Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a343030303a3a2f33342d3334203d3e20323732323439.roa
File:                     323830343a383434303a343030303a3a2f33342d3334203d3e20323732323439.roa (raw, json)
Hash identifier:          hrK/3NXC/9I6i4E3UXWvSBvtaV1giQF+Qt+fDNZpwZQ=
Subject key identifier:   98:38:A7:7E:BB:BD:09:F0:AE:E7:7A:25:C3:E1:17:84:D9:1F:60:F2
Certificate issuer:       /CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
Certificate serial:       3D94707B9891EFBDE37B1FC4E39BF04AB769695F
Authority key identifier: 70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a343030303a3a2f33342d3334203d3e20323732323439.roa
Signing time:             Fri 16 Dec 2022 22:42:52 +0000
ROA not before:           Fri 16 Dec 2022 22:37:52 +0000
ROA not after:            Fri 15 Dec 2023 22:42:52 +0000
asID:                     272249
IP address blocks:        2804:8440:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:94:70:7b:98:91:ef:bd:e3:7b:1f:c4:e3:9b:f0:4a:b7:69:69:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
        Validity
            Not Before: Dec 16 22:37:52 2022 GMT
            Not After : Dec 15 22:42:52 2023 GMT
        Subject: CN=9838A77EBBBD09F0AEE77A25C3E11784D91F60F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:ab:e1:2b:ec:aa:87:48:9a:1c:1e:c7:46:
                    00:00:26:7d:3b:fe:d8:44:e4:21:2c:d7:f8:24:3c:
                    f7:65:49:74:19:f9:e6:7d:e6:a3:b0:93:95:99:b5:
                    f8:58:ac:ac:7d:ac:d3:2e:f3:0d:13:44:4a:18:82:
                    ff:e2:18:41:60:2b:ed:25:62:4b:cd:3a:e5:19:17:
                    45:bc:f1:f0:2b:c3:0d:f2:c0:b4:84:9d:ef:8c:cf:
                    59:88:b2:c6:93:b1:2a:5a:95:45:aa:56:f0:3e:2e:
                    b9:c1:bf:13:67:95:d8:52:32:ad:a7:c7:bb:e1:06:
                    7e:d8:21:b1:6b:a9:4b:0c:36:8b:c7:3e:93:7c:4f:
                    2e:12:06:96:86:5f:59:4d:e3:59:56:de:10:52:9b:
                    24:9c:ef:3d:96:ab:ae:f0:00:a8:cf:aa:e7:d2:34:
                    66:bd:2c:cb:b5:89:47:e9:a4:a5:21:d1:4a:0c:a2:
                    54:5c:b5:58:08:4d:36:96:55:a1:4d:78:a5:fd:05:
                    57:83:09:a2:d5:81:95:43:78:be:8d:7c:5d:f4:0c:
                    5d:01:58:38:c4:dc:a2:48:14:0b:f2:d6:72:7b:36:
                    97:30:5e:cd:6e:3b:56:de:1b:f4:aa:3a:d1:f5:3b:
                    64:4d:89:9b:39:28:dc:42:48:e2:82:3a:92:0c:7a:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:38:A7:7E:BB:BD:09:F0:AE:E7:7A:25:C3:E1:17:84:D9:1F:60:F2
            X509v3 Authority Key Identifier:
                keyid:70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a343030303a3a2f33342d3334203d3e20323732323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8440:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:35:c4:88:fe:6e:55:90:1d:ef:df:bb:03:3b:b0:7f:65:
         4e:9c:8f:65:68:30:98:f2:32:1f:90:eb:fa:24:a1:23:99:4c:
         a0:8e:02:cb:a4:65:f8:5e:f4:83:c3:96:6e:45:b8:2b:dc:62:
         0a:81:ea:d5:7c:a4:0e:0f:4b:3d:8e:75:f4:07:e7:46:d3:3c:
         c1:f5:1f:10:e6:d3:7b:63:dc:d3:62:89:b7:1f:12:bd:b3:ca:
         63:5b:f3:06:a1:30:9d:aa:fa:71:3e:f2:c2:9b:44:d5:4c:8f:
         db:bd:37:2e:1e:7b:1a:eb:d4:db:5a:3c:6e:77:eb:0f:dd:38:
         85:72:ff:a3:ad:54:d3:3a:b5:3e:85:0d:7e:b7:1a:25:7e:4e:
         e9:89:25:83:9d:00:e7:03:53:70:07:22:19:35:1c:8b:0e:2b:
         e8:ca:c1:18:a0:b7:b9:a9:94:07:96:3c:10:e0:c6:29:e1:9a:
         8b:47:67:89:da:d8:9a:e7:f0:3f:bc:36:6c:d7:50:42:d9:a2:
         84:ba:5d:36:24:ba:91:23:6b:26:9d:24:e2:ee:ab:52:48:fc:
         df:43:1a:f8:70:d1:3a:71:5d:a0:c6:42:4f:09:20:aa:eb:c6:
         46:0a:6e:02:89:2f:b8:48:59:09:bf:f7:bb:b1:cc:e9:49:8c:
         1c:85:21:91
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPZRwe5iR773jex/E45vwSrdpaV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBENzg3REMzMzlFRDRFNUY0OEFDMkE5MTVDNUYxQUVD
RTRDNDdGOTAeFw0yMjEyMTYyMjM3NTJaFw0yMzEyMTUyMjQyNTJaMDMxMTAvBgNV
BAMTKDk4MzhBNzdFQkJCRDA5RjBBRUU3N0EyNUMzRTExNzg0RDkxRjYwRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlYqvhK+yqh0iaHB7HRgAAJn07
/thE5CEs1/gkPPdlSXQZ+eZ95qOwk5WZtfhYrKx9rNMu8w0TREoYgv/iGEFgK+0l
YkvNOuUZF0W88fArww3ywLSEne+Mz1mIssaTsSpalUWqVvA+LrnBvxNnldhSMq2n
x7vhBn7YIbFrqUsMNovHPpN8Ty4SBpaGX1lN41lW3hBSmySc7z2Wq67wAKjPqufS
NGa9LMu1iUfppKUh0UoMolRctVgITTaWVaFNeKX9BVeDCaLVgZVDeL6NfF30DF0B
WDjE3KJIFAvy1nJ7NpcwXs1uO1beG/SqOtH1O2RNiZs5KNxCSOKCOpIMepNnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUmDinfru9CfCu53olw+EXhNkfYPIwHwYDVR0j
BBgwFoAUcNeH3DOe1OX0isKpFcXxrs5MR/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTNRRWcxM1hFS0Rhb29WNjMzRmdyMWs5ZFliejRweFZiTEtiTXhXYmtk
SmUvMC83MEQ3ODdEQzMzOUVENEU1RjQ4QUMyQTkxNUM1RjFBRUNFNEM0N0Y5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwRDc4N0RDMzM5RUQ0RTVG
NDhBQzJBOTE1QzVGMUFFQ0U0QzQ3RjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkzUUVnMTNYRUtEYW9vVjYzM0ZncjFrOWRZYno0cHhWYkxLYk14V2JrZEplLzAv
MzIzODMwMzQzYTM4MzQzNDMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMyMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhEBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAb+TXEiP5uVZAd79+7Azuwf2VOnI9laDCY8jIfkOv6JKEjmUygjgLLpGX4
XvSDw5ZuRbgr3GIKgerVfKQOD0s9jnX0B+dG0zzB9R8Q5tN7Y9zTYom3HxK9s8pj
W/MGoTCdqvpxPvLCm0TVTI/bvTcuHnsa69TbWjxud+sP3TiFcv+jrVTTOrU+hQ1+
txolfk7piSWDnQDnA1NwByIZNRyLDivoysEYoLe5qZQHljwQ4MYp4ZqLR2eJ2tia
5/A/vDZs11BC2aKEul02JLqRI2smnSTi7qtSSPzfQxr4cNE6cV2gxkJPCSCq68ZG
Cm4CiS+4SFkJv/e7sczpSYwchSGR
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:55 2025 by rpki-client