Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa
File:                     323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa (raw, json)
Hash identifier:          +pSa7mUhC+b5004ZSOCAl17ejcXEvLmnfQiossAmcWw=
Subject key identifier:   27:8E:A2:59:BE:99:B1:66:74:26:01:4C:25:30:F1:6B:CB:D3:96:90
Certificate issuer:       /CN=C6BD52DC079825A702D874B54502AD138171621D
Certificate serial:       6F2A317C555D3184BFB665F8D0123A67D88409F9
Authority key identifier: C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa
Signing time:             Wed 16 Mar 2022 20:05:28 +0000
ROA not before:           Wed 16 Mar 2022 20:00:28 +0000
ROA not after:            Wed 15 Mar 2023 20:05:28 +0000
asID:                     272185
IP address blocks:        2804:833c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2a:31:7c:55:5d:31:84:bf:b6:65:f8:d0:12:3a:67:d8:84:09:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6BD52DC079825A702D874B54502AD138171621D
        Validity
            Not Before: Mar 16 20:00:28 2022 GMT
            Not After : Mar 15 20:05:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:33:c7:84:a5:56:6a:ca:bb:7b:2e:e7:00:
                    26:e7:22:fe:52:2e:49:88:b1:7a:19:1f:fa:0d:6d:
                    16:86:46:54:24:f6:cc:c9:8b:19:0d:0f:52:9d:52:
                    2c:ce:a8:29:7c:c5:31:12:97:b0:e2:21:96:dc:e0:
                    0e:c5:76:4d:7d:ae:a5:3f:c0:f9:9b:80:90:3f:10:
                    a5:36:1f:29:37:22:1e:a9:6b:3e:92:53:c3:3d:da:
                    43:97:c3:1a:25:bc:73:52:9f:ac:e7:6c:75:07:5e:
                    85:8a:61:24:12:7b:1c:67:4d:f1:c4:45:8e:81:b5:
                    53:f1:20:9e:88:5e:f1:52:eb:c5:7f:12:22:0a:51:
                    2a:b4:09:8b:fe:81:4d:bb:9b:c9:06:c5:9a:d1:6e:
                    21:34:73:d4:46:a1:e1:91:cf:bb:0a:5f:fb:e5:4f:
                    0f:de:2a:e2:b1:b9:4b:cb:3d:5d:10:b1:ad:70:67:
                    c7:f1:c4:02:7c:ba:f7:e8:19:2e:40:ee:10:7e:a3:
                    ef:26:82:df:48:73:82:5a:d3:0d:76:5c:69:96:04:
                    11:8b:a4:d6:28:03:bf:25:49:17:5b:17:ea:e3:3d:
                    c5:e5:51:52:cb:38:46:e1:8d:4a:de:34:0f:4d:d2:
                    75:cf:24:1b:b3:8d:dc:fb:6b:eb:04:2b:1a:71:64:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:A2:59:BE:99:B1:66:74:26:01:4C:25:30:F1:6B:CB:D3:96:90
            X509v3 Authority Key Identifier:
                keyid:C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/C6BD52DC079825A702D874B54502AD138171621D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:56:4d:86:4b:36:5a:ac:b7:2e:c2:63:6b:e9:f1:61:50:5e:
         68:1d:36:56:3c:5d:86:3b:5b:ef:b3:f7:0e:44:07:35:42:ae:
         77:5d:e2:2c:53:40:e5:bd:0b:e6:b0:82:25:0d:11:7d:7f:70:
         56:c2:87:f9:b9:f8:e4:29:9c:77:7f:5c:6a:45:9b:0c:f0:ac:
         c3:59:5f:be:c5:99:bf:7e:33:12:6f:0e:a3:e7:7d:e3:48:5e:
         2b:23:76:04:85:49:9b:96:28:29:98:5e:f9:10:f1:34:7a:91:
         32:9e:79:a0:57:82:aa:93:26:a9:fe:d2:ba:5f:46:c5:5c:f8:
         15:25:a9:7f:bd:13:ed:15:67:77:91:57:27:36:15:90:57:c9:
         c7:17:8e:0f:cd:15:c4:73:b2:7d:8c:67:86:a1:db:60:e6:2e:
         e8:a7:7f:2c:57:c0:65:aa:f7:5a:bc:df:a0:3c:12:8f:61:4c:
         ef:e0:2f:52:18:5d:37:68:ef:6a:59:b9:5f:23:66:79:89:77:
         12:92:e9:8a:1f:40:be:6a:9d:eb:eb:31:5a:7a:20:ab:47:b5:
         98:1a:06:57:7c:32:08:a4:01:cf:0f:40:da:57:5c:74:c0:47:
         fc:51:4b:61:21:44:68:0d:c9:71:03:81:ef:d4:7d:50:0c:0a:
         4e:ff:94:49
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUbyoxfFVdMYS/tmX40BI6Z9iECfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZCRDUyREMwNzk4MjVBNzAyRDg3NEI1NDUwMkFEMTM4
MTcxNjIxRDAeFw0yMjAzMTYyMDAwMjhaFw0yMzAzMTUyMDA1MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE3NDMzQzc4NEE1NTY2QUNB
QkI3QjJFRTcwMDI2RTcyMkZFNTIyRTQ5ODhCMTdBMTkxRkZBMEQ2RDE2ODY0NjU0
MjRGNkNDQzk4QjE5MEQwRjUyOUQ1MjJDQ0VBODI5N0NDNTMxMTI5N0IwRTIyMTk2
RENFMDBFQzU3NjREN0RBRUE1M0ZDMEY5OUI4MDkwM0YxMEE1MzYxRjI5MzcyMjFF
QTk2QjNFOTI1M0MzM0REQTQzOTdDMzFBMjVCQzczNTI5RkFDRTc2Qzc1MDc1RTg1
OEE2MTI0MTI3QjFDNjc0REYxQzQ0NThFODFCNTUzRjEyMDlFODg1RUYxNTJFQkM1
N0YxMjIyMEE1MTJBQjQwOThCRkU4MTREQkI5QkM5MDZDNTlBRDE2RTIxMzQ3M0Q0
NDZBMUUxOTFDRkJCMEE1RkZCRTU0RjBGREUyQUUyQjFCOTRCQ0IzRDVEMTBCMUFE
NzA2N0M3RjFDNDAyN0NCQUY3RTgxOTJFNDBFRTEwN0VBM0VGMjY4MkRGNDg3Mzgy
NUFEMzBENzY1QzY5OTYwNDExOEJBNEQ2MjgwM0JGMjU0OTE3NUIxN0VBRTMzREM1
RTU1MTUyQ0IzODQ2RTE4RDRBREUzNDBGNEREMjc1Q0YyNDFCQjM4RERDRkI2QkVC
MDQyQjFBNzE2NDBBQ0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0XQzx4SlVmrKu3su5wAm5yL+Ui5JiLF6GR/6DW0WhkZUJPbMyYsZ
DQ9SnVIszqgpfMUxEpew4iGW3OAOxXZNfa6lP8D5m4CQPxClNh8pNyIeqWs+klPD
PdpDl8MaJbxzUp+s52x1B16FimEkEnscZ03xxEWOgbVT8SCeiF7xUuvFfxIiClEq
tAmL/oFNu5vJBsWa0W4hNHPURqHhkc+7Cl/75U8P3irisblLyz1dELGtcGfH8cQC
fLr36BkuQO4QfqPvJoLfSHOCWtMNdlxplgQRi6TWKAO/JUkXWxfq4z3F5VFSyzhG
4Y1K3jQPTdJ1zyQbs43c+2vrBCsacWQKzQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCeOolm+mbFmdCYBTCUw8WvL05aQMB8GA1UdIwQYMBaAFMa9UtwHmCWnAth0tUUC
rROBcWIdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVNOHVrdVZwY25rOUxX
SlFyN1k5WmlpRkNoYllLN2gzcGNxallKMjlnWnZnLzAvQzZCRDUyREMwNzk4MjVB
NzAyRDg3NEI1NDUwMkFEMTM4MTcxNjIxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DNkJENTJEQzA3OTgyNUE3MDJEODc0QjU0NTAyQUQxMzgxNzE2
MjFELmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81TTh1a3VWcGNuazlMV0pRcjdZ
OVppaUZDaGJZSzdoM3BjcWpZSjI5Z1p2Zy8wLzMyMzgzMDM0M2EzODMzMzM2MzNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzIzMTM4MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBIM8gDANBgkqhkiG9w0BAQsFAAOCAQEAjlZNhks2Wqy3LsJja+nx
YVBeaB02Vjxdhjtb77P3DkQHNUKud13iLFNA5b0L5rCCJQ0RfX9wVsKH+bn45Cmc
d39cakWbDPCsw1lfvsWZv34zEm8Oo+d940heKyN2BIVJm5YoKZhe+RDxNHqRMp55
oFeCqpMmqf7Sul9GxVz4FSWpf70T7RVnd5FXJzYVkFfJxxeOD80VxHOyfYxnhqHb
YOYu6Kd/LFfAZar3WrzfoDwSj2FM7+AvUhhdN2jvalm5XyNmeYl3EpLpih9Avmqd
6+sxWnogq0e1mBoGV3wyCKQBzw9A2ldcdMBH/FFLYSFEaA3JcQOB79R9UAwKTv+U
SQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 09:51:23 2025 by rpki-client