Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33332d3333203d3e20323730373232.roa
File:                     323830343a373035633a3a2f33332d3333203d3e20323730373232.roa (raw, json)
Hash identifier:          D0twax4W882ZW1h8eAiHTKZ1vaUrTVBgtjGCQKg0VdM=
Subject key identifier:   DA:5C:8B:3F:99:FE:5D:42:7D:C5:8D:E1:D2:66:4E:9F:74:77:E5:51
Certificate issuer:       /CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
Certificate serial:       14AAF6A69A592F2D6039F3882404D9DB98DC06D6
Authority key identifier: F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33332d3333203d3e20323730373232.roa
Signing time:             Fri 28 Apr 2023 03:42:30 +0000
ROA not before:           Fri 28 Apr 2023 03:37:30 +0000
ROA not after:            Fri 26 Apr 2024 03:42:30 +0000
asID:                     270722
IP address blocks:        2804:705c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:aa:f6:a6:9a:59:2f:2d:60:39:f3:88:24:04:d9:db:98:dc:06:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
        Validity
            Not Before: Apr 28 03:37:30 2023 GMT
            Not After : Apr 26 03:42:30 2024 GMT
        Subject: CN=DA5C8B3F99FE5D427DC58DE1D2664E9F7477E551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:72:bb:b6:e8:55:bf:42:e3:15:7e:64:54:
                    3e:88:9e:f6:a8:33:e4:36:c7:f9:8d:9f:24:55:c9:
                    2a:b8:de:5a:f6:e7:f1:03:70:14:c1:24:d7:71:04:
                    6d:8e:c6:af:ad:96:5c:8f:8c:86:1d:9a:bf:57:e0:
                    b9:12:c1:31:59:d9:96:87:5e:46:39:20:88:3d:87:
                    a8:05:db:2f:bc:5b:08:5a:d2:9b:87:7b:04:cd:19:
                    ea:c0:97:d6:24:8f:7f:0a:a9:e2:6e:c4:00:27:8e:
                    60:65:09:4e:85:02:14:9b:aa:b2:6e:96:57:5c:b2:
                    30:f2:70:44:6d:e9:a4:1e:84:7f:9f:32:51:a6:80:
                    b8:1c:df:b5:89:c9:83:62:2c:3f:b3:3e:a6:85:d3:
                    05:6f:d0:a5:e2:44:03:a8:cc:99:42:ab:d6:4c:cf:
                    83:b9:d9:75:6d:0c:f4:60:2d:4c:0c:e5:7c:1d:70:
                    70:51:8e:31:81:17:5f:b6:48:72:1d:d4:d2:01:fc:
                    55:c9:ea:46:3d:4d:c6:10:e5:bb:79:2e:05:ac:65:
                    04:38:98:d0:68:b6:98:b6:fb:51:4a:ad:e2:dd:e3:
                    fc:bf:e0:ba:15:e5:5d:70:fb:d7:67:1c:46:6e:70:
                    12:c0:78:6a:d0:30:29:d0:9d:42:40:d4:2f:c8:b2:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5C:8B:3F:99:FE:5D:42:7D:C5:8D:E1:D2:66:4E:9F:74:77:E5:51
            X509v3 Authority Key Identifier:
                keyid:F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33332d3333203d3e20323730373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:705c::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:fe:f3:6e:b3:08:cd:1e:5f:04:64:ba:5e:7f:55:57:e0:
         5e:80:cf:37:9a:d3:3e:62:9d:f2:8e:83:be:72:d0:f1:83:e7:
         65:88:3c:0b:57:79:4b:0b:07:9c:92:18:38:43:f8:0e:dc:68:
         5c:03:83:5b:31:ae:6d:f0:c9:dd:f0:07:8a:a9:bd:1a:95:36:
         7d:cb:4a:2e:ce:e4:b9:a1:b7:e2:67:cc:57:e7:0b:f2:e4:55:
         28:9a:d0:af:11:ef:31:f9:f2:e7:b3:00:b3:57:8e:95:06:f2:
         d4:e5:6a:26:d6:2e:be:a4:c3:55:46:94:5c:38:b2:ef:26:fd:
         52:98:21:f7:9c:11:f2:b0:62:7f:16:02:eb:11:e5:43:64:24:
         22:c2:6b:1f:11:b3:d9:14:16:d8:9d:4e:61:38:d5:7b:3a:72:
         fd:2a:cb:88:47:b5:1d:1d:d2:e7:42:8f:38:01:3e:47:f6:b5:
         8f:1e:d5:37:57:6c:e1:ac:d5:bd:84:14:20:fb:26:84:27:b1:
         aa:ef:55:cd:e6:c5:fe:b9:e4:c4:b5:c3:67:92:60:b3:62:2e:
         0f:2c:72:cc:b0:91:e8:15:a4:2a:ea:34:08:e5:06:d4:ee:c0:
         f9:f5:53:a2:28:33:5e:71:e1:83:83:5b:02:0f:b4:0c:95:6b:
         17:05:25:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFKr2pppZLy1gOfOIJATZ25jcBtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY3NDQ4NTQ5QTY0QTNDQjg1QzQ5QjgxNkZERUI4RTkw
QjcyMjZERjAeFw0yMzA0MjgwMzM3MzBaFw0yNDA0MjYwMzQyMzBaMDMxMTAvBgNV
BAMTKERBNUM4QjNGOTlGRTVENDI3REM1OERFMUQyNjY0RTlGNzQ3N0U1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXHK7tuhVv0LjFX5kVD6Invao
M+Q2x/mNnyRVySq43lr25/EDcBTBJNdxBG2Oxq+tllyPjIYdmr9X4LkSwTFZ2ZaH
XkY5IIg9h6gF2y+8Wwha0puHewTNGerAl9Ykj38KqeJuxAAnjmBlCU6FAhSbqrJu
lldcsjDycERt6aQehH+fMlGmgLgc37WJyYNiLD+zPqaF0wVv0KXiRAOozJlCq9ZM
z4O52XVtDPRgLUwM5XwdcHBRjjGBF1+2SHId1NIB/FXJ6kY9TcYQ5bt5LgWsZQQ4
mNBotpi2+1FKreLd4/y/4LoV5V1w+9dnHEZucBLAeGrQMCnQnUJA1C/IsrapAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2lyLP5n+XUJ9xY3h0mZOn3R35VEwHwYDVR0j
BBgwFoAU9nRIVJpko8uFxJuBb9646QtyJt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3ozRXVTRTZWUnprZ0U2enNVRnlpbmh4dWkzYlhTcUVLd1FkYmtSendC
ZjQvMC9GNjc0NDg1NDlBNjRBM0NCODVDNDlCODE2RkRFQjhFOTBCNzIyNkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y2NzQ0ODU0OUE2NEEzQ0I4
NUM0OUI4MTZGREVCOEU5MEI3MjI2REYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN6M0V1U0U2VlJ6a2dFNnpzVUZ5aW5oeHVpM2JYU3FFS3dRZGJrUnp3QmY0LzAv
MzIzODMwMzQzYTM3MzAzNTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzczMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARwXAAwDQYJKoZIhvcNAQELBQADggEBADr2/vNu
swjNHl8EZLpef1VX4F6Azzea0z5infKOg75y0PGD52WIPAtXeUsLB5ySGDhD+A7c
aFwDg1sxrm3wyd3wB4qpvRqVNn3LSi7O5Lmht+JnzFfnC/LkVSia0K8R7zH58uez
ALNXjpUG8tTlaibWLr6kw1VGlFw4su8m/VKYIfecEfKwYn8WAusR5UNkJCLCax8R
s9kUFtidTmE41Xs6cv0qy4hHtR0d0udCjzgBPkf2tY8e1TdXbOGs1b2EFCD7JoQn
sarvVc3mxf655MS1w2eSYLNiLg8scsywkegVpCrqNAjlBtTuwPn1U6IoM15x4YOD
WwIPtAyVaxcFJWs=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:33 2025 by rpki-client