Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a383030303a3a2f33342d3334203d3e203631373236.roa
File:                     323830343a316236383a383030303a3a2f33342d3334203d3e203631373236.roa (raw, json)
Hash identifier:          Vp8UMPDgKvJDuTGjlV/MwKUx7pvnGCe3I7HlUlQwmXk=
Subject key identifier:   BE:91:BB:D4:4D:9E:E7:81:3B:9D:24:EB:EA:4C:97:B8:22:B4:33:95
Certificate issuer:       /CN=9F55248699262B3492BB7EF605302682D56BBE22
Certificate serial:       163B473DD8DDD73092D71CDEF0D851567279FE4B
Authority key identifier: 9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a383030303a3a2f33342d3334203d3e203631373236.roa
Signing time:             Wed 26 Jul 2023 14:03:34 +0000
ROA not before:           Wed 26 Jul 2023 13:58:34 +0000
ROA not after:            Wed 24 Jul 2024 14:03:34 +0000
asID:                     61726
IP address blocks:        2804:1b68:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3b:47:3d:d8:dd:d7:30:92:d7:1c:de:f0:d8:51:56:72:79:fe:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55248699262B3492BB7EF605302682D56BBE22
        Validity
            Not Before: Jul 26 13:58:34 2023 GMT
            Not After : Jul 24 14:03:34 2024 GMT
        Subject: CN=3082010A0282010100960EDF898CCCE1522B735D9BBB4DE5E23F9ADD356DA1529F41F529344204869A5011D7AD327B3FD91CE97897525C71391FA616D2FEB25EE7607622A1C94FCBE39F06C5D2560652ADEC9536CA59E309AC0B7B0F717B4734E708F47ED577ABA4FFB359195DCED8D8F4586BEFBDBE2C50A2DD00FAE2B3E08CA6B7DA89BF661A180844B0F2951C3503571735289E9E7BEDD33B2373081EA79B75DD4008D422E3D6E89EDF54E07EE147895C8FECE898CB7DC20A8687CCC3121C48962D9E49DA4C8C0040DBEA2EF738E4DE4BF589CACC0C8D66FACEA0D5F78474674CA5D7E4899661462DE1D150287604BBEB000FBA726C1F0189D8C3AB01E969A6B22E4CA395F7BD2D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:df:89:8c:cc:e1:52:2b:73:5d:9b:bb:4d:
                    e5:e2:3f:9a:dd:35:6d:a1:52:9f:41:f5:29:34:42:
                    04:86:9a:50:11:d7:ad:32:7b:3f:d9:1c:e9:78:97:
                    52:5c:71:39:1f:a6:16:d2:fe:b2:5e:e7:60:76:22:
                    a1:c9:4f:cb:e3:9f:06:c5:d2:56:06:52:ad:ec:95:
                    36:ca:59:e3:09:ac:0b:7b:0f:71:7b:47:34:e7:08:
                    f4:7e:d5:77:ab:a4:ff:b3:59:19:5d:ce:d8:d8:f4:
                    58:6b:ef:bd:be:2c:50:a2:dd:00:fa:e2:b3:e0:8c:
                    a6:b7:da:89:bf:66:1a:18:08:44:b0:f2:95:1c:35:
                    03:57:17:35:28:9e:9e:7b:ed:d3:3b:23:73:08:1e:
                    a7:9b:75:dd:40:08:d4:22:e3:d6:e8:9e:df:54:e0:
                    7e:e1:47:89:5c:8f:ec:e8:98:cb:7d:c2:0a:86:87:
                    cc:c3:12:1c:48:96:2d:9e:49:da:4c:8c:00:40:db:
                    ea:2e:f7:38:e4:de:4b:f5:89:ca:cc:0c:8d:66:fa:
                    ce:a0:d5:f7:84:74:67:4c:a5:d7:e4:89:96:61:46:
                    2d:e1:d1:50:28:76:04:bb:eb:00:0f:ba:72:6c:1f:
                    01:89:d8:c3:ab:01:e9:69:a6:b2:2e:4c:a3:95:f7:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:BB:D4:4D:9E:E7:81:3B:9D:24:EB:EA:4C:97:B8:22:B4:33:95
            X509v3 Authority Key Identifier:
                keyid:9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/9F55248699262B3492BB7EF605302682D56BBE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a383030303a3a2f33342d3334203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:a2:ba:01:9f:e3:54:45:2f:76:69:85:be:5c:af:f7:82:
         c2:b1:2a:01:3d:81:41:58:8e:1c:01:c2:ad:14:58:78:c4:97:
         6d:c0:35:23:7e:c6:a2:85:e5:e8:ca:e5:6a:5f:2b:0b:cf:38:
         5b:55:40:64:55:b5:e5:28:e3:06:9e:b5:c7:42:fb:63:d6:db:
         40:0c:c4:85:fc:c1:f4:cc:47:53:ec:05:b5:08:c5:7e:94:1a:
         2d:59:26:04:57:82:c0:d3:81:65:9e:8e:51:7c:2b:d2:30:9c:
         94:66:15:e3:db:b1:0d:66:f0:41:e6:49:f9:5f:19:d2:c4:c6:
         72:57:5c:f4:e2:74:d9:6f:4a:52:ee:cd:16:13:17:19:ce:68:
         11:52:1b:c1:98:79:ac:dc:22:dc:de:31:15:9a:a9:43:5b:22:
         5a:5c:54:66:e4:1f:57:ce:4f:75:11:8c:02:ba:b2:18:78:17:
         5d:44:a0:c5:95:04:8d:9d:50:d1:52:48:8e:95:42:3e:7c:21:
         04:92:57:f8:85:be:fa:5b:26:54:a9:ca:49:90:e8:32:c5:6f:
         03:f6:ac:04:42:3b:c7:95:19:70:c3:86:4d:25:e5:70:ca:3c:
         bf:3a:4a:d7:c6:20:d7:f6:43:94:07:4b:60:00:08:b3:d9:0d:
         77:b3:eb:87
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUFjtHPdjd1zCS1xze8NhRVnJ5/kswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NTI0ODY5OTI2MkIzNDkyQkI3RUY2MDUzMDI2ODJE
NTZCQkUyMjAeFw0yMzA3MjYxMzU4MzRaFw0yNDA3MjQxNDAzMzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTYwRURGODk4Q0NDRTE1MjJC
NzM1RDlCQkI0REU1RTIzRjlBREQzNTZEQTE1MjlGNDFGNTI5MzQ0MjA0ODY5QTUw
MTFEN0FEMzI3QjNGRDkxQ0U5Nzg5NzUyNUM3MTM5MUZBNjE2RDJGRUIyNUVFNzYw
NzYyMkExQzk0RkNCRTM5RjA2QzVEMjU2MDY1MkFERUM5NTM2Q0E1OUUzMDlBQzBC
N0IwRjcxN0I0NzM0RTcwOEY0N0VENTc3QUJBNEZGQjM1OTE5NURDRUQ4RDhGNDU4
NkJFRkJEQkUyQzUwQTJERDAwRkFFMkIzRTA4Q0E2QjdEQTg5QkY2NjFBMTgwODQ0
QjBGMjk1MUMzNTAzNTcxNzM1Mjg5RTlFN0JFREQzM0IyMzczMDgxRUE3OUI3NURE
NDAwOEQ0MjJFM0Q2RTg5RURGNTRFMDdFRTE0Nzg5NUM4RkVDRTg5OENCN0RDMjBB
ODY4N0NDQzMxMjFDNDg5NjJEOUU0OURBNEM4QzAwNDBEQkVBMkVGNzM4RTRERTRC
RjU4OUNBQ0MwQzhENjZGQUNFQTBENUY3ODQ3NDY3NENBNUQ3RTQ4OTk2NjE0NjJE
RTFEMTUwMjg3NjA0QkJFQjAwMEZCQTcyNkMxRjAxODlEOEMzQUIwMUU5NjlBNkIy
MkU0Q0EzOTVGN0JEMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlg7fiYzM4VIrc12bu03l4j+a3TVtoVKfQfUpNEIEhppQEdetMns/
2RzpeJdSXHE5H6YW0v6yXudgdiKhyU/L458GxdJWBlKt7JU2ylnjCawLew9xe0c0
5wj0ftV3q6T/s1kZXc7Y2PRYa++9vixQot0A+uKz4Iymt9qJv2YaGAhEsPKVHDUD
Vxc1KJ6ee+3TOyNzCB6nm3XdQAjUIuPW6J7fVOB+4UeJXI/s6JjLfcIKhofMwxIc
SJYtnknaTIwAQNvqLvc45N5L9YnKzAyNZvrOoNX3hHRnTKXX5ImWYUYt4dFQKHYE
u+sAD7pybB8BidjDqwHpaaayLkyjlfe9LQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FL6Ru9RNnueBO50k6+pMl7gitDOVMB8GA1UdIwQYMBaAFJ9VJIaZJis0krt+9gUw
JoLVa74iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhod0JZMnB3VUVVenAy
YVp1TENXaDVDUFdDcThyNFhmWWUzNDl2Z1kxaTVoLzEvOUY1NTI0ODY5OTI2MkIz
NDkyQkI3RUY2MDUzMDI2ODJENTZCQkUyMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85RjU1MjQ4Njk5MjYyQjM0OTJCQjdFRjYwNTMwMjY4MkQ1NkJC
RTIyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84aHdCWTJwd1VFVXpwMmFadUxD
V2g1Q1BXQ3E4cjRYZlllMzQ5dmdZMWk1aC8xLzMyMzgzMDM0M2EzMTYyMzYzODNh
MzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzNjMxMzczMjM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYGKAQbaIAwDQYJKoZIhvcNAQELBQADggEBACLroroBn+NURS92aYW+XK/3
gsKxKgE9gUFYjhwBwq0UWHjEl23ANSN+xqKF5ejK5WpfKwvPOFtVQGRVteUo4wae
tcdC+2PW20AMxIX8wfTMR1PsBbUIxX6UGi1ZJgRXgsDTgWWejlF8K9IwnJRmFePb
sQ1m8EHmSflfGdLExnJXXPTidNlvSlLuzRYTFxnOaBFSG8GYeazcItzeMRWaqUNb
IlpcVGbkH1fOT3URjAK6shh4F11EoMWVBI2dUNFSSI6VQj58IQSSV/iFvvpbJlSp
ykmQ6DLFbwP2rARCO8eVGXDDhk0l5XDKPL86StfGINf2Q5QHS2AACLPZDXez64c=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:45 2025 by rpki-client