Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33332d3333203d3e20323638393239.roa
File:                     323830343a356363343a3a2f33332d3333203d3e20323638393239.roa (raw, json)
Hash identifier:          aAn6weAOz2mYIKkTczHPlrO6x8F0psOC8vUsuvIDExY=
Subject key identifier:   27:44:CA:7A:96:19:6F:13:45:F3:17:8B:24:3B:6F:70:76:C4:B9:F0
Certificate issuer:       /CN=6567B8933DD6155850B7ED35B2E5AE75B6525A78
Certificate serial:       72D0FA0F799C25F31AF31456A67C219EDA13C8B4
Authority key identifier: 65:67:B8:93:3D:D6:15:58:50:B7:ED:35:B2:E5:AE:75:B6:52:5A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33332d3333203d3e20323638393239.roa
Signing time:             Thu 22 Jun 2023 16:50:26 +0000
ROA not before:           Thu 22 Jun 2023 16:45:26 +0000
ROA not after:            Thu 20 Jun 2024 16:50:26 +0000
asID:                     268929
IP address blocks:        2804:5cc4::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d0:fa:0f:79:9c:25:f3:1a:f3:14:56:a6:7c:21:9e:da:13:c8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6567B8933DD6155850B7ED35B2E5AE75B6525A78
        Validity
            Not Before: Jun 22 16:45:26 2023 GMT
            Not After : Jun 20 16:50:26 2024 GMT
        Subject: CN=2744CA7A96196F1345F3178B243B6F7076C4B9F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:cc:2a:56:56:a7:f1:51:10:10:0b:f8:af:
                    c6:f5:8a:5c:a9:3d:e3:6c:82:a4:97:ec:e2:07:73:
                    7a:ce:63:3a:3d:3c:72:f8:28:c8:e1:2e:45:70:b8:
                    35:6c:fc:c7:fe:59:d9:2d:55:1f:24:e9:14:52:78:
                    5f:11:11:07:bb:9a:8a:1c:e4:c2:34:91:31:d6:29:
                    55:30:e8:a1:e1:19:df:91:55:8f:ef:37:15:fd:d7:
                    7e:99:34:4f:91:97:75:13:01:00:3e:6e:00:7d:a1:
                    35:f1:20:d6:ec:02:d4:49:91:ee:09:f5:2d:e0:e6:
                    9d:2f:86:08:99:0c:b5:7e:a9:a1:0d:88:2a:80:ec:
                    54:d1:18:6a:30:d2:c0:28:05:8a:76:5e:e6:4c:c5:
                    d7:72:8b:2b:73:b9:db:28:7d:3d:8b:06:8b:6d:83:
                    51:14:f3:26:03:eb:7a:84:04:bc:bb:76:03:2e:b8:
                    a4:8a:fc:8e:91:d2:4e:9d:28:f9:b4:fe:da:d1:00:
                    ad:64:40:ef:30:18:4a:e0:dd:1d:0c:20:cd:ed:e8:
                    6d:49:99:8e:1e:a3:38:58:42:d4:91:70:5d:4e:1a:
                    82:5e:42:e6:82:c0:2e:15:ee:da:a8:79:67:c6:f9:
                    17:40:5c:7c:5e:5b:09:bd:e2:8c:7b:6f:ab:be:5e:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:CA:7A:96:19:6F:13:45:F3:17:8B:24:3B:6F:70:76:C4:B9:F0
            X509v3 Authority Key Identifier:
                keyid:65:67:B8:93:3D:D6:15:58:50:B7:ED:35:B2:E5:AE:75:B6:52:5A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33332d3333203d3e20323638393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cc4::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:06:8c:2e:6f:fc:10:e0:4c:93:37:e3:a7:05:f8:c1:47:fe:
         55:01:8c:c7:74:17:34:2d:84:3e:50:52:0b:bb:a7:aa:8d:ad:
         09:69:0c:5d:42:d5:b7:44:ef:ec:7e:89:79:5f:8f:2b:59:7b:
         c4:7b:2c:99:3e:2f:2c:71:a0:fd:a6:55:75:aa:5f:a5:d5:44:
         b2:67:87:1c:23:2b:2f:30:b6:06:0c:ad:c1:96:91:73:00:4f:
         36:f5:20:8a:88:e2:48:68:18:81:4c:87:40:fc:2c:d3:e5:7c:
         a3:57:39:3b:75:a5:a5:24:9c:06:bc:ed:97:a1:10:b4:4b:08:
         be:12:fc:18:72:41:58:77:2d:d8:d2:a7:8b:9f:40:c8:28:65:
         79:fc:32:a7:9b:83:d8:40:ab:a9:b3:0b:a4:dc:6b:6c:14:b0:
         b2:2b:8c:78:38:ac:cc:ea:d9:ac:58:8b:8e:97:ac:4e:99:35:
         51:83:82:df:19:ee:45:02:f9:8b:60:71:a1:38:d8:be:29:45:
         09:f5:bf:d4:b6:e1:76:0e:8a:03:45:e0:1c:44:2c:78:2d:c4:
         4e:02:4b:ea:94:f7:c1:20:70:b0:80:40:cd:a1:96:ca:cc:b6:
         1e:a1:be:f0:9a:ae:86:f4:28:2c:1d:43:ca:40:63:ea:fd:99:
         11:3a:0b:2e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUctD6D3mcJfMa8xRWpnwhntoTyLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2N0I4OTMzREQ2MTU1ODUwQjdFRDM1QjJFNUFFNzVC
NjUyNUE3ODAeFw0yMzA2MjIxNjQ1MjZaFw0yNDA2MjAxNjUwMjZaMDMxMTAvBgNV
BAMTKDI3NDRDQTdBOTYxOTZGMTM0NUYzMTc4QjI0M0I2RjcwNzZDNEI5RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09MwqVlan8VEQEAv4r8b1ilyp
PeNsgqSX7OIHc3rOYzo9PHL4KMjhLkVwuDVs/Mf+WdktVR8k6RRSeF8REQe7mooc
5MI0kTHWKVUw6KHhGd+RVY/vNxX9136ZNE+Rl3UTAQA+bgB9oTXxINbsAtRJke4J
9S3g5p0vhgiZDLV+qaENiCqA7FTRGGow0sAoBYp2XuZMxddyiytzudsofT2LBott
g1EU8yYD63qEBLy7dgMuuKSK/I6R0k6dKPm0/trRAK1kQO8wGErg3R0MIM3t6G1J
mY4eozhYQtSRcF1OGoJeQuaCwC4V7tqoeWfG+RdAXHxeWwm94ox7b6u+Xmm5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUJ0TKepYZbxNF8xeLJDtvcHbEufAwHwYDVR0j
BBgwFoAUZWe4kz3WFVhQt+01suWudbZSWngwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LSzVYa25Xb1dzZHJWZWl3Q1pHemluRnE2Qk5XMXZLTkZrb1M5bm9aTWRo
LzAvNjU2N0I4OTMzREQ2MTU1ODUwQjdFRDM1QjJFNUFFNzVCNjUyNUE3OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82NTY3Qjg5MzNERDYxNTU4NTBC
N0VEMzVCMkU1QUU3NUI2NTI1QTc4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
SzVYa25Xb1dzZHJWZWl3Q1pHemluRnE2Qk5XMXZLTkZrb1M5bm9aTWRoLzAvMzIz
ODMwMzQzYTM1NjM2MzM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4Mzkz
MjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYHKARcxAAwDQYJKoZIhvcNAQELBQADggEBADgGjC5v/BDg
TJM346cF+MFH/lUBjMd0FzQthD5QUgu7p6qNrQlpDF1C1bdE7+x+iXlfjytZe8R7
LJk+LyxxoP2mVXWqX6XVRLJnhxwjKy8wtgYMrcGWkXMATzb1IIqI4khoGIFMh0D8
LNPlfKNXOTt1paUknAa87ZehELRLCL4S/BhyQVh3LdjSp4ufQMgoZXn8Mqebg9hA
q6mzC6Tca2wUsLIrjHg4rMzq2axYi46XrE6ZNVGDgt8Z7kUC+YtgcaE42L4pRQn1
v9S24XYOigNF4BxELHgtxE4CS+qU98EgcLCAQM2hlsrMth6hvvCarob0KCwdQ8pA
Y+r9mRE6Cy4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:09 2025 by rpki-client