Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d3334203d3e203238313931.roa
File:                     323830343a6332633a3a2f33322d3334203d3e203238313931.roa (raw, json)
Hash identifier:          v0+2ZDj2gIXSQYl1QWcEV572FSu6NmI+rm4pp4QJEvY=
Subject key identifier:   2E:14:9A:5C:D5:B4:3A:61:C0:9C:E4:CA:C0:54:C1:15:F0:EC:A0:2C
Certificate issuer:       /CN=7F8EA995A4408768396ABD97DA2AABC1207C94EC
Certificate serial:       179A89E2D5A91213497698997FA4BFAE32E9F484
Authority key identifier: 7F:8E:A9:95:A4:40:87:68:39:6A:BD:97:DA:2A:AB:C1:20:7C:94:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d3334203d3e203238313931.roa
Signing time:             Wed 01 Feb 2023 14:00:00 +0000
ROA not before:           Wed 01 Feb 2023 13:55:00 +0000
ROA not after:            Wed 31 Jan 2024 14:00:00 +0000
asID:                     28191
IP address blocks:        2804:c2c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:89:e2:d5:a9:12:13:49:76:98:99:7f:a4:bf:ae:32:e9:f4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8EA995A4408768396ABD97DA2AABC1207C94EC
        Validity
            Not Before: Feb  1 13:55:00 2023 GMT
            Not After : Jan 31 14:00:00 2024 GMT
        Subject: CN=2E149A5CD5B43A61C09CE4CAC054C115F0ECA02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:4c:58:e8:ac:f3:c9:bf:55:2f:2b:b7:b4:
                    a7:5f:ac:c2:aa:48:21:56:48:46:65:5b:a8:6b:c0:
                    f3:67:28:0c:4b:da:2f:31:75:c4:ba:31:51:7d:62:
                    5a:47:8e:a0:d0:68:35:03:3a:93:11:04:9b:06:d5:
                    23:68:08:62:fe:57:73:c1:6b:8c:92:7c:66:72:4e:
                    73:2a:38:9a:a1:44:4f:f6:46:14:2b:1b:de:46:83:
                    21:53:e2:be:f3:94:8a:db:e0:81:8e:46:16:49:6f:
                    3e:42:af:a1:a5:37:10:18:72:e7:e1:35:6f:cb:6b:
                    ee:cd:23:3e:25:0d:b2:bc:d5:2f:09:9c:14:11:8e:
                    33:06:4b:26:a1:f3:80:80:97:8e:ed:0a:2c:e9:ab:
                    e9:42:0b:21:bd:7d:d4:50:f6:86:27:02:fa:84:59:
                    5c:87:07:6d:54:18:2c:1a:4d:07:06:d7:34:22:08:
                    64:eb:9a:ac:85:b4:e3:52:59:b2:50:cb:46:03:6f:
                    5b:cf:5d:e1:02:7b:53:1d:7b:5d:ba:c9:be:62:bd:
                    2b:bc:77:7d:25:56:a8:b7:e5:f7:17:10:19:89:7b:
                    0f:9b:44:9b:aa:9d:08:dd:8e:c0:ac:08:3a:25:5d:
                    cb:25:11:6c:d4:1c:78:ab:f8:66:bb:11:c3:81:68:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:14:9A:5C:D5:B4:3A:61:C0:9C:E4:CA:C0:54:C1:15:F0:EC:A0:2C
            X509v3 Authority Key Identifier:
                keyid:7F:8E:A9:95:A4:40:87:68:39:6A:BD:97:DA:2A:AB:C1:20:7C:94:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d3334203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:a7:99:c7:4e:a8:54:69:eb:61:99:08:fa:fc:75:83:8f:
         74:ae:7d:81:c5:e4:73:95:1d:54:3a:08:00:52:93:88:e2:e0:
         22:1f:bc:7d:d8:1e:99:09:a9:bb:53:e7:13:e5:4c:df:17:1b:
         76:77:be:4c:fc:80:80:e6:7a:84:c1:14:db:e2:95:41:a9:58:
         2c:96:66:29:bb:2c:f7:83:3c:d6:24:24:09:0f:8e:64:7f:3a:
         19:bf:78:d0:37:0d:60:77:1f:4a:96:2f:cd:37:f2:75:6c:eb:
         67:d3:cd:aa:c9:3c:46:70:23:ab:e5:22:a3:b4:a8:5a:1b:5b:
         af:a0:8e:b2:71:6a:de:96:89:37:56:88:e5:c8:9f:50:b3:b8:
         4e:72:1c:08:42:1c:0e:6a:a5:34:36:5b:20:7d:78:2b:9c:b5:
         71:68:67:bc:1a:ec:7a:50:91:0c:21:43:a1:0e:92:19:ba:26:
         9f:c0:b7:79:63:c5:7b:53:0d:62:d1:12:33:2a:81:4b:b0:40:
         27:0d:90:a2:b6:82:c9:0f:fb:40:7b:f7:24:0f:8a:fa:5e:06:
         6b:be:45:54:a7:10:58:99:10:44:02:1e:3e:52:3b:64:23:aa:
         17:c5:30:c7:5b:79:57:32:ec:a9:4c:66:08:89:3b:f3:88:34:
         dc:06:57:4c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUF5qJ4tWpEhNJdpiZf6S/rjLp9IQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y4RUE5OTVBNDQwODc2ODM5NkFCRDk3REEyQUFCQzEy
MDdDOTRFQzAeFw0yMzAyMDExMzU1MDBaFw0yNDAxMzExNDAwMDBaMDMxMTAvBgNV
BAMTKDJFMTQ5QTVDRDVCNDNBNjFDMDlDRTRDQUMwNTRDMTE1RjBFQ0EwMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTWUxY6Kzzyb9VLyu3tKdfrMKq
SCFWSEZlW6hrwPNnKAxL2i8xdcS6MVF9YlpHjqDQaDUDOpMRBJsG1SNoCGL+V3PB
a4ySfGZyTnMqOJqhRE/2RhQrG95GgyFT4r7zlIrb4IGORhZJbz5Cr6GlNxAYcufh
NW/La+7NIz4lDbK81S8JnBQRjjMGSyah84CAl47tCizpq+lCCyG9fdRQ9oYnAvqE
WVyHB21UGCwaTQcG1zQiCGTrmqyFtONSWbJQy0YDb1vPXeECe1Mde126yb5ivSu8
d30lVqi35fcXEBmJew+bRJuqnQjdjsCsCDolXcslEWzUHHir+Ga7EcOBaF4BAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQULhSaXNW0OmHAnOTKwFTBFfDsoCwwHwYDVR0j
BBgwFoAUf46plaRAh2g5ar2X2iqrwSB8lOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC83RjhFQTk5NUE0NDA4NzY4Mzk2QUJEOTdEQTJBQUJDMTIwN0M5NEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGOEVBOTk1QTQ0MDg3Njgz
OTZBQkQ5N0RBMkFBQkMxMjA3Qzk0RUMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzIzODMwMzQzYTYzMzI2MzNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzgzMTM5
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAwsMA0GCSqGSIb3DQEBCwUAA4IBAQCk6KeZx06oVGnr
YZkI+vx1g490rn2BxeRzlR1UOggAUpOI4uAiH7x92B6ZCam7U+cT5UzfFxt2d75M
/ICA5nqEwRTb4pVBqVgslmYpuyz3gzzWJCQJD45kfzoZv3jQNw1gdx9Kli/NN/J1
bOtn082qyTxGcCOr5SKjtKhaG1uvoI6ycWrelok3VojlyJ9Qs7hOchwIQhwOaqU0
NlsgfXgrnLVxaGe8Gux6UJEMIUOhDpIZuiafwLd5Y8V7Uw1i0RIzKoFLsEAnDZCi
toLJD/tAe/ckD4r6XgZrvkVUpxBYmRBEAh4+UjtkI6oXxTDHW3lXMuypTGYIiTvz
iDTcBldM
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:57:37 2025 by rpki-client