Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a313130303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a313130303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          n1bzLLVlOd1dRFwbpmh0ldYNcOamOFjO96JWFzkrpN4=
Subject key identifier:   63:C7:DB:69:A5:EA:CA:25:49:10:33:5B:DE:9D:4F:31:BE:3D:ED:2B
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       539F7B1DE17AE5616E2FF0288452B476192538FA
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a313130303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:11 +0000
ROA not before:           Fri 15 Jul 2022 21:03:11 +0000
ROA not after:            Fri 14 Jul 2023 21:08:11 +0000
asID:                     27688
IP address blocks:        2804:54a0:1100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9f:7b:1d:e1:7a:e5:61:6e:2f:f0:28:84:52:b4:76:19:25:38:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:11 2022 GMT
            Not After : Jul 14 21:08:11 2023 GMT
        Subject: CN=63C7DB69A5EACA254910335BDE9D4F31BE3DED2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:34:b4:ea:8a:d6:dd:73:5b:e7:c1:aa:cd:
                    6e:57:e7:be:1f:fc:ef:0a:f3:b9:29:bc:d1:f7:50:
                    f7:9a:b3:f8:95:8d:33:fa:a2:5f:0f:25:dc:d0:e4:
                    f3:6e:bf:57:d6:cd:20:8e:53:b2:7d:7a:8c:71:97:
                    3a:ad:f2:27:76:3c:07:8f:b8:b3:b1:50:0a:ee:9d:
                    3e:d7:ff:29:63:99:7a:fc:97:19:d2:2a:66:3e:86:
                    18:5f:eb:4e:24:99:62:c3:47:21:69:a3:9c:6f:e7:
                    f2:1a:6e:f3:f3:ad:2e:a7:20:66:fd:49:6d:c8:c5:
                    3e:db:05:46:20:ec:30:ee:5e:51:a4:b5:3d:69:51:
                    40:5e:db:e5:ad:e3:aa:fb:ef:4c:18:a8:ce:77:0a:
                    22:0c:78:32:01:97:49:a0:4e:e2:9f:71:83:8b:0f:
                    31:b7:e5:3b:09:b0:2b:22:29:20:32:3e:13:f8:cb:
                    1a:2c:bc:c3:f2:ca:10:50:6a:cc:1d:0d:cd:4c:91:
                    b2:14:42:ef:cf:fb:7e:f3:c3:8a:22:24:cc:85:78:
                    41:8d:62:1f:d0:7f:c2:5c:de:a7:97:13:c1:50:d1:
                    6a:71:98:53:b9:a6:a9:c1:e4:d3:27:a7:c6:6f:55:
                    02:c8:5d:df:34:b3:4a:d4:94:4c:b5:eb:66:d7:db:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C7:DB:69:A5:EA:CA:25:49:10:33:5B:DE:9D:4F:31:BE:3D:ED:2B
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a313130303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:e6:91:98:4d:81:f9:91:6c:fd:c4:c6:1a:fd:80:19:0c:
         95:ab:f8:1e:bc:e9:3e:df:df:ce:8e:5e:55:f0:4c:2f:8f:12:
         d4:af:8f:fd:c3:99:50:89:35:9c:ab:de:f6:88:52:d1:b6:e0:
         ee:4a:0c:55:cf:79:17:e3:63:ff:36:e7:bc:1f:ac:b4:3f:e6:
         cb:e5:e4:3e:15:87:c0:26:ac:1e:a3:4f:a8:6d:e9:4c:3d:11:
         92:93:7b:cf:d8:f9:50:ec:33:b0:b8:12:24:2d:75:de:a8:c7:
         70:d3:a8:cc:7c:a6:5b:58:c8:d4:3f:98:d4:ca:02:c1:78:39:
         17:e2:0c:b8:07:35:69:f5:96:f4:f5:88:3c:e1:8b:da:a9:13:
         b6:78:c2:91:db:82:e7:42:ef:ba:9d:9b:a5:b8:8f:a1:d2:be:
         e5:d8:2a:48:30:35:de:8f:0e:27:89:14:dd:79:d0:7f:c0:f6:
         ca:44:8e:09:aa:a4:96:36:b4:c3:e6:25:21:0a:4f:87:c9:d2:
         01:24:07:a4:a2:c2:fd:37:c8:8f:b4:f8:64:59:d4:b5:a3:41:
         61:3a:2c:d2:af:16:20:a1:a9:40:1c:1d:1d:47:dc:ae:c2:c3:
         cb:80:ba:a1:ac:49:b3:2e:79:a1:b8:93:ae:38:d2:a6:01:1d:
         f7:38:56:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU597HeF65WFuL/AohFK0dhklOPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0OUI4QjNFQjVBNzU1QkQ0QTE4QjNGNUJDMjREN0My
QUUzRUM2NzAeFw0yMjA3MTUyMTAzMTFaFw0yMzA3MTQyMTA4MTFaMDMxMTAvBgNV
BAMTKDYzQzdEQjY5QTVFQUNBMjU0OTEwMzM1QkRFOUQ0RjMxQkUzREVEMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IjS06orW3XNb58GqzW5X574f
/O8K87kpvNH3UPeas/iVjTP6ol8PJdzQ5PNuv1fWzSCOU7J9eoxxlzqt8id2PAeP
uLOxUArunT7X/yljmXr8lxnSKmY+hhhf604kmWLDRyFpo5xv5/IabvPzrS6nIGb9
SW3IxT7bBUYg7DDuXlGktT1pUUBe2+Wt46r770wYqM53CiIMeDIBl0mgTuKfcYOL
DzG35TsJsCsiKSAyPhP4yxosvMPyyhBQaswdDc1MkbIUQu/P+37zw4oiJMyFeEGN
Yh/Qf8Jc3qeXE8FQ0WpxmFO5pqnB5NMnp8ZvVQLIXd80s0rUlEy162bX24YzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUY8fbaaXqyiVJEDNb3p1PMb497SswHwYDVR0j
BBgwFoAUqkm4s+tadVvUoYs/W8JNfCrj7GcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkM0TDRWeFhzcjkzVVJRMnZXVXZCODF0Vm9tbXh0WFNZNVRLM1htNjFI
SDgvMC9BQTQ5QjhCM0VCNUE3NTVCRDRBMThCM0Y1QkMyNEQ3QzJBRTNFQzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNDlCOEIzRUI1QTc1NUJE
NEExOEIzRjVCQzI0RDdDMkFFM0VDNjcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDNEw0VnhYc3I5M1VSUTJ2V1V2QjgxdFZvbW14dFhTWTVUSzNYbTYxSEg4LzAv
MzIzODMwMzQzYTM1MzQ2MTMwM2EzMTMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczNjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBFSgETANBgkqhkiG9w0BAQsFAAOC
AQEAX0zmkZhNgfmRbP3Exhr9gBkMlav4HrzpPt/fzo5eVfBML48S1K+P/cOZUIk1
nKve9ohS0bbg7koMVc95F+Nj/zbnvB+stD/my+XkPhWHwCasHqNPqG3pTD0RkpN7
z9j5UOwzsLgSJC113qjHcNOozHymW1jI1D+Y1MoCwXg5F+IMuAc1afWW9PWIPOGL
2qkTtnjCkduC50Lvup2bpbiPodK+5dgqSDA13o8OJ4kU3XnQf8D2ykSOCaqklja0
w+YlIQpPh8nSASQHpKLC/TfIj7T4ZFnUtaNBYTos0q8WIKGpQBwdHUfcrsLDy4C6
oaxJsy55obiTrjjSpgEd9zhWYw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:09 2025 by rpki-client