Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/323830343a316136633a3a2f33322d313238203d3e203631383538.roa
File:                     323830343a316136633a3a2f33322d313238203d3e203631383538.roa (raw, json)
Hash identifier:          vHwt9OTUUCgdaAmWYdnxfLeuHhfSrcTzPORAqp8zqhU=
Subject key identifier:   3B:B3:87:CC:EB:7E:1A:49:B1:33:2C:79:66:5E:B0:9D:CF:B1:29:B3
Certificate issuer:       /CN=CF931CC061BCD0E656DBAE8AD75F9A4E24825C22
Certificate serial:       16BB69BE66A832C66C07CB94F8571D4A9BD455B1
Authority key identifier: CF:93:1C:C0:61:BC:D0:E6:56:DB:AE:8A:D7:5F:9A:4E:24:82:5C:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/323830343a316136633a3a2f33322d313238203d3e203631383538.roa
Signing time:             Mon 22 May 2023 20:44:24 +0000
ROA not before:           Mon 22 May 2023 20:39:24 +0000
ROA not after:            Mon 20 May 2024 20:44:24 +0000
asID:                     61858
IP address blocks:        2804:1a6c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bb:69:be:66:a8:32:c6:6c:07:cb:94:f8:57:1d:4a:9b:d4:55:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF931CC061BCD0E656DBAE8AD75F9A4E24825C22
        Validity
            Not Before: May 22 20:39:24 2023 GMT
            Not After : May 20 20:44:24 2024 GMT
        Subject: CN=3BB387CCEB7E1A49B1332C79665EB09DCFB129B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:04:ed:4a:88:bc:81:14:d3:77:a4:66:51:
                    4a:a5:48:df:16:01:c3:e9:40:49:cb:39:1d:7a:f6:
                    5e:f9:1f:b0:81:8c:6a:4c:43:48:04:69:fe:7d:8b:
                    7d:0e:ab:1f:5d:99:8b:97:26:55:a7:11:1a:17:01:
                    47:45:36:8b:53:cb:eb:66:6a:d9:44:60:e9:09:bd:
                    c7:8d:0d:41:b0:10:df:f0:32:dd:73:a6:19:4e:b7:
                    83:63:72:41:32:76:96:54:3b:aa:cf:e1:67:f0:c8:
                    32:96:cd:c8:0d:51:1a:4c:b4:13:a2:2f:82:c1:0d:
                    89:4b:49:1e:89:63:bc:e2:92:5f:6f:74:a9:3e:6b:
                    7a:92:cd:fc:32:f2:09:2a:06:87:c7:0f:5f:94:2a:
                    6e:53:c2:70:eb:89:93:58:66:ce:0d:77:75:d0:20:
                    ac:99:c6:c1:de:a2:11:3d:31:d7:1d:a1:22:91:60:
                    df:dd:da:be:5a:7f:fc:eb:2f:51:98:2b:29:8b:bd:
                    03:35:c4:56:b7:3f:7b:a4:e9:29:5a:7e:7b:5f:b9:
                    f8:69:2d:28:6f:3b:0c:35:cb:67:55:9b:7d:b9:03:
                    ff:ec:0f:ec:01:8d:2c:8f:8f:4e:ae:31:8a:a4:71:
                    21:81:1a:e3:3d:32:76:d0:0b:0c:e1:39:07:23:42:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B3:87:CC:EB:7E:1A:49:B1:33:2C:79:66:5E:B0:9D:CF:B1:29:B3
            X509v3 Authority Key Identifier:
                keyid:CF:93:1C:C0:61:BC:D0:E6:56:DB:AE:8A:D7:5F:9A:4E:24:82:5C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/323830343a316136633a3a2f33322d313238203d3e203631383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:39:b9:60:dd:59:11:49:3a:cf:61:4d:b4:e9:08:f9:ac:
         cd:02:ee:bf:a4:33:42:63:c8:33:09:d2:b4:d7:54:29:77:eb:
         b5:10:62:21:e6:21:71:a9:bd:db:17:bd:72:da:a0:1c:98:ab:
         8b:5c:c1:7d:71:fa:b6:1d:d5:f8:5c:b8:31:2a:9d:5a:1b:f3:
         8b:b3:c5:4a:a1:43:2d:43:74:4b:97:1d:2b:ed:40:0d:43:f1:
         47:ce:46:28:5c:cd:06:2b:02:f3:11:0f:18:30:81:53:dd:d7:
         55:bc:89:13:b0:95:6f:e1:e1:8f:fd:38:99:19:e9:84:b8:37:
         3d:58:13:e4:c4:38:aa:61:f4:68:39:f1:8d:d7:f2:13:43:0b:
         ac:4c:50:ae:5a:65:34:d6:83:a2:db:eb:a7:69:6a:57:b2:1f:
         ab:ce:b6:16:1f:67:fe:85:b1:65:b6:49:80:8c:6e:dc:e7:58:
         9a:09:c2:34:e5:e9:c4:1f:1a:f1:fa:5e:46:3c:e1:15:0a:46:
         4a:9b:9c:34:d8:ec:f9:3f:1c:c0:c7:3b:90:da:fb:84:73:7c:
         4f:90:3a:97:df:91:64:de:a6:93:e4:26:88:c6:6e:0e:ee:d7:
         60:c2:22:71:e8:11:aa:39:3c:11:9e:5f:ba:c0:9b:73:e6:21:
         95:af:0a:79
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFrtpvmaoMsZsB8uU+FcdSpvUVbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y5MzFDQzA2MUJDRDBFNjU2REJBRThBRDc1RjlBNEUy
NDgyNUMyMjAeFw0yMzA1MjIyMDM5MjRaFw0yNDA1MjAyMDQ0MjRaMDMxMTAvBgNV
BAMTKDNCQjM4N0NDRUI3RTFBNDlCMTMzMkM3OTY2NUVCMDlEQ0ZCMTI5QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WQTtSoi8gRTTd6RmUUqlSN8W
AcPpQEnLOR169l75H7CBjGpMQ0gEaf59i30Oqx9dmYuXJlWnERoXAUdFNotTy+tm
atlEYOkJvceNDUGwEN/wMt1zphlOt4NjckEydpZUO6rP4WfwyDKWzcgNURpMtBOi
L4LBDYlLSR6JY7zikl9vdKk+a3qSzfwy8gkqBofHD1+UKm5TwnDriZNYZs4Nd3XQ
IKyZxsHeohE9MdcdoSKRYN/d2r5af/zrL1GYKymLvQM1xFa3P3uk6Slafntfufhp
LShvOww1y2dVm325A//sD+wBjSyPj06uMYqkcSGBGuM9MnbQCwzhOQcjQg1BAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUO7OHzOt+GkmxMyx5Zl6wnc+xKbMwHwYDVR0j
BBgwFoAUz5McwGG80OZW266K11+aTiSCXCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkNTWGVId3Rnd0JoeUdCRjhLNFlIa3VWNVB4NHVMa3E1b2NSb3J3NXVE
ckIvMC9DRjkzMUNDMDYxQkNEMEU2NTZEQkFFOEFENzVGOUE0RTI0ODI1QzIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGOTMxQ0MwNjFCQ0QwRTY1
NkRCQUU4QUQ3NUY5QTRFMjQ4MjVDMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDU1hlSHd0Z3dCaHlHQkY4SzRZSGt1VjVQeDR1TGtxNW9jUm9ydzV1RHJCLzAv
MzIzODMwMzQzYTMxNjEzNjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQabDANBgkqhkiG9w0BAQsFAAOCAQEAGXo5uWDd
WRFJOs9hTbTpCPmszQLuv6QzQmPIMwnStNdUKXfrtRBiIeYhcam92xe9ctqgHJir
i1zBfXH6th3V+Fy4MSqdWhvzi7PFSqFDLUN0S5cdK+1ADUPxR85GKFzNBisC8xEP
GDCBU93XVbyJE7CVb+Hhj/04mRnphLg3PVgT5MQ4qmH0aDnxjdfyE0MLrExQrlpl
NNaDotvrp2lqV7Ifq862Fh9n/oWxZbZJgIxu3OdYmgnCNOXpxB8a8fpeRjzhFQpG
SpucNNjs+T8cwMc7kNr7hHN8T5A6l9+RZN6mk+QmiMZuDu7XYMIicegRqjk8EZ5f
usCbc+Yhla8KeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:20:06 2025 by rpki-client