Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/323830343a336334383a383030303a3a2f33342d3334203d3e20323636323031.roa
File:                     323830343a336334383a383030303a3a2f33342d3334203d3e20323636323031.roa (raw, json)
Hash identifier:          S3CjB0/rW5PTdG/fVTB9Epz6jvKwf+lsZ7HfOimzByE=
Subject key identifier:   42:A7:22:0A:61:6B:5A:FF:A2:C8:E0:32:28:D8:8D:56:38:71:52:E9
Certificate issuer:       /CN=7A09C5FAC16CC8DD19A26F03BA7F863A3003602F
Certificate serial:       5EC3EAC6DA01ECDA5D3D7BEA4D32379629538450
Authority key identifier: 7A:09:C5:FA:C1:6C:C8:DD:19:A2:6F:03:BA:7F:86:3A:30:03:60:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/323830343a336334383a383030303a3a2f33342d3334203d3e20323636323031.roa
Signing time:             Tue 09 Aug 2022 21:07:04 +0000
ROA not before:           Tue 09 Aug 2022 21:02:04 +0000
ROA not after:            Tue 08 Aug 2023 21:07:04 +0000
asID:                     266201
IP address blocks:        2804:3c48:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c3:ea:c6:da:01:ec:da:5d:3d:7b:ea:4d:32:37:96:29:53:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A09C5FAC16CC8DD19A26F03BA7F863A3003602F
        Validity
            Not Before: Aug  9 21:02:04 2022 GMT
            Not After : Aug  8 21:07:04 2023 GMT
        Subject: CN=42A7220A616B5AFFA2C8E03228D88D56387152E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:07:0e:72:13:6e:ff:21:51:f4:0e:ae:33:
                    75:83:d9:eb:4a:c6:fe:8e:b3:f4:a1:2f:63:8d:9e:
                    63:cf:36:81:24:3c:ad:19:03:59:c8:79:b4:e3:f4:
                    0f:43:dd:a0:fb:5d:3a:d7:84:51:d1:df:41:6c:cc:
                    f1:ca:67:73:d5:79:80:e8:46:ba:c6:03:0a:5a:c7:
                    08:33:df:96:ee:77:59:0a:1a:09:03:7f:5a:fc:41:
                    19:ed:31:c6:87:b8:3c:4f:00:37:8a:12:00:b2:ce:
                    9e:f9:9e:1d:20:35:13:f9:8e:46:fb:47:dd:91:59:
                    cd:95:10:0e:4d:1f:37:e5:d9:b8:f0:a9:e8:de:29:
                    e0:74:d7:9c:9a:a2:ca:aa:6f:f3:76:d5:2d:43:0c:
                    76:81:a5:66:03:d5:11:c1:9c:e8:37:c2:4f:c8:54:
                    76:0e:76:0e:a6:26:8c:a7:a3:e3:90:0c:2a:0b:8d:
                    f4:fe:e6:fc:29:83:44:f6:9d:4d:c3:13:be:0f:f8:
                    96:5d:39:74:47:6a:3c:8e:f8:d8:54:89:bb:0c:39:
                    72:37:dc:bd:0c:28:39:dd:4d:73:ff:b3:a6:d2:24:
                    d2:a1:fb:2c:2e:e1:47:7d:8b:ff:65:02:da:a0:64:
                    0f:60:e7:8a:eb:53:f2:95:ad:02:b4:eb:ee:33:c7:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A7:22:0A:61:6B:5A:FF:A2:C8:E0:32:28:D8:8D:56:38:71:52:E9
            X509v3 Authority Key Identifier:
                keyid:7A:09:C5:FA:C1:6C:C8:DD:19:A2:6F:03:BA:7F:86:3A:30:03:60:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/323830343a336334383a383030303a3a2f33342d3334203d3e20323636323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c48:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:ee:3d:46:47:9b:18:c3:bb:65:10:7a:55:b9:b5:36:3b:
         55:55:0d:7f:cf:6d:db:dd:14:e6:9a:84:9f:eb:94:cc:4e:24:
         9d:e0:3d:b2:da:8e:bf:28:9f:26:58:68:5e:e3:2f:22:ff:5b:
         73:43:9d:ff:08:26:60:db:e6:e7:d3:cf:60:60:3b:3b:32:bb:
         8a:ad:3a:7c:df:5e:83:4a:c9:a4:e1:d6:54:92:83:ab:f0:d6:
         f1:1f:8d:e7:69:df:7b:24:ae:3b:4a:cf:1e:39:7c:46:4b:f7:
         5a:9b:44:31:9a:b7:13:6a:96:be:7a:04:36:0c:f6:ad:8e:b6:
         34:8d:3f:a8:8e:7f:0c:9a:02:68:7e:b9:e4:df:ce:1a:3a:5b:
         d1:37:de:13:bb:b1:15:9f:a3:6a:d0:a3:67:06:fa:3d:24:f4:
         7d:88:09:7b:55:38:06:4d:aa:98:4c:78:9e:ca:39:88:e9:1b:
         dd:f3:f2:0e:a0:55:47:38:d0:73:d4:31:5f:7c:4f:9a:64:3d:
         fe:02:31:c4:e0:88:0f:d1:65:c3:a3:ab:78:87:b1:6c:b0:3b:
         cf:dc:73:84:5c:0a:d0:02:f3:62:fe:7e:a5:be:be:53:fe:fa:
         4c:e2:81:63:ac:e5:36:0c:89:33:37:b0:a1:e0:f2:fb:c4:7e:
         65:bc:e8:f9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXsPqxtoB7NpdPXvqTTI3lilThFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EwOUM1RkFDMTZDQzhERDE5QTI2RjAzQkE3Rjg2M0Ez
MDAzNjAyRjAeFw0yMjA4MDkyMTAyMDRaFw0yMzA4MDgyMTA3MDRaMDMxMTAvBgNV
BAMTKDQyQTcyMjBBNjE2QjVBRkZBMkM4RTAzMjI4RDg4RDU2Mzg3MTUyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFgcOchNu/yFR9A6uM3WD2etK
xv6Os/ShL2ONnmPPNoEkPK0ZA1nIebTj9A9D3aD7XTrXhFHR30FszPHKZ3PVeYDo
RrrGAwpaxwgz35bud1kKGgkDf1r8QRntMcaHuDxPADeKEgCyzp75nh0gNRP5jkb7
R92RWc2VEA5NHzfl2bjwqejeKeB015yaosqqb/N21S1DDHaBpWYD1RHBnOg3wk/I
VHYOdg6mJoyno+OQDCoLjfT+5vwpg0T2nU3DE74P+JZdOXRHajyO+NhUibsMOXI3
3L0MKDndTXP/s6bSJNKh+ywu4Ud9i/9lAtqgZA9g54rrU/KVrQK06+4zx1aPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQqciCmFrWv+iyOAyKNiNVjhxUukwHwYDVR0j
BBgwFoAUegnF+sFsyN0Zom8Dun+GOjADYC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3dvVWFrYmpORGN1ZHRaN29NeEYzQ1dtYjRIZmltWkxCV0JQemZmRFdO
MlAvMC83QTA5QzVGQUMxNkNDOEREMTlBMjZGMDNCQTdGODYzQTMwMDM2MDJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBMDlDNUZBQzE2Q0M4REQx
OUEyNkYwM0JBN0Y4NjNBMzAwMzYwMkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN3b1Vha2JqTkRjdWR0WjdvTXhGM0NXbWI0SGZpbVpMQldCUHpmZkRXTjJQLzAv
MzIzODMwMzQzYTMzNjMzNDM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMyMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPEiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCalu49RkebGMO7ZRB6Vbm1NjtVVQ1/z23b3RTmmoSf65TMTiSd4D2y2o6/
KJ8mWGhe4y8i/1tzQ53/CCZg2+bn089gYDs7MruKrTp8316DSsmk4dZUkoOr8Nbx
H43nad97JK47Ss8eOXxGS/dam0QxmrcTapa+egQ2DPatjrY0jT+ojn8MmgJofrnk
384aOlvRN94Tu7EVn6Nq0KNnBvo9JPR9iAl7VTgGTaqYTHieyjmI6Rvd8/IOoFVH
ONBz1DFffE+aZD3+AjHE4IgP0WXDo6t4h7FssDvP3HOEXArQAvNi/n6lvr5T/vpM
4oFjrOU2DIkzN7Ch4PL7xH5lvOj5
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:09 2025 by rpki-client