Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a373930303a3a2f34302d3430203d3e20323634303739.roa
File:                     323830343a326139303a373930303a3a2f34302d3430203d3e20323634303739.roa (raw, json)
Hash identifier:          abjyNdEtkkEJ/P5eJYhiZsLnQ3PZ1Wm5PwCz5M3WlNE=
Subject key identifier:   DF:7B:A8:98:B0:50:EB:EF:01:3A:17:80:B8:2E:34:58:57:0F:F5:90
Certificate issuer:       /CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
Certificate serial:       06B457E5152B496861C5A82F59BB458D00A44B8C
Authority key identifier: F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a373930303a3a2f34302d3430203d3e20323634303739.roa
Signing time:             Fri 21 Jul 2023 15:03:27 +0000
ROA not before:           Fri 21 Jul 2023 14:58:27 +0000
ROA not after:            Fri 19 Jul 2024 15:03:27 +0000
asID:                     264079
IP address blocks:        2804:2a90:7900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b4:57:e5:15:2b:49:68:61:c5:a8:2f:59:bb:45:8d:00:a4:4b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
        Validity
            Not Before: Jul 21 14:58:27 2023 GMT
            Not After : Jul 19 15:03:27 2024 GMT
        Subject: CN=DF7BA898B050EBEF013A1780B82E3458570FF590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:ee:47:62:91:e3:59:a9:ef:8d:3d:0f:c4:
                    40:6b:65:ea:27:10:ef:49:fe:76:61:05:40:8d:f4:
                    3a:92:e5:16:36:32:19:6f:84:71:8d:37:01:50:4b:
                    0d:21:a3:ba:38:e7:37:a6:dc:3b:f2:48:47:27:a1:
                    e6:b1:44:d9:a0:04:0f:eb:31:42:10:06:27:d0:de:
                    ff:5e:d0:26:80:58:cd:53:22:2b:ae:2e:e7:eb:87:
                    33:3b:b3:5f:f7:17:9c:a4:5e:fb:02:d5:08:53:68:
                    37:27:0a:18:26:0a:d8:c2:74:d9:00:e5:ea:9c:d8:
                    80:ed:22:bf:96:62:d6:6e:52:9f:24:83:8c:79:05:
                    39:59:a8:cf:b6:2f:a2:93:2e:5c:3b:b5:0b:9e:d1:
                    7b:d9:12:f2:92:fe:41:60:92:6f:b7:8a:89:90:9a:
                    64:b9:43:cb:09:8d:a5:3c:16:c5:90:a9:85:26:fa:
                    a1:10:77:51:c8:be:10:55:93:97:1e:10:9a:21:d0:
                    bf:ea:ff:f9:ea:82:10:5b:56:1c:4f:f3:eb:78:a2:
                    46:21:51:45:d5:75:ed:78:f3:5c:06:ad:49:4d:09:
                    90:84:3b:4f:3a:71:78:34:fe:01:06:7d:d1:91:bd:
                    77:47:49:ad:41:48:6e:ee:d2:4a:4a:3c:c5:11:c5:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7B:A8:98:B0:50:EB:EF:01:3A:17:80:B8:2E:34:58:57:0F:F5:90
            X509v3 Authority Key Identifier:
                keyid:F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a373930303a3a2f34302d3430203d3e20323634303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a90:7900::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:46:a6:65:de:bf:a6:98:68:65:2b:18:d4:55:58:ce:88:
         45:d2:c1:14:10:fc:9d:3a:67:d8:93:89:24:28:cb:b3:b0:88:
         16:6e:c8:45:cd:74:bf:ce:95:dd:16:71:5e:3c:f2:fa:0d:6c:
         19:ff:3d:91:66:00:f2:26:05:34:e3:1a:f6:cc:37:b8:d6:20:
         de:4a:90:90:85:9b:11:6b:b5:b8:22:33:a1:4d:44:31:0d:1a:
         5e:ff:87:ee:c0:56:89:81:9e:16:ff:9b:d6:d2:4d:09:72:d5:
         02:73:df:b7:5f:aa:f3:19:bd:20:a6:62:3e:a6:29:62:57:a7:
         70:92:38:9c:47:9c:c2:37:d7:7a:c7:68:a3:0f:02:5d:10:4d:
         81:69:10:d8:b0:c9:09:94:9b:e7:80:2c:45:75:a5:22:a8:99:
         5b:f1:c1:f7:25:b0:ae:be:96:40:bc:dc:56:71:4b:10:d1:1c:
         d1:73:e6:12:38:0a:6a:fa:d1:4f:74:1c:05:19:82:37:56:c4:
         e8:bf:db:22:8f:00:c5:4f:59:ef:44:51:bf:d8:44:0e:02:88:
         db:f4:c6:5d:b9:4e:ce:db:ba:5c:5f:e3:68:4d:cc:08:60:eb:
         e6:32:74:68:21:56:6a:05:15:7c:5d:a5:76:54:1e:65:85:22:
         b3:96:99:dc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBrRX5RUrSWhhxagvWbtFjQCkS4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkyNjNGRkUxMTE2MzU2MzQ5ODk1MENBRDQ0NUM4QjdF
QTAyQzRFOTAeFw0yMzA3MjExNDU4MjdaFw0yNDA3MTkxNTAzMjdaMDMxMTAvBgNV
BAMTKERGN0JBODk4QjA1MEVCRUYwMTNBMTc4MEI4MkUzNDU4NTcwRkY1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyu5HYpHjWanvjT0PxEBrZeon
EO9J/nZhBUCN9DqS5RY2MhlvhHGNNwFQSw0ho7o45zem3DvySEcnoeaxRNmgBA/r
MUIQBifQ3v9e0CaAWM1TIiuuLufrhzM7s1/3F5ykXvsC1QhTaDcnChgmCtjCdNkA
5eqc2IDtIr+WYtZuUp8kg4x5BTlZqM+2L6KTLlw7tQue0XvZEvKS/kFgkm+3iomQ
mmS5Q8sJjaU8FsWQqYUm+qEQd1HIvhBVk5ceEJoh0L/q//nqghBbVhxP8+t4okYh
UUXVde1481wGrUlNCZCEO086cXg0/gEGfdGRvXdHSa1BSG7u0kpKPMURxcnjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU33uomLBQ6+8BOheAuC40WFcP9ZAwHwYDVR0j
BBgwFoAU+SY//hEWNWNJiVDK1EXIt+oCxOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWFRQTl1bWZDY0NzdUNnUjg1N1lIcmRyZ2hUQk1mbmdQYkZwdTVrN01M
SmIvMC9GOTI2M0ZGRTExMTYzNTYzNDk4OTUwQ0FENDQ1QzhCN0VBMDJDNEU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y5MjYzRkZFMTExNjM1NjM0
OTg5NTBDQUQ0NDVDOEI3RUEwMkM0RTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FhUUE5dW1mQ2NDc3VDZ1I4NTdZSHJkcmdoVEJNZm5nUGJGcHU1azdNTEpiLzAv
MzIzODMwMzQzYTMyNjEzOTMwM2EzNzM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMwMzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEKpB5MA0GCSqGSIb3DQEBCwUA
A4IBAQBx1EamZd6/pphoZSsY1FVYzohF0sEUEPydOmfYk4kkKMuzsIgWbshFzXS/
zpXdFnFePPL6DWwZ/z2RZgDyJgU04xr2zDe41iDeSpCQhZsRa7W4IjOhTUQxDRpe
/4fuwFaJgZ4W/5vW0k0JctUCc9+3X6rzGb0gpmI+piliV6dwkjicR5zCN9d6x2ij
DwJdEE2BaRDYsMkJlJvngCxFdaUiqJlb8cH3JbCuvpZAvNxWcUsQ0RzRc+YSOApq
+tFPdBwFGYI3VsTov9sijwDFT1nvRFG/2EQOAojb9MZduU7O27pcX+NoTcwIYOvm
MnRoIVZqBRV8XaV2VB5lhSKzlpnc
-----END CERTIFICATE-----
Generated at Fri Mar 14 06:07:25 2025 by rpki-client