABD825F4DBF9C09967BA6A6DA748DC5AE27C487
Authority key identifier: 21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a633030303a3a2f33342d3334203d3e20323636393438.roa
Signing time:             Mon 29 Jul 2024 17:34:20 +0000
ROA not before:           Mon 29 Jul 2024 17:29:20 +0000
ROA not after:            Mon 28 Jul 2025 17:34:20 +0000
asID:                     266948
IP address blocks:        2804:45c4:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bd:82:5f:4d:bf:9c:09:96:7b:a6:a6:da:74:8d:c5:ae:27:c4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Validity
            Not Before: Jul 29 17:29:20 2024 GMT
            Not After : Jul 28 17:34:20 2025 GMT
        Subject: CN=3933FF746EEAA7C881E75E4DE5E533F478FDD8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:9f:ea:00:97:33:c8:39:85:f8:29:eb:4a:
                    2e:d4:73:b7:d4:9f:60:c8:42:a5:7a:43:61:4a:d7:
                    b6:81:b2:ab:84:1a:60:3e:fa:40:44:d2:2c:2f:12:
                    bf:85:74:87:c9:c2:27:c3:2a:04:3a:7b:ca:d3:22:
                    e8:e8:10:de:31:50:de:52:e9:d0:b5:50:52:d3:ff:
                    50:8a:46:e2:d6:83:2a:fa:2c:0c:e2:19:db:db:81:
                    f0:3a:5c:f3:89:72:48:75:19:22:9a:0c:e3:b3:cf:
                    0a:55:41:a6:d6:80:60:82:72:34:a1:03:94:47:ac:
                    a8:58:6f:36:86:02:27:ef:a6:9e:bd:03:58:1c:3b:
                    59:e9:a7:c0:d3:92:07:18:7b:ba:ef:f1:76:3d:d4:
                    e7:87:37:19:31:d6:ac:9c:d6:eb:58:85:b7:ba:e2:
                    5c:3d:59:7b:ea:4f:86:00:47:d0:fe:a8:d8:46:8d:
                    e8:49:6d:1c:34:c0:81:06:1f:26:94:29:d6:a8:e9:
                    f5:64:01:06:a9:9c:da:b2:61:b4:e0:a0:bb:aa:27:
                    fd:fb:1e:39:5f:2f:aa:81:18:df:22:7f:6e:25:0e:
                    e7:1c:3c:47:77:05:e1:68:77:92:73:78:0e:fc:1b:
                    de:6d:15:46:ed:fc:03:9b:ec:68:9e:f4:96:c5:6b:
                    f8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:FF:74:6E:EA:A7:C8:81:E7:5E:4D:E5:E5:33:F4:78:FD:D8:C4
            X509v3 Authority Key Identifier:
                keyid:21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a633030303a3a2f33342d3334203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:01:2e:aa:c9:fe:1f:8c:b8:20:04:15:9f:76:7b:f5:bf:10:
         5b:ba:16:0d:68:27:12:48:14:71:f2:a2:ce:6a:e2:52:97:ad:
         ef:f1:27:1e:01:16:31:cb:31:44:62:7c:e9:8d:d5:67:42:0f:
         ef:48:78:11:a8:5e:ab:9c:ec:ef:ad:98:f9:04:f3:2c:c9:b9:
         e7:45:f6:74:62:ec:9a:4d:7a:ad:46:d0:7f:19:1a:02:ee:1b:
         60:09:25:ee:6d:70:bf:69:ad:85:a1:67:32:d6:01:59:79:e9:
         c7:9b:3f:be:ba:90:ae:47:a2:3e:32:16:41:1b:00:6c:75:c8:
         7e:0c:69:15:6b:37:9b:a4:d0:ab:2a:4e:7c:b0:72:49:80:02:
         72:cd:f8:cc:34:5e:12:86:44:48:39:a5:e3:6a:f0:e8:8a:4c:
         56:fc:39:2e:a5:77:bb:a5:2b:2b:c5:dc:3a:05:9c:95:7a:06:
         54:22:b1:07:6b:86:b8:d8:10:8e:96:6f:ed:e6:17:d8:a2:34:
         a9:51:d6:75:44:24:69:fc:75:5e:23:16:e4:3d:84:b3:85:0a:
         d5:1d:a4:2a:7d:93:28:41:fc:10:19:4a:47:56:2b:36:52:53:
         ed:ab:77:44:af:02:2f:b2:a2:db:62:37:cd:98:e1:37:a3:f8:
         ca:01:00:6f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCr2CX02/nAmWe6am2nSNxa4nxIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4NDZGRDY4MDkxQTIwMTZDQ0Y3NjQ2OTNDNjkwNEFD
OEZGNjJBOTAeFw0yNDA3MjkxNzI5MjBaFw0yNTA3MjgxNzM0MjBaMDMxMTAvBgNV
BAMTKDM5MzNGRjc0NkVFQUE3Qzg4MUU3NUU0REU1RTUzM0Y0NzhGREQ4QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIF5/qAJczyDmF+CnrSi7Uc7fU
n2DIQqV6Q2FK17aBsquEGmA++kBE0iwvEr+FdIfJwifDKgQ6e8rTIujoEN4xUN5S
6dC1UFLT/1CKRuLWgyr6LAziGdvbgfA6XPOJckh1GSKaDOOzzwpVQabWgGCCcjSh
A5RHrKhYbzaGAifvpp69A1gcO1npp8DTkgcYe7rv8XY91OeHNxkx1qyc1utYhbe6
4lw9WXvqT4YAR9D+qNhGjehJbRw0wIEGHyaUKdao6fVkAQapnNqyYbTgoLuqJ/37
HjlfL6qBGN8if24lDuccPEd3BeFod5JzeA78G95tFUbt/AOb7Gie9JbFa/hRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOTP/dG7qp8iB515N5eUz9Hj92MQwHwYDVR0j
BBgwFoAUIYRv1oCRogFsz3ZGk8aQSsj/YqkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnVKYzQyb2lWTXBqTkg4NU13RzNtcTk1VXVhRG9jaFhHMzhiWm5NdG1j
WkgvMC8yMTg0NkZENjgwOTFBMjAxNkNDRjc2NDY5M0M2OTA0QUM4RkY2MkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxODQ2RkQ2ODA5MUEyMDE2
Q0NGNzY0NjkzQzY5MDRBQzhGRjYyQTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z1SmM0Mm9pVk1wak5IODVNd0czbXE5NVV1YURvY2hYRzM4YlpuTXRtY1pILzAv
MzIzODMwMzQzYTM0MzU2MzM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERcTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBnAS6qyf4fjLggBBWfdnv1vxBbuhYNaCcSSBRx8qLOauJSl63v8SceARYx
yzFEYnzpjdVnQg/vSHgRqF6rnOzvrZj5BPMsybnnRfZ0YuyaTXqtRtB/GRoC7htg
CSXubXC/aa2FoWcy1gFZeenHmz++upCuR6I+MhZBGwBsdch+DGkVazebpNCrKk58
sHJJgAJyzfjMNF4ShkRIOaXjavDoikxW/DkupXe7pSsrxdw6BZyVegZUIrEHa4a4
2BCOlm/t5hfYojSpUdZ1RCRp/HVeIxbkPYSzhQrVHaQqfZMoQfwQGUpHVis2UlPt
q3dErwIvsqLbYjfNmOE3o/jKAQBv
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:45 2025 by rpki-client