Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33322d3332203d3e20323638333038.roa (raw, json)
Hash identifier:          Fsf3mleFPrLaqyD3PYyw/P7Rd+FwTa2lZsbrmkyPWPc=
Subject key identifier:   47:4F:FB:8E:8F:DE:05:0E:D6:7A:7E:11:95:56:93:CE:F0:DF:F0:81
Certificate issuer:       /CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Certificate serial:       44646FA77FA1ED31AC217C1EB5EEF7218C4818E5
Authority key identifier: 7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
Signing time:             Mon 21 Aug 2023 14:42:28 +0000
ROA not before:           Mon 21 Aug 2023 14:37:28 +0000
ROA not after:            Mon 19 Aug 2024 14:42:28 +0000
asID:                     268308
IP address blocks:        2804:4f28::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:64:6f:a7:7f:a1:ed:31:ac:21:7c:1e:b5:ee:f7:21:8c:48:18:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
        Validity
            Not Before: Aug 21 14:37:28 2023 GMT
            Not After : Aug 19 14:42:28 2024 GMT
        Subject: CN=474FFB8E8FDE050ED67A7E11955693CEF0DFF081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:58:0f:d9:41:12:1c:d2:0f:c1:ae:fd:5d:
                    fb:09:f7:68:d7:be:30:db:21:4b:f3:00:e2:58:47:
                    27:41:a9:30:8c:28:6a:18:85:d7:24:f6:22:2b:fe:
                    25:eb:4e:9c:fb:9d:da:39:58:b5:8b:f8:59:56:18:
                    0e:c8:59:e0:53:1d:5d:0f:0d:aa:fa:29:c6:86:ee:
                    09:0f:9d:7e:39:66:67:72:f2:cc:e2:f2:4a:ff:74:
                    42:6f:39:27:d9:ae:4a:51:9b:e3:4d:d5:01:33:ac:
                    d6:d3:d4:b0:60:39:0a:f2:37:82:73:ef:48:c4:ab:
                    1c:24:ca:9e:d1:59:dd:36:93:30:c7:2c:9d:82:ad:
                    bc:b4:9c:62:9b:a2:74:09:56:f9:35:a4:1f:f9:19:
                    77:ce:69:41:8f:ee:10:bd:a8:69:4a:ea:92:35:87:
                    e3:b7:31:0b:29:05:5e:92:f1:29:16:82:9c:4d:61:
                    28:ad:0e:71:33:44:9d:ca:77:61:28:9b:01:51:5f:
                    68:d5:e7:72:d3:41:64:7e:c1:57:f1:83:87:11:a5:
                    56:86:51:a4:7e:5b:cb:b6:e2:13:3f:a5:0d:c4:41:
                    c0:44:66:3e:be:87:88:f1:ff:8c:03:4e:d8:d8:9a:
                    d5:cd:5a:1f:fe:a6:97:e8:71:c7:2e:c1:b0:2d:98:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4F:FB:8E:8F:DE:05:0E:D6:7A:7E:11:95:56:93:CE:F0:DF:F0:81
            X509v3 Authority Key Identifier:
                keyid:7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/7E71CA6C0D976155FE8642D776AC920AA8929FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:10:a3:29:a6:75:c2:2f:77:84:a8:e9:21:0f:bf:c4:cd:94:
         04:6e:b8:0e:4c:ba:ca:65:0e:e8:91:71:b6:83:30:d7:63:0c:
         fd:ee:01:53:c4:62:99:2b:0d:ee:b6:a0:8d:29:6f:3c:bc:3e:
         f6:d7:61:5e:60:42:9c:d9:48:04:3f:ed:ab:28:78:67:b8:2a:
         65:66:8c:26:8c:72:00:1b:67:fc:d6:b4:89:3e:91:64:c5:58:
         b6:c9:13:64:87:48:05:a3:17:e6:63:5e:97:c8:e5:cd:de:83:
         7f:9a:cc:6a:e2:43:6e:e7:ec:37:8c:46:57:95:9f:1e:b2:b4:
         27:22:cc:6c:c3:e8:70:89:e3:92:a7:77:c4:db:29:b8:f6:64:
         3b:1f:3c:89:b7:d4:90:8d:6e:f6:7e:11:5b:ed:6f:f7:01:49:
         04:dd:cb:42:96:3f:20:b9:e7:3f:25:88:23:c8:47:0f:44:d7:
         f7:98:a0:9b:32:59:18:0b:b3:44:6a:9c:d8:78:fd:22:ce:90:
         4e:c4:8b:b3:88:0c:3a:8e:3e:6f:a4:00:85:d6:39:fc:33:57:
         bb:a9:60:4c:2f:e8:6a:b9:ba:5d:81:31:62:1e:f2:05:ad:6d:
         a9:c8:62:34:89:7a:d6:52:7a:f4:bf:1e:f9:0a:86:b6:da:f2:
         7c:ad:2d:81
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURGRvp3+h7TGsIXwete73IYxIGOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U3MUNBNkMwRDk3NjE1NUZFODY0MkQ3NzZBQzkyMEFB
ODkyOUZBNzAeFw0yMzA4MjExNDM3MjhaFw0yNDA4MTkxNDQyMjhaMDMxMTAvBgNV
BAMTKDQ3NEZGQjhFOEZERTA1MEVENjdBN0UxMTk1NTY5M0NFRjBERkYwODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHx1gP2UESHNIPwa79XfsJ92jX
vjDbIUvzAOJYRydBqTCMKGoYhdck9iIr/iXrTpz7ndo5WLWL+FlWGA7IWeBTHV0P
Dar6KcaG7gkPnX45Zmdy8szi8kr/dEJvOSfZrkpRm+NN1QEzrNbT1LBgOQryN4Jz
70jEqxwkyp7RWd02kzDHLJ2Crby0nGKbonQJVvk1pB/5GXfOaUGP7hC9qGlK6pI1
h+O3MQspBV6S8SkWgpxNYSitDnEzRJ3Kd2EomwFRX2jV53LTQWR+wVfxg4cRpVaG
UaR+W8u24hM/pQ3EQcBEZj6+h4jx/4wDTtjYmtXNWh/+ppfocccuwbAtmONtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUR0/7jo/eBQ7Wen4RlVaTzvDf8IEwHwYDVR0j
BBgwFoAUfnHKbA2XYVX+hkLXdqySCqiSn6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMi83RTcxQ0E2QzBEOTc2MTU1RkU4NjQyRDc3NkFDOTIwQUE4OTI5RkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFNzFDQTZDMEQ5NzYxNTVG
RTg2NDJENzc2QUM5MjBBQTg5MjlGQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzIv
MzIzODMwMzQzYTM0NjYzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzMzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARPKDANBgkqhkiG9w0BAQsFAAOCAQEAnxCjKaZ1
wi93hKjpIQ+/xM2UBG64Dky6ymUO6JFxtoMw12MM/e4BU8RimSsN7ragjSlvPLw+
9tdhXmBCnNlIBD/tqyh4Z7gqZWaMJoxyABtn/Na0iT6RZMVYtskTZIdIBaMX5mNe
l8jlzd6Df5rMauJDbufsN4xGV5WfHrK0JyLMbMPocInjkqd3xNspuPZkOx88ibfU
kI1u9n4RW+1v9wFJBN3LQpY/ILnnPyWII8hHD0TX95igmzJZGAuzRGqc2Hj9Is6Q
TsSLs4gMOo4+b6QAhdY5/DNXu6lgTC/oarm6XYExYh7yBa1tqchiNIl61lJ69L8e
+QqGttryfK0tgQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:24:52 2025 by rpki-client