Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          Z1eg6O43VAomIQcueYgBvPnUSP1B87xTu0skjX+n57A=
Subject key identifier:   7E:50:86:BE:40:98:88:CF:DF:6D:39:66:D1:86:71:99:AC:95:63:48
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       46D1DF2F0BAA081D9D53492907034D79E0FD05DB
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Thu 13 Jul 2023 14:00:00 +0000
ROA not before:           Thu 13 Jul 2023 13:55:00 +0000
ROA not after:            Thu 11 Jul 2024 14:00:00 +0000
asID:                     2716
IP address blocks:        2804:0:1800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d1:df:2f:0b:aa:08:1d:9d:53:49:29:07:03:4d:79:e0:fd:05:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul 13 13:55:00 2023 GMT
            Not After : Jul 11 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100CC4C6CC2A626FC02A7C70EA3FFE4E91393057DD70014621DE6C0E2F8784BF67D400A0DDF43A31009A6C64A4119000F09D1C44C37D0007CE51DAF4F073A53CAB56948503B9AD1F83761BBA5AE5EEBE084F48AF75D8AB47BE32CE3CEBB52C284EC8C368D31417CD268BAAE32B6E88FE3F74E1DFA607970120AFAD877391ACADA6E2749B20EBC239F66B356BDD34DFE3A4DD17031A4A124487661B4F474BCE606DEAF285F047487AC81669D920F23D29382E10986E8DDA14CB73D6C90C80CF490DC88791F192529E0BBA8173520E622F99014DC1C697B024D635656B3A5D07D8466AD1A28F47B50A14E3FDB8D254B8899439D48B634302F375C8F823071DA1BE11F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:6c:c2:a6:26:fc:02:a7:c7:0e:a3:ff:e4:
                    e9:13:93:05:7d:d7:00:14:62:1d:e6:c0:e2:f8:78:
                    4b:f6:7d:40:0a:0d:df:43:a3:10:09:a6:c6:4a:41:
                    19:00:0f:09:d1:c4:4c:37:d0:00:7c:e5:1d:af:4f:
                    07:3a:53:ca:b5:69:48:50:3b:9a:d1:f8:37:61:bb:
                    a5:ae:5e:eb:e0:84:f4:8a:f7:5d:8a:b4:7b:e3:2c:
                    e3:ce:bb:52:c2:84:ec:8c:36:8d:31:41:7c:d2:68:
                    ba:ae:32:b6:e8:8f:e3:f7:4e:1d:fa:60:79:70:12:
                    0a:fa:d8:77:39:1a:ca:da:6e:27:49:b2:0e:bc:23:
                    9f:66:b3:56:bd:d3:4d:fe:3a:4d:d1:70:31:a4:a1:
                    24:48:76:61:b4:f4:74:bc:e6:06:de:af:28:5f:04:
                    74:87:ac:81:66:9d:92:0f:23:d2:93:82:e1:09:86:
                    e8:dd:a1:4c:b7:3d:6c:90:c8:0c:f4:90:dc:88:79:
                    1f:19:25:29:e0:bb:a8:17:35:20:e6:22:f9:90:14:
                    dc:1c:69:7b:02:4d:63:56:56:b3:a5:d0:7d:84:66:
                    ad:1a:28:f4:7b:50:a1:4e:3f:db:8d:25:4b:88:99:
                    43:9d:48:b6:34:30:2f:37:5c:8f:82:30:71:da:1b:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:86:BE:40:98:88:CF:DF:6D:39:66:D1:86:71:99:AC:95:63:48
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:d6:dc:fd:1d:20:48:04:55:72:c6:26:47:46:c6:13:93:
         fb:69:f7:6a:db:2b:d7:ef:e1:41:3a:df:dd:45:9c:35:62:cc:
         fd:8f:76:f4:d3:64:64:fa:7f:17:7d:b2:65:e5:7a:eb:d4:6b:
         db:1a:ad:74:da:ce:34:3d:cf:a4:fa:09:d5:aa:de:35:ba:4b:
         25:89:79:71:cd:25:b9:45:71:6b:7b:6c:06:3c:1b:e7:c4:9b:
         ee:4d:fd:65:e3:65:2a:58:fa:44:2c:f3:84:77:08:a1:f0:cb:
         5f:b2:0c:c2:7f:d3:2e:d5:2f:e1:fc:a4:58:f9:cc:d4:f7:40:
         0b:40:35:18:3c:90:88:28:8b:96:d8:3d:c4:86:31:6f:d6:ee:
         42:fb:a5:da:2f:58:78:3e:ee:55:92:39:4e:84:ac:a0:48:cd:
         2b:26:f7:33:77:a4:28:f6:5a:b8:7a:f7:e5:be:0a:28:cf:44:
         69:cf:90:52:ed:f0:85:f7:3c:a6:1a:26:2a:69:5a:c2:cc:60:
         e4:01:72:f8:eb:02:7c:e7:14:ab:63:a9:41:48:b8:a3:fc:b6:
         51:8c:77:89:c3:48:dc:0c:6d:18:93:49:d9:e4:9a:f3:be:48:
         c4:34:1b:03:18:9b:59:43:e2:fb:4d:cd:3f:16:a5:0c:61:ed:
         0a:ea:74:9f
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIURtHfLwuqCB2dU0kpBwNNeeD9BdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFQkVCN0MwRTBGNDYzOTAxNTIyNzc0NzM5NEJBREEz
QzZFNzVENTAeFw0yMzA3MTMxMzU1MDBaFw0yNDA3MTExNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M0QzZDQzJBNjI2RkMwMkE3
QzcwRUEzRkZFNEU5MTM5MzA1N0RENzAwMTQ2MjFERTZDMEUyRjg3ODRCRjY3RDQw
MEEwRERGNDNBMzEwMDlBNkM2NEE0MTE5MDAwRjA5RDFDNDRDMzdEMDAwN0NFNTFE
QUY0RjA3M0E1M0NBQjU2OTQ4NTAzQjlBRDFGODM3NjFCQkE1QUU1RUVCRTA4NEY0
OEFGNzVEOEFCNDdCRTMyQ0UzQ0VCQjUyQzI4NEVDOEMzNjhEMzE0MTdDRDI2OEJB
QUUzMkI2RTg4RkUzRjc0RTFERkE2MDc5NzAxMjBBRkFEODc3MzkxQUNBREE2RTI3
NDlCMjBFQkMyMzlGNjZCMzU2QkREMzRERkUzQTRERDE3MDMxQTRBMTI0NDg3NjYx
QjRGNDc0QkNFNjA2REVBRjI4NUYwNDc0ODdBQzgxNjY5RDkyMEYyM0QyOTM4MkUx
MDk4NkU4RERBMTRDQjczRDZDOTBDODBDRjQ5MERDODg3OTFGMTkyNTI5RTBCQkE4
MTczNTIwRTYyMkY5OTAxNERDMUM2OTdCMDI0RDYzNTY1NkIzQTVEMDdEODQ2NkFE
MUEyOEY0N0I1MEExNEUzRkRCOEQyNTRCODg5OTQzOUQ0OEI2MzQzMDJGMzc1QzhG
ODIzMDcxREExQkUxMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzExswqYm/AKnxw6j/+TpE5MFfdcAFGId5sDi+HhL9n1ACg3fQ6MQ
CabGSkEZAA8J0cRMN9AAfOUdr08HOlPKtWlIUDua0fg3Ybulrl7r4IT0ivddirR7
4yzjzrtSwoTsjDaNMUF80mi6rjK26I/j904d+mB5cBIK+th3ORrK2m4nSbIOvCOf
ZrNWvdNN/jpN0XAxpKEkSHZhtPR0vOYG3q8oXwR0h6yBZp2SDyPSk4LhCYbo3aFM
tz1skMgM9JDciHkfGSUp4LuoFzUg5iL5kBTcHGl7Ak1jVlazpdB9hGatGij0e1Ch
Tj/bjSVLiJlDnUi2NDAvN1yPgjBx2hvhHwIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FH5Qhr5AmIjP3205ZtGGcZmslWNIMB8GA1UdIwQYMBaAFOzr63wOD0Y5AVIndHOU
uto8bnXVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAvRUNFQkVCN0MwRTBGNDYz
OTAxNTIyNzc0NzM5NEJBREEzQzZFNzVENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQ0VCRUI3QzBFMEY0NjM5MDE1MjI3NzQ3Mzk0QkFEQTNDNkU3
NUQ1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8wLzMyMzgzMDM0M2EzMDNhMzEzODMw
MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgE
AAAYADANBgkqhkiG9w0BAQsFAAOCAQEAZdnW3P0dIEgEVXLGJkdGxhOT+2n3atsr
1+/hQTrf3UWcNWLM/Y929NNkZPp/F32yZeV669Rr2xqtdNrOND3PpPoJ1areNbpL
JYl5cc0luUVxa3tsBjwb58Sb7k39ZeNlKlj6RCzzhHcIofDLX7IMwn/TLtUv4fyk
WPnM1PdAC0A1GDyQiCiLltg9xIYxb9buQvul2i9YeD7uVZI5ToSsoEjNKyb3M3ek
KPZauHr35b4KKM9Eac+QUu3whfc8phomKmlawsxg5AFy+OsCfOcUq2OpQUi4o/y2
UYx3icNI3AxtGJNJ2eSa875IxDQbAxibWUPi+03NPxalDGHtCup0nw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:44:54 2025 by rpki-client