Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/323830343a323363383a3a2f33322d3332203d3e20323634313832.roa
File:                     323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (raw, json)
Hash identifier:          75NZyni0r9NFzKEI0aHi87yG5lCr4dezIIL+WugNqC4=
Subject key identifier:   95:BE:91:9A:F2:17:A1:18:6D:A4:1D:D7:F5:4C:EC:4B:F9:C8:F9:BB
Certificate issuer:       /CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
Certificate serial:       57B37ACAAE0844D909D47A1F281C33DF6D23EDD3
Authority key identifier: B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/323830343a323363383a3a2f33322d3332203d3e20323634313832.roa
Signing time:             Fri 23 Feb 2024 13:21:13 +0000
ROA not before:           Fri 23 Feb 2024 13:16:13 +0000
ROA not after:            Fri 21 Feb 2025 13:21:13 +0000
asID:                     264182
IP address blocks:        2804:23c8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b3:7a:ca:ae:08:44:d9:09:d4:7a:1f:28:1c:33:df:6d:23:ed:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
        Validity
            Not Before: Feb 23 13:16:13 2024 GMT
            Not After : Feb 21 13:21:13 2025 GMT
        Subject: CN=95BE919AF217A1186DA41DD7F54CEC4BF9C8F9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:5d:33:a9:27:d4:76:a6:7f:57:6e:98:9c:
                    42:b5:99:94:23:ba:b8:3e:86:2c:ca:3e:66:2a:83:
                    1e:7e:c2:8b:66:47:d3:1b:aa:d9:03:96:5f:08:d3:
                    d3:85:67:d8:ae:9f:1a:b0:ad:22:88:7c:c9:5e:06:
                    f6:41:c6:61:0e:89:d6:4d:f3:1f:e5:10:49:32:93:
                    bb:d9:50:26:ec:89:4c:09:2c:67:33:ec:4a:f6:04:
                    04:42:e3:a4:0d:a8:38:7f:36:d1:7b:0d:d9:83:e8:
                    e5:5e:65:61:3d:0f:ca:82:c1:81:a1:dc:2b:99:99:
                    2a:af:42:7d:b8:16:24:25:64:48:7c:9e:11:5a:8f:
                    28:d2:c3:b1:88:f7:e5:b5:15:c4:b3:20:97:da:20:
                    d4:12:93:41:28:1d:b6:2f:0f:16:bb:58:4b:bc:08:
                    e2:3e:83:9b:14:d6:b1:0f:0a:28:ea:5d:3b:d6:63:
                    d2:07:5b:9a:db:dc:3d:6b:a9:21:f6:7f:04:e7:5b:
                    33:d6:64:be:f4:17:4b:e2:48:f2:ee:5e:75:1a:b8:
                    9e:da:91:a9:32:4c:73:e5:0a:63:d3:c7:0e:19:17:
                    b7:2a:73:7a:91:51:64:59:9b:62:2e:1e:ad:b7:c9:
                    4c:c2:4a:9c:4e:d0:f3:12:4a:10:b8:a7:21:da:b4:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BE:91:9A:F2:17:A1:18:6D:A4:1D:D7:F5:4C:EC:4B:F9:C8:F9:BB
            X509v3 Authority Key Identifier:
                keyid:B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/323830343a323363383a3a2f33322d3332203d3e20323634313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:d5:b1:91:e9:35:a4:c1:b9:b5:cc:45:9f:e3:94:7a:93:
         bc:9d:23:4d:21:a4:16:f4:94:e8:01:b5:d4:cc:12:bf:da:10:
         de:3e:16:30:83:e0:86:72:02:67:24:72:68:bb:23:8d:da:ae:
         ad:5c:7b:f0:97:15:44:62:aa:57:b0:66:ce:ae:a1:a7:3d:21:
         a5:fb:df:65:b2:66:7b:51:f6:29:12:ee:5f:10:3a:c8:80:70:
         18:48:9d:8a:9c:b7:fa:e9:d3:4a:1d:d7:0b:15:fb:57:c7:37:
         61:e9:9e:c7:84:dd:a2:58:14:99:02:79:7c:99:39:c1:58:ad:
         53:52:1e:4c:ed:10:2c:78:a4:26:b8:c2:a5:d5:d6:90:c1:25:
         6d:d0:f6:1d:75:20:5c:17:9b:8e:e6:42:dd:33:41:24:78:03:
         2d:cc:a3:e4:8f:29:13:19:dc:44:6b:8f:6c:38:50:56:c9:4a:
         fa:80:78:49:17:7f:60:7c:c6:25:f9:24:79:21:41:52:ae:d8:
         0a:00:66:12:0b:bb:63:d4:1b:df:c9:11:91:46:c0:18:bf:53:
         ec:1b:82:0a:76:67:8f:2d:d2:6b:cd:02:9e:c7:c0:13:86:de:
         fa:96:83:2e:99:12:d7:79:30:4c:40:ba:0d:7e:68:da:35:36:
         ab:e3:22:94
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUV7N6yq4IRNkJ1HofKBwz320j7dMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU2RDY1MjFEQjIwQkQ3NzI2MDhCMkFFN0M4Njc0REVB
OEE1NTk4RjAeFw0yNDAyMjMxMzE2MTNaFw0yNTAyMjExMzIxMTNaMDMxMTAvBgNV
BAMTKDk1QkU5MTlBRjIxN0ExMTg2REE0MUREN0Y1NENFQzRCRjlDOEY5QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUF0zqSfUdqZ/V26YnEK1mZQj
urg+hizKPmYqgx5+wotmR9MbqtkDll8I09OFZ9iunxqwrSKIfMleBvZBxmEOidZN
8x/lEEkyk7vZUCbsiUwJLGcz7Er2BARC46QNqDh/NtF7DdmD6OVeZWE9D8qCwYGh
3CuZmSqvQn24FiQlZEh8nhFajyjSw7GI9+W1FcSzIJfaINQSk0EoHbYvDxa7WEu8
COI+g5sU1rEPCijqXTvWY9IHW5rb3D1rqSH2fwTnWzPWZL70F0viSPLuXnUauJ7a
kakyTHPlCmPTxw4ZF7cqc3qRUWRZm2IuHq23yUzCSpxO0PMSShC4pyHatCzZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlb6RmvIXoRhtpB3X9UzsS/nI+bswHwYDVR0j
BBgwFoAUtW1lIdsgvXcmCLKufIZ03qilWY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi
eksvMC9CNTZENjUyMURCMjBCRDc3MjYwOEIyQUU3Qzg2NzRERUE4QTU1OThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I1NkQ2NTIxREIyMEJENzcy
NjA4QjJBRTdDODY3NERFQThBNTU5OEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hIZ0pxeG9kWnRudTJLaXJUaFI4c3A3S1F2RENyaVhRSkVmUGZGQzVUYnpLLzAv
MzIzODMwMzQzYTMyMzM2MzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzEzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQjyDANBgkqhkiG9w0BAQsFAAOCAQEAjVPVsZHp
NaTBubXMRZ/jlHqTvJ0jTSGkFvSU6AG11MwSv9oQ3j4WMIPghnICZyRyaLsjjdqu
rVx78JcVRGKqV7Bmzq6hpz0hpfvfZbJme1H2KRLuXxA6yIBwGEidipy3+unTSh3X
CxX7V8c3Yemex4TdolgUmQJ5fJk5wVitU1IeTO0QLHikJrjCpdXWkMElbdD2HXUg
XBebjuZC3TNBJHgDLcyj5I8pExncRGuPbDhQVslK+oB4SRd/YHzGJfkkeSFBUq7Y
CgBmEgu7Y9Qb38kRkUbAGL9T7BuCCnZnjy3Sa80CnsfAE4be+paDLpkS13kwTEC6
DX5o2jU2q+MilA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:47 2025 by rpki-client