Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/323830343a3362383a3a2f33322d3438203d3e203532393635.roa
File:                     323830343a3362383a3a2f33322d3438203d3e203532393635.roa (raw, json)
Hash identifier:          wetHA+Z4vENLIQyvPIwxeTiwKwhzNFkRoP5x8TT8cP4=
Subject key identifier:   5E:8B:60:7D:DE:F4:B6:F8:88:9C:94:72:B7:51:1D:85:07:CE:F1:7C
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       2CDD158DB16895A6536034B23D51ED50074CE865
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/323830343a3362383a3a2f33322d3438203d3e203532393635.roa
Signing time:             Thu 06 Oct 2022 19:08:50 +0000
ROA not before:           Thu 06 Oct 2022 19:03:50 +0000
ROA not after:            Thu 05 Oct 2023 19:08:50 +0000
asID:                     52965
IP address blocks:        2804:3b8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dd:15:8d:b1:68:95:a6:53:60:34:b2:3d:51:ed:50:07:4c:e8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Oct  6 19:03:50 2022 GMT
            Not After : Oct  5 19:08:50 2023 GMT
        Subject: CN=5E8B607DDEF4B6F8889C9472B7511D8507CEF17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:47:4a:b0:e2:78:7e:74:3e:fc:5f:d1:ac:
                    a5:52:3a:e3:e2:8a:c6:11:7c:09:d1:df:b5:da:0f:
                    3c:85:31:d5:56:cd:ec:07:c3:cf:0c:1b:75:9c:99:
                    85:ee:c7:18:71:e7:27:aa:29:a7:3d:15:90:3f:e4:
                    3b:e6:57:39:df:cc:1c:52:21:af:93:0a:b8:f2:5f:
                    f0:b3:a0:83:a2:80:7b:5f:82:13:e3:73:4d:5e:37:
                    2e:d9:6b:13:4b:c7:b6:4c:70:64:e8:d1:3a:ef:65:
                    e3:b0:a1:f1:fd:fe:06:d0:b5:c0:0c:58:37:03:d3:
                    0a:dd:3f:ae:e0:d4:fa:82:8f:cd:3b:33:cf:db:bd:
                    eb:9a:b4:53:5c:66:1b:0f:a7:8b:7b:6e:24:7b:34:
                    e3:b8:c7:1b:e0:2f:ac:ff:01:f6:6e:db:76:66:dd:
                    25:94:55:75:4b:f1:e4:4c:80:3a:40:ea:f8:1f:60:
                    24:d5:7b:43:f2:ac:22:4a:f2:08:73:ac:f4:db:92:
                    03:e2:32:78:41:e1:fd:7a:fd:9d:b3:9b:2d:81:cb:
                    be:e4:cf:34:5d:74:60:22:13:b7:a8:d6:d6:a4:6c:
                    9f:bf:62:79:9e:ef:ee:9c:da:23:0c:bf:58:c1:c4:
                    5f:1d:74:fb:9e:c7:cd:90:1e:74:ac:be:63:94:22:
                    77:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:60:7D:DE:F4:B6:F8:88:9C:94:72:B7:51:1D:85:07:CE:F1:7C
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/323830343a3362383a3a2f33322d3438203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:49:ce:dc:72:70:2c:4d:87:cb:91:88:a2:01:59:4f:2e:b7:
         d9:0c:f6:e0:3f:19:4e:32:85:44:ac:ab:a4:fe:33:5d:79:db:
         39:45:da:f6:c7:df:13:64:f5:80:fa:a2:cf:da:60:1a:16:ab:
         d1:f0:69:01:4e:e9:84:5e:9f:a1:33:ad:f0:6b:cf:b1:07:55:
         f8:4f:dd:73:0e:0a:fb:5d:df:4b:0b:e2:bf:b7:af:9a:07:d1:
         ed:90:91:2e:5c:cc:c9:30:67:2a:a7:43:a5:0c:e0:e3:af:0d:
         fa:8a:4c:9f:4e:18:b8:34:b7:01:6d:4c:bf:e7:54:dc:f3:ed:
         2f:76:96:65:4c:9e:15:0e:2c:a8:a1:69:2f:5c:04:40:37:fb:
         fd:74:d6:45:3b:5d:f6:c4:e2:2f:b1:39:63:31:e6:c6:60:85:
         73:10:22:39:22:96:1e:5c:53:53:bd:da:0f:74:58:a7:54:30:
         84:b4:e6:0f:e9:f7:b8:f9:f4:61:6a:8d:dc:17:50:7c:7f:e6:
         6b:3c:9f:bd:cf:d9:f6:22:b7:f1:5a:04:b9:52:30:7e:d7:15:
         c9:5b:54:48:75:8f:52:20:65:ba:5a:5c:0a:aa:1d:5a:f1:ac:
         91:b3:14:ef:92:b7:9b:5d:b7:b2:b9:49:cf:89:a9:03:0e:a6:
         5b:cb:ce:c6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIULN0VjbFolaZTYDSyPVHtUAdM6GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIzNUEyNjZENDQ3Q0EzQjcyQTM1NTEzQkE5NzYxRjU4
MDVGMjNFMjAeFw0yMjEwMDYxOTAzNTBaFw0yMzEwMDUxOTA4NTBaMDMxMTAvBgNV
BAMTKDVFOEI2MDdEREVGNEI2Rjg4ODlDOTQ3MkI3NTExRDg1MDdDRUYxN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EkdKsOJ4fnQ+/F/RrKVSOuPi
isYRfAnR37XaDzyFMdVWzewHw88MG3WcmYXuxxhx5yeqKac9FZA/5DvmVznfzBxS
Ia+TCrjyX/CzoIOigHtfghPjc01eNy7ZaxNLx7ZMcGTo0TrvZeOwofH9/gbQtcAM
WDcD0wrdP67g1PqCj807M8/bveuatFNcZhsPp4t7biR7NOO4xxvgL6z/AfZu23Zm
3SWUVXVL8eRMgDpA6vgfYCTVe0PyrCJK8ghzrPTbkgPiMnhB4f16/Z2zmy2By77k
zzRddGAiE7eo1takbJ+/Ynme7+6c2iMMv1jBxF8ddPuex82QHnSsvmOUInebAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUXotgfd70tviInJRyt1EdhQfO8XwwHwYDVR0j
BBgwFoAUMjWiZtRHyjtyo1UTupdh9YBfI+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24yOHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFC
Q1gvMS8zMjM1QTI2NkQ0NDdDQTNCNzJBMzU1MTNCQTk3NjFGNTgwNUYyM0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMzVBMjY2RDQ0N0NBM0I3
MkEzNTUxM0JBOTc2MUY1ODA1RjIzRTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duMjhzeG1QdGdFZnFwYUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzEv
MzIzODMwMzQzYTMzNjIzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzOTM2
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAO4MA0GCSqGSIb3DQEBCwUAA4IBAQAzSc7ccnAsTYfL
kYiiAVlPLrfZDPbgPxlOMoVErKuk/jNdeds5Rdr2x98TZPWA+qLP2mAaFqvR8GkB
TumEXp+hM63wa8+xB1X4T91zDgr7Xd9LC+K/t6+aB9HtkJEuXMzJMGcqp0OlDODj
rw36ikyfThi4NLcBbUy/51Tc8+0vdpZlTJ4VDiyooWkvXARAN/v9dNZFO132xOIv
sTljMebGYIVzECI5IpYeXFNTvdoPdFinVDCEtOYP6fe4+fRhao3cF1B8f+ZrPJ+9
z9n2IrfxWgS5UjB+1xXJW1RIdY9SIGW6WlwKqh1a8ayRsxTvkrebXbeyuUnPiakD
DqZby87G
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:32 2025 by rpki-client