Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/323830343a323634343a3a2f33322d3332203d3e20323634333336.roa
File:                     323830343a323634343a3a2f33322d3332203d3e20323634333336.roa (raw, json)
Hash identifier:          XEO2KDXHlYk4BsdRY7IVyKABOVoYzQ2nqOCD71aFReY=
Subject key identifier:   D8:A6:84:CF:1A:80:52:0D:9F:D2:2C:54:6F:5D:1F:BC:33:BD:58:10
Certificate issuer:       /CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
Certificate serial:       0E932367E412F399A71B9C1D04A7F2B2AF604F79
Authority key identifier: CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/323830343a323634343a3a2f33322d3332203d3e20323634333336.roa
Signing time:             Tue 11 Apr 2023 10:33:12 +0000
ROA not before:           Tue 11 Apr 2023 10:28:12 +0000
ROA not after:            Tue 09 Apr 2024 10:33:12 +0000
asID:                     264336
IP address blocks:        2804:2644::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:93:23:67:e4:12:f3:99:a7:1b:9c:1d:04:a7:f2:b2:af:60:4f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
        Validity
            Not Before: Apr 11 10:28:12 2023 GMT
            Not After : Apr  9 10:33:12 2024 GMT
        Subject: CN=D8A684CF1A80520D9FD22C546F5D1FBC33BD5810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:b0:6a:12:42:e1:66:7f:94:29:1b:10:c1:
                    21:53:2b:64:34:6d:9e:f5:61:ae:a5:ce:02:0e:da:
                    a3:11:3b:7c:cf:1d:9a:89:82:ca:97:3a:b9:88:3e:
                    b5:c0:3c:26:ff:4e:96:b4:7a:d5:18:18:28:6a:2a:
                    df:fb:f7:08:df:07:ca:81:60:5b:6f:6d:8d:21:dd:
                    00:b9:b1:23:55:89:f4:cc:b4:28:25:72:fb:ed:9b:
                    e2:49:dc:5d:3b:47:7e:b7:73:d2:5a:1e:00:b1:f0:
                    aa:74:f2:c1:5d:bb:ba:bb:fe:b1:31:08:25:cc:fa:
                    e2:e8:53:3d:c2:ef:e4:d0:ef:8c:d4:db:a5:3e:1c:
                    05:94:c8:29:e3:a7:24:bd:74:5a:88:1c:3b:e3:3c:
                    6e:19:8c:c9:6a:42:4b:2b:83:35:cd:d2:9d:2e:5e:
                    0f:99:17:c1:b1:7b:30:a9:bc:33:06:be:51:7a:da:
                    2e:07:bb:19:7b:87:50:4b:6a:b8:ff:40:da:c0:cd:
                    d2:c7:07:15:94:46:70:a2:74:dd:52:20:41:17:16:
                    6c:60:29:5b:45:23:f2:a6:22:6d:1e:91:71:9d:60:
                    f1:48:ac:15:4c:ec:f9:47:bc:d7:68:f9:0d:26:50:
                    7c:c5:46:9e:92:92:61:2f:b9:6c:a8:a7:b2:85:51:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A6:84:CF:1A:80:52:0D:9F:D2:2C:54:6F:5D:1F:BC:33:BD:58:10
            X509v3 Authority Key Identifier:
                keyid:CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/323830343a323634343a3a2f33322d3332203d3e20323634333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2644::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:09:bd:74:e1:ab:a9:68:95:72:d5:45:c4:aa:84:80:a9:c1:
         d7:4c:3c:ed:56:a0:a7:82:66:3e:e2:f6:3c:5d:e0:b3:36:47:
         f9:72:b8:fa:b5:ce:87:b9:54:35:c5:f7:b2:69:1e:0c:04:27:
         0d:8b:15:89:07:c1:1a:6a:ad:c9:53:e0:36:70:2b:23:3e:93:
         1a:ed:ed:b2:7e:81:37:c8:3d:12:6e:3a:7b:bd:b0:8a:4b:b2:
         c2:aa:ed:48:73:be:f5:3f:5c:77:f5:e6:5c:83:90:4a:f9:82:
         f8:b7:68:ee:aa:4d:99:65:d2:6f:16:f3:56:d0:37:ae:a5:22:
         39:c5:58:3a:1d:47:12:c7:f5:62:0e:aa:5a:28:59:82:fd:4f:
         fb:1b:74:ec:37:00:9d:8e:bf:8b:cc:68:35:d9:76:5a:71:a3:
         f7:0d:ab:49:16:a4:76:f3:cf:e7:64:2d:40:91:5a:51:10:80:
         96:e3:04:be:a6:e7:d3:cd:3c:a9:09:53:bc:25:e2:40:90:5e:
         82:13:4c:16:45:8c:a1:51:dc:9a:98:3b:71:8c:0f:22:40:fb:
         42:64:2e:d3:93:a5:ad:5f:91:0e:9c:c5:31:1f:30:70:20:08:
         f7:ef:2c:17:ed:0a:2f:cc:fd:06:ad:c0:c7:fc:f5:85:f6:aa:
         14:1b:04:23
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDpMjZ+QS85mnG5wdBKfysq9gT3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M1QUMwNkM4RkMzNTBFRDcwMUEyMkRFNTJCNEQ1OUE1
N0I2QTJCQzAeFw0yMzA0MTExMDI4MTJaFw0yNDA0MDkxMDMzMTJaMDMxMTAvBgNV
BAMTKEQ4QTY4NENGMUE4MDUyMEQ5RkQyMkM1NDZGNUQxRkJDMzNCRDU4MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkrBqEkLhZn+UKRsQwSFTK2Q0
bZ71Ya6lzgIO2qMRO3zPHZqJgsqXOrmIPrXAPCb/Tpa0etUYGChqKt/79wjfB8qB
YFtvbY0h3QC5sSNVifTMtCglcvvtm+JJ3F07R363c9JaHgCx8Kp08sFdu7q7/rEx
CCXM+uLoUz3C7+TQ74zU26U+HAWUyCnjpyS9dFqIHDvjPG4ZjMlqQksrgzXN0p0u
Xg+ZF8GxezCpvDMGvlF62i4Huxl7h1BLarj/QNrAzdLHBxWURnCidN1SIEEXFmxg
KVtFI/KmIm0ekXGdYPFIrBVM7PlHvNdo+Q0mUHzFRp6SkmEvuWyop7KFUYeHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2KaEzxqAUg2f0ixUb10fvDO9WBAwHwYDVR0j
BBgwFoAUzFrAbI/DUO1wGiLeUrTVmle2orwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0o4dEpMZVJjNWI2VUcxZ3FtOGIzWXByUHA2MUZvOVdLRUhNWHpTUmNH
ancvMC9DQzVBQzA2QzhGQzM1MEVENzAxQTIyREU1MkI0RDU5QTU3QjZBMkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NDNUFDMDZDOEZDMzUwRUQ3
MDFBMjJERTUyQjRENTlBNTdCNkEyQkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dKOHRKTGVSYzViNlVHMWdxbThiM1lwclBwNjFGbzlXS0VITVh6U1JjR2p3LzAv
MzIzODMwMzQzYTMyMzYzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQmRDANBgkqhkiG9w0BAQsFAAOCAQEAZwm9dOGr
qWiVctVFxKqEgKnB10w87Vagp4JmPuL2PF3gszZH+XK4+rXOh7lUNcX3smkeDAQn
DYsViQfBGmqtyVPgNnArIz6TGu3tsn6BN8g9Em46e72wikuywqrtSHO+9T9cd/Xm
XIOQSvmC+Ldo7qpNmWXSbxbzVtA3rqUiOcVYOh1HEsf1Yg6qWihZgv1P+xt07DcA
nY6/i8xoNdl2WnGj9w2rSRakdvPP52QtQJFaURCAluMEvqbn0808qQlTvCXiQJBe
ghNMFkWMoVHcmpg7cYwPIkD7QmQu05OlrV+RDpzFMR8wcCAI9+8sF+0KL8z9Bq3A
x/z1hfaqFBsEIw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:01:55 2025 by rpki-client