Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d313238203d3e20323632343934.roa
File:                     323830343a6164383a3a2f33322d313238203d3e20323632343934.roa (raw, json)
Hash identifier:          SqzY44QnfX6QEVSEp8nmiF+kq4lVTekqV4NIU4I3U8Y=
Subject key identifier:   FA:98:93:70:09:1A:11:DA:43:18:C9:A9:81:29:C5:02:2D:74:9A:1F
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       70F6BF7E9C286E3017999A6A84A49DB2EADB9510
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d313238203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:54 +0000
ROA not before:           Thu 19 Sep 2024 14:06:54 +0000
ROA not after:            Thu 18 Sep 2025 14:11:54 +0000
asID:                     262494
IP address blocks:        2804:ad8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f6:bf:7e:9c:28:6e:30:17:99:9a:6a:84:a4:9d:b2:ea:db:95:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:54 2024 GMT
            Not After : Sep 18 14:11:54 2025 GMT
        Subject: CN=FA989370091A11DA4318C9A98129C5022D749A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:8b:8b:4e:8c:26:be:92:c8:bc:68:19:68:
                    20:35:e2:79:89:8f:48:40:af:ab:d0:65:5c:de:82:
                    af:8c:70:cb:2a:73:31:0a:ab:05:79:6c:ac:3d:0b:
                    4d:ea:ab:c7:e1:43:f9:46:52:83:38:84:a3:ad:8b:
                    35:ee:91:8a:05:5e:2d:ac:c4:1a:9f:6e:6b:2d:0e:
                    16:e6:18:9e:c4:4c:dd:e5:bc:5b:99:1c:b2:6b:2e:
                    dc:6e:00:bb:2a:5f:a6:ac:21:d2:d8:97:27:5b:a9:
                    2f:6d:93:5c:05:16:fb:e9:99:d0:5c:9e:be:23:47:
                    23:c6:b7:c5:1e:8b:37:97:e0:72:9d:9b:b1:44:d0:
                    1c:6a:a1:c8:64:ec:d0:25:22:eb:04:17:c9:5a:20:
                    5d:58:07:57:bc:ac:08:da:60:14:6e:48:f4:51:6c:
                    2b:66:ea:4f:af:e6:1d:b1:e9:9a:1e:6d:e2:3d:b0:
                    ba:8e:e1:71:48:26:dc:8b:eb:50:96:73:4c:8a:f7:
                    0e:94:f0:d8:a1:66:e8:03:17:1c:c3:35:f1:70:44:
                    3a:7c:cc:69:ad:14:51:eb:50:98:9f:aa:f8:9f:ff:
                    da:bf:48:dc:4a:65:aa:0d:da:42:45:12:fc:4d:32:
                    ba:5b:01:8d:80:7b:5a:9f:2d:8b:f0:cf:5f:b0:11:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:98:93:70:09:1A:11:DA:43:18:C9:A9:81:29:C5:02:2D:74:9A:1F
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d313238203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:80:4e:65:a9:00:ac:13:a2:fb:08:e9:8a:f0:d0:74:3c:6b:
         ea:1b:cc:22:00:0c:9e:d8:15:00:83:8b:4c:f1:af:a2:4a:05:
         7b:15:90:67:f1:c5:38:99:c4:65:3a:df:94:cc:86:47:9e:2a:
         5d:df:70:59:c1:fc:77:6e:5a:45:c0:39:54:ff:e6:86:37:27:
         a6:8c:ad:3b:ab:b4:84:b8:45:26:fa:6c:fe:9a:00:a8:37:f0:
         85:92:64:eb:4a:45:cc:0f:9a:81:6a:81:9c:4d:72:74:e6:b8:
         90:f0:fa:2b:0d:7d:87:a2:19:6b:c4:4e:eb:43:67:9f:85:d9:
         12:2c:a6:99:9f:dc:04:e5:3e:1d:93:c6:fd:72:eb:98:60:30:
         fd:9c:99:15:7c:d0:87:e4:59:68:04:8f:b6:b2:af:c3:66:d0:
         d0:7c:98:a5:6e:b2:81:d7:08:f7:43:bd:1b:85:b8:66:13:b8:
         65:f7:ce:dd:56:da:0b:28:63:b3:e8:5f:60:10:f5:f6:34:03:
         22:7a:ff:2c:4b:f6:41:4d:4c:40:1c:7f:18:d1:95:12:f6:c1:
         bb:11:0d:6f:b1:73:40:c1:59:70:52:59:5a:31:47:0a:59:69:
         5b:3a:cb:83:45:f7:3c:c6:63:2c:d3:95:25:88:93:98:c8:3f:
         ac:fe:17:ca
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcPa/fpwobjAXmZpqhKSdsurblRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCQjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0
MENBNTFBQjAeFw0yNDA5MTkxNDA2NTRaFw0yNTA5MTgxNDExNTRaMDMxMTAvBgNV
BAMTKEZBOTg5MzcwMDkxQTExREE0MzE4QzlBOTgxMjlDNTAyMkQ3NDlBMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSYuLTowmvpLIvGgZaCA14nmJ
j0hAr6vQZVzegq+McMsqczEKqwV5bKw9C03qq8fhQ/lGUoM4hKOtizXukYoFXi2s
xBqfbmstDhbmGJ7ETN3lvFuZHLJrLtxuALsqX6asIdLYlydbqS9tk1wFFvvpmdBc
nr4jRyPGt8UeizeX4HKdm7FE0Bxqochk7NAlIusEF8laIF1YB1e8rAjaYBRuSPRR
bCtm6k+v5h2x6ZoebeI9sLqO4XFIJtyL61CWc0yK9w6U8NihZugDFxzDNfFwRDp8
zGmtFFHrUJifqvif/9q/SNxKZaoN2kJFEvxNMrpbAY2Ae1qfLYvwz1+wEQr1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+piTcAkaEdpDGMmpgSnFAi10mh8wHwYDVR0j
BBgwFoAUh7twjcMukBYIEhMYjUAFPkDKUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC84N0JCNzA4REMzMkU5MDE2MDgxMjEzMTg4RDQwMDUzRTQwQ0E1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QkI3MDhEQzMyRTkwMTYw
ODEyMTMxODhENDAwNTNFNDBDQTUxQUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzIzODMwMzQzYTYxNjQzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzQzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQK2DANBgkqhkiG9w0BAQsFAAOCAQEAA4BOZakA
rBOi+wjpivDQdDxr6hvMIgAMntgVAIOLTPGvokoFexWQZ/HFOJnEZTrflMyGR54q
Xd9wWcH8d25aRcA5VP/mhjcnpoytO6u0hLhFJvps/poAqDfwhZJk60pFzA+agWqB
nE1ydOa4kPD6Kw19h6IZa8RO60Nnn4XZEiymmZ/cBOU+HZPG/XLrmGAw/ZyZFXzQ
h+RZaASPtrKvw2bQ0HyYpW6ygdcI90O9G4W4ZhO4ZffO3VbaCyhjs+hfYBD19jQD
Inr/LEv2QU1MQBx/GNGVEvbBuxENb7FzQMFZcFJZWjFHCllpWzrLg0X3PMZjLNOV
JYiTmMg/rP4Xyg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:37:03 2025 by rpki-client