Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3332203d3e203631363130.roa
File:                     323830343a386165303a3a2f33322d3332203d3e203631363130.roa (raw, json)
Hash identifier:          93pdcZi973T6Sx4UV0SzQVGdzU6aWF+JNpgYcuoT8jE=
Subject key identifier:   EA:0B:1D:81:E4:8D:3D:AD:2C:7F:BB:CB:54:17:9B:9A:A6:2A:9A:3B
Certificate issuer:       /CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
Certificate serial:       3C069C5097D620452B4A241E153C87C2B990D660
Authority key identifier: D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3332203d3e203631363130.roa
Signing time:             Fri 21 Jul 2023 18:21:26 +0000
ROA not before:           Fri 21 Jul 2023 18:16:26 +0000
ROA not after:            Fri 19 Jul 2024 18:21:26 +0000
asID:                     61610
IP address blocks:        2804:8ae0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:06:9c:50:97:d6:20:45:2b:4a:24:1e:15:3c:87:c2:b9:90:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
        Validity
            Not Before: Jul 21 18:16:26 2023 GMT
            Not After : Jul 19 18:21:26 2024 GMT
        Subject: CN=EA0B1D81E48D3DAD2C7FBBCB54179B9AA62A9A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:6a:ae:0a:9e:73:0b:a7:cf:ea:27:4b:70:
                    a1:1b:e3:e1:78:91:f2:78:af:3c:69:1f:1c:93:5a:
                    0b:2b:0f:3a:d2:da:28:94:4e:ed:b8:86:a9:77:7a:
                    81:85:ea:7c:92:aa:9c:77:f8:db:07:c8:e1:9d:c3:
                    d2:b3:a4:33:10:db:52:04:36:ad:38:48:85:d4:40:
                    36:44:8c:0d:4d:55:c4:e0:77:6f:d8:10:7d:d6:0d:
                    a0:e8:f3:32:99:35:74:57:50:c0:bc:7b:3b:55:51:
                    68:15:85:43:c1:81:ec:0b:b9:62:e4:12:e1:a8:16:
                    80:aa:e5:bc:db:90:b0:ed:3b:c6:6c:86:e2:1d:41:
                    68:20:48:cd:ff:d6:77:a1:15:f2:ec:49:3f:a6:b5:
                    90:6a:36:04:d8:92:77:c1:7d:8e:12:e3:10:65:92:
                    ec:7d:4b:33:e4:75:2f:f8:98:d0:18:75:05:21:6c:
                    b7:95:c4:ec:9a:41:26:a5:7d:26:1b:28:f1:c1:72:
                    d4:08:06:ba:d9:51:72:9a:f1:d6:81:a4:d4:05:b7:
                    19:2c:57:cc:80:66:08:33:a1:b2:4a:dc:39:12:ae:
                    ad:32:14:b3:b3:71:1b:57:18:4a:65:e4:48:8e:9c:
                    9d:4c:7f:6d:f7:5c:07:19:36:78:7e:8c:60:6b:3b:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0B:1D:81:E4:8D:3D:AD:2C:7F:BB:CB:54:17:9B:9A:A6:2A:9A:3B
            X509v3 Authority Key Identifier:
                keyid:D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3332203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:f2:96:2a:3a:ee:7e:c7:60:7a:c7:92:ca:6e:53:77:7b:
         73:e3:fa:05:38:a1:73:75:f6:5d:d1:98:99:1c:be:e9:a2:cf:
         13:c4:2c:00:b0:bd:a1:7b:15:77:74:43:1d:50:c0:ce:e2:ef:
         3e:34:63:5b:a4:72:e9:1b:1d:e8:47:b7:3e:6f:23:dc:61:69:
         17:81:b9:c7:96:60:72:02:c2:df:8f:71:2d:22:9f:64:f6:ee:
         8d:e0:a4:89:86:4a:a2:dd:a8:83:3b:ee:e1:ba:74:85:e9:63:
         a4:39:16:a8:a9:a5:b4:aa:26:4b:ed:0a:8b:71:79:3d:0e:2b:
         89:e2:e4:48:cc:e2:07:35:e3:f6:21:28:52:a7:c7:51:8f:3c:
         36:12:ab:1d:14:2a:62:e8:ca:9a:4a:c3:df:c1:73:f1:7e:b4:
         bc:64:28:02:c8:11:4b:d5:0c:a3:94:9d:96:bb:4b:62:43:27:
         e9:11:a5:22:c2:54:19:94:65:09:13:11:e0:ae:f1:73:40:d3:
         62:38:2f:62:0f:b8:f3:f5:90:b8:20:1c:e7:58:4f:8e:ef:39:
         84:a7:e8:bc:83:e3:5e:13:20:94:99:2d:ad:9b:7d:37:65:45:
         18:d5:4d:ce:37:a9:ed:25:2a:eb:e7:61:1e:fb:f4:3e:86:90:
         8e:c0:3b:47
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUPAacUJfWIEUrSiQeFTyHwrmQ1mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCRDZCQzNENEY3MEVDRDBCOEM5QjgwREE0MDkxRUE3
NENFM0UzNDAeFw0yMzA3MjExODE2MjZaFw0yNDA3MTkxODIxMjZaMDMxMTAvBgNV
BAMTKEVBMEIxRDgxRTQ4RDNEQUQyQzdGQkJDQjU0MTc5QjlBQTYyQTlBM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LGquCp5zC6fP6idLcKEb4+F4
kfJ4rzxpHxyTWgsrDzrS2iiUTu24hql3eoGF6nySqpx3+NsHyOGdw9KzpDMQ21IE
Nq04SIXUQDZEjA1NVcTgd2/YEH3WDaDo8zKZNXRXUMC8eztVUWgVhUPBgewLuWLk
EuGoFoCq5bzbkLDtO8ZshuIdQWggSM3/1nehFfLsST+mtZBqNgTYknfBfY4S4xBl
kux9SzPkdS/4mNAYdQUhbLeVxOyaQSalfSYbKPHBctQIBrrZUXKa8daBpNQFtxks
V8yAZggzobJK3DkSrq0yFLOzcRtXGEpl5EiOnJ1Mf233XAcZNnh+jGBrO/TzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU6gsdgeSNPa0sf7vLVBebmqYqmjswHwYDVR0j
BBgwFoAU2L1rw9T3Ds0LjJuA2kCR6nTOPjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51
RlcvMC9EOEJENkJDM0Q0RjcwRUNEMEI4QzlCODBEQTQwOTFFQTc0Q0UzRTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4QkQ2QkMzRDRGNzBFQ0Qw
QjhDOUI4MERBNDA5MUVBNzRDRTNFMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1dEFtNW55TEx2U3JVZGdSdDQ0VFBZNXZSOXFUYnl6Rk1SRFVhVFZOdUZXLzAv
MzIzODMwMzQzYTM4NjE2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEiuAwDQYJKoZIhvcNAQELBQADggEBACFN8pYqOu5+
x2B6x5LKblN3e3Pj+gU4oXN19l3RmJkcvumizxPELACwvaF7FXd0Qx1QwM7i7z40
Y1ukcukbHehHtz5vI9xhaReBuceWYHICwt+PcS0in2T27o3gpImGSqLdqIM77uG6
dIXpY6Q5FqippbSqJkvtCotxeT0OK4ni5EjM4gc14/YhKFKnx1GPPDYSqx0UKmLo
yppKw9/Bc/F+tLxkKALIEUvVDKOUnZa7S2JDJ+kRpSLCVBmUZQkTEeCu8XNA02I4
L2IPuPP1kLggHOdYT47vOYSn6LyD414TIJSZLa2bfTdlRRjVTc43qe0lKuvnYR77
9D6GkI7AO0c=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:32 2025 by rpki-client