Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/0/323830343a313635633a3a2f33322d3438203d3e20323633323834.roa
File:                     323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (raw, json)
Hash identifier:          wewiN49c43kSELt8Dib/LfFC6ESYkj2abB1Dy6dSbjY=
Subject key identifier:   B1:E3:42:33:85:40:E1:77:8F:C3:AE:FD:35:7B:B7:22:36:F5:C1:D0
Certificate issuer:       /CN=BF5582CD642E6E69BB0917BB324B8145EB6E543B
Certificate serial:       6A9E01AB3DDA5585746D05A321E2B320C08A05EC
Authority key identifier: BF:55:82:CD:64:2E:6E:69:BB:09:17:BB:32:4B:81:45:EB:6E:54:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5582CD642E6E69BB0917BB324B8145EB6E543B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/0/323830343a313635633a3a2f33322d3438203d3e20323633323834.roa
Signing time:             Wed 06 Sep 2023 11:31:12 +0000
ROA not before:           Wed 06 Sep 2023 11:26:12 +0000
ROA not after:            Wed 04 Sep 2024 11:31:12 +0000
asID:                     263284
IP address blocks:        2804:165c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9e:01:ab:3d:da:55:85:74:6d:05:a3:21:e2:b3:20:c0:8a:05:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF5582CD642E6E69BB0917BB324B8145EB6E543B
        Validity
            Not Before: Sep  6 11:26:12 2023 GMT
            Not After : Sep  4 11:31:12 2024 GMT
        Subject: CN=B1E342338540E1778FC3AEFD357BB72236F5C1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:47:15:b5:b3:98:87:a0:2d:16:9f:6f:c7:
                    b4:9a:20:0b:20:b8:b5:e0:4a:eb:3d:92:4f:e0:7a:
                    57:da:0b:69:44:e1:fd:00:09:18:1c:76:da:51:71:
                    09:e1:8c:dc:4b:e9:1c:cf:d3:f0:fb:c2:22:21:1c:
                    7e:e9:d0:06:62:cb:00:32:2d:8c:7a:f7:da:e4:b4:
                    25:ed:2d:21:c4:b3:ab:28:dd:be:76:75:3d:91:87:
                    31:7a:75:2c:55:ac:28:50:4a:54:cd:5a:95:9a:b6:
                    71:3d:5b:7f:80:4b:6f:f4:17:90:6e:26:84:bc:ee:
                    97:2d:dd:0b:da:a3:3a:51:dd:43:16:08:7d:27:aa:
                    22:c7:ee:18:17:9c:e4:ee:7d:68:ad:27:5c:6e:57:
                    0d:1b:eb:19:2d:95:27:b2:bb:f2:31:da:81:7d:cd:
                    c1:7c:a9:0b:21:83:98:23:cb:5f:de:b5:4e:2e:d7:
                    be:77:d8:bb:09:96:1a:01:39:f3:fd:25:a2:24:f7:
                    d7:f9:d5:a1:a5:dd:78:5c:2a:b9:87:10:0e:23:08:
                    9b:63:54:82:b5:8f:73:0f:0d:fd:e7:6c:33:f4:63:
                    d3:9f:51:44:af:2a:3b:85:5d:88:27:4f:48:26:09:
                    57:d8:53:aa:b4:22:a3:73:8b:2f:4b:f8:be:b0:65:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:42:33:85:40:E1:77:8F:C3:AE:FD:35:7B:B7:22:36:F5:C1:D0
            X509v3 Authority Key Identifier:
                keyid:BF:55:82:CD:64:2E:6E:69:BB:09:17:BB:32:4B:81:45:EB:6E:54:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/0/BF5582CD642E6E69BB0917BB324B8145EB6E543B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5582CD642E6E69BB0917BB324B8145EB6E543B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/0/323830343a313635633a3a2f33322d3438203d3e20323633323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:165c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:66:29:3f:d6:79:a4:52:eb:95:a5:11:6b:ed:f3:37:54:
         5e:47:12:71:7e:fb:c3:b1:96:8a:73:b9:d8:36:04:91:62:ff:
         32:16:d4:a8:9c:d1:61:6d:c1:bd:a6:8a:47:44:66:29:a9:0f:
         64:b1:af:32:1a:5c:b3:33:47:3d:8a:0e:23:39:67:26:aa:d4:
         f8:74:e8:d0:13:eb:dd:5f:82:80:8c:92:cf:fd:7b:4e:bb:5c:
         4f:93:84:c4:51:c8:dd:c2:65:c0:a2:c7:99:d3:b6:5f:5b:a2:
         74:d7:a8:9d:fb:79:41:6f:fb:67:da:dd:27:57:ae:b5:7b:54:
         8f:2d:40:89:d7:f6:aa:99:30:8a:5f:91:1c:c9:b8:62:32:47:
         50:f8:4d:bf:f5:b8:1b:ff:90:e5:f0:2e:ec:f5:f0:28:90:48:
         6b:d2:d5:70:8b:58:cb:2c:36:3e:89:ef:41:46:2f:59:59:bf:
         d8:0e:42:15:81:03:38:a9:4a:8b:6f:e2:bd:52:75:6f:37:69:
         25:5c:de:fc:fb:55:d6:e1:04:73:3c:0e:6b:ad:84:f9:01:9c:
         fc:e6:3a:62:c0:fe:bb:6f:23:14:2d:49:d1:0c:4e:cf:f7:c2:
         fc:e2:a5:35:3c:2b:5b:fc:86:f9:d8:68:cc:61:a0:a5:42:98:
         c4:bd:a3:a0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUap4Bqz3aVYV0bQWjIeKzIMCKBewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY1NTgyQ0Q2NDJFNkU2OUJCMDkxN0JCMzI0QjgxNDVF
QjZFNTQzQjAeFw0yMzA5MDYxMTI2MTJaFw0yNDA5MDQxMTMxMTJaMDMxMTAvBgNV
BAMTKEIxRTM0MjMzODU0MEUxNzc4RkMzQUVGRDM1N0JCNzIyMzZGNUMxRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj90cVtbOYh6AtFp9vx7SaIAsg
uLXgSus9kk/gelfaC2lE4f0ACRgcdtpRcQnhjNxL6RzP0/D7wiIhHH7p0AZiywAy
LYx699rktCXtLSHEs6so3b52dT2RhzF6dSxVrChQSlTNWpWatnE9W3+AS2/0F5Bu
JoS87pct3QvaozpR3UMWCH0nqiLH7hgXnOTufWitJ1xuVw0b6xktlSeyu/Ix2oF9
zcF8qQshg5gjy1/etU4u17532LsJlhoBOfP9JaIk99f51aGl3XhcKrmHEA4jCJtj
VIK1j3MPDf3nbDP0Y9OfUUSvKjuFXYgnT0gmCVfYU6q0IqNziy9L+L6wZZMJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUseNCM4VA4XePw679NXu3Ijb1wdAwHwYDVR0j
BBgwFoAUv1WCzWQubmm7CRe7MkuBRetuVDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRG
aXUvMC9CRjU1ODJDRDY0MkU2RTY5QkIwOTE3QkIzMjRCODE0NUVCNkU1NDNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNTU4MkNENjQyRTZFNjlC
QjA5MTdCQjMyNEI4MTQ1RUI2RTU0M0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duR2VERDJiZ2JOUUpnZEVadmt3S0xkSHJvZ3NKaGptenp4OTVFUkp0Rml1LzAv
MzIzODMwMzQzYTMxMzYzNTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQWXDANBgkqhkiG9w0BAQsFAAOCAQEACklmKT/W
eaRS65WlEWvt8zdUXkcScX77w7GWinO52DYEkWL/MhbUqJzRYW3BvaaKR0RmKakP
ZLGvMhpcszNHPYoOIzlnJqrU+HTo0BPr3V+CgIySz/17TrtcT5OExFHI3cJlwKLH
mdO2X1uidNeonft5QW/7Z9rdJ1eutXtUjy1Aidf2qpkwil+RHMm4YjJHUPhNv/W4
G/+Q5fAu7PXwKJBIa9LVcItYyyw2PonvQUYvWVm/2A5CFYEDOKlKi2/ivVJ1bzdp
JVze/PtV1uEEczwOa62E+QGc/OY6YsD+u28jFC1J0QxOz/fC/OKlNTwrW/yG+dho
zGGgpUKYxL2joA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:04 2025 by rpki-client