Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3336203d3e203532353933.roa
File:                     323830343a6431303a3a2f33322d3336203d3e203532353933.roa (raw, json)
Hash identifier:          ooTvc0BuOLraPEWjemqWZfJdV3UqLqkqOOwDKdPa6IU=
Subject key identifier:   2D:17:EE:05:AA:2C:D0:88:BA:50:84:21:CF:C3:A2:F0:8F:D9:A1:C4
Certificate issuer:       /CN=B2E49B1A03452929E0088F054E36D9C2CB9D8F75
Certificate serial:       146DD1E7248DFF4D02B2B7BFB631A7C62F9BBC0B
Authority key identifier: B2:E4:9B:1A:03:45:29:29:E0:08:8F:05:4E:36:D9:C2:CB:9D:8F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3336203d3e203532353933.roa
Signing time:             Fri 11 Nov 2022 18:17:41 +0000
ROA not before:           Fri 11 Nov 2022 18:12:41 +0000
ROA not after:            Fri 10 Nov 2023 18:17:41 +0000
asID:                     52593
IP address blocks:        2804:d10::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6d:d1:e7:24:8d:ff:4d:02:b2:b7:bf:b6:31:a7:c6:2f:9b:bc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2E49B1A03452929E0088F054E36D9C2CB9D8F75
        Validity
            Not Before: Nov 11 18:12:41 2022 GMT
            Not After : Nov 10 18:17:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:4f:6b:4e:ca:8c:28:fb:51:58:d0:2c:ae:
                    07:18:0a:c4:bd:d9:d6:b5:00:4e:81:00:16:47:0a:
                    65:b4:f8:76:c2:16:f0:a7:00:ee:37:63:10:19:eb:
                    d1:5f:80:46:ca:99:32:eb:ae:ff:c3:c5:2e:43:4c:
                    3a:25:6b:3f:39:5d:c4:97:87:25:3f:8a:5a:d4:3b:
                    46:b7:8d:13:67:68:c0:df:7d:f0:fa:a9:58:9a:6a:
                    7d:69:06:bd:de:09:11:cd:ff:ad:44:95:e0:2a:0f:
                    37:ff:85:38:b9:de:60:6f:9d:63:1a:86:03:0a:0d:
                    2d:df:32:0c:36:76:e1:7c:75:dd:89:eb:12:68:fa:
                    8f:56:05:18:33:f7:d3:33:5b:fa:75:d0:4e:1a:4e:
                    4a:20:7c:47:e4:14:0b:ed:bf:d8:09:13:e7:7f:c0:
                    91:95:b8:3d:62:8e:43:fc:10:17:d3:7b:1e:95:ef:
                    d9:74:e3:4d:b2:21:ef:8f:f2:74:55:45:e8:41:a1:
                    19:ab:36:35:bd:a1:c4:49:ef:80:b1:8a:2a:ae:a0:
                    88:ff:b8:2b:f6:92:94:72:62:88:ef:e7:4b:97:19:
                    24:fc:ee:d2:d1:4e:b2:3b:8d:42:51:17:a4:31:70:
                    57:5b:43:51:7c:3c:b0:ef:42:73:f6:e8:0a:12:f2:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:EE:05:AA:2C:D0:88:BA:50:84:21:CF:C3:A2:F0:8F:D9:A1:C4
            X509v3 Authority Key Identifier:
                keyid:B2:E4:9B:1A:03:45:29:29:E0:08:8F:05:4E:36:D9:C2:CB:9D:8F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3336203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:30:49:bf:47:ad:c1:73:e6:8c:ef:8f:47:9f:36:ab:9b:
         bb:b1:8f:5b:ba:38:4b:60:6c:13:b2:46:a4:c9:4a:20:7b:e2:
         e8:a3:44:ee:26:43:9f:f9:84:10:0d:b0:17:12:06:11:a8:6b:
         a3:0b:45:4e:56:f4:32:a2:df:6b:26:ac:f6:93:71:d9:fb:16:
         0b:1d:55:26:f5:54:a4:36:7b:63:4c:ce:db:a5:06:47:92:ae:
         a3:19:6a:98:89:6e:c5:e5:5f:b1:5e:4c:78:7e:1d:ea:ee:e6:
         d9:02:67:fc:72:ae:a5:16:6e:44:c5:e3:a3:35:ce:f3:ae:cc:
         f4:29:11:d5:bf:e6:1a:7c:e4:87:1c:de:24:9f:fd:b3:dd:1b:
         5c:59:dc:1d:9d:b1:73:6d:00:0f:47:c3:75:5d:56:d6:4d:49:
         9f:85:43:78:74:c9:17:f4:cd:1b:6c:5b:fb:cf:c3:87:ed:3a:
         c3:90:04:ad:7a:fb:a5:b1:e1:d7:98:3e:ad:d7:2e:c3:1b:8f:
         c3:88:b8:88:94:55:ea:a7:ea:7d:eb:79:64:20:cf:45:8d:d4:
         fc:13:82:de:dc:17:ac:64:4e:b7:19:98:29:3d:b8:92:0c:0d:
         a5:b5:a1:05:59:5d:c4:ca:dc:68:77:b2:4c:7b:6c:08:be:7b:
         ef:9b:a3:ba
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUFG3R5ySN/00Csre/tjGnxi+bvAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJFNDlCMUEwMzQ1MjkyOUUwMDg4RjA1NEUzNkQ5QzJD
QjlEOEY3NTAeFw0yMjExMTExODEyNDFaFw0yMzExMTAxODE3NDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUEwMTRGNkI0RUNBOEMyOEZC
NTE1OEQwMkNBRTA3MTgwQUM0QkREOUQ2QjUwMDRFODEwMDE2NDcwQTY1QjRGODc2
QzIxNkYwQTcwMEVFMzc2MzEwMTlFQkQxNUY4MDQ2Q0E5OTMyRUJBRUZGQzNDNTJF
NDM0QzNBMjU2QjNGMzk1REM0OTc4NzI1M0Y4QTVBRDQzQjQ2Qjc4RDEzNjc2OEMw
REY3REYwRkFBOTU4OUE2QTdENjkwNkJEREUwOTExQ0RGRkFENDQ5NUUwMkEwRjM3
RkY4NTM4QjlERTYwNkY5RDYzMUE4NjAzMEEwRDJEREYzMjBDMzY3NkUxN0M3NURE
ODlFQjEyNjhGQThGNTYwNTE4MzNGN0QzMzM1QkZBNzVEMDRFMUE0RTRBMjA3QzQ3
RTQxNDBCRURCRkQ4MDkxM0U3N0ZDMDkxOTVCODNENjI4RTQzRkMxMDE3RDM3QjFF
OTVFRkQ5NzRFMzREQjIyMUVGOEZGMjc0NTU0NUU4NDFBMTE5QUIzNjM1QkRBMUM0
NDlFRjgwQjE4QTJBQUVBMDg4RkZCODJCRjY5Mjk0NzI2Mjg4RUZFNzRCOTcxOTI0
RkNFRUQyRDE0RUIyM0I4RDQyNTExN0E0MzE3MDU3NUI0MzUxN0MzQ0IwRUY0Mjcz
RjZFODBBMTJGMjkxMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqgFPa07KjCj7UVjQLK4HGArEvdnWtQBOgQAWRwpltPh2whbwpwDu
N2MQGevRX4BGypky667/w8UuQ0w6JWs/OV3El4clP4pa1DtGt40TZ2jA333w+qlY
mmp9aQa93gkRzf+tRJXgKg83/4U4ud5gb51jGoYDCg0t3zIMNnbhfHXdiesSaPqP
VgUYM/fTM1v6ddBOGk5KIHxH5BQL7b/YCRPnf8CRlbg9Yo5D/BAX03sele/ZdONN
siHvj/J0VUXoQaEZqzY1vaHESe+AsYoqrqCI/7gr9pKUcmKI7+dLlxkk/O7S0U6y
O41CURekMXBXW0NRfDyw70Jz9ugKEvKRAQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FC0X7gWqLNCIulCEIc/DovCP2aHEMB8GA1UdIwQYMBaAFLLkmxoDRSkp4AiPBU42
2cLLnY91MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhNU1ZYcTJBcG9QaVpS
cVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAvQjJFNDlCMUEwMzQ1Mjky
OUUwMDg4RjA1NEUzNkQ5QzJDQjlEOEY3NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CMkU0OUIxQTAzNDUyOTI5RTAwODhGMDU0RTM2RDlDMkNCOUQ4
Rjc1LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84TVNWWHEyQXBvUGlaUnFaYVBD
M3JxNzZuWUxUVUtnN1Q5S1pRYVpYd01INy8wLzMyMzgzMDM0M2E2NDMxMzAzYTNh
MmYzMzMyMmQzMzM2MjAzZDNlMjAzNTMyMzUzOTMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAQNEDAN
BgkqhkiG9w0BAQsFAAOCAQEAMT4wSb9HrcFz5ozvj0efNqubu7GPW7o4S2BsE7JG
pMlKIHvi6KNE7iZDn/mEEA2wFxIGEahrowtFTlb0MqLfayas9pNx2fsWCx1VJvVU
pDZ7Y0zO26UGR5KuoxlqmIluxeVfsV5MeH4d6u7m2QJn/HKupRZuRMXjozXO867M
9CkR1b/mGnzkhxzeJJ/9s90bXFncHZ2xc20AD0fDdV1W1k1Jn4VDeHTJF/TNG2xb
+8/Dh+06w5AErXr7pbHh15g+rdcuwxuPw4i4iJRV6qfqfet5ZCDPRY3U/BOC3twX
rGROtxmYKT24kgwNpbWhBVldxMrcaHeyTHtsCL5775ujug==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:17 2025 by rpki-client