Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3335203d3e20323639363637.roa
File:                     323830343a363830633a3a2f33322d3335203d3e20323639363637.roa (raw, json)
Hash identifier:          oe63Kaw1nKvqa+m2MFUSbYcBGGpB4NSaY7dIc5ofzeI=
Subject key identifier:   46:DD:62:F1:AE:01:EF:4C:66:E7:23:AE:F2:05:A9:64:E2:1E:2F:0E
Certificate issuer:       /CN=1C7D3973B001C126A2DDD8239CD138E09A85FC78
Certificate serial:       2A599EA60D9D1E4CA9DE631BFFF02BBE60B0CFC6
Authority key identifier: 1C:7D:39:73:B0:01:C1:26:A2:DD:D8:23:9C:D1:38:E0:9A:85:FC:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3335203d3e20323639363637.roa
Signing time:             Sat 28 Oct 2023 16:03:42 +0000
ROA not before:           Sat 28 Oct 2023 15:58:42 +0000
ROA not after:            Sat 26 Oct 2024 16:03:42 +0000
asID:                     269667
IP address blocks:        2804:680c::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:59:9e:a6:0d:9d:1e:4c:a9:de:63:1b:ff:f0:2b:be:60:b0:cf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D3973B001C126A2DDD8239CD138E09A85FC78
        Validity
            Not Before: Oct 28 15:58:42 2023 GMT
            Not After : Oct 26 16:03:42 2024 GMT
        Subject: CN=46DD62F1AE01EF4C66E723AEF205A964E21E2F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:3c:69:ea:7d:7c:19:fa:7b:4f:84:28:c5:
                    c5:1c:f5:91:4a:c7:77:91:56:a7:27:0e:69:63:a1:
                    22:bb:c7:ed:de:9c:af:24:d0:62:94:8c:81:4c:a8:
                    42:db:25:3a:0d:a8:b5:9b:3f:9a:b8:d5:c6:7d:5c:
                    16:71:b2:8b:02:86:a7:5e:4c:9a:13:40:bb:0d:d4:
                    fe:66:f4:d2:7b:70:3f:e2:fe:f8:2a:0c:24:28:e8:
                    5e:69:c6:b1:31:55:9d:a0:3c:3c:a2:60:0b:4c:7a:
                    16:51:51:1b:e3:76:ef:3d:10:57:2b:8b:3b:7e:cc:
                    b0:37:80:3b:b3:02:70:8a:d5:7e:bc:f2:a1:b7:20:
                    20:97:b3:ee:d6:2e:ef:18:77:19:af:b5:6d:7a:42:
                    b2:a9:d0:27:26:fe:bb:48:6a:e6:6c:d9:d3:d5:bd:
                    8d:70:0d:0e:81:80:e6:21:19:9e:30:68:3c:25:19:
                    bd:5f:75:2a:ad:15:cc:b8:5b:2f:fd:31:f5:fd:ca:
                    d4:bc:03:62:92:d6:8e:b2:f0:c8:51:eb:87:91:cd:
                    d8:74:7f:c6:8c:23:58:ce:f2:4f:6c:9d:9c:37:40:
                    12:40:00:d8:79:90:3a:60:37:35:4e:1f:a8:28:31:
                    98:d0:27:f0:b3:8b:e2:19:ef:1b:c5:a1:11:6d:6d:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DD:62:F1:AE:01:EF:4C:66:E7:23:AE:F2:05:A9:64:E2:1E:2F:0E
            X509v3 Authority Key Identifier:
                keyid:1C:7D:39:73:B0:01:C1:26:A2:DD:D8:23:9C:D1:38:E0:9A:85:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3335203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680c::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:22:98:27:e4:ca:5c:60:5e:e6:6b:41:3d:07:14:0b:ba:
         ac:ac:f5:fb:35:bd:cb:25:cd:ed:d0:5e:ee:74:9c:4e:b8:69:
         97:74:3f:bf:14:ce:28:69:ed:57:97:11:dd:71:8f:6b:fd:92:
         a9:ec:9f:3a:86:28:a0:73:7e:58:08:69:17:35:61:a8:32:92:
         a2:a8:ec:ff:90:32:0e:11:7c:b8:40:fa:ab:81:b8:58:01:57:
         a2:e3:af:85:dc:16:0d:bf:b1:99:bf:64:09:5a:2b:54:21:7c:
         f9:90:0e:cc:a1:a9:d8:10:99:38:b2:b1:28:10:66:b6:70:76:
         f8:44:27:10:1e:d8:fe:7c:c5:85:4a:50:c0:4c:00:7a:23:ff:
         ab:b1:c2:33:a4:f7:f5:90:80:0c:e9:4a:6a:59:c8:c7:fa:f0:
         98:cf:a7:f7:03:89:64:6f:4c:6e:e0:97:8f:80:bc:38:4f:e1:
         e4:58:8d:8c:e4:40:5f:4e:37:9e:92:a8:e6:51:7a:a2:a5:a3:
         58:75:ca:a1:f6:59:96:29:ba:33:82:64:e0:66:5d:d8:50:84:
         99:02:41:58:76:b4:be:f9:96:02:22:11:5b:68:6e:9a:43:b6:
         fb:57:a4:99:90:eb:6b:a7:c5:f4:04:d5:b8:cf:af:f7:3b:b3:
         85:8b:05:15
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKlmepg2dHkyp3mMb//ArvmCwz8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM3RDM5NzNCMDAxQzEyNkEyREREODIzOUNEMTM4RTA5
QTg1RkM3ODAeFw0yMzEwMjgxNTU4NDJaFw0yNDEwMjYxNjAzNDJaMDMxMTAvBgNV
BAMTKDQ2REQ2MkYxQUUwMUVGNEM2NkU3MjNBRUYyMDVBOTY0RTIxRTJGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIjxp6n18Gfp7T4QoxcUc9ZFK
x3eRVqcnDmljoSK7x+3enK8k0GKUjIFMqELbJToNqLWbP5q41cZ9XBZxsosChqde
TJoTQLsN1P5m9NJ7cD/i/vgqDCQo6F5pxrExVZ2gPDyiYAtMehZRURvjdu89EFcr
izt+zLA3gDuzAnCK1X688qG3ICCXs+7WLu8YdxmvtW16QrKp0Ccm/rtIauZs2dPV
vY1wDQ6BgOYhGZ4waDwlGb1fdSqtFcy4Wy/9MfX9ytS8A2KS1o6y8MhR64eRzdh0
f8aMI1jO8k9snZw3QBJAANh5kDpgNzVOH6goMZjQJ/Czi+IZ7xvFoRFtbUgjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURt1i8a4B70xm5yOu8gWpZOIeLw4wHwYDVR0j
BBgwFoAUHH05c7ABwSai3dgjnNE44JqF/HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2VYeW8xd1dkNUV4c0hXa1ZVNTI0NGE5dk1oM2QyWnhZY2pScnhnNTZv
TngvMC8xQzdEMzk3M0IwMDFDMTI2QTJEREQ4MjM5Q0QxMzhFMDlBODVGQzc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDN0QzOTczQjAwMUMxMjZB
MkRERDgyMzlDRDEzOEUwOUE4NUZDNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNlWHlvMXdXZDVFeHNIV2tWVTUyNDRhOXZNaDNkMlp4WWNqUnJ4ZzU2b054LzAv
MzIzODMwMzQzYTM2MzgzMDYzM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM5
MzYzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARoDDANBgkqhkiG9w0BAQsFAAOCAQEAAksimCfk
ylxgXuZrQT0HFAu6rKz1+zW9yyXN7dBe7nScTrhpl3Q/vxTOKGntV5cR3XGPa/2S
qeyfOoYooHN+WAhpFzVhqDKSoqjs/5AyDhF8uED6q4G4WAFXouOvhdwWDb+xmb9k
CVorVCF8+ZAOzKGp2BCZOLKxKBBmtnB2+EQnEB7Y/nzFhUpQwEwAeiP/q7HCM6T3
9ZCADOlKalnIx/rwmM+n9wOJZG9MbuCXj4C8OE/h5FiNjORAX043npKo5lF6oqWj
WHXKofZZlim6M4Jk4GZd2FCEmQJBWHa0vvmWAiIRW2humkO2+1ekmZDra6fF9ATV
uM+v9zuzhYsFFQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:50 2025 by rpki-client