Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a3a2f33322d3438203d3e20323731333935.roa
File:                     323830343a376164383a3a2f33322d3438203d3e20323731333935.roa (raw, json)
Hash identifier:          omqSDBO+sgJyjchQ0qYwkYWI3vMKdvjNOjk8YX9c4D4=
Subject key identifier:   52:A1:DF:FB:EF:23:0A:FF:3A:90:9F:4F:1C:06:CD:B5:28:90:E2:49
Certificate issuer:       /CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
Certificate serial:       5643F250E6F807D5609F6EBF7CA8CEF3497FA02D
Authority key identifier: F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a3a2f33322d3438203d3e20323731333935.roa
Signing time:             Wed 12 Jul 2023 01:09:11 +0000
ROA not before:           Wed 12 Jul 2023 01:04:11 +0000
ROA not after:            Wed 10 Jul 2024 01:09:11 +0000
asID:                     271395
IP address blocks:        2804:7ad8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:43:f2:50:e6:f8:07:d5:60:9f:6e:bf:7c:a8:ce:f3:49:7f:a0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
        Validity
            Not Before: Jul 12 01:04:11 2023 GMT
            Not After : Jul 10 01:09:11 2024 GMT
        Subject: CN=52A1DFFBEF230AFF3A909F4F1C06CDB52890E249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:44:68:ff:cd:5d:81:b7:6b:e7:28:8b:45:
                    16:d8:f8:5a:8c:50:47:d3:ca:08:ac:00:67:9b:be:
                    b1:ea:62:d9:56:76:91:d0:3d:03:87:20:d7:cb:34:
                    6f:0c:9a:4f:e9:1d:b4:a3:e9:5f:ef:af:fa:e1:ba:
                    a2:59:d0:40:6d:ac:86:46:ca:2e:d8:4c:89:a3:5c:
                    7c:80:69:14:5c:e7:d1:dc:f1:7d:e7:e9:e5:9f:38:
                    01:e8:8a:12:b3:75:63:30:3e:e7:24:8b:55:79:6f:
                    99:58:2f:ba:cc:0a:4b:d8:44:7f:89:e8:05:1e:e6:
                    6b:b4:35:40:9d:70:24:24:41:b8:63:83:2a:d8:fe:
                    83:09:2c:1e:56:c8:b4:e7:41:74:31:16:cf:ca:9e:
                    9e:05:ae:7c:fa:be:2d:2b:64:40:22:bd:73:f5:68:
                    45:a0:09:6e:10:42:e6:23:58:5c:3e:77:b6:56:e9:
                    59:eb:21:66:88:a2:06:8b:0d:08:b1:28:d9:76:0b:
                    e9:57:3e:20:6f:13:9e:55:64:6c:ea:bd:44:a1:9d:
                    00:12:ed:e9:f0:12:b9:6d:a7:51:ed:42:10:6e:dc:
                    0c:86:57:25:7d:72:d2:fa:d2:a0:6d:51:87:80:10:
                    2f:3b:93:fd:ab:58:59:63:62:8b:dc:09:16:9f:dc:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A1:DF:FB:EF:23:0A:FF:3A:90:9F:4F:1C:06:CD:B5:28:90:E2:49
            X509v3 Authority Key Identifier:
                keyid:F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a3a2f33322d3438203d3e20323731333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:a3:42:52:f6:c0:76:21:72:68:70:f8:83:09:91:ed:45:
         40:dc:48:66:a7:f5:33:59:c7:b6:4e:78:3d:c3:21:e2:c1:12:
         f3:b9:b9:bc:ee:fe:75:3a:70:ae:48:76:6c:88:ca:55:29:3a:
         3d:65:4c:bd:2c:33:77:ec:bf:f8:82:a0:16:cf:de:d1:b7:7e:
         05:bc:53:12:c9:ae:7f:4f:c0:05:42:f2:40:77:04:6d:0c:78:
         fb:78:09:40:66:8c:df:94:b2:36:f6:5f:36:ec:a3:3b:81:21:
         fb:f4:b6:4b:e2:de:88:53:75:58:bd:a2:73:7f:1f:c5:ad:39:
         24:53:c8:d1:7a:cf:3e:97:16:04:73:f8:65:60:fd:5f:49:27:
         c4:06:3c:99:d4:6f:77:c5:8c:0b:46:89:34:59:9f:45:e4:f6:
         a5:14:6c:47:cb:38:46:49:9c:13:cb:1e:fb:64:b4:23:e7:7b:
         95:af:f1:c1:a4:26:b9:d6:bc:b5:38:41:96:c1:aa:ef:f9:06:
         31:4c:9e:62:3d:2d:3d:59:71:fb:a4:40:e6:17:17:74:04:e1:
         6b:d3:d2:5d:36:61:2d:eb:ae:48:56:9c:9b:a5:e8:2d:b6:29:
         cc:3e:66:3e:01:7f:5f:e8:47:5c:ff:4e:7a:45:9e:9a:db:28:
         75:39:c1:0c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVkPyUOb4B9Vgn26/fKjO80l/oC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg2Qzk3MDE4MUEyRUE3N0U3QkE4MkVDOEMyRjlENjk5
Q0I3OTBCQTAeFw0yMzA3MTIwMTA0MTFaFw0yNDA3MTAwMTA5MTFaMDMxMTAvBgNV
BAMTKDUyQTFERkZCRUYyMzBBRkYzQTkwOUY0RjFDMDZDREI1Mjg5MEUyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhT0Ro/81dgbdr5yiLRRbY+FqM
UEfTygisAGebvrHqYtlWdpHQPQOHINfLNG8Mmk/pHbSj6V/vr/rhuqJZ0EBtrIZG
yi7YTImjXHyAaRRc59Hc8X3n6eWfOAHoihKzdWMwPucki1V5b5lYL7rMCkvYRH+J
6AUe5mu0NUCdcCQkQbhjgyrY/oMJLB5WyLTnQXQxFs/Knp4Frnz6vi0rZEAivXP1
aEWgCW4QQuYjWFw+d7ZW6VnrIWaIogaLDQixKNl2C+lXPiBvE55VZGzqvUShnQAS
7enwErltp1HtQhBu3AyGVyV9ctL60qBtUYeAEC87k/2rWFljYovcCRaf3CqdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUqHf++8jCv86kJ9PHAbNtSiQ4kkwHwYDVR0j
BBgwFoAU+GyXAYGi6nfnuoLsjC+daZy3kLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWpXWE13dGlaWGtudVl4ejR6eUtyUGlaSlBlY3pWVk13RFRzTjFyc3BG
b1kvMC9GODZDOTcwMTgxQTJFQTc3RTdCQTgyRUM4QzJGOUQ2OTlDQjc5MEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4NkM5NzAxODFBMkVBNzdF
N0JBODJFQzhDMkY5RDY5OUNCNzkwQkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FqV1hNd3RpWlhrbnVZeHo0enlLclBpWkpQZWN6VlZNd0RUc04xcnNwRm9ZLzAv
MzIzODMwMzQzYTM3NjE2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzMzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR62DANBgkqhkiG9w0BAQsFAAOCAQEAZx+jQlL2
wHYhcmhw+IMJke1FQNxIZqf1M1nHtk54PcMh4sES87m5vO7+dTpwrkh2bIjKVSk6
PWVMvSwzd+y/+IKgFs/e0bd+BbxTEsmuf0/ABULyQHcEbQx4+3gJQGaM35SyNvZf
NuyjO4Eh+/S2S+LeiFN1WL2ic38fxa05JFPI0XrPPpcWBHP4ZWD9X0knxAY8mdRv
d8WMC0aJNFmfReT2pRRsR8s4RkmcE8se+2S0I+d7la/xwaQmuda8tThBlsGq7/kG
MUyeYj0tPVlx+6RA5hcXdATha9PSXTZhLeuuSFacm6XoLbYpzD5mPgF/X+hHXP9O
ekWemtsodTnBDA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:58:29 2025 by rpki-client