Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a376666653a313a3a2f36342d3634203d3e203238313834.roa
File:                     323830343a313562633a376666653a313a3a2f36342d3634203d3e203238313834.roa (raw, json)
Hash identifier:          dKuczGripa2LkztCCvvDa5RPvvLH4eVklAZycoL15n0=
Subject key identifier:   93:D3:63:29:4E:2D:76:D7:6B:B7:36:1A:E3:22:B4:CD:6B:26:01:F8
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       47B04D6BDB2B28F3AA50713B4665EEA526D480C8
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a376666653a313a3a2f36342d3634203d3e203238313834.roa
Signing time:             Wed 04 Dec 2024 17:35:44 +0000
ROA not before:           Wed 04 Dec 2024 17:30:44 +0000
ROA not after:            Wed 03 Dec 2025 17:35:44 +0000
asID:                     28184
IP address blocks:        2804:15bc:7ffe:1::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b0:4d:6b:db:2b:28:f3:aa:50:71:3b:46:65:ee:a5:26:d4:80:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Dec  4 17:30:44 2024 GMT
            Not After : Dec  3 17:35:44 2025 GMT
        Subject: CN=93D363294E2D76D76BB7361AE322B4CD6B2601F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:76:fd:13:9d:ba:7f:57:78:f0:b4:27:eb:
                    69:9e:ef:f4:e3:4e:2d:1b:57:72:8a:61:40:f8:1c:
                    1b:9e:98:f5:2b:25:f7:75:7c:69:5e:4e:ce:5f:e4:
                    75:be:92:fe:55:09:9a:c8:9c:09:25:bc:65:5a:b3:
                    4a:a9:29:74:50:70:69:9f:79:10:1d:8f:c8:63:3a:
                    85:a5:78:81:09:28:d8:58:c6:e6:69:99:0f:b5:3a:
                    a9:51:33:5d:b5:3f:9c:f6:90:4e:16:41:29:35:0d:
                    c0:bd:8d:82:54:36:f2:c3:4d:33:06:9f:de:6e:3e:
                    a2:65:58:81:84:b7:4a:1e:f6:e8:cd:7f:c8:4c:88:
                    f5:3d:f2:ad:9f:b6:c0:7d:29:79:0b:d9:b6:3b:76:
                    68:13:e0:8e:78:cf:f7:fd:d1:ec:50:16:af:8b:12:
                    18:a9:7f:57:ab:b8:31:5e:ae:f6:14:66:d0:70:5b:
                    55:19:c7:f0:65:4f:e8:10:07:36:c2:3f:9b:87:f4:
                    a9:a9:3b:d0:a8:a4:cb:90:bb:cd:43:d6:43:30:26:
                    7a:2a:e8:77:38:4c:00:ff:6d:1e:de:a5:ff:c7:aa:
                    9a:e5:51:91:ff:49:0e:37:69:38:59:74:9b:2b:30:
                    41:52:26:28:4f:a3:a8:77:da:46:15:4e:8b:21:d4:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D3:63:29:4E:2D:76:D7:6B:B7:36:1A:E3:22:B4:CD:6B:26:01:F8
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a376666653a313a3a2f36342d3634203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15bc:7ffe:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         9e:6d:e3:e6:53:97:3e:72:4f:a6:1a:22:ab:70:d6:73:81:2e:
         22:05:b2:5c:74:a5:03:cd:f4:f6:a8:3c:89:a5:ff:7c:a3:fc:
         26:8e:56:98:c4:bf:df:86:b7:9f:fb:3c:f8:c8:81:86:08:53:
         6c:62:37:3b:73:2b:d2:53:eb:f0:dc:40:6c:a9:4b:cb:de:27:
         13:04:cd:44:79:25:b1:a2:60:8f:1c:0d:86:c3:32:98:51:79:
         6f:93:4c:1e:ae:5c:48:38:f6:9d:e0:31:f8:71:16:57:a2:ef:
         da:5f:47:59:33:00:09:10:16:2e:54:01:6e:19:6d:55:a8:1d:
         95:7d:c2:3e:cd:bc:5f:87:62:c1:e0:20:ca:57:54:9c:f6:9b:
         68:58:59:11:36:41:e5:39:46:4f:01:55:68:8c:d2:81:8a:73:
         cd:6e:00:a5:e1:1f:24:25:6e:05:10:b1:60:d8:9f:ae:ad:b3:
         d9:dc:b7:9f:67:dd:91:14:72:3b:38:64:03:78:b1:04:4a:18:
         2a:b3:a3:0e:f0:db:e0:d2:7d:59:80:0a:fe:a2:97:55:95:b0:
         1d:61:13:67:e9:46:64:3d:6d:4e:bd:60:16:08:53:ee:cc:f2:
         c1:d5:37:88:40:8f:60:67:02:8c:92:ae:80:1e:1a:b2:19:55:
         cf:79:c8:de
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUR7BNa9srKPOqUHE7RmXupSbUgMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNkUwNTg3RkQ3RjcwMDExMzQ3QTlCOTM2NzlBMTEx
QTlBN0ZCOTAeFw0yNDEyMDQxNzMwNDRaFw0yNTEyMDMxNzM1NDRaMDMxMTAvBgNV
BAMTKDkzRDM2MzI5NEUyRDc2RDc2QkI3MzYxQUUzMjJCNENENkIyNjAxRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClw3b9E526f1d48LQn62me7/Tj
Ti0bV3KKYUD4HBuemPUrJfd1fGleTs5f5HW+kv5VCZrInAklvGVas0qpKXRQcGmf
eRAdj8hjOoWleIEJKNhYxuZpmQ+1OqlRM121P5z2kE4WQSk1DcC9jYJUNvLDTTMG
n95uPqJlWIGEt0oe9ujNf8hMiPU98q2ftsB9KXkL2bY7dmgT4I54z/f90exQFq+L
Ehipf1eruDFervYUZtBwW1UZx/BlT+gQBzbCP5uH9KmpO9CopMuQu81D1kMwJnoq
6Hc4TAD/bR7epf/HqprlUZH/SQ43aThZdJsrMEFSJihPo6h32kYVTosh1M+1AgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUk9NjKU4tdtdrtzYa4yK0zWsmAfgwHwYDVR0j
BBgwFoAU8sbgWH/X9wARNHqbk2eaERqaf7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9GMkM2RTA1ODdGRDdGNzAwMTEzNDdBOUI5MzY3OUExMTFBOUE3RkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQzZFMDU4N0ZEN0Y3MDAx
MTM0N0E5QjkzNjc5QTExMUE5QTdGQjkuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB
pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzIzODMwMzQzYTMxMzU2MjYzM2EzNzY2NjY2NTNhMzEzYTNhMmYzNjM0MmQzNjM0
MjAzZDNlMjAzMjM4MzEzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKAQVvH/+AAEwDQYJKoZIhvcN
AQELBQADggEBAJ5t4+ZTlz5yT6YaIqtw1nOBLiIFslx0pQPN9PaoPIml/3yj/CaO
VpjEv9+Gt5/7PPjIgYYIU2xiNztzK9JT6/DcQGypS8veJxMEzUR5JbGiYI8cDYbD
MphReW+TTB6uXEg49p3gMfhxFlei79pfR1kzAAkQFi5UAW4ZbVWoHZV9wj7NvF+H
YsHgIMpXVJz2m2hYWRE2QeU5Rk8BVWiM0oGKc81uAKXhHyQlbgUQsWDYn66ts9nc
t59n3ZEUcjs4ZAN4sQRKGCqzow7w2+DSfVmACv6il1WVsB1hE2fpRmQ9bU69YBYI
U+7M8sHVN4hAj2BnAoySroAeGrIZVc95yN4=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:17:34 2025 by rpki-client