Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d3332203d3e20323634323136.roa
File:                     323830343a323435383a3a2f33322d3332203d3e20323634323136.roa (raw, json)
Hash identifier:          kE3AoNXHVBIQJJOhmaJZktIfpYp3CWd45JUxPAo8Mr0=
Subject key identifier:   27:6D:94:A9:CF:27:DA:E0:6C:DC:E4:09:9C:98:F3:06:5E:46:8E:61
Certificate issuer:       /CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Certificate serial:       671EAB26AC77E03EA03ADC75BB85C9A96D9E6E46
Authority key identifier: D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d3332203d3e20323634323136.roa
Signing time:             Tue 20 Feb 2024 12:17:17 +0000
ROA not before:           Tue 20 Feb 2024 12:12:17 +0000
ROA not after:            Tue 18 Feb 2025 12:17:17 +0000
asID:                     264216
IP address blocks:        2804:2458::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1e:ab:26:ac:77:e0:3e:a0:3a:dc:75:bb:85:c9:a9:6d:9e:6e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
        Validity
            Not Before: Feb 20 12:12:17 2024 GMT
            Not After : Feb 18 12:17:17 2025 GMT
        Subject: CN=276D94A9CF27DAE06CDCE4099C98F3065E468E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4b:75:15:97:8a:ba:4e:36:df:b6:71:bb:ec:
                    91:82:08:88:e7:92:4c:f5:c3:10:a0:91:30:61:bf:
                    42:43:10:50:92:20:38:52:1a:4f:92:fb:12:c2:6b:
                    8c:1f:46:20:68:dd:73:2f:1e:22:c9:d3:d5:ed:68:
                    cf:40:93:06:39:c0:ff:d7:dc:c1:d2:ec:b1:3a:86:
                    5d:60:87:c0:99:af:f6:33:4a:2c:36:77:14:54:b2:
                    7f:fb:ad:22:47:9b:9d:7d:0b:03:b2:6c:ed:1a:10:
                    47:c2:ea:8c:fe:77:d8:e3:9a:b4:d7:da:7b:31:9e:
                    d5:bc:a3:d9:2b:ab:5c:10:65:94:3e:5b:26:4c:84:
                    63:79:a5:58:42:c0:05:7d:92:88:55:16:18:05:e0:
                    a9:51:20:ab:b3:e1:11:28:20:91:a3:e5:ad:11:8f:
                    aa:71:6b:9c:54:5b:00:aa:3c:02:ab:06:5d:da:3f:
                    a3:59:a7:ef:dc:16:96:79:ac:02:b7:a3:98:05:0d:
                    96:66:20:9a:92:44:cd:e1:60:16:f7:04:0b:5e:65:
                    7c:5a:e3:9a:e2:16:25:34:82:88:e6:33:3e:70:a1:
                    2f:f3:72:ce:16:4e:86:d6:f6:ff:85:15:d4:f0:0c:
                    a0:4b:5e:d4:eb:98:a2:47:da:38:3a:d0:13:cc:fb:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6D:94:A9:CF:27:DA:E0:6C:DC:E4:09:9C:98:F3:06:5E:46:8E:61
            X509v3 Authority Key Identifier:
                keyid:D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d3332203d3e20323634323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2458::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:cd:65:ad:ca:96:4e:39:58:67:ef:8b:23:78:2d:86:ce:
         a8:5f:76:4a:86:d5:54:e4:d5:79:29:2a:27:55:71:41:12:3f:
         1e:ae:a0:06:8f:19:78:b2:45:fa:a9:0b:0a:fe:78:22:6e:dc:
         91:8b:3d:6c:0e:8b:dd:f6:55:1b:f2:cf:e6:0a:8b:ce:6d:d7:
         45:b4:51:98:c6:a7:1e:bf:fe:9a:9c:f8:bb:df:9e:b9:59:d9:
         0e:4a:1a:8a:b3:ec:bc:5b:30:5d:22:f1:aa:b1:b8:af:2d:28:
         7d:61:b7:41:39:8a:54:32:08:9c:7a:de:fe:c2:3e:da:66:53:
         8d:57:87:17:62:c1:13:22:33:0d:59:82:be:4d:21:03:84:51:
         6a:84:9b:f1:71:05:39:5b:06:23:a3:9c:69:0d:8e:10:d9:a5:
         51:70:1c:4b:63:51:90:7e:94:75:9d:b8:c2:19:7e:b5:24:fe:
         00:5c:30:f4:2a:ec:44:94:51:d0:db:e5:6d:fa:3f:1e:63:6d:
         41:a6:c0:b5:14:4c:59:3b:8d:8f:22:c2:d6:f7:c8:be:5c:a9:
         93:d8:df:14:24:08:71:1a:23:b0:0f:d6:08:89:d7:bf:e8:91:
         c9:53:ef:ba:ea:ba:9d:ac:9e:11:cc:01:79:ab:9a:fe:c8:4f:
         ac:5c:b8:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZx6rJqx34D6gOtx1u4XJqW2ebkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMUNFNEMzNjUyNzcwRDgwMUM1MDYzNzI0Q0M3MzQy
QjNGNTcyRjAeFw0yNDAyMjAxMjEyMTdaFw0yNTAyMTgxMjE3MTdaMDMxMTAvBgNV
BAMTKDI3NkQ5NEE5Q0YyN0RBRTA2Q0RDRTQwOTlDOThGMzA2NUU0NjhFNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSS3UVl4q6TjbftnG77JGCCIjn
kkz1wxCgkTBhv0JDEFCSIDhSGk+S+xLCa4wfRiBo3XMvHiLJ09XtaM9AkwY5wP/X
3MHS7LE6hl1gh8CZr/YzSiw2dxRUsn/7rSJHm519CwOybO0aEEfC6oz+d9jjmrTX
2nsxntW8o9krq1wQZZQ+WyZMhGN5pVhCwAV9kohVFhgF4KlRIKuz4REoIJGj5a0R
j6pxa5xUWwCqPAKrBl3aP6NZp+/cFpZ5rAK3o5gFDZZmIJqSRM3hYBb3BAteZXxa
45riFiU0gojmMz5woS/zcs4WTobW9v+FFdTwDKBLXtTrmKJH2jg60BPM+z8BAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJ22Uqc8n2uBs3OQJnJjzBl5GjmEwHwYDVR0j
BBgwFoAU0rHOTDZSdw2AHFBjckzHNCs/Vy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq
U1MvMC9EMkIxQ0U0QzM2NTI3NzBEODAxQzUwNjM3MjRDQzczNDJCM0Y1NzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQjFDRTRDMzY1Mjc3MEQ4
MDFDNTA2MzcyNENDNzM0MkIzRjU3MkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d3RWZ1dVRIZ1FjVXhpTVhFTldLd2pmWWpMcnpzeTVTWVBRYVdibnZyalNTLzAv
MzIzODMwMzQzYTMyMzQzNTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQkWDANBgkqhkiG9w0BAQsFAAOCAQEASO/NZa3K
lk45WGfviyN4LYbOqF92SobVVOTVeSkqJ1VxQRI/Hq6gBo8ZeLJF+qkLCv54Im7c
kYs9bA6L3fZVG/LP5gqLzm3XRbRRmManHr/+mpz4u9+euVnZDkoairPsvFswXSLx
qrG4ry0ofWG3QTmKVDIInHre/sI+2mZTjVeHF2LBEyIzDVmCvk0hA4RRaoSb8XEF
OVsGI6OcaQ2OENmlUXAcS2NRkH6UdZ24whl+tST+AFww9CrsRJRR0Nvlbfo/HmNt
QabAtRRMWTuNjyLC1vfIvlypk9jfFCQIcRojsA/WCInXv+iRyVPvuuq6nayeEcwB
eaua/shPrFy4Yw==
-----END CERTIFICATE-----
Generated at Wed May 14 17:25:02 2025 by rpki-client