Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa
File:                     323830343a363564343a3a2f33382d3338203d3e20323639353137.roa (raw, json)
Hash identifier:          cPP9Vk35ImFl4GnRIUWSSbkDdDmYDClpk/fz8Aw1Q6g=
Subject key identifier:   91:18:B5:BB:86:18:45:1A:E4:7D:33:26:F3:2E:56:B0:E2:DA:40:A2
Certificate issuer:       /CN=CB0236634B4C2CE495EE34D60558955292749C07
Certificate serial:       A3CC0D1025698395B78BF228A596B079CD9D0C
Authority key identifier: CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa
Signing time:             Thu 12 Dec 2024 14:06:45 +0000
ROA not before:           Thu 12 Dec 2024 14:01:45 +0000
ROA not after:            Thu 11 Dec 2025 14:06:45 +0000
asID:                     269517
IP address blocks:        2804:65d4::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:cc:0d:10:25:69:83:95:b7:8b:f2:28:a5:96:b0:79:cd:9d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0236634B4C2CE495EE34D60558955292749C07
        Validity
            Not Before: Dec 12 14:01:45 2024 GMT
            Not After : Dec 11 14:06:45 2025 GMT
        Subject: CN=9118B5BB8618451AE47D3326F32E56B0E2DA40A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:09:ce:66:ea:cd:a1:cf:60:6c:35:a3:56:
                    db:cb:b9:63:62:e0:ec:d5:5e:e1:80:08:b1:f1:8f:
                    4d:f7:3a:7d:4f:29:05:eb:b5:61:13:87:b9:00:45:
                    d8:17:f8:38:11:5d:85:86:d9:bf:bd:4b:98:58:ca:
                    f3:6b:16:e6:9f:ff:62:ca:4f:60:0d:b8:15:79:d6:
                    72:21:ec:bf:c7:0e:e5:7b:d0:30:bf:ed:37:01:ef:
                    05:eb:7f:df:20:05:83:a9:9b:bb:9c:71:e0:98:3a:
                    10:b0:11:a5:62:ff:45:4b:4c:ca:cc:90:0c:92:dd:
                    98:51:4f:e3:e8:4d:b4:47:9c:3d:9e:25:77:ab:30:
                    d8:47:26:3a:09:2c:eb:52:62:b8:a9:81:c8:d2:41:
                    da:37:4c:ad:8b:4f:37:8f:43:2a:1f:68:4a:46:d8:
                    e9:61:a1:78:8e:ee:94:b2:e7:38:23:d7:25:b9:67:
                    b9:17:7e:76:c1:4b:5c:f5:e8:e0:c7:91:0f:62:2c:
                    f8:22:4f:78:85:9b:f4:8b:dc:6d:ea:16:58:89:b5:
                    c4:18:5f:50:02:02:ac:4f:27:a2:1b:d3:1a:71:73:
                    6d:7d:3b:82:a8:be:35:58:f4:16:5e:ae:cb:90:7a:
                    91:8a:aa:a1:e6:df:87:f2:19:81:a8:41:ab:66:e4:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:18:B5:BB:86:18:45:1A:E4:7D:33:26:F3:2E:56:B0:E2:DA:40:A2
            X509v3 Authority Key Identifier:
                keyid:CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65d4::/38

    Signature Algorithm: sha256WithRSAEncryption
         4a:b1:22:70:8e:db:56:46:3c:01:ad:83:6d:19:00:7c:0c:59:
         68:af:96:ae:be:34:aa:57:ca:69:44:f4:be:bd:e2:de:f1:f0:
         05:41:f6:c5:2e:3a:e3:21:06:7e:e3:14:39:fd:d5:59:ea:dc:
         48:67:a8:b9:57:2a:b7:53:4e:9b:54:8a:2c:f6:6e:47:38:79:
         c6:04:fb:50:20:a3:66:77:a7:c8:bb:9d:ef:cd:24:5a:ae:f3:
         85:18:12:02:d2:ef:19:65:67:8b:39:59:79:d7:59:8a:4c:c2:
         ad:82:03:a1:36:e3:6b:8e:14:74:86:fd:39:59:6f:eb:11:b1:
         ad:ea:d5:90:32:7f:dc:86:eb:d0:21:45:f8:df:7c:c3:23:23:
         26:e5:d1:dd:93:56:98:20:f9:03:af:1b:ba:64:c0:3d:9a:b8:
         06:d5:c9:0e:b1:2f:6e:0a:c6:df:89:5e:2f:56:24:ec:16:ec:
         97:d1:f0:4f:78:31:0f:fc:2d:ff:21:1f:00:8c:46:18:e7:4a:
         ba:e4:d8:92:7c:6a:d5:9c:26:7f:97:9d:a6:a3:d0:cf:07:27:
         bd:4b:ca:f4:46:2b:4c:e0:78:11:ab:2d:f8:70:31:cb:4b:ed:
         aa:fc:88:b6:aa:db:87:5b:c3:6e:be:c8:b5:0d:2c:03:ed:e8:
         93:eb:00:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAKPMDRAlaYOVt4vyKKWWsHnNnQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IwMjM2NjM0QjRDMkNFNDk1RUUzNEQ2MDU1ODk1NTI5
Mjc0OUMwNzAeFw0yNDEyMTIxNDAxNDVaFw0yNTEyMTExNDA2NDVaMDMxMTAvBgNV
BAMTKDkxMThCNUJCODYxODQ1MUFFNDdEMzMyNkYzMkU1NkIwRTJEQTQwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCQnOZurNoc9gbDWjVtvLuWNi
4OzVXuGACLHxj033On1PKQXrtWETh7kARdgX+DgRXYWG2b+9S5hYyvNrFuaf/2LK
T2ANuBV51nIh7L/HDuV70DC/7TcB7wXrf98gBYOpm7ucceCYOhCwEaVi/0VLTMrM
kAyS3ZhRT+PoTbRHnD2eJXerMNhHJjoJLOtSYripgcjSQdo3TK2LTzePQyofaEpG
2OlhoXiO7pSy5zgj1yW5Z7kXfnbBS1z16ODHkQ9iLPgiT3iFm/SL3G3qFliJtcQY
X1ACAqxPJ6Ib0xpxc219O4KovjVY9BZersuQepGKqqHm34fyGYGoQatm5C0tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkRi1u4YYRRrkfTMm8y5WsOLaQKIwHwYDVR0j
BBgwFoAUywI2Y0tMLOSV7jTWBViVUpJ0nAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBMZzZuYmRKZ3ZWaGs5cGQxeVJ2ZlZMeXJYc1FUQUdwbnVNOFA5Yk1v
dmIvMC9DQjAyMzY2MzRCNEMyQ0U0OTVFRTM0RDYwNTU4OTU1MjkyNzQ5QzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCMDIzNjYzNEI0QzJDRTQ5
NUVFMzRENjA1NTg5NTUyOTI3NDlDMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwTGc2bmJkSmd2VmhrOXBkMXlSdmZWTHlyWHNRVEFHcG51TThQOWJNb3ZiLzAv
MzIzODMwMzQzYTM2MzU2NDM0M2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzNjM5
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYCKARl1AAwDQYJKoZIhvcNAQELBQADggEBAEqxInCO
21ZGPAGtg20ZAHwMWWivlq6+NKpXymlE9L694t7x8AVB9sUuOuMhBn7jFDn91Vnq
3EhnqLlXKrdTTptUiiz2bkc4ecYE+1Ago2Z3p8i7ne/NJFqu84UYEgLS7xllZ4s5
WXnXWYpMwq2CA6E242uOFHSG/TlZb+sRsa3q1ZAyf9yG69AhRfjffMMjIybl0d2T
Vpgg+QOvG7pkwD2auAbVyQ6xL24Kxt+JXi9WJOwW7JfR8E94MQ/8Lf8hHwCMRhjn
Srrk2JJ8atWcJn+Xnaaj0M8HJ71LyvRGK0zgeBGrLfhwMctL7ar8iLaq24dbw26+
yLUNLAPt6JPrABM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:24:33 2025 by rpki-client