Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa
File:                     323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa (raw, json)
Hash identifier:          v7S2CLGT/ZqXkfm07pku2Pp32bVIRh7d3pnHAY8XPa0=
Subject key identifier:   16:8F:D1:18:00:7B:D4:D1:48:DC:1F:1C:1B:8A:FF:EF:0A:13:C8:68
Certificate issuer:       /CN=68444A333B7333B9388B8EEAF41EBF4CE7435184
Certificate serial:       3B362239C35E2C7FD0771ACAB5F03C0D2BDA7882
Authority key identifier: 68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa
Signing time:             Wed 11 Dec 2024 13:29:23 +0000
ROA not before:           Wed 11 Dec 2024 13:24:23 +0000
ROA not after:            Wed 10 Dec 2025 13:29:23 +0000
asID:                     273564
IP address blocks:        2804:90a0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:36:22:39:c3:5e:2c:7f:d0:77:1a:ca:b5:f0:3c:0d:2b:da:78:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68444A333B7333B9388B8EEAF41EBF4CE7435184
        Validity
            Not Before: Dec 11 13:24:23 2024 GMT
            Not After : Dec 10 13:29:23 2025 GMT
        Subject: CN=168FD118007BD4D148DC1F1C1B8AFFEF0A13C868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:5f:b0:d3:4a:95:7c:d9:9d:1f:90:d7:3d:
                    f9:fb:72:55:97:78:18:8d:9c:10:e8:8a:2b:13:2f:
                    27:a3:55:27:8f:dc:3a:e6:ac:d5:bf:a4:bf:95:62:
                    e3:50:f2:28:70:fe:dc:55:bb:b5:dd:b8:f7:eb:75:
                    de:3d:41:3a:3e:7d:05:d2:21:ad:44:d1:8f:36:95:
                    13:f6:21:01:ab:9f:14:92:e3:98:cf:43:7d:5e:5f:
                    06:22:18:01:34:7d:19:39:fa:44:3f:04:be:6c:35:
                    b6:b8:66:22:ca:ea:41:cf:b0:71:45:11:e5:29:f7:
                    5a:7d:f7:93:f8:7f:c6:4e:6d:86:02:45:50:f5:a2:
                    2b:94:47:40:23:fc:59:09:63:07:ee:da:d5:91:a1:
                    3a:41:26:28:96:43:d6:ad:e3:01:53:7b:66:89:9e:
                    7f:63:b2:ed:64:d4:b6:a1:43:da:15:d7:64:d9:a3:
                    3e:d9:92:6e:0f:63:92:47:7d:2b:f7:05:cc:74:c9:
                    9b:15:87:87:56:c5:af:84:b5:f4:6a:a6:37:66:3d:
                    b1:0d:f1:94:03:26:bf:da:45:9d:f5:6c:7b:3d:4f:
                    41:47:32:6c:51:77:a2:6d:33:3c:3a:97:9f:3c:9f:
                    d9:88:37:3e:84:c3:5f:b4:2d:6f:df:43:bb:e8:9f:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8F:D1:18:00:7B:D4:D1:48:DC:1F:1C:1B:8A:FF:EF:0A:13:C8:68
            X509v3 Authority Key Identifier:
                keyid:68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:62:dd:30:1c:c6:98:bf:9b:d6:dc:ac:f1:a3:e5:23:7c:86:
         98:c2:f3:68:c9:13:7b:a6:cc:f7:42:c3:90:ec:b9:d7:b6:94:
         a2:80:9a:05:d8:42:95:4e:be:92:7d:51:5b:aa:c3:d1:08:8a:
         6d:89:91:c3:d2:22:5e:db:a9:24:50:c7:ff:c9:93:68:de:57:
         1e:f6:eb:c8:39:5a:08:0f:11:34:60:98:f5:93:f3:f1:dc:b0:
         f3:04:c6:35:f6:1b:ce:59:c1:e9:0e:4c:50:11:12:ef:f4:3a:
         c1:58:ad:d2:c8:46:84:2d:a6:2c:b3:58:87:23:d6:f4:84:5f:
         55:1e:27:4a:30:aa:5e:65:c2:66:f0:cd:0a:e9:e0:68:41:68:
         38:37:8c:f9:b4:61:99:43:5c:ce:4b:c3:b1:ec:38:9a:01:c6:
         9c:70:90:74:f8:f4:45:fa:78:fb:fa:54:fa:bb:67:f5:ef:03:
         4a:55:8b:e0:59:79:a7:c2:b4:ee:98:9a:ce:c3:7e:e0:23:49:
         7f:69:0f:0d:a3:2b:c3:3b:e7:79:6a:e4:60:11:13:50:b5:4d:
         85:05:ea:9c:2d:24:62:e3:c4:f6:30:8e:15:70:21:2e:81:90:
         17:58:f9:7f:06:96:26:a6:ef:69:17:0d:ca:11:26:2e:53:62:
         e8:47:5a:20
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOzYiOcNeLH/QdxrKtfA8DSvaeIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0NDRBMzMzQjczMzNCOTM4OEI4RUVBRjQxRUJGNENF
NzQzNTE4NDAeFw0yNDEyMTExMzI0MjNaFw0yNTEyMTAxMzI5MjNaMDMxMTAvBgNV
BAMTKDE2OEZEMTE4MDA3QkQ0RDE0OERDMUYxQzFCOEFGRkVGMEExM0M4NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxV+w00qVfNmdH5DXPfn7clWX
eBiNnBDoiisTLyejVSeP3DrmrNW/pL+VYuNQ8ihw/txVu7XduPfrdd49QTo+fQXS
Ia1E0Y82lRP2IQGrnxSS45jPQ31eXwYiGAE0fRk5+kQ/BL5sNba4ZiLK6kHPsHFF
EeUp91p995P4f8ZObYYCRVD1oiuUR0Aj/FkJYwfu2tWRoTpBJiiWQ9at4wFTe2aJ
nn9jsu1k1LahQ9oV12TZoz7Zkm4PY5JHfSv3Bcx0yZsVh4dWxa+EtfRqpjdmPbEN
8ZQDJr/aRZ31bHs9T0FHMmxRd6JtMzw6l588n9mINz6Ew1+0LW/fQ7von6oLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFo/RGAB71NFI3B8cG4r/7woTyGgwHwYDVR0j
BBgwFoAUaERKMztzM7k4i47q9B6/TOdDUYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4x
cGcvMC82ODQ0NEEzMzNCNzMzM0I5Mzg4QjhFRUFGNDFFQkY0Q0U3NDM1MTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NDQ0QTMzM0I3MzMzQjkz
ODhCOEVFQUY0MUVCRjRDRTc0MzUxODQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hSQlVCNDVyM0J2TmNEQUNCU2JQYVZZNTNlUDhKRjM3OTV3MVlwM2puMXBnLzAv
MzIzODMwMzQzYTM5MzA2MTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMzM1MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEkKCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAAYt0wHMaYv5vW3Kzxo+UjfIaYwvNoyRN7psz3QsOQ7LnXtpSigJoF2EKV
Tr6SfVFbqsPRCIptiZHD0iJe26kkUMf/yZNo3lce9uvIOVoIDxE0YJj1k/Px3LDz
BMY19hvOWcHpDkxQERLv9DrBWK3SyEaELaYss1iHI9b0hF9VHidKMKpeZcJm8M0K
6eBoQWg4N4z5tGGZQ1zOS8Ox7DiaAcaccJB0+PRF+nj7+lT6u2f17wNKVYvgWXmn
wrTumJrOw37gI0l/aQ8NoyvDO+d5auRgERNQtU2FBeqcLSRi48T2MI4VcCEugZAX
WPl/BpYmpu9pFw3KESYuU2LoR1og
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:14:38 2025 by rpki-client