Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3731303a3a2f34342d3434203d3e20323632383437.roa
File:                     323830343a3265383a3731303a3a2f34342d3434203d3e20323632383437.roa (raw, json)
Hash identifier:          LQfpGhJzH7Qy3e/otnoobAe1H0ExD5PBmk/1W1sjnbw=
Subject key identifier:   EA:F9:D9:DB:3C:0F:5B:91:59:EA:26:EA:FA:BC:C5:E5:E3:DC:C0:AB
Certificate issuer:       /CN=6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4
Certificate serial:       72F6814E536E1284A97B3735F3E2CB0C8BBDA5DD
Authority key identifier: 6B:CF:9F:2C:8F:7B:CF:23:D3:2B:0C:78:41:20:C9:DA:5C:93:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3731303a3a2f34342d3434203d3e20323632383437.roa
Signing time:             Fri 17 Jun 2022 13:37:58 +0000
ROA not before:           Fri 17 Jun 2022 13:32:58 +0000
ROA not after:            Fri 16 Jun 2023 13:37:58 +0000
asID:                     262847
IP address blocks:        2804:2e8:710::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f6:81:4e:53:6e:12:84:a9:7b:37:35:f3:e2:cb:0c:8b:bd:a5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4
        Validity
            Not Before: Jun 17 13:32:58 2022 GMT
            Not After : Jun 16 13:37:58 2023 GMT
        Subject: CN=EAF9D9DB3C0F5B9159EA26EAFABCC5E5E3DCC0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:e0:3b:6d:bc:e1:dc:ac:19:90:61:57:a9:
                    02:61:98:6e:e2:74:80:e2:59:e6:32:af:b8:eb:f8:
                    b8:bb:ce:15:eb:b1:6c:ad:8f:e7:bc:ca:8a:a1:18:
                    44:aa:9b:75:23:80:d3:67:7a:a7:0a:80:2d:22:92:
                    6d:44:00:a0:5d:f6:dc:ef:6e:b8:3e:d9:cd:62:98:
                    43:81:45:5d:72:5d:c2:6f:01:77:3b:8e:d7:15:e4:
                    ab:08:e5:83:f2:01:f4:2a:0b:d5:8b:ff:15:68:17:
                    29:11:e3:3a:7a:4d:00:bc:46:64:54:38:97:fc:1d:
                    38:de:a3:ac:16:f0:02:ff:3a:ab:ad:a6:02:b4:30:
                    fb:e6:e0:af:30:fa:38:b5:dc:71:9a:1d:78:b8:0a:
                    f0:07:c9:0f:1f:55:2b:2d:71:d3:e5:cf:b6:57:c5:
                    77:49:2d:45:a8:d8:e8:30:35:1d:3a:8f:1d:3b:c2:
                    12:e9:80:e8:55:54:e7:c7:79:25:af:91:42:8b:fa:
                    6b:bb:d2:fc:69:1f:55:52:4b:bb:43:75:f9:30:bb:
                    a6:8a:8c:9c:86:34:36:18:ac:a9:71:e7:94:be:bd:
                    60:87:ce:83:ea:da:2f:b4:72:ec:41:b5:ce:ea:cb:
                    26:14:8c:df:95:28:a1:89:52:2f:2f:27:97:b4:e8:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F9:D9:DB:3C:0F:5B:91:59:EA:26:EA:FA:BC:C5:E5:E3:DC:C0:AB
            X509v3 Authority Key Identifier:
                keyid:6B:CF:9F:2C:8F:7B:CF:23:D3:2B:0C:78:41:20:C9:DA:5C:93:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3731303a3a2f34342d3434203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:710::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:af:2b:b6:17:d6:5c:b5:ae:1b:e6:f2:2c:ae:bc:9e:3a:c2:
         8a:f6:80:b2:3b:25:79:c0:47:1f:72:3b:27:9b:30:79:00:bd:
         72:e1:3e:3b:ff:64:c1:fb:d6:ef:42:f0:44:ee:fd:b7:03:d5:
         21:0e:27:0d:90:5e:4c:a3:24:b0:d2:e5:3c:9a:2c:69:e0:9b:
         89:23:40:8a:f1:04:02:65:96:60:cc:f4:f1:0a:4b:16:b3:06:
         75:45:9a:8b:89:4b:cc:5a:02:91:0b:97:c6:0c:65:01:0d:9f:
         9b:3f:79:58:9c:2f:42:63:db:18:d0:64:17:7e:63:c7:1a:61:
         97:3e:21:c9:b5:50:b0:7e:69:ad:0e:eb:dc:e0:26:33:8e:c4:
         0e:c7:ea:da:4e:b7:2c:47:53:07:6d:41:cb:92:52:a2:ef:d8:
         7c:48:9a:85:d0:7b:99:63:fb:63:b9:d9:89:02:cb:b3:5e:9e:
         e7:a0:a9:44:78:c1:5a:dd:24:38:c8:cd:00:a3:d4:25:7d:6c:
         f4:dc:d0:cd:f3:01:99:02:86:a5:3d:49:30:69:11:55:6e:cc:
         5e:90:d9:43:17:1a:10:3f:0d:82:d9:eb:61:d8:ab:d2:90:d2:
         3d:09:5e:e6:15:f1:ff:51:79:19:91:28:d5:ce:59:a6:21:39:
         51:1b:d9:ed
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUcvaBTlNuEoSpezc18+LLDIu9pd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJDRjlGMkM4RjdCQ0YyM0QzMkIwQzc4NDEyMEM5REE1
QzkzQTBENDAeFw0yMjA2MTcxMzMyNThaFw0yMzA2MTYxMzM3NThaMDMxMTAvBgNV
BAMTKEVBRjlEOURCM0MwRjVCOTE1OUVBMjZFQUZBQkNDNUU1RTNEQ0MwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLuA7bbzh3KwZkGFXqQJhmG7i
dIDiWeYyr7jr+Li7zhXrsWytj+e8yoqhGESqm3UjgNNneqcKgC0ikm1EAKBd9tzv
brg+2c1imEOBRV1yXcJvAXc7jtcV5KsI5YPyAfQqC9WL/xVoFykR4zp6TQC8RmRU
OJf8HTjeo6wW8AL/OqutpgK0MPvm4K8w+ji13HGaHXi4CvAHyQ8fVSstcdPlz7ZX
xXdJLUWo2OgwNR06jx07whLpgOhVVOfHeSWvkUKL+mu70vxpH1VSS7tDdfkwu6aK
jJyGNDYYrKlx55S+vWCHzoPq2i+0cuxBtc7qyyYUjN+VKKGJUi8vJ5e06MWNAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU6vnZ2zwPW5FZ6ibq+rzF5ePcwKswHwYDVR0j
BBgwFoAUa8+fLI97zyPTKwx4QSDJ2lyToNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMC82QkNGOUYyQzhGN0JDRjIzRDMyQjBDNzg0MTIwQzlEQTVDOTNBMEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZCQ0Y5RjJDOEY3QkNGMjNE
MzJCMEM3ODQxMjBDOURBNUM5M0EwRDQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzAv
MzIzODMwMzQzYTMyNjUzODNhMzczMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNjMyMzgzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQC6AcQMA0GCSqGSIb3DQEBCwUAA4IB
AQCUryu2F9Zcta4b5vIsrryeOsKK9oCyOyV5wEcfcjsnmzB5AL1y4T47/2TB+9bv
QvBE7v23A9UhDicNkF5MoySw0uU8mixp4JuJI0CK8QQCZZZgzPTxCksWswZ1RZqL
iUvMWgKRC5fGDGUBDZ+bP3lYnC9CY9sY0GQXfmPHGmGXPiHJtVCwfmmtDuvc4CYz
jsQOx+raTrcsR1MHbUHLklKi79h8SJqF0HuZY/tjudmJAsuzXp7noKlEeMFa3SQ4
yM0Ao9QlfWz03NDN8wGZAoalPUkwaRFVbsxekNlDFxoQPw2C2eth2KvSkNI9CV7m
FfH/UXkZkSjVzlmmITlRG9nt
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:37 2025 by rpki-client