Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/0/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa
File:                     323830343a336236633a3a2f33322d3334203d3e20323636313438.roa (raw, json)
Hash identifier:          D4bCrX8C5EsbvvglF0KlJQhOX8TyfnIdNhN8lXvquj0=
Subject key identifier:   41:CC:82:C3:80:C7:21:A9:02:25:72:B1:7D:71:12:4C:AF:96:3A:74
Certificate issuer:       /CN=668937F037AEFCAEE46AED89C757C78F4A31B6C9
Certificate serial:       7B68E350B59030A605ED2E708B25EE4F929E0CA1
Authority key identifier: 66:89:37:F0:37:AE:FC:AE:E4:6A:ED:89:C7:57:C7:8F:4A:31:B6:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/0/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa
Signing time:             Mon 31 Jul 2023 17:41:26 +0000
ROA not before:           Mon 31 Jul 2023 17:36:26 +0000
ROA not after:            Mon 29 Jul 2024 17:41:26 +0000
asID:                     266148
IP address blocks:        2804:3b6c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:68:e3:50:b5:90:30:a6:05:ed:2e:70:8b:25:ee:4f:92:9e:0c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668937F037AEFCAEE46AED89C757C78F4A31B6C9
        Validity
            Not Before: Jul 31 17:36:26 2023 GMT
            Not After : Jul 29 17:41:26 2024 GMT
        Subject: CN=41CC82C380C721A9022572B17D71124CAF963A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:a5:6d:da:6c:21:55:92:c2:eb:8b:cc:b3:
                    fe:d9:ed:cb:fe:60:75:47:1c:03:b6:85:a5:ef:3d:
                    b2:f3:f8:91:13:33:c1:16:c3:68:de:7c:60:1c:89:
                    35:db:37:e3:98:20:89:61:a4:85:92:0b:a8:95:5a:
                    b2:cc:ee:03:c0:43:8b:e4:20:fb:5f:7d:56:e0:bb:
                    5e:32:7b:ed:f5:ee:11:52:ac:33:97:bf:65:d9:bf:
                    df:1d:fd:7c:8f:3f:c5:bd:01:f7:ad:b1:15:92:ca:
                    c9:0a:ee:e5:cd:b9:38:02:6b:a6:1f:f7:81:6e:9c:
                    5c:7f:86:a6:1f:c5:2e:21:99:dd:9a:af:f7:14:0b:
                    4d:69:ed:59:60:cd:6d:cd:3b:0b:f9:66:08:16:28:
                    85:c3:85:ed:da:10:e3:53:30:d8:80:19:39:5c:20:
                    57:78:a5:4c:e9:cb:9d:5e:45:08:10:ae:c1:d3:e0:
                    36:09:65:24:a6:20:54:f6:cf:70:5d:81:33:b9:ad:
                    d5:0f:80:85:75:99:19:db:c4:86:3b:b3:0c:6c:5d:
                    10:a4:c4:ae:30:8d:bd:ad:e9:72:39:7f:42:c4:cc:
                    32:f1:48:10:88:56:4e:82:84:c9:33:d9:08:a3:e4:
                    ac:21:cc:14:96:88:f6:e1:ff:fd:d0:f6:af:4c:23:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CC:82:C3:80:C7:21:A9:02:25:72:B1:7D:71:12:4C:AF:96:3A:74
            X509v3 Authority Key Identifier:
                keyid:66:89:37:F0:37:AE:FC:AE:E4:6A:ED:89:C7:57:C7:8F:4A:31:B6:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/0/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:ef:93:63:89:ed:ff:db:5a:3a:de:80:17:86:a9:1c:af:
         e3:0b:90:55:ef:de:17:e9:c4:5f:c2:32:53:c9:5e:e5:31:3f:
         99:4e:43:27:12:7a:be:63:4e:3d:97:4f:03:db:eb:81:80:2c:
         ea:62:8e:68:29:91:52:48:8c:47:0d:fa:7e:33:c3:6b:68:4b:
         a8:2b:02:9c:8a:e1:e0:76:2f:d4:38:3e:42:57:b2:90:78:54:
         1a:30:6c:05:4e:9f:f7:7b:f9:1f:98:13:ab:67:50:bd:3c:8d:
         bd:04:44:be:06:9c:81:60:b5:86:8a:6a:94:39:bf:c5:a7:b1:
         6f:2b:89:c3:d9:e8:14:65:4a:4d:26:77:09:30:48:0b:1f:ca:
         49:93:bf:9f:a8:7e:ca:03:d3:38:22:f2:1f:94:bc:f8:38:ed:
         07:a6:2f:83:27:ef:53:b1:12:54:a4:32:25:b1:82:b9:16:e2:
         0a:22:56:6c:50:05:3c:45:83:da:98:69:e7:49:8b:40:5c:c0:
         5d:8c:55:58:0e:cf:f6:2b:26:cb:e7:de:7d:36:09:3b:eb:82:
         60:21:e0:0c:ef:76:c6:88:b7:18:38:cd:4b:0a:b3:41:be:84:
         f2:4e:52:84:78:60:27:85:cc:64:66:e8:95:9b:57:6d:92:9b:
         60:91:b0:df
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUe2jjULWQMKYF7S5wiyXuT5KeDKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY4OTM3RjAzN0FFRkNBRUU0NkFFRDg5Qzc1N0M3OEY0
QTMxQjZDOTAeFw0yMzA3MzExNzM2MjZaFw0yNDA3MjkxNzQxMjZaMDMxMTAvBgNV
BAMTKDQxQ0M4MkMzODBDNzIxQTkwMjI1NzJCMTdENzExMjRDQUY5NjNBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjp6Vt2mwhVZLC64vMs/7Z7cv+
YHVHHAO2haXvPbLz+JETM8EWw2jefGAciTXbN+OYIIlhpIWSC6iVWrLM7gPAQ4vk
IPtffVbgu14ye+317hFSrDOXv2XZv98d/XyPP8W9AfetsRWSyskK7uXNuTgCa6Yf
94FunFx/hqYfxS4hmd2ar/cUC01p7VlgzW3NOwv5ZggWKIXDhe3aEONTMNiAGTlc
IFd4pUzpy51eRQgQrsHT4DYJZSSmIFT2z3BdgTO5rdUPgIV1mRnbxIY7swxsXRCk
xK4wjb2t6XI5f0LEzDLxSBCIVk6ChMkz2Qij5KwhzBSWiPbh//3Q9q9MI7GXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQcyCw4DHIakCJXKxfXESTK+WOnQwHwYDVR0j
BBgwFoAUZok38Deu/K7kau2Jx1fHj0oxtskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRQVm1Yd1k2enFIVFl4NUF1enRZMXdkN1pZV2szc2F6VW53eDRvUXlo
bnkvMC82Njg5MzdGMDM3QUVGQ0FFRTQ2QUVEODlDNzU3Qzc4RjRBMzFCNkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY2ODkzN0YwMzdBRUZDQUVF
NDZBRUQ4OUM3NTdDNzhGNEEzMUI2QzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FUUFZtWHdZNnpxSFRZeDVBdXp0WTF3ZDdaWVdrM3NhelVud3g0b1F5aG55LzAv
MzIzODMwMzQzYTMzNjIzNjYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM2
MzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7bDANBgkqhkiG9w0BAQsFAAOCAQEATsXvk2OJ
7f/bWjregBeGqRyv4wuQVe/eF+nEX8IyU8le5TE/mU5DJxJ6vmNOPZdPA9vrgYAs
6mKOaCmRUkiMRw36fjPDa2hLqCsCnIrh4HYv1Dg+QleykHhUGjBsBU6f93v5H5gT
q2dQvTyNvQREvgacgWC1hopqlDm/xaexbyuJw9noFGVKTSZ3CTBICx/KSZO/n6h+
ygPTOCLyH5S8+DjtB6YvgyfvU7ESVKQyJbGCuRbiCiJWbFAFPEWD2php50mLQFzA
XYxVWA7P9ismy+fefTYJO+uCYCHgDO92xoi3GDjNSwqzQb6E8k5ShHhgJ4XMZGbo
lZtXbZKbYJGw3w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:28:55 2025 by rpki-client