Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          1hpX38fucsOZhm3yCvggOK+DklfXGzBpS51no2aQV5A=
Subject key identifier:   5C:3B:8D:86:14:86:83:66:19:3D:E1:31:AD:24:7C:33:4F:D5:B3:58
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       18532AB1A360C9630BC013596EA9D97D1382E6C6
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:19:09 +0000
ROA not before:           Thu 14 Mar 2024 02:14:09 +0000
ROA not after:            Thu 13 Mar 2025 02:19:09 +0000
asID:                     266623
IP address blocks:        2804:3ed4:aa72::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:53:2a:b1:a3:60:c9:63:0b:c0:13:59:6e:a9:d9:7d:13:82:e6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:14:09 2024 GMT
            Not After : Mar 13 02:19:09 2025 GMT
        Subject: CN=5C3B8D8614868366193DE131AD247C334FD5B358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:84:0f:af:53:8d:53:4d:7c:b6:f3:94:01:
                    d9:61:8f:1b:d9:29:9a:36:69:84:4c:cb:7f:2b:a7:
                    e5:d1:85:71:76:3c:9e:d4:89:cc:e3:42:3a:f4:50:
                    27:22:6a:51:a4:89:d4:3b:a4:ea:c3:47:14:76:f0:
                    74:df:85:83:8b:e4:6b:63:d9:98:ac:42:68:ad:34:
                    2f:7d:59:49:77:41:f7:e9:3e:ef:d7:10:58:46:ef:
                    d2:ed:96:e1:83:cd:e0:14:de:18:51:5c:71:20:cc:
                    85:72:f2:53:36:4d:ff:0a:a3:5a:a9:9f:6a:3e:1b:
                    81:85:aa:41:8a:67:bc:7e:bf:c0:42:a9:8f:1e:99:
                    da:27:25:f9:f9:72:0d:52:3d:37:b8:9e:d3:4c:c8:
                    80:21:ce:27:21:62:02:bf:d8:a0:37:9a:e6:3d:97:
                    3f:b8:dd:1c:1b:26:e4:e8:36:ed:ed:e5:24:35:57:
                    24:02:cd:19:62:cd:2b:02:6a:d3:c6:40:3a:ad:22:
                    c5:60:40:b2:ea:83:96:6b:d9:c7:45:fa:73:5b:a7:
                    6a:c4:64:4f:26:22:9b:cb:01:d0:1f:3c:ea:de:15:
                    3e:9c:eb:9b:b9:5f:63:b8:ce:97:4f:28:07:70:d7:
                    75:ee:33:fd:d8:32:75:8e:a4:d4:df:49:dc:4e:70:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3B:8D:86:14:86:83:66:19:3D:E1:31:AD:24:7C:33:4F:D5:B3:58
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:aa72::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:1b:64:7b:52:74:67:f1:45:8d:3a:5f:fa:ff:87:a9:6b:91:
         05:a4:7f:08:fb:f5:f3:b1:9e:b3:36:90:52:f2:60:34:12:33:
         b0:af:26:6e:33:88:3b:d6:52:f6:4b:5b:53:62:2d:87:d8:3e:
         be:e1:41:36:01:dc:33:7b:53:32:f6:90:a3:96:2f:b4:ed:a4:
         33:31:80:25:32:b9:54:56:cf:fe:3e:c3:1f:ba:55:11:ca:8d:
         79:29:23:bd:47:4f:3f:d9:1e:c0:7f:90:e1:90:c1:67:4b:15:
         6c:6c:32:4d:f2:5c:b4:96:70:1a:ac:e6:70:fb:b8:f7:80:1d:
         c5:85:a4:84:68:7c:b7:4f:41:c5:2a:e7:cf:a7:ff:e0:49:95:
         0e:4c:c4:3d:39:1b:26:e1:e2:b0:00:49:0a:89:d4:9f:11:c6:
         94:f7:dc:00:4b:6f:57:0b:c9:67:e1:aa:fd:e0:23:59:54:77:
         a5:6c:68:68:73:ca:27:68:e8:13:bf:77:62:08:c2:75:84:e3:
         2c:22:8c:3e:9e:91:bb:68:43:0e:31:b7:bc:96:23:e9:40:1f:
         c8:e6:74:cf:a7:cd:e2:9c:df:12:a0:88:ef:02:47:41:a2:82:
         b9:90:a8:f0:b2:1f:89:a2:d6:49:22:62:fe:e3:2a:a8:c6:86:
         96:14:e1:9e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUGFMqsaNgyWMLwBNZbqnZfROC5sYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0Mzc0MzY0REVGMEEzQUQzMUMzRjQ1NDRFNDE1QjlF
QzZDNzA4MzAeFw0yNDAzMTQwMjE0MDlaFw0yNTAzMTMwMjE5MDlaMDMxMTAvBgNV
BAMTKDVDM0I4RDg2MTQ4NjgzNjYxOTNERTEzMUFEMjQ3QzMzNEZENUIzNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAYQPr1ONU018tvOUAdlhjxvZ
KZo2aYRMy38rp+XRhXF2PJ7UiczjQjr0UCcialGkidQ7pOrDRxR28HTfhYOL5Gtj
2ZisQmitNC99WUl3QffpPu/XEFhG79LtluGDzeAU3hhRXHEgzIVy8lM2Tf8Ko1qp
n2o+G4GFqkGKZ7x+v8BCqY8emdonJfn5cg1SPTe4ntNMyIAhzichYgK/2KA3muY9
lz+43RwbJuToNu3t5SQ1VyQCzRlizSsCatPGQDqtIsVgQLLqg5Zr2cdF+nNbp2rE
ZE8mIpvLAdAfPOreFT6c65u5X2O4zpdPKAdw13XuM/3YMnWOpNTfSdxOcHWzAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUXDuNhhSGg2YZPeExrSR8M0/Vs1gwHwYDVR0j
BBgwFoAUPUN0Nk3vCjrTHD9FROQVuexscIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMC8zRDQzNzQzNjRERUYwQTNBRDMxQzNGNDU0NEU0MTVCOUVDNkM3MDgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNENDM3NDM2NERFRjBBM0FE
MzFDM0Y0NTQ0RTQxNUI5RUM2QzcwODMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzAv
MzIzODMwMzQzYTMzNjU2NDM0M2E2MTYxMzczMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPtSqcjANBgkqhkiG9w0BAQsF
AAOCAQEAbxtke1J0Z/FFjTpf+v+HqWuRBaR/CPv187GeszaQUvJgNBIzsK8mbjOI
O9ZS9ktbU2Ith9g+vuFBNgHcM3tTMvaQo5YvtO2kMzGAJTK5VFbP/j7DH7pVEcqN
eSkjvUdPP9kewH+Q4ZDBZ0sVbGwyTfJctJZwGqzmcPu494AdxYWkhGh8t09BxSrn
z6f/4EmVDkzEPTkbJuHisABJConUnxHGlPfcAEtvVwvJZ+Gq/eAjWVR3pWxoaHPK
J2joE793YgjCdYTjLCKMPp6Ru2hDDjG3vJYj6UAfyOZ0z6fN4pzfEqCI7wJHQaKC
uZCo8LIfiaLWSSJi/uMqqMaGlhThng==
-----END CERTIFICATE-----
Generated at Thu May 15 13:50:31 2025 by rpki-client