Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/323830343a323861383a3a2f33322d3332203d3e20323633393733.roa
File:                     323830343a323861383a3a2f33322d3332203d3e20323633393733.roa (raw, json)
Hash identifier:          BzBNyNOO4h9DdHlRrvcSd5lVrZJ34aQ0cHY8/lMQnPY=
Subject key identifier:   21:4C:93:A7:24:03:E1:D7:36:06:46:9E:73:84:20:48:FA:89:03:EE
Certificate issuer:       /CN=A8CF5718115B9C05B14F07941D58B618B367CCE3
Certificate serial:       1E8666FB82D56CFAC9378436333C559AC6E2D3AD
Authority key identifier: A8:CF:57:18:11:5B:9C:05:B1:4F:07:94:1D:58:B6:18:B3:67:CC:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/323830343a323861383a3a2f33322d3332203d3e20323633393733.roa
Signing time:             Fri 15 Sep 2023 17:36:28 +0000
ROA not before:           Fri 15 Sep 2023 17:31:28 +0000
ROA not after:            Fri 13 Sep 2024 17:36:28 +0000
asID:                     263973
IP address blocks:        2804:28a8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:86:66:fb:82:d5:6c:fa:c9:37:84:36:33:3c:55:9a:c6:e2:d3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8CF5718115B9C05B14F07941D58B618B367CCE3
        Validity
            Not Before: Sep 15 17:31:28 2023 GMT
            Not After : Sep 13 17:36:28 2024 GMT
        Subject: CN=214C93A72403E1D73606469E73842048FA8903EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:48:31:c1:95:ce:32:22:e8:48:8b:86:92:
                    b0:f5:3d:70:fd:c1:94:3f:64:b6:ea:0d:39:ce:ea:
                    5e:75:b3:fc:21:d2:eb:9c:fa:51:62:27:af:85:bf:
                    c5:3a:4e:3a:b5:48:13:b9:83:f4:87:55:6a:5f:28:
                    7b:f9:dc:04:bc:ac:ae:5c:40:a4:71:7b:eb:3a:cf:
                    05:67:4f:bd:1e:66:92:d9:4f:4f:95:fc:57:4a:4c:
                    35:de:5a:1f:d4:24:9d:63:39:08:8c:14:b9:55:11:
                    87:f6:1b:24:15:b3:a4:78:f1:ed:03:17:ed:82:aa:
                    ae:b8:a9:4f:26:a9:d5:c3:40:f8:ab:df:aa:9c:02:
                    76:22:56:e0:33:14:06:01:a2:4d:2f:a1:8f:d0:4b:
                    1f:26:29:9b:21:c1:3f:70:05:3b:66:80:2f:67:96:
                    e5:a7:10:86:37:5c:ef:86:7a:cf:f3:bd:a6:c2:56:
                    e3:59:77:1d:79:89:43:5a:5b:f5:bf:02:63:9d:37:
                    d9:de:42:8e:10:42:01:fd:64:ae:b5:cf:05:8c:f8:
                    5d:73:66:db:c2:a3:91:03:2f:66:27:3c:40:3e:2c:
                    77:db:67:2f:fe:82:47:11:0b:65:01:fa:10:f3:c5:
                    63:c1:d1:d2:86:c2:4f:e1:33:cb:7e:d9:52:fb:cf:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:93:A7:24:03:E1:D7:36:06:46:9E:73:84:20:48:FA:89:03:EE
            X509v3 Authority Key Identifier:
                keyid:A8:CF:57:18:11:5B:9C:05:B1:4F:07:94:1D:58:B6:18:B3:67:CC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/323830343a323861383a3a2f33322d3332203d3e20323633393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:b1:99:c6:14:2c:17:16:f0:a1:61:84:c5:e5:00:e8:ba:
         61:f8:e4:b6:a4:90:c9:96:b3:11:40:c2:e6:57:a9:78:fb:dc:
         f2:de:0d:ff:19:1f:02:da:16:52:6a:a4:6a:c9:04:ad:5a:62:
         07:c7:03:db:f0:dd:94:30:5d:09:82:a3:47:5d:bc:f1:ce:f8:
         77:e2:7a:b7:88:07:91:06:d7:7a:98:11:e2:a7:2c:4e:19:6e:
         eb:d7:04:07:9e:50:ab:32:71:8c:b1:3a:f0:e0:b7:c8:c2:13:
         6d:52:91:e1:36:be:cf:db:3c:01:bd:11:06:66:9f:76:5b:2e:
         8c:07:76:d6:00:a7:87:c0:ef:a8:22:f9:bf:54:dc:96:30:0d:
         b2:50:c4:80:04:ce:0c:d0:d8:d9:81:af:06:e2:9b:93:6d:5e:
         f0:be:91:9e:40:33:ac:e7:e4:64:70:6e:dd:43:42:0e:84:9b:
         c4:6c:5a:02:26:2e:81:e1:62:71:c3:8c:e0:19:a0:00:aa:2d:
         d6:a7:e2:b0:f4:dc:19:d5:ca:95:ce:91:9a:f5:ff:b1:93:89:
         5f:07:98:d5:58:c9:1a:58:4c:c8:c8:e7:a1:73:cb:b8:e3:13:
         11:81:32:3a:c1:76:9c:d4:7c:6c:83:e1:93:1f:bf:17:07:6e:
         1c:0e:bc:4d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHoZm+4LVbPrJN4Q2MzxVmsbi060wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThDRjU3MTgxMTVCOUMwNUIxNEYwNzk0MUQ1OEI2MThC
MzY3Q0NFMzAeFw0yMzA5MTUxNzMxMjhaFw0yNDA5MTMxNzM2MjhaMDMxMTAvBgNV
BAMTKDIxNEM5M0E3MjQwM0UxRDczNjA2NDY5RTczODQyMDQ4RkE4OTAzRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6a0gxwZXOMiLoSIuGkrD1PXD9
wZQ/ZLbqDTnO6l51s/wh0uuc+lFiJ6+Fv8U6Tjq1SBO5g/SHVWpfKHv53AS8rK5c
QKRxe+s6zwVnT70eZpLZT0+V/FdKTDXeWh/UJJ1jOQiMFLlVEYf2GyQVs6R48e0D
F+2Cqq64qU8mqdXDQPir36qcAnYiVuAzFAYBok0voY/QSx8mKZshwT9wBTtmgC9n
luWnEIY3XO+Ges/zvabCVuNZdx15iUNaW/W/AmOdN9neQo4QQgH9ZK61zwWM+F1z
ZtvCo5EDL2YnPEA+LHfbZy/+gkcRC2UB+hDzxWPB0dKGwk/hM8t+2VL7z6RtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIUyTpyQD4dc2Bkaec4QgSPqJA+4wHwYDVR0j
BBgwFoAUqM9XGBFbnAWxTweUHVi2GLNnzOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2N0Uk5SdU5oSHRCNFdSaDJUOG01SkxNSlNLMllhRFdudHJaemQzV3hT
QXMvMC9BOENGNTcxODExNUI5QzA1QjE0RjA3OTQxRDU4QjYxOEIzNjdDQ0UzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E4Q0Y1NzE4MTE1QjlDMDVC
MTRGMDc5NDFENThCNjE4QjM2N0NDRTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djdFJOUnVOaEh0QjRXUmgyVDhtNUpMTUpTSzJZYURXbnRyWnpkM1d4U0FzLzAv
MzIzODMwMzQzYTMyMzg2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQoqDANBgkqhkiG9w0BAQsFAAOCAQEAFuuxmcYU
LBcW8KFhhMXlAOi6YfjktqSQyZazEUDC5lepePvc8t4N/xkfAtoWUmqkaskErVpi
B8cD2/DdlDBdCYKjR1288c74d+J6t4gHkQbXepgR4qcsThlu69cEB55QqzJxjLE6
8OC3yMITbVKR4Ta+z9s8Ab0RBmafdlsujAd21gCnh8DvqCL5v1TcljANslDEgATO
DNDY2YGvBuKbk21e8L6RnkAzrOfkZHBu3UNCDoSbxGxaAiYugeFiccOM4BmgAKot
1qfisPTcGdXKlc6RmvX/sZOJXweY1VjJGlhMyMjnoXPLuOMTEYEyOsF2nNR8bIPh
kx+/FwduHA68TQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:15 2025 by rpki-client