Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/323830343a366461383a3a2f33322d3332203d3e20323730353437.roa
File:                     323830343a366461383a3a2f33322d3332203d3e20323730353437.roa (raw, json)
Hash identifier:          C8eIjIyjSZxJPZkhYYBZD/ldch9dO82I4qEcOl4IgXw=
Subject key identifier:   FC:2F:9E:92:84:86:53:68:00:BF:DC:77:30:3B:A1:8E:D9:5D:C1:75
Certificate issuer:       /CN=78840852929E362A035EFB1CBC9353C34CDFE5F9
Certificate serial:       4DE75AAE4B2949121363C061C9D19B4EA530CE31
Authority key identifier: 78:84:08:52:92:9E:36:2A:03:5E:FB:1C:BC:93:53:C3:4C:DF:E5:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78840852929E362A035EFB1CBC9353C34CDFE5F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/323830343a366461383a3a2f33322d3332203d3e20323730353437.roa
Signing time:             Mon 04 Jul 2022 17:00:00 +0000
ROA not before:           Mon 04 Jul 2022 16:55:00 +0000
ROA not after:            Mon 03 Jul 2023 17:00:00 +0000
asID:                     270547
IP address blocks:        2804:6da8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:5a:ae:4b:29:49:12:13:63:c0:61:c9:d1:9b:4e:a5:30:ce:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78840852929E362A035EFB1CBC9353C34CDFE5F9
        Validity
            Not Before: Jul  4 16:55:00 2022 GMT
            Not After : Jul  3 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:bc:36:73:a0:85:d1:0d:11:85:c5:48:26:
                    e1:1b:3c:57:9d:e6:33:48:86:7d:90:5f:ac:aa:d3:
                    22:b3:7c:c1:b7:1a:21:b5:75:13:ba:6e:dd:01:77:
                    5e:68:58:08:74:5b:c0:8f:89:77:16:7b:cf:32:93:
                    e4:97:87:12:bf:34:fa:74:db:ad:52:8d:f6:34:94:
                    91:89:23:62:81:86:b7:d3:41:ab:36:21:6e:30:90:
                    df:a4:97:cc:6c:4b:2a:f7:ed:4a:ed:91:50:31:46:
                    22:bb:d3:06:ec:b7:14:9c:07:23:b7:e3:8a:e0:88:
                    73:30:e8:b7:ee:a0:23:b7:c5:2f:a0:22:8d:f6:96:
                    75:64:c3:fc:cd:10:42:90:7c:73:82:3f:15:b3:61:
                    df:d5:55:2d:bd:09:19:77:98:b3:53:f5:50:6e:dd:
                    ce:6b:06:15:39:f9:fe:61:2a:16:18:a2:51:8c:e4:
                    f0:a9:3e:9a:ce:ae:3a:07:b5:16:6d:b9:ac:68:7b:
                    2e:db:af:ba:8b:bb:9f:f2:c4:60:ee:cc:fb:96:e9:
                    9e:3c:1d:7b:7e:60:66:5b:6e:8f:34:c4:64:b3:75:
                    84:80:cd:50:3c:ff:b9:c0:3f:59:c6:c5:bf:88:70:
                    49:d5:7b:95:84:84:d7:4b:bf:3b:41:c4:cb:c9:2c:
                    32:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2F:9E:92:84:86:53:68:00:BF:DC:77:30:3B:A1:8E:D9:5D:C1:75
            X509v3 Authority Key Identifier:
                keyid:78:84:08:52:92:9E:36:2A:03:5E:FB:1C:BC:93:53:C3:4C:DF:E5:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/78840852929E362A035EFB1CBC9353C34CDFE5F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78840852929E362A035EFB1CBC9353C34CDFE5F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/323830343a366461383a3a2f33322d3332203d3e20323730353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:70:bd:66:49:c1:5e:fa:0b:9b:66:f1:b3:e5:a7:3f:5c:ee:
         d6:d2:c4:d4:66:92:ed:24:89:fb:0f:71:fb:3f:bf:0f:03:05:
         6e:0b:00:ea:45:e4:e3:2c:d7:c3:b8:fe:96:f0:98:9f:d5:3c:
         a1:c0:a5:34:e8:70:10:e6:22:c5:27:35:07:05:9f:bc:b4:07:
         a3:80:bf:3e:ef:3c:34:b5:ba:cc:4b:9d:ac:82:69:8a:a7:1c:
         2e:1c:f0:5d:28:c5:ae:84:60:f4:5f:3b:12:50:6a:df:74:db:
         79:76:5a:a5:de:c7:b7:f0:0c:d4:7f:55:ab:7a:38:a5:26:95:
         e1:5c:35:ef:19:dc:97:eb:82:b9:23:41:e9:7b:f8:07:7e:a4:
         08:5d:4e:22:17:8e:71:08:a9:4d:67:40:37:f9:ec:96:13:46:
         38:8b:26:95:65:74:e3:52:3c:a0:1d:53:22:c8:f3:7a:58:8c:
         55:53:61:17:20:15:c5:45:5b:9e:13:17:a5:a3:7b:9d:15:d1:
         0e:0e:5d:17:66:a2:e9:57:56:b5:05:8d:74:1f:f0:96:4f:33:
         ff:0c:54:ac:a1:79:2e:ed:2c:cd:e2:d1:ba:1b:f0:ab:28:2c:
         44:79:26:a3:d0:1b:78:29:4e:89:1d:9d:bf:e6:b6:af:1d:64:
         6b:42:4e:4f
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUTedarkspSRITY8BhydGbTqUwzjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg4NDA4NTI5MjlFMzYyQTAzNUVGQjFDQkM5MzUzQzM0
Q0RGRTVGOTAeFw0yMjA3MDQxNjU1MDBaFw0yMzA3MDMxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTA2QkJDMzY3M0EwODVEMTBE
MTE4NUM1NDgyNkUxMUIzQzU3OURFNjMzNDg4NjdEOTA1RkFDQUFEMzIyQjM3Q0Mx
QjcxQTIxQjU3NTEzQkE2RUREMDE3NzVFNjg1ODA4NzQ1QkMwOEY4OTc3MTY3QkNG
MzI5M0U0OTc4NzEyQkYzNEZBNzREQkFENTI4REY2MzQ5NDkxODkyMzYyODE4NkI3
RDM0MUFCMzYyMTZFMzA5MERGQTQ5N0NDNkM0QjJBRjdFRDRBRUQ5MTUwMzE0NjIy
QkJEMzA2RUNCNzE0OUMwNzIzQjdFMzhBRTA4ODczMzBFOEI3RUVBMDIzQjdDNTJG
QTAyMjhERjY5Njc1NjRDM0ZDQ0QxMDQyOTA3QzczODIzRjE1QjM2MURGRDU1NTJE
QkQwOTE5Nzc5OEIzNTNGNTUwNkVERENFNkIwNjE1MzlGOUZFNjEyQTE2MThBMjUx
OENFNEYwQTkzRTlBQ0VBRTNBMDdCNTE2NkRCOUFDNjg3QjJFREJBRkJBOEJCQjlG
RjJDNDYwRUVDQ0ZCOTZFOTlFM0MxRDdCN0U2MDY2NUI2RThGMzRDNDY0QjM3NTg0
ODBDRDUwM0NGRkI5QzAzRjU5QzZDNUJGODg3MDQ5RDU3Qjk1ODQ4NEQ3NEJCRjNC
NDFDNENCQzkyQzMyOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4Gu8NnOghdENEYXFSCbhGzxXneYzSIZ9kF+sqtMis3zBtxohtXUT
um7dAXdeaFgIdFvAj4l3FnvPMpPkl4cSvzT6dNutUo32NJSRiSNigYa300GrNiFu
MJDfpJfMbEsq9+1K7ZFQMUYiu9MG7LcUnAcjt+OK4IhzMOi37qAjt8UvoCKN9pZ1
ZMP8zRBCkHxzgj8Vs2Hf1VUtvQkZd5izU/VQbt3OawYVOfn+YSoWGKJRjOTwqT6a
zq46B7UWbbmsaHsu26+6i7uf8sRg7sz7lumePB17fmBmW26PNMRks3WEgM1QPP+5
wD9ZxsW/iHBJ1XuVhITXS787QcTLySwykwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FPwvnpKEhlNoAL/cdzA7oY7ZXcF1MB8GA1UdIwQYMBaAFHiECFKSnjYqA177HLyT
U8NM3+X5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlvUFVBd3lWZ1hza01M
Y0dKMkI1WndMdnljcUNKaHpFZHR0dVVKYjcxc2MzLzAvNzg4NDA4NTI5MjlFMzYy
QTAzNUVGQjFDQkM5MzUzQzM0Q0RGRTVGOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83ODg0MDg1MjkyOUUzNjJBMDM1RUZCMUNCQzkzNTNDMzRDREZF
NUY5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85b1BVQXd5VmdYc2tNTGNHSjJC
NVp3THZ5Y3FDSmh6RWR0dHVVSmI3MXNjMy8wLzMyMzgzMDM0M2EzNjY0NjEzODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDM1MzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
bagwDQYJKoZIhvcNAQELBQADggEBAMJwvWZJwV76C5tm8bPlpz9c7tbSxNRmku0k
ifsPcfs/vw8DBW4LAOpF5OMs18O4/pbwmJ/VPKHApTTocBDmIsUnNQcFn7y0B6OA
vz7vPDS1usxLnayCaYqnHC4c8F0oxa6EYPRfOxJQat9023l2WqXex7fwDNR/Vat6
OKUmleFcNe8Z3JfrgrkjQel7+Ad+pAhdTiIXjnEIqU1nQDf57JYTRjiLJpVldONS
PKAdUyLI83pYjFVTYRcgFcVFW54TF6Wje50V0Q4OXRdmoulXVrUFjXQf8JZPM/8M
VKyheS7tLM3i0bob8KsoLER5JqPQG3gpTokdnb/mtq8dZGtCTk8=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:59 2025 by rpki-client