Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a316630303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a316630303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          bLbEx694TdbNDltn/ExDFGUepqFQyN21iDKa7mDQ5Bk=
Subject key identifier:   C3:33:CC:9D:ED:BC:69:3E:02:85:B8:F2:38:CF:DD:5F:80:A9:C1:FF
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       3521D1E80117FC0D653935131F8E9C480FE1C3A4
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a316630303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:06 +0000
ROA not before:           Fri 15 Jul 2022 21:03:06 +0000
ROA not after:            Fri 14 Jul 2023 21:08:06 +0000
asID:                     27688
IP address blocks:        2804:54a0:1f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:21:d1:e8:01:17:fc:0d:65:39:35:13:1f:8e:9c:48:0f:e1:c3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:06 2022 GMT
            Not After : Jul 14 21:08:06 2023 GMT
        Subject: CN=C333CC9DEDBC693E0285B8F238CFDD5F80A9C1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:93:8d:ff:af:4d:01:12:d2:8d:30:5f:be:
                    91:47:1f:ec:8e:63:4d:cc:f5:32:9d:b8:8f:63:a6:
                    83:73:0d:39:65:09:29:c5:f1:72:21:0a:74:77:3a:
                    9f:b6:eb:31:db:66:22:b8:05:da:4b:52:46:80:6c:
                    13:21:30:b4:99:83:ee:a9:3b:8b:84:4c:cf:68:1c:
                    16:9a:31:fb:3e:29:5e:5b:64:27:0d:43:0f:e2:05:
                    26:f2:b6:01:1a:e2:5c:7b:2f:cb:14:81:6e:35:8d:
                    32:01:02:f7:8e:7d:6a:84:43:42:50:d8:70:58:e3:
                    13:3c:07:81:e8:2b:2b:5d:fa:3f:fc:b0:4b:6c:45:
                    b7:56:4a:63:f2:62:ba:2d:79:50:51:0b:85:b4:b3:
                    56:d6:71:21:96:a1:5b:8f:bd:0f:7e:5b:69:17:d7:
                    50:01:aa:94:8d:e8:52:b1:4a:08:06:f4:60:1f:07:
                    72:dd:76:ce:fb:7b:30:3a:dd:9f:a1:f7:5b:e0:88:
                    75:f1:cc:cc:54:0f:15:a1:47:cb:ac:60:3e:9f:84:
                    0c:d1:b5:d6:14:8a:0e:bd:01:32:1b:30:d4:40:5e:
                    45:01:3a:fc:f9:6d:30:0e:77:68:f1:53:3c:a9:5b:
                    ab:b8:6e:d0:ff:c0:ef:b8:15:87:64:86:f0:9e:c5:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:33:CC:9D:ED:BC:69:3E:02:85:B8:F2:38:CF:DD:5F:80:A9:C1:FF
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a316630303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:f2:8a:7b:74:e1:20:f4:50:5d:21:d4:bb:79:4f:63:f7:91:
         01:3d:dd:97:9a:45:16:b4:b2:b2:20:91:7c:96:59:44:ad:15:
         93:58:e4:cf:5f:91:84:a1:b8:d5:b0:11:01:61:08:6d:9c:14:
         61:3b:68:85:86:a8:6d:79:be:1d:38:21:48:d5:a9:cb:9a:a4:
         2d:59:a4:32:51:1a:81:34:0b:ba:0a:3d:e8:43:57:f7:12:1f:
         27:b3:65:bc:c1:f4:f3:46:3f:ee:0d:0f:8c:8e:16:1e:05:0b:
         77:ef:1e:b3:14:c2:0d:d9:10:58:6f:e8:55:02:46:8a:b6:42:
         9e:00:34:9a:29:14:f0:6a:cd:54:15:9f:01:f9:ed:82:26:82:
         b4:8f:83:c0:db:64:a1:f8:de:c4:78:28:72:ef:df:bd:d1:93:
         07:5f:f7:51:53:0b:77:e6:23:2b:9e:71:a1:b2:13:0f:87:ea:
         59:0a:78:aa:99:97:6c:44:bb:7c:6f:29:0d:e3:08:a7:dc:53:
         4b:5a:c1:48:a4:c3:14:14:43:a4:5c:c3:45:16:02:53:e3:c1:
         8d:c6:08:ac:e4:e2:08:34:53:d9:5b:89:3e:e6:1e:53:c5:97:
         a4:e7:36:df:ca:cc:5c:59:83:1b:3f:9f:26:7e:cf:2f:26:ca:
         69:93:6e:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNSHR6AEX/A1lOTUTH46cSA/hw6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0OUI4QjNFQjVBNzU1QkQ0QTE4QjNGNUJDMjREN0My
QUUzRUM2NzAeFw0yMjA3MTUyMTAzMDZaFw0yMzA3MTQyMTA4MDZaMDMxMTAvBgNV
BAMTKEMzMzNDQzlERURCQzY5M0UwMjg1QjhGMjM4Q0ZERDVGODBBOUMxRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBJON/69NARLSjTBfvpFHH+yO
Y03M9TKduI9jpoNzDTllCSnF8XIhCnR3Op+26zHbZiK4BdpLUkaAbBMhMLSZg+6p
O4uETM9oHBaaMfs+KV5bZCcNQw/iBSbytgEa4lx7L8sUgW41jTIBAveOfWqEQ0JQ
2HBY4xM8B4HoKytd+j/8sEtsRbdWSmPyYroteVBRC4W0s1bWcSGWoVuPvQ9+W2kX
11ABqpSN6FKxSggG9GAfB3Ldds77ezA63Z+h91vgiHXxzMxUDxWhR8usYD6fhAzR
tdYUig69ATIbMNRAXkUBOvz5bTAOd2jxUzypW6u4btD/wO+4FYdkhvCexeddAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwzPMne28aT4ChbjyOM/dX4Cpwf8wHwYDVR0j
BBgwFoAUqkm4s+tadVvUoYs/W8JNfCrj7GcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkM0TDRWeFhzcjkzVVJRMnZXVXZCODF0Vm9tbXh0WFNZNVRLM1htNjFI
SDgvMC9BQTQ5QjhCM0VCNUE3NTVCRDRBMThCM0Y1QkMyNEQ3QzJBRTNFQzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNDlCOEIzRUI1QTc1NUJE
NEExOEIzRjVCQzI0RDdDMkFFM0VDNjcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDNEw0VnhYc3I5M1VSUTJ2V1V2QjgxdFZvbW14dFhTWTVUSzNYbTYxSEg4LzAv
MzIzODMwMzQzYTM1MzQ2MTMwM2EzMTY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczNjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBFSgHzANBgkqhkiG9w0BAQsFAAOC
AQEAivKKe3ThIPRQXSHUu3lPY/eRAT3dl5pFFrSysiCRfJZZRK0Vk1jkz1+RhKG4
1bARAWEIbZwUYTtohYaobXm+HTghSNWpy5qkLVmkMlEagTQLugo96ENX9xIfJ7Nl
vMH080Y/7g0PjI4WHgULd+8esxTCDdkQWG/oVQJGirZCngA0mikU8GrNVBWfAfnt
giaCtI+DwNtkofjexHgocu/fvdGTB1/3UVMLd+YjK55xobITD4fqWQp4qpmXbES7
fG8pDeMIp9xTS1rBSKTDFBRDpFzDRRYCU+PBjcYIrOTiCDRT2VuJPuYeU8WXpOc2
38rMXFmDGz+fJn7PLybKaZNuog==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:43 2025 by rpki-client