Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a323030303a3a2f34382d3438203d3e20323635313131.roa
File:                     323830343a333330343a323030303a3a2f34382d3438203d3e20323635313131.roa (raw, json)
Hash identifier:          ZqTGUrh3r3M7H/+FilZGriNrKxDgDllAoQj+Zb2bnAs=
Subject key identifier:   71:69:BB:F0:82:F0:12:2B:FD:01:F2:5F:3F:49:2A:98:B6:36:46:6A
Certificate issuer:       /CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
Certificate serial:       4A2B87CBB4A3DBF1CC029DC0AD7AA90835FFD1D5
Authority key identifier: 03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a323030303a3a2f34382d3438203d3e20323635313131.roa
Signing time:             Mon 03 Apr 2023 17:41:52 +0000
ROA not before:           Mon 03 Apr 2023 17:36:52 +0000
ROA not after:            Mon 01 Apr 2024 17:41:52 +0000
asID:                     265111
IP address blocks:        2804:3304:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2b:87:cb:b4:a3:db:f1:cc:02:9d:c0:ad:7a:a9:08:35:ff:d1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
        Validity
            Not Before: Apr  3 17:36:52 2023 GMT
            Not After : Apr  1 17:41:52 2024 GMT
        Subject: CN=7169BBF082F0122BFD01F25F3F492A98B636466A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:4b:fd:43:d2:a4:20:52:b1:1c:bf:9f:a3:
                    38:c9:45:b3:c3:06:34:83:f2:90:25:d0:c9:40:e5:
                    2c:7a:42:bc:02:72:93:30:8f:36:44:dd:3d:20:6c:
                    b7:f2:af:f5:be:1c:b8:7c:9c:f3:bc:65:b8:07:5b:
                    c4:83:dc:eb:ea:d1:4c:c5:1a:bf:4d:8c:4d:79:4c:
                    9f:02:8c:9b:32:8d:09:a2:1b:4e:a3:31:b0:16:b6:
                    1b:c8:ff:2d:a8:09:df:a7:9d:77:0b:36:bc:ad:63:
                    ec:32:18:2c:e5:f1:e1:e9:e3:d2:8b:55:83:55:d2:
                    e4:35:24:3b:34:a6:80:cf:32:6c:22:1d:b3:8f:32:
                    bb:6a:f9:12:cd:9f:23:93:df:dc:81:e8:28:1c:0e:
                    05:05:d4:b0:43:c9:21:63:bc:04:a2:eb:fe:9e:9a:
                    0e:17:81:84:3b:96:22:14:89:41:c1:c0:5d:3c:03:
                    4b:fc:07:18:8e:86:2e:8b:38:24:32:bd:cc:49:4c:
                    dc:a8:25:5b:ad:13:c8:b2:44:c2:2e:21:fc:3f:e2:
                    d0:ba:1e:3e:51:41:6f:03:2e:68:11:68:8f:7a:d7:
                    d0:13:60:f8:ce:33:6f:79:32:c7:f0:1c:56:ed:53:
                    d7:36:c9:79:0e:b8:f3:5b:4e:72:73:aa:d3:75:8e:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:69:BB:F0:82:F0:12:2B:FD:01:F2:5F:3F:49:2A:98:B6:36:46:6A
            X509v3 Authority Key Identifier:
                keyid:03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a323030303a3a2f34382d3438203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3304:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:d6:b9:6f:3f:0a:43:4a:ca:1e:26:53:eb:52:e6:cf:f7:21:
         07:74:03:e5:07:b4:f9:c6:8e:23:c5:56:f7:ff:0e:f1:c3:90:
         57:95:71:d0:32:eb:a0:8d:21:00:a8:c1:cb:9b:8e:c1:b7:10:
         16:3c:4e:b9:e7:9c:ce:9d:00:f7:b7:7d:a1:fb:87:11:8e:87:
         4e:fb:0f:b4:0e:26:03:07:40:ce:f1:dd:7a:46:22:52:73:69:
         60:91:d4:d4:3e:b9:71:c8:41:e0:64:43:d6:ed:a0:eb:e9:e2:
         42:f5:22:df:88:e5:61:aa:0d:dc:79:1f:0f:87:68:5f:ee:1d:
         8c:19:12:b4:27:6d:dc:20:f8:d5:1e:ee:a7:23:1a:89:2d:e4:
         66:fb:a8:13:c7:d7:81:8c:44:9d:2a:74:22:e9:6c:48:a4:a5:
         bf:f3:a6:57:26:31:fe:cf:db:15:a2:e8:7e:70:18:59:09:31:
         3b:46:74:ec:8e:aa:c9:28:74:c5:7e:64:a5:03:cd:63:42:a7:
         32:c1:e8:13:4b:26:cb:57:cc:65:d3:1a:3a:00:53:16:14:2f:
         c9:fc:53:83:1a:61:e3:fb:82:82:36:46:8b:83:d7:e2:3f:ac:
         84:12:c8:cf:6e:d9:f5:2a:15:01:d6:96:da:04:4d:c6:7f:1a:
         0f:15:67:68
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUSiuHy7Sj2/HMAp3ArXqpCDX/0dUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNEMEJCMzE5NkZBMzg4MDZBOEUzMDFBMjA4QjkyMjJC
QUU2MUZEQjAeFw0yMzA0MDMxNzM2NTJaFw0yNDA0MDExNzQxNTJaMDMxMTAvBgNV
BAMTKDcxNjlCQkYwODJGMDEyMkJGRDAxRjI1RjNGNDkyQTk4QjYzNjQ2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UUv9Q9KkIFKxHL+fozjJRbPD
BjSD8pAl0MlA5Sx6QrwCcpMwjzZE3T0gbLfyr/W+HLh8nPO8ZbgHW8SD3Ovq0UzF
Gr9NjE15TJ8CjJsyjQmiG06jMbAWthvI/y2oCd+nnXcLNrytY+wyGCzl8eHp49KL
VYNV0uQ1JDs0poDPMmwiHbOPMrtq+RLNnyOT39yB6CgcDgUF1LBDySFjvASi6/6e
mg4XgYQ7liIUiUHBwF08A0v8BxiOhi6LOCQyvcxJTNyoJVutE8iyRMIuIfw/4tC6
Hj5RQW8DLmgRaI9619ATYPjOM295MsfwHFbtU9c2yXkOuPNbTnJzqtN1jkIvAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUcWm78ILwEiv9AfJfP0kqmLY2RmowHwYDVR0j
BBgwFoAUA9C7MZb6OIBqjjAaIIuSIrrmH9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0V4S2N5ek5SRnN3azdxN0cxc3RwTDZMQ21LRDlyUlc1eUtlR29nSDZy
MjYvMC8wM0QwQkIzMTk2RkEzODgwNkE4RTMwMUEyMDhCOTIyMkJBRTYxRkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzRDBCQjMxOTZGQTM4ODA2
QThFMzAxQTIwOEI5MjIyQkFFNjFGREIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFeEtjeXpOUkZzd2s3cTdHMXN0cEw2TENtS0Q5clJXNXlLZUdvZ0g2cjI2LzAv
MzIzODMwMzQzYTMzMzMzMDM0M2EzMjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNTMxMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMwQgADANBgkqhkiG9w0BAQsF
AAOCAQEAX9a5bz8KQ0rKHiZT61Lmz/chB3QD5Qe0+caOI8VW9/8O8cOQV5Vx0DLr
oI0hAKjBy5uOwbcQFjxOueeczp0A97d9ofuHEY6HTvsPtA4mAwdAzvHdekYiUnNp
YJHU1D65cchB4GRD1u2g6+niQvUi34jlYaoN3HkfD4doX+4djBkStCdt3CD41R7u
pyMaiS3kZvuoE8fXgYxEnSp0IulsSKSlv/OmVyYx/s/bFaLofnAYWQkxO0Z07I6q
ySh0xX5kpQPNY0KnMsHoE0smy1fMZdMaOgBTFhQvyfxTgxph4/uCgjZGi4PX4j+s
hBLIz27Z9SoVAdaW2gRNxn8aDxVnaA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:17 2025 by rpki-client