Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/323830343a313861383a3a2f33322d3332203d3e20323632353032.roa
File:                     323830343a313861383a3a2f33322d3332203d3e20323632353032.roa (raw, json)
Hash identifier:          H8A8JWEtX0awasutqfEo5j2qkS/P/mYXHg7uKeNRq8g=
Subject key identifier:   15:09:A3:5B:82:DF:21:58:56:BF:22:06:2A:33:9F:60:43:9D:8C:FB
Certificate issuer:       /CN=3E7012DDC83FD6C43059A6A0938BEE70E96E9606
Certificate serial:       237B8B456D1BBA09FC8CB34D9CB966658D470CC6
Authority key identifier: 3E:70:12:DD:C8:3F:D6:C4:30:59:A6:A0:93:8B:EE:70:E9:6E:96:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/323830343a313861383a3a2f33322d3332203d3e20323632353032.roa
Signing time:             Fri 22 Apr 2022 10:46:27 +0000
ROA not before:           Fri 22 Apr 2022 10:41:27 +0000
ROA not after:            Fri 21 Apr 2023 10:46:27 +0000
asID:                     262502
IP address blocks:        2804:18a8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7b:8b:45:6d:1b:ba:09:fc:8c:b3:4d:9c:b9:66:65:8d:47:0c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E7012DDC83FD6C43059A6A0938BEE70E96E9606
        Validity
            Not Before: Apr 22 10:41:27 2022 GMT
            Not After : Apr 21 10:46:27 2023 GMT
        Subject: CN=1509A35B82DF215856BF22062A339F60439D8CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:81:68:76:c6:1b:17:18:e9:d8:ea:33:ba:
                    11:e6:73:04:72:13:96:4f:7a:07:d0:bb:08:87:df:
                    4d:60:c1:b0:cb:a3:33:2d:f7:15:b0:bf:7d:28:70:
                    75:d5:f7:4f:fd:76:74:ce:de:b5:f3:14:c7:83:7c:
                    88:75:ca:f0:f0:17:6f:83:cf:c5:2b:16:8a:44:27:
                    80:cf:2b:ff:a6:e8:6c:ec:3f:37:9f:ce:0a:cb:77:
                    9f:69:30:a2:31:df:2b:b6:8b:41:b8:7d:be:f8:19:
                    85:b2:b6:34:e9:96:dc:52:b3:18:95:f4:2a:b1:c6:
                    f7:d8:91:50:78:30:f1:cb:e4:af:e6:de:78:38:8d:
                    1f:2b:fe:e1:56:cf:07:e0:6d:08:85:c1:48:48:aa:
                    cb:15:ee:51:af:de:2b:e8:b7:b7:ad:62:6e:33:74:
                    f2:6b:ef:57:e5:30:44:84:96:53:b5:3a:fc:b7:96:
                    73:bb:fc:77:b4:a8:f2:57:aa:16:17:c7:e5:2d:37:
                    3c:c1:8d:fc:ed:dd:4b:31:78:5d:06:00:c0:53:35:
                    6d:4c:0c:85:d0:11:07:1f:02:2b:7c:e4:00:23:95:
                    72:a8:39:f1:61:33:9b:89:aa:28:69:64:9a:8c:58:
                    96:18:f5:7a:e0:e5:fc:25:21:45:a3:de:86:15:a8:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:A3:5B:82:DF:21:58:56:BF:22:06:2A:33:9F:60:43:9D:8C:FB
            X509v3 Authority Key Identifier:
                keyid:3E:70:12:DD:C8:3F:D6:C4:30:59:A6:A0:93:8B:EE:70:E9:6E:96:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/323830343a313861383a3a2f33322d3332203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:fc:18:e5:87:21:3b:1a:0a:23:29:43:01:ac:99:84:41:62:
         82:ec:ad:ad:5b:7b:84:25:6c:ef:03:28:e3:c3:7a:18:78:55:
         29:41:4a:e7:9f:36:0b:20:8f:a7:25:5a:e8:ce:7a:62:7a:e6:
         83:aa:cb:cc:f1:10:3e:8c:e5:a4:b1:cb:f8:07:f7:1d:65:6e:
         d1:00:4d:af:f5:64:1c:95:0c:fc:fa:5f:48:cc:df:b9:7f:7c:
         e1:29:d4:3c:b1:e8:7e:5c:4e:0e:1a:27:4f:bb:1a:29:6f:b8:
         5a:9c:75:19:f8:f7:dd:06:a3:7a:63:95:5e:98:8e:7f:bf:5c:
         8b:d3:4d:8a:81:42:85:8b:19:9f:69:bb:24:e9:80:a1:62:fc:
         4a:f0:24:fa:ab:b4:3f:21:db:1c:ba:c0:e2:72:be:0f:62:fb:
         2b:79:53:29:60:87:93:11:08:d5:94:08:08:0a:80:fc:ab:c2:
         94:56:fc:b3:de:3c:9b:eb:b8:72:e7:26:52:b3:34:9d:54:90:
         05:9a:ba:7a:25:71:bd:08:48:e8:7c:cb:e2:da:1e:2f:97:e4:
         bb:05:26:65:87:1a:ac:72:05:83:1d:32:4a:e0:2a:38:17:a3:
         31:f8:33:8c:ab:a3:e4:fd:c9:55:2b:37:40:f2:9d:e6:dc:22:
         42:12:14:2a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUI3uLRW0bugn8jLNNnLlmZY1HDMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U3MDEyRERDODNGRDZDNDMwNTlBNkEwOTM4QkVFNzBF
OTZFOTYwNjAeFw0yMjA0MjIxMDQxMjdaFw0yMzA0MjExMDQ2MjdaMDMxMTAvBgNV
BAMTKDE1MDlBMzVCODJERjIxNTg1NkJGMjIwNjJBMzM5RjYwNDM5RDhDRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+YFodsYbFxjp2OozuhHmcwRy
E5ZPegfQuwiH301gwbDLozMt9xWwv30ocHXV90/9dnTO3rXzFMeDfIh1yvDwF2+D
z8UrFopEJ4DPK/+m6GzsPzefzgrLd59pMKIx3yu2i0G4fb74GYWytjTpltxSsxiV
9CqxxvfYkVB4MPHL5K/m3ng4jR8r/uFWzwfgbQiFwUhIqssV7lGv3ivot7etYm4z
dPJr71flMESEllO1Ovy3lnO7/He0qPJXqhYXx+UtNzzBjfzt3UsxeF0GAMBTNW1M
DIXQEQcfAit85AAjlXKoOfFhM5uJqihpZJqMWJYY9Xrg5fwlIUWj3oYVqNr1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFQmjW4LfIVhWvyIGKjOfYEOdjPswHwYDVR0j
BBgwFoAUPnAS3cg/1sQwWaagk4vucOlulgYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjhiRUMxd1dvZ2tGb1RKcW10SmhjRGczOEI0QmlzREQ3WnR4cTdzeUU5
OTgvMC8zRTcwMTJEREM4M0ZENkM0MzA1OUE2QTA5MzhCRUU3MEU5NkU5NjA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFNzAxMkREQzgzRkQ2QzQz
MDU5QTZBMDkzOEJFRTcwRTk2RTk2MDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4YkVDMXdXb2drRm9USnFtdEpoY0RnMzhCNEJpc0REN1p0eHE3c3lFOTk4LzAv
MzIzODMwMzQzYTMxMzg2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzUzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQYqDANBgkqhkiG9w0BAQsFAAOCAQEAkfwY5Ych
OxoKIylDAayZhEFiguytrVt7hCVs7wMo48N6GHhVKUFK5582CyCPpyVa6M56Ynrm
g6rLzPEQPozlpLHL+Af3HWVu0QBNr/VkHJUM/PpfSMzfuX984SnUPLHoflxODhon
T7saKW+4Wpx1Gfj33QajemOVXpiOf79ci9NNioFChYsZn2m7JOmAoWL8SvAk+qu0
PyHbHLrA4nK+D2L7K3lTKWCHkxEI1ZQICAqA/KvClFb8s948m+u4cucmUrM0nVSQ
BZq6eiVxvQhI6HzL4toeL5fkuwUmZYcarHIFgx0ySuAqOBejMfgzjKuj5P3JVSs3
QPKd5twiQhIUKg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:36:06 2025 by rpki-client