Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/323830343a3533343a3a2f33322d313238203d3e203232313737.roa
File:                     323830343a3533343a3a2f33322d313238203d3e203232313737.roa (raw, json)
Hash identifier:          2Gb6ubca+qijHtdCBwPA+S6ZttoP+vE101ZYP25WTOk=
Subject key identifier:   22:2F:35:50:A8:AA:36:AF:04:DC:61:88:AC:C6:FB:EB:DB:68:1E:98
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       5F3EED3855BFEF5923FFD5DC1C528A24DE86D246
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/323830343a3533343a3a2f33322d313238203d3e203232313737.roa
Signing time:             Mon 26 Feb 2024 00:30:29 +0000
ROA not before:           Mon 26 Feb 2024 00:25:29 +0000
ROA not after:            Mon 24 Feb 2025 00:30:29 +0000
asID:                     22177
IP address blocks:        2804:534::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3e:ed:38:55:bf:ef:59:23:ff:d5:dc:1c:52:8a:24:de:86:d2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Feb 26 00:25:29 2024 GMT
            Not After : Feb 24 00:30:29 2025 GMT
        Subject: CN=222F3550A8AA36AF04DC6188ACC6FBEBDB681E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:aa:e9:59:fe:a0:c8:42:29:73:8e:99:e0:
                    bb:9c:37:16:16:c7:ef:8a:5a:c4:0b:8c:2c:1f:8b:
                    41:86:72:c9:72:88:4b:8b:9e:38:75:21:80:93:33:
                    27:11:dc:c5:7f:47:1b:3e:5f:01:54:2e:39:dc:70:
                    06:95:41:7e:0a:2b:21:10:aa:2a:89:56:50:1e:ce:
                    0b:96:1e:2a:dc:3b:6e:5e:b3:ea:df:34:bf:b0:7d:
                    c0:96:44:f2:ec:e9:70:c5:c7:0e:1c:73:a0:84:bf:
                    5e:2d:36:00:be:38:ba:c2:57:06:47:98:99:db:1f:
                    0b:3c:62:c9:8d:56:71:80:5a:2f:0a:8f:71:7e:af:
                    cd:03:da:92:6b:42:87:b6:4f:8f:b2:09:d6:9f:b6:
                    45:a9:10:f1:49:27:01:4c:41:29:9e:3e:37:29:85:
                    ac:1c:1b:22:f9:a3:84:c8:29:6b:21:65:cc:9e:36:
                    a2:e1:f3:b4:5f:93:4d:47:2b:b6:04:22:fe:6a:c1:
                    f7:74:a1:2e:ab:f6:3f:cf:d2:3a:ef:3f:01:74:21:
                    1a:26:45:1d:a3:45:18:c7:81:04:de:22:86:c6:69:
                    ca:04:ec:ad:fa:85:f0:4c:b1:45:c8:c4:f5:f2:23:
                    5e:08:97:f4:49:72:37:ba:56:6f:9f:8f:a0:e6:07:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2F:35:50:A8:AA:36:AF:04:DC:61:88:AC:C6:FB:EB:DB:68:1E:98
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/323830343a3533343a3a2f33322d313238203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:534::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:74:c6:c3:a1:75:9f:7e:cf:22:dc:37:77:69:19:f3:29:3e:
         9c:ab:19:92:17:1e:04:dc:b6:8f:9e:5c:6c:2e:f4:8c:f4:e1:
         28:03:45:e5:61:c6:9b:6b:7d:30:68:44:d5:ae:a6:3e:00:ca:
         9f:a9:1d:65:c8:7a:13:5a:cb:51:78:97:34:cc:a7:0b:e4:31:
         4f:0f:e1:a6:96:74:54:98:b9:1c:0a:c9:1d:33:d4:af:96:4a:
         e0:aa:e0:a8:d4:0e:d0:e2:94:bc:40:85:ea:ad:5c:c9:3a:13:
         e0:81:9c:54:91:3a:fb:4d:54:e4:2e:62:8a:ba:04:42:64:8e:
         30:8b:9b:dd:c7:66:9e:0a:ec:ba:22:91:79:28:e1:8e:87:16:
         cf:ef:59:20:1e:49:2b:c8:3f:95:63:4d:4d:20:55:c8:35:c7:
         22:c7:bb:d9:15:d5:df:d4:ab:76:57:f6:8b:44:84:66:2c:d3:
         40:b8:d0:5a:36:23:d6:b5:5d:ed:90:3d:6a:c0:03:50:a4:f6:
         d8:1f:f0:47:72:0b:4d:71:8e:87:8c:28:9d:7b:d0:90:75:49:
         ff:4a:ab:d0:8e:d0:2c:33:a7:62:b1:7b:b1:0f:ca:02:0c:9b:
         29:db:d7:f0:3c:0b:c2:80:cc:91:f9:92:96:ce:1d:bf:7d:db:
         2b:9b:2f:d4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXz7tOFW/71kj/9XcHFKKJN6G0kYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU2OEM3OTNFQ0Y0NDIyOUVBRUFEMjJBNEVDMjVGODM4
RTFCRkYxODAeFw0yNDAyMjYwMDI1MjlaFw0yNTAyMjQwMDMwMjlaMDMxMTAvBgNV
BAMTKDIyMkYzNTUwQThBQTM2QUYwNERDNjE4OEFDQzZGQkVCREI2ODFFOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwqrpWf6gyEIpc46Z4LucNxYW
x++KWsQLjCwfi0GGcslyiEuLnjh1IYCTMycR3MV/Rxs+XwFULjnccAaVQX4KKyEQ
qiqJVlAezguWHircO25es+rfNL+wfcCWRPLs6XDFxw4cc6CEv14tNgC+OLrCVwZH
mJnbHws8YsmNVnGAWi8Kj3F+r80D2pJrQoe2T4+yCdaftkWpEPFJJwFMQSmePjcp
hawcGyL5o4TIKWshZcyeNqLh87Rfk01HK7YEIv5qwfd0oS6r9j/P0jrvPwF0IRom
RR2jRRjHgQTeIobGacoE7K36hfBMsUXIxPXyI14Il/RJcje6Vm+fj6DmB79JAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUIi81UKiqNq8E3GGIrMb769toHpgwHwYDVR0j
BBgwFoAUlWjHk+z0Qinq6tIqTsJfg44b/xgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMC85NTY4Qzc5M0VDRjQ0MjI5RUFFQUQyMkE0RUMyNUY4MzhFMUJGRjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1NjhDNzkzRUNGNDQyMjlF
QUVBRDIyQTRFQzI1RjgzOEUxQkZGMTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzAv
MzIzODMwMzQzYTM1MzMzNDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzMjMx
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBTQwDQYJKoZIhvcNAQELBQADggEBAFh0xsOhdZ9+
zyLcN3dpGfMpPpyrGZIXHgTcto+eXGwu9Iz04SgDReVhxptrfTBoRNWupj4Ayp+p
HWXIehNay1F4lzTMpwvkMU8P4aaWdFSYuRwKyR0z1K+WSuCq4KjUDtDilLxAheqt
XMk6E+CBnFSROvtNVOQuYoq6BEJkjjCLm93HZp4K7LoikXko4Y6HFs/vWSAeSSvI
P5VjTU0gVcg1xyLHu9kV1d/Uq3ZX9otEhGYs00C40Fo2I9a1Xe2QPWrAA1Ck9tgf
8EdyC01xjoeMKJ170JB1Sf9Kq9CO0Cwzp2Kxe7EPygIMmynb1/A8C8KAzJH5kpbO
Hb992yubL9Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:09 2025 by rpki-client