Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3336203d3e20323731313130.roa
File:                     323830343a373636383a3a2f33322d3336203d3e20323731313130.roa (raw, json)
Hash identifier:          xmtdeVcEdjXRjuuBUtfRYOJuntPyPvt2SLqpV744xOU=
Subject key identifier:   C7:0F:50:D8:81:80:E6:F0:16:6E:5C:B3:4C:93:D8:9C:BA:BD:4F:1C
Certificate issuer:       /CN=A8ABB4313CFD27C50AB156923C805712B65476E7
Certificate serial:       2AAF32F3F19DCABAD2C87C3D64C9214D246C902B
Authority key identifier: A8:AB:B4:31:3C:FD:27:C5:0A:B1:56:92:3C:80:57:12:B6:54:76:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8ABB4313CFD27C50AB156923C805712B65476E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3336203d3e20323731313130.roa
Signing time:             Tue 18 Oct 2022 23:54:27 +0000
ROA not before:           Tue 18 Oct 2022 23:49:27 +0000
ROA not after:            Tue 17 Oct 2023 23:54:27 +0000
asID:                     271110
IP address blocks:        2804:7668::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:af:32:f3:f1:9d:ca:ba:d2:c8:7c:3d:64:c9:21:4d:24:6c:90:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8ABB4313CFD27C50AB156923C805712B65476E7
        Validity
            Not Before: Oct 18 23:49:27 2022 GMT
            Not After : Oct 17 23:54:27 2023 GMT
        Subject: CN=C70F50D88180E6F0166E5CB34C93D89CBABD4F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:7a:ed:43:9b:d6:94:fa:d8:4c:7d:08:c9:
                    6a:00:3f:eb:b7:39:dd:64:64:6d:26:c1:d2:c4:22:
                    47:cf:7c:c1:05:cb:d1:18:3d:ef:28:66:05:97:a3:
                    c2:56:87:5f:38:92:74:3d:5a:ca:19:1b:5c:01:8a:
                    1f:e7:8b:2f:58:c8:76:86:cd:59:20:f5:4d:ea:69:
                    58:c9:27:cd:9f:b5:a6:2c:81:0c:ef:fc:9d:de:31:
                    31:59:5b:ad:6b:1f:5a:cb:2d:86:7c:cf:d9:22:ad:
                    fc:81:8e:51:c5:d3:b2:76:0e:be:60:a0:17:10:b4:
                    7c:46:35:62:bd:97:99:16:b9:05:45:5a:69:a6:96:
                    91:2a:5c:90:dc:cd:c7:e2:98:38:0f:c5:c3:41:62:
                    8b:7a:77:1e:a4:26:7e:d0:ba:53:f4:09:d9:c1:21:
                    fa:5b:d3:bd:1c:9a:28:66:d8:d6:1b:91:5e:5a:c2:
                    65:80:6c:36:bd:ff:45:59:c5:49:cd:e1:0f:70:fa:
                    74:73:fe:e0:30:97:65:c6:18:27:af:d7:d5:7d:04:
                    b9:da:7e:ac:1c:ed:ca:aa:de:18:48:f4:49:3d:f9:
                    17:11:83:3a:4c:3c:65:4b:6c:fb:3e:97:7c:82:04:
                    6e:48:f8:64:ed:59:41:ed:ed:02:ae:a2:b9:95:0b:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:50:D8:81:80:E6:F0:16:6E:5C:B3:4C:93:D8:9C:BA:BD:4F:1C
            X509v3 Authority Key Identifier:
                keyid:A8:AB:B4:31:3C:FD:27:C5:0A:B1:56:92:3C:80:57:12:B6:54:76:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/A8ABB4313CFD27C50AB156923C805712B65476E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8ABB4313CFD27C50AB156923C805712B65476E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3336203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7668::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:98:ae:ad:0a:db:3a:e6:1c:a8:2c:da:63:4a:f8:60:1b:fb:
         44:5b:dd:b3:51:96:93:39:19:ee:9d:ce:af:48:a8:d0:69:4a:
         f8:02:15:53:4a:74:3e:4d:3b:3e:35:62:3f:6d:9f:df:e5:50:
         3d:23:bf:71:88:69:29:1d:e5:fa:38:63:d0:56:79:b0:2f:28:
         92:e7:15:73:b3:52:5d:fa:a8:b0:a7:dd:47:c4:56:18:5c:82:
         a9:24:b5:b4:b4:36:dc:e2:dd:d7:83:68:27:7c:91:90:99:0e:
         27:40:65:94:e2:c7:8a:5d:c2:ef:b4:90:a6:de:c1:52:59:1a:
         1c:74:dc:3f:72:ac:19:12:b7:cc:31:c2:bf:50:35:1f:a3:d8:
         93:0b:a6:b9:e8:88:a0:f2:8a:00:59:5b:4e:fe:4d:c2:ca:38:
         03:d2:ef:ef:0b:8e:3a:59:da:a3:6b:1a:a6:98:db:aa:95:3e:
         1d:25:ad:bb:7a:38:65:07:03:55:04:10:24:77:3c:a6:1c:da:
         48:4d:6d:15:fc:e5:bf:a6:42:fe:c7:72:a5:90:bd:b4:34:55:
         b0:e0:d5:65:fb:50:5a:b2:b9:0c:c7:ea:a3:10:b9:54:cc:77:
         2b:4d:61:5f:22:e6:5d:fb:75:44:dd:0e:2b:eb:dc:47:04:fb:
         82:a6:60:2b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKq8y8/GdyrrSyHw9ZMkhTSRskCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThBQkI0MzEzQ0ZEMjdDNTBBQjE1NjkyM0M4MDU3MTJC
NjU0NzZFNzAeFw0yMjEwMTgyMzQ5MjdaFw0yMzEwMTcyMzU0MjdaMDMxMTAvBgNV
BAMTKEM3MEY1MEQ4ODE4MEU2RjAxNjZFNUNCMzRDOTNEODlDQkFCRDRGMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTK3rtQ5vWlPrYTH0IyWoAP+u3
Od1kZG0mwdLEIkfPfMEFy9EYPe8oZgWXo8JWh184knQ9WsoZG1wBih/niy9YyHaG
zVkg9U3qaVjJJ82ftaYsgQzv/J3eMTFZW61rH1rLLYZ8z9kirfyBjlHF07J2Dr5g
oBcQtHxGNWK9l5kWuQVFWmmmlpEqXJDczcfimDgPxcNBYot6dx6kJn7QulP0CdnB
Ifpb070cmihm2NYbkV5awmWAbDa9/0VZxUnN4Q9w+nRz/uAwl2XGGCev19V9BLna
fqwc7cqq3hhI9Ek9+RcRgzpMPGVLbPs+l3yCBG5I+GTtWUHt7QKuormVC5QNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxw9Q2IGA5vAWblyzTJPYnLq9TxwwHwYDVR0j
BBgwFoAUqKu0MTz9J8UKsVaSPIBXErZUducwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW9tVXRDYVVSRjNhdHVIdXhDNnNEVnNTNUVhRFVxY0daZVg4aFNvQXVx
bWkvMC9BOEFCQjQzMTNDRkQyN0M1MEFCMTU2OTIzQzgwNTcxMkI2NTQ3NkU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E4QUJCNDMxM0NGRDI3QzUw
QUIxNTY5MjNDODA1NzEyQjY1NDc2RTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVvbVV0Q2FVUkYzYXR1SHV4QzZzRFZzUzVFYURVcWNHWmVYOGhTb0F1cW1pLzAv
MzIzODMwMzQzYTM3MzYzNjM4M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMx
MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR2aDANBgkqhkiG9w0BAQsFAAOCAQEAvJiurQrb
OuYcqCzaY0r4YBv7RFvds1GWkzkZ7p3Or0io0GlK+AIVU0p0Pk07PjViP22f3+VQ
PSO/cYhpKR3l+jhj0FZ5sC8okucVc7NSXfqosKfdR8RWGFyCqSS1tLQ23OLd14No
J3yRkJkOJ0BllOLHil3C77SQpt7BUlkaHHTcP3KsGRK3zDHCv1A1H6PYkwumueiI
oPKKAFlbTv5Nwso4A9Lv7wuOOlnao2sappjbqpU+HSWtu3o4ZQcDVQQQJHc8phza
SE1tFfzlv6ZC/sdypZC9tDRVsODVZftQWrK5DMfqoxC5VMx3K01hXyLmXft1RN0O
K+vcRwT7gqZgKw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:02 2025 by rpki-client