Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/323830343a343466383a3a2f33322d313238203d3e20323637363634.roa
File:                     323830343a343466383a3a2f33322d313238203d3e20323637363634.roa (raw, json)
Hash identifier:          GK6vHeY/bPkPvEUmhdpDIjpCEesFiMN6jowSCELVhUw=
Subject key identifier:   94:CD:53:67:81:39:31:B2:D8:CE:0C:D5:DE:68:98:20:66:33:11:47
Certificate issuer:       /CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Certificate serial:       32D7D3A5D17D5E5C0D9537E276BE8D24916827D6
Authority key identifier: 6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/323830343a343466383a3a2f33322d313238203d3e20323637363634.roa
Signing time:             Mon 02 Jan 2023 20:14:19 +0000
ROA not before:           Mon 02 Jan 2023 20:09:19 +0000
ROA not after:            Mon 01 Jan 2024 20:14:19 +0000
asID:                     267664
IP address blocks:        2804:44f8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d7:d3:a5:d1:7d:5e:5c:0d:95:37:e2:76:be:8d:24:91:68:27:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
        Validity
            Not Before: Jan  2 20:09:19 2023 GMT
            Not After : Jan  1 20:14:19 2024 GMT
        Subject: CN=94CD5367813931B2D8CE0CD5DE68982066331147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:f5:1c:56:6f:25:11:9d:a1:aa:a5:4c:ed:
                    b5:15:9b:28:b6:26:b6:a9:6a:ab:b3:a2:ed:c2:61:
                    ec:8b:e4:a0:e5:11:cd:61:b5:58:c9:2f:77:d0:b4:
                    ed:5c:e7:7d:94:dd:b2:bf:6b:6c:26:a4:bb:39:76:
                    e5:4f:19:de:40:de:ce:ce:ab:9a:fa:ff:20:2c:58:
                    96:f1:01:c0:e0:54:65:72:ad:aa:36:a4:26:33:c8:
                    e1:b0:f5:f1:49:5e:22:a9:b1:7d:52:48:b3:a7:19:
                    70:52:11:2b:13:52:29:36:50:8d:88:10:a2:fe:50:
                    3b:a1:cc:94:91:5b:36:ed:4e:dd:be:3f:3c:4e:b0:
                    14:44:a0:d0:b2:1f:dd:2e:85:e7:8d:52:18:f0:e5:
                    aa:b9:5d:e9:e4:da:8e:25:8a:34:c0:d6:6c:ee:66:
                    8e:4e:7a:a6:ad:c5:78:38:f5:11:a3:2f:6b:14:85:
                    9f:0a:06:70:ed:71:d5:ae:24:15:0a:2c:8c:c0:fd:
                    63:d2:e5:27:fd:cf:55:5c:a2:c1:1f:b1:26:15:94:
                    a1:a1:84:70:e6:4e:16:52:e7:ef:7b:a5:94:80:83:
                    c9:da:3b:c8:c6:19:8b:a4:4b:7d:17:5e:40:ce:f4:
                    0c:b9:01:e0:30:07:83:16:40:de:06:e3:89:f8:15:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CD:53:67:81:39:31:B2:D8:CE:0C:D5:DE:68:98:20:66:33:11:47
            X509v3 Authority Key Identifier:
                keyid:6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/323830343a343466383a3a2f33322d313238203d3e20323637363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:58:42:99:51:d5:ec:51:6d:12:cc:cc:9f:10:3c:12:5c:
         11:8c:a3:ba:ee:03:4d:50:8f:f9:cf:e7:27:24:84:54:52:9f:
         45:66:37:c0:bc:db:c7:23:dd:83:d0:99:a7:b2:b5:08:84:71:
         34:ce:8a:c2:e6:31:47:b1:92:2a:b4:cb:bb:e7:ca:e6:c2:e9:
         30:22:cd:f4:8c:c2:36:e4:60:b2:23:ba:82:eb:e1:9a:fe:43:
         cb:70:aa:35:65:6e:96:08:08:7a:a6:38:4e:7f:04:45:10:66:
         0a:7c:cb:b6:88:46:bc:9a:de:b9:23:a7:ce:f7:53:5c:de:9b:
         3e:f6:c4:93:e2:81:9f:d9:f0:6e:d8:50:a9:f5:7a:cd:ee:20:
         67:dd:ff:7c:83:9c:08:0d:4b:df:b4:74:4b:5d:e2:51:66:8d:
         3b:02:69:22:e1:9b:58:ff:e0:d2:3b:9a:ce:75:5f:b1:10:1f:
         d4:15:a1:86:02:30:f5:92:a1:86:7f:0f:98:aa:b3:a8:a5:b1:
         87:ed:aa:3c:79:c0:ac:3e:3d:d2:e5:a4:dc:c1:f9:68:14:e8:
         19:ff:d0:d1:25:c8:52:d3:31:85:71:09:94:ea:73:ee:1d:4f:
         c9:91:28:d8:28:da:2e:69:8b:e8:7d:5d:44:4f:3e:87:b6:e1:
         ce:ed:5e:a6
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUMtfTpdF9XlwNlTfidr6NJJFoJ9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFBRjZFQjJDMjI2RkUzNDY4Mzg5NDAwNkUxRjQ1MEI5
NDVBMjRERDAeFw0yMzAxMDIyMDA5MTlaFw0yNDAxMDEyMDE0MTlaMDMxMTAvBgNV
BAMTKDk0Q0Q1MzY3ODEzOTMxQjJEOENFMENENURFNjg5ODIwNjYzMzExNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEvUcVm8lEZ2hqqVM7bUVmyi2
Jrapaquzou3CYeyL5KDlEc1htVjJL3fQtO1c532U3bK/a2wmpLs5duVPGd5A3s7O
q5r6/yAsWJbxAcDgVGVyrao2pCYzyOGw9fFJXiKpsX1SSLOnGXBSESsTUik2UI2I
EKL+UDuhzJSRWzbtTt2+PzxOsBREoNCyH90uheeNUhjw5aq5Xenk2o4lijTA1mzu
Zo5OeqatxXg49RGjL2sUhZ8KBnDtcdWuJBUKLIzA/WPS5Sf9z1VcosEfsSYVlKGh
hHDmThZS5+97pZSAg8naO8jGGYukS30XXkDO9Ay5AeAwB4MWQN4G44n4FVLTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUlM1TZ4E5MbLYzgzV3miYIGYzEUcwHwYDVR0j
BBgwFoAUaq9ussIm/jRoOJQAbh9FC5RaJN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlEyQmZqejg4UDlXalp3Ukt4QnoxaHlqWnNRMXdpcUxNaTFBYVNzQUQy
akgvMC82QUFGNkVCMkMyMjZGRTM0NjgzODk0MDA2RTFGNDUwQjk0NUEyNERELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBQUY2RUIyQzIyNkZFMzQ2
ODM4OTQwMDZFMUY0NTBCOTQ1QTI0REQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRMkJmano4OFA5V2pad1JLeEJ6MWh5alpzUTF3aXFMTWkxQWFTc0FEMmpILzAv
MzIzODMwMzQzYTM0MzQ2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBET4MA0GCSqGSIb3DQEBCwUAA4IBAQBxG1hC
mVHV7FFtEszMnxA8ElwRjKO67gNNUI/5z+cnJIRUUp9FZjfAvNvHI92D0JmnsrUI
hHE0zorC5jFHsZIqtMu758rmwukwIs30jMI25GCyI7qC6+Ga/kPLcKo1ZW6WCAh6
pjhOfwRFEGYKfMu2iEa8mt65I6fO91Nc3ps+9sST4oGf2fBu2FCp9XrN7iBn3f98
g5wIDUvftHRLXeJRZo07Amki4ZtY/+DSO5rOdV+xEB/UFaGGAjD1kqGGfw+YqrOo
pbGH7ao8ecCsPj3S5aTcwfloFOgZ/9DRJchS0zGFcQmU6nPuHU/JkSjYKNouaYvo
fV1ETz6HtuHO7V6m
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:57 2025 by rpki-client