Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/323830343a316437303a3a2f33322d3332203d3e20323634333638.roa
File:                     323830343a316437303a3a2f33322d3332203d3e20323634333638.roa (raw, json)
Hash identifier:          YnH4pzfgpw7EX2Zpr2D6jIUToc1VgEZp/QidJxYbJxY=
Subject key identifier:   77:95:24:58:10:5E:CC:F2:EC:43:FE:34:40:E9:2A:49:F6:C5:9D:04
Certificate issuer:       /CN=162700A209C017D8E4D23A05A44727CC54FCE6B9
Certificate serial:       2CA7AD01A08BA76B3104C829B00726FBAD30B387
Authority key identifier: 16:27:00:A2:09:C0:17:D8:E4:D2:3A:05:A4:47:27:CC:54:FC:E6:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162700A209C017D8E4D23A05A44727CC54FCE6B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/323830343a316437303a3a2f33322d3332203d3e20323634333638.roa
Signing time:             Tue 16 May 2023 14:21:38 +0000
ROA not before:           Tue 16 May 2023 14:16:38 +0000
ROA not after:            Tue 14 May 2024 14:21:38 +0000
asID:                     264368
IP address blocks:        2804:1d70::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a7:ad:01:a0:8b:a7:6b:31:04:c8:29:b0:07:26:fb:ad:30:b3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162700A209C017D8E4D23A05A44727CC54FCE6B9
        Validity
            Not Before: May 16 14:16:38 2023 GMT
            Not After : May 14 14:21:38 2024 GMT
        Subject: CN=77952458105ECCF2EC43FE3440E92A49F6C59D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:64:1d:17:b0:60:26:20:ae:cd:28:7f:08:
                    b3:b2:ad:d1:f3:17:e6:26:12:5c:1b:ce:0e:a0:4b:
                    76:38:c7:6b:e7:d5:df:e1:6a:f5:37:7b:68:23:78:
                    f2:28:07:ec:53:ba:85:99:d7:5a:4e:7e:40:ad:8a:
                    1a:f1:0b:d7:1c:5d:e1:5f:c7:32:2c:ac:ab:c6:ac:
                    13:c2:41:7c:56:fe:a8:70:0b:32:74:b2:83:09:45:
                    db:90:02:48:3d:6b:38:2f:ca:0b:71:fd:20:c2:f9:
                    d5:f3:9e:a6:ec:12:de:5e:7d:67:e0:e5:06:77:03:
                    0a:1e:99:c5:69:b2:02:eb:d8:f0:09:b5:e3:1f:dd:
                    b0:0d:10:98:3d:81:29:f8:18:98:05:53:5e:65:f1:
                    1b:8b:f5:ee:67:63:97:94:4c:d6:ce:cf:8b:fb:88:
                    97:40:33:c9:d3:9c:55:62:76:7a:79:3b:ba:c4:5e:
                    2d:75:21:45:b1:72:2e:53:76:77:ea:91:21:a4:b3:
                    68:de:f8:74:ab:df:94:05:88:a8:4d:76:ad:8b:4c:
                    67:c1:a8:bc:c7:ab:a3:5d:15:cb:3f:aa:b2:15:69:
                    21:d2:98:9b:4e:9a:42:7c:b0:cb:4c:e8:d9:15:86:
                    50:81:b8:11:da:57:2e:53:9e:df:a6:ea:63:68:26:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:95:24:58:10:5E:CC:F2:EC:43:FE:34:40:E9:2A:49:F6:C5:9D:04
            X509v3 Authority Key Identifier:
                keyid:16:27:00:A2:09:C0:17:D8:E4:D2:3A:05:A4:47:27:CC:54:FC:E6:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/162700A209C017D8E4D23A05A44727CC54FCE6B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162700A209C017D8E4D23A05A44727CC54FCE6B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/323830343a316437303a3a2f33322d3332203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:b8:0c:63:ca:41:bc:1b:25:0a:33:48:37:c8:b1:10:1d:
         41:79:8f:8f:fb:2f:1e:41:96:cc:10:6e:58:ad:d4:1d:9f:fb:
         0f:34:f0:3a:d7:a6:87:6a:db:1a:cd:9b:3e:73:84:2a:3b:f5:
         53:46:7b:8f:89:1e:fd:74:5f:08:3d:95:5d:5f:37:f6:e0:55:
         9b:e9:3c:59:b5:c7:4f:3d:77:ac:31:99:ad:17:18:90:73:6e:
         95:fa:4c:20:e7:45:7d:c8:d1:57:3a:ab:10:e8:f8:f9:14:43:
         c0:5a:c3:e2:27:e6:5b:67:ec:c4:3c:fa:8c:d0:27:bb:2e:69:
         86:1c:3c:73:34:1d:95:c5:64:0a:07:e2:1f:77:f4:cd:02:49:
         ae:bc:91:e4:ac:bc:43:7c:01:43:4a:07:7c:e2:ee:25:fa:d7:
         de:04:90:cb:40:02:2c:51:4e:80:97:75:1f:8a:c8:de:de:7d:
         3b:2f:3a:3d:9a:16:29:27:8c:25:08:26:17:bb:2a:48:40:4b:
         55:f8:d5:50:5e:62:51:e0:2b:03:2f:72:ff:ed:8c:69:60:8c:
         db:dd:6d:5c:30:f6:2f:4f:fa:17:b6:8a:14:bf:47:bc:1d:f5:
         db:ae:e1:a8:41:75:86:09:02:60:10:0c:6d:98:c9:08:44:89:
         31:05:30:98
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULKetAaCLp2sxBMgpsAcm+60ws4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYyNzAwQTIwOUMwMTdEOEU0RDIzQTA1QTQ0NzI3Q0M1
NEZDRTZCOTAeFw0yMzA1MTYxNDE2MzhaFw0yNDA1MTQxNDIxMzhaMDMxMTAvBgNV
BAMTKDc3OTUyNDU4MTA1RUNDRjJFQzQzRkUzNDQwRTkyQTQ5RjZDNTlEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7WQdF7BgJiCuzSh/CLOyrdHz
F+YmElwbzg6gS3Y4x2vn1d/havU3e2gjePIoB+xTuoWZ11pOfkCtihrxC9ccXeFf
xzIsrKvGrBPCQXxW/qhwCzJ0soMJRduQAkg9azgvygtx/SDC+dXznqbsEt5efWfg
5QZ3AwoemcVpsgLr2PAJteMf3bANEJg9gSn4GJgFU15l8RuL9e5nY5eUTNbOz4v7
iJdAM8nTnFVidnp5O7rEXi11IUWxci5TdnfqkSGks2je+HSr35QFiKhNdq2LTGfB
qLzHq6NdFcs/qrIVaSHSmJtOmkJ8sMtM6NkVhlCBuBHaVy5Tnt+m6mNoJlHFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUd5UkWBBezPLsQ/40QOkqSfbFnQQwHwYDVR0j
BBgwFoAUFicAognAF9jk0joFpEcnzFT85rkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRvQ2M1VmdwendrSlAzZjhzd0I1VGNjZVhMQk1IUGp1WFp3SDRUc1pM
UG8vMS8xNjI3MDBBMjA5QzAxN0Q4RTREMjNBMDVBNDQ3MjdDQzU0RkNFNkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2MjcwMEEyMDlDMDE3RDhF
NEQyM0EwNUE0NDcyN0NDNTRGQ0U2QjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0b0NjNVZncHp3a0pQM2Y4c3dCNVRjY2VYTEJNSFBqdVhad0g0VHNaTFBvLzEv
MzIzODMwMzQzYTMxNjQzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQdcDANBgkqhkiG9w0BAQsFAAOCAQEAbGi4DGPK
QbwbJQozSDfIsRAdQXmPj/svHkGWzBBuWK3UHZ/7DzTwOtemh2rbGs2bPnOEKjv1
U0Z7j4ke/XRfCD2VXV839uBVm+k8WbXHTz13rDGZrRcYkHNulfpMIOdFfcjRVzqr
EOj4+RRDwFrD4ifmW2fsxDz6jNAnuy5phhw8czQdlcVkCgfiH3f0zQJJrryR5Ky8
Q3wBQ0oHfOLuJfrX3gSQy0ACLFFOgJd1H4rI3t59Oy86PZoWKSeMJQgmF7sqSEBL
VfjVUF5iUeArAy9y/+2MaWCM291tXDD2L0/6F7aKFL9HvB31267hqEF1hgkCYBAM
bZjJCESJMQUwmA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 13:34:46 2025 by rpki-client