Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a396166663a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a396166663a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          iU8PY+/WbIwr9fQIxB5T4pXNZ1XRHUFsuIVcz9S3flY=
Subject key identifier:   8F:DA:1B:6E:72:C2:F3:26:F3:3E:80:C5:B4:40:72:74:37:5A:6B:99
Certificate issuer:       /CN=7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23
Certificate serial:       22F222E8AB83F85DEF32DE818D806FEC923E7701
Authority key identifier: 7C:B7:E9:AD:98:2E:B7:29:13:84:E5:05:B5:9C:E3:BB:EE:DA:3A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a396166663a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Wed 11 Oct 2023 04:39:05 +0000
ROA not before:           Wed 11 Oct 2023 04:34:05 +0000
ROA not after:            Wed 09 Oct 2024 04:39:05 +0000
asID:                     270764
IP address blocks:        2804:7110:9aff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f2:22:e8:ab:83:f8:5d:ef:32:de:81:8d:80:6f:ec:92:3e:77:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23
        Validity
            Not Before: Oct 11 04:34:05 2023 GMT
            Not After : Oct  9 04:39:05 2024 GMT
        Subject: CN=8FDA1B6E72C2F326F33E80C5B4407274375A6B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:86:b2:90:8c:d3:58:43:86:8a:fa:bc:28:
                    16:61:5e:95:57:01:c1:f0:76:a3:8a:51:f9:be:82:
                    a4:8c:34:fd:78:8a:56:c3:7e:1b:14:f9:a5:ee:ce:
                    cf:14:f1:2a:04:1a:91:90:6e:e1:20:f8:31:28:07:
                    61:90:4b:23:c2:f0:36:76:4a:4a:6d:fa:94:dc:45:
                    36:e7:c9:11:5b:07:db:7a:ec:78:f1:a2:0a:8b:ce:
                    f5:87:ea:5d:33:59:68:5f:a4:5d:92:13:a8:27:6d:
                    cb:d0:a6:c3:4f:6e:af:90:bc:3c:4f:ea:c0:d4:50:
                    ab:4d:d5:52:b3:63:a6:d0:8a:ce:8a:9f:01:61:39:
                    49:26:46:b4:34:87:ac:c2:e9:16:2b:59:c6:09:ad:
                    82:29:bb:15:82:1f:55:7a:39:30:48:b2:61:0b:78:
                    4c:f3:9e:f3:43:29:a8:46:f7:a9:f1:b8:68:28:c3:
                    f3:9e:38:59:21:24:ce:0c:92:9f:f2:e8:3e:5f:af:
                    5a:df:44:b9:8d:84:1b:e1:ff:72:8c:85:87:71:50:
                    03:e1:00:2a:9b:40:24:4b:10:b6:f7:a8:64:e6:fd:
                    f8:be:96:c8:ed:2f:da:c8:ea:99:53:5e:ca:e8:6f:
                    75:d0:40:69:4d:80:9b:12:ba:84:84:00:6a:8b:e1:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DA:1B:6E:72:C2:F3:26:F3:3E:80:C5:B4:40:72:74:37:5A:6B:99
            X509v3 Authority Key Identifier:
                keyid:7C:B7:E9:AD:98:2E:B7:29:13:84:E5:05:B5:9C:E3:BB:EE:DA:3A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a396166663a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:9aff::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:fe:5f:42:21:12:93:5a:be:71:c5:b5:73:67:bb:db:42:28:
         61:81:28:1f:f3:d2:fb:e8:a1:3b:63:b8:f1:cb:03:d0:37:b0:
         4c:34:8e:e5:7f:e4:37:d2:58:13:ec:70:de:06:86:9d:12:dc:
         4d:73:20:cc:39:12:2c:2e:b9:41:12:68:db:6e:40:a5:1f:7f:
         48:5e:25:79:46:af:28:41:2f:74:1d:50:91:e9:0b:b6:f5:da:
         88:eb:8a:82:01:4b:89:b0:05:5d:dc:11:4a:fd:63:b3:1d:4b:
         54:62:05:73:25:be:70:97:11:a8:03:64:c7:36:53:33:5e:1e:
         e8:1e:0c:ea:ab:49:23:40:cb:23:c6:e2:7d:84:a5:50:c2:8f:
         c5:3e:b7:5e:ad:6e:6f:85:60:52:aa:df:a2:42:bf:a4:5e:21:
         54:99:54:68:80:fe:31:ff:88:c5:3b:20:b6:9e:a0:f0:cd:c9:
         34:53:20:f1:a5:6c:b0:a6:0f:50:ab:f0:e4:48:59:8e:08:04:
         fc:76:94:bb:4e:46:30:ef:23:42:f3:ad:3e:b3:24:10:27:b6:
         1c:35:42:1f:f1:2e:d5:fe:f5:7f:47:7d:97:6f:97:7c:59:b3:
         ff:79:53:7b:75:32:e8:27:0d:8b:b3:97:ba:df:54:3b:61:d7:
         92:61:25:2b
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUIvIi6KuD+F3vMt6BjYBv7JI+dwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCN0U5QUQ5ODJFQjcyOTEzODRFNTA1QjU5Q0UzQkJF
RURBM0EyMzAeFw0yMzEwMTEwNDM0MDVaFw0yNDEwMDkwNDM5MDVaMDMxMTAvBgNV
BAMTKDhGREExQjZFNzJDMkYzMjZGMzNFODBDNUI0NDA3Mjc0Mzc1QTZCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1IaykIzTWEOGivq8KBZhXpVX
AcHwdqOKUfm+gqSMNP14ilbDfhsU+aXuzs8U8SoEGpGQbuEg+DEoB2GQSyPC8DZ2
Skpt+pTcRTbnyRFbB9t67HjxogqLzvWH6l0zWWhfpF2SE6gnbcvQpsNPbq+QvDxP
6sDUUKtN1VKzY6bQis6KnwFhOUkmRrQ0h6zC6RYrWcYJrYIpuxWCH1V6OTBIsmEL
eEzznvNDKahG96nxuGgow/OeOFkhJM4Mkp/y6D5fr1rfRLmNhBvh/3KMhYdxUAPh
ACqbQCRLELb3qGTm/fi+lsjtL9rI6plTXsrob3XQQGlNgJsSuoSEAGqL4cjTAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUj9obbnLC8ybzPoDFtEBydDdaa5kwHwYDVR0j
BBgwFoAUfLfprZgutykThOUFtZzju+7aOiMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMC83Q0I3RTlBRDk4MkVCNzI5MTM4NEU1MDVCNTlDRTNCQkVFREEzQTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDQjdFOUFEOTgyRUI3Mjkx
Mzg0RTUwNUI1OUNFM0JCRUVEQTNBMjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzAv
MzIzODMwMzQzYTM3MzEzMTMwM2EzOTYxNjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEcRCa/zANBgkqhkiG9w0BAQsF
AAOCAQEA0v5fQiESk1q+ccW1c2e720IoYYEoH/PS++ihO2O48csD0DewTDSO5X/k
N9JYE+xw3gaGnRLcTXMgzDkSLC65QRJo225ApR9/SF4leUavKEEvdB1QkekLtvXa
iOuKggFLibAFXdwRSv1jsx1LVGIFcyW+cJcRqANkxzZTM14e6B4M6qtJI0DLI8bi
fYSlUMKPxT63Xq1ub4VgUqrfokK/pF4hVJlUaID+Mf+IxTsgtp6g8M3JNFMg8aVs
sKYPUKvw5EhZjggE/HaUu05GMO8jQvOtPrMkECe2HDVCH/Eu1f71f0d9l2+XfFmz
/3lTe3Uy6CcNi7OXut9UO2HXkmElKw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:59 2025 by rpki-client