Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
File:                     323830343a343663633a3a2f33322d3335203d3e20323637303132.roa (raw, json)
Hash identifier:          S7up3wpqIXAxfZb777AaXr+ugs7C3DwwGT1RBi1dvNs=
Subject key identifier:   EE:94:85:C2:8E:C1:19:A0:ED:B6:0B:9D:DE:EB:A3:C5:D9:6A:81:A0
Certificate issuer:       /CN=524903D80649F057B87931C5F6D861489C4593B7
Certificate serial:       6DF5216A8A048D8465C384C633C42DC9E0FE25F8
Authority key identifier: 52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
Signing time:             Wed 19 Jan 2022 18:30:12 +0000
ROA not before:           Wed 19 Jan 2022 18:25:12 +0000
ROA not after:            Wed 18 Jan 2023 18:30:12 +0000
asID:                     267012
IP address blocks:        2804:46cc::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f5:21:6a:8a:04:8d:84:65:c3:84:c6:33:c4:2d:c9:e0:fe:25:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524903D80649F057B87931C5F6D861489C4593B7
        Validity
            Not Before: Jan 19 18:25:12 2022 GMT
            Not After : Jan 18 18:30:12 2023 GMT
        Subject: CN=EE9485C28EC119A0EDB60B9DDEEBA3C5D96A81A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:6b:38:b5:36:53:86:88:ca:19:3c:8b:6d:
                    5f:0a:59:e3:bb:22:cf:a4:13:57:bb:db:f9:21:70:
                    34:07:5f:4e:99:eb:db:ad:f7:4b:33:2d:77:84:f5:
                    c3:7d:e5:a3:8c:08:48:17:58:0d:21:32:c9:31:9b:
                    1c:7a:1f:60:e1:13:ba:fd:f5:22:b6:c9:7c:84:20:
                    2c:db:e0:3e:43:6d:05:56:f0:44:b7:6a:59:74:b7:
                    c6:82:b3:7b:f1:1e:3b:ed:da:e5:05:90:a6:a8:04:
                    db:08:1d:69:72:27:bf:96:79:15:a7:ce:b8:10:59:
                    a2:4f:94:04:cb:00:74:c6:8c:fc:31:7b:d1:82:1a:
                    e4:de:31:08:88:57:10:b3:e2:ac:68:92:da:03:75:
                    e3:50:74:da:07:2f:3f:63:bc:58:b6:0b:15:82:ff:
                    0d:bc:6e:05:4b:9b:6f:35:06:42:75:d3:89:1f:8e:
                    31:7b:78:ed:97:40:2d:4b:d2:74:ca:0a:cb:e8:b5:
                    4f:a2:88:c1:ac:42:d3:73:03:df:31:d5:91:10:1f:
                    69:da:88:c7:39:68:73:aa:36:e0:9d:a7:d7:17:b6:
                    51:b9:7a:32:ba:77:a3:f7:1b:0d:fb:a0:d5:70:31:
                    d8:54:a3:3a:2a:fc:74:de:78:fe:8f:69:aa:7f:f0:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:94:85:C2:8E:C1:19:A0:ED:B6:0B:9D:DE:EB:A3:C5:D9:6A:81:A0
            X509v3 Authority Key Identifier:
                keyid:52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/524903D80649F057B87931C5F6D861489C4593B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:0d:fe:55:68:ec:9d:c2:15:f1:31:1b:b0:d3:36:c5:95:65:
         32:91:45:5b:fc:df:1c:a3:f4:4e:de:af:21:6a:f6:33:09:b8:
         d9:c2:f9:97:63:a6:f5:ef:85:c5:45:86:58:71:30:40:96:09:
         19:b5:3e:2a:c3:13:d9:29:8b:14:5c:bb:97:8d:08:f6:9f:b9:
         3b:a4:e0:6d:c2:07:60:d1:c4:99:ed:32:8a:85:29:03:b7:52:
         e5:20:d1:1f:b4:dc:b5:df:5e:43:82:9d:c3:37:89:b8:fb:61:
         87:37:9e:90:86:cf:b0:19:1b:e5:5b:27:88:02:00:d6:ee:48:
         f5:65:4b:73:12:58:7b:ea:67:84:73:d1:7b:4b:3c:cd:df:c9:
         50:5c:6f:19:56:70:f4:cb:22:39:cf:30:9d:ea:34:38:a3:68:
         14:df:bf:0e:3a:8a:60:a8:06:99:a4:10:63:03:3b:e3:2d:b7:
         7b:95:1f:d0:61:aa:5d:4e:14:92:f2:56:1c:5d:fc:a2:8f:ef:
         89:ce:74:f2:5e:fb:14:b6:f8:cc:0d:27:c9:47:50:13:01:ff:
         f1:3c:7f:d3:b9:c3:30:36:45:ac:62:55:6b:ed:72:94:1e:67:
         ef:7b:0f:7e:d3:b7:4c:c9:5c:a2:3b:24:fc:da:bf:ef:04:98:
         b5:6f:db:98
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbfUhaooEjYRlw4TGM8QtyeD+JfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI0OTAzRDgwNjQ5RjA1N0I4NzkzMUM1RjZEODYxNDg5
QzQ1OTNCNzAeFw0yMjAxMTkxODI1MTJaFw0yMzAxMTgxODMwMTJaMDMxMTAvBgNV
BAMTKEVFOTQ4NUMyOEVDMTE5QTBFREI2MEI5RERFRUJBM0M1RDk2QTgxQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCGs4tTZThojKGTyLbV8KWeO7
Is+kE1e72/khcDQHX06Z69ut90szLXeE9cN95aOMCEgXWA0hMskxmxx6H2DhE7r9
9SK2yXyEICzb4D5DbQVW8ES3all0t8aCs3vxHjvt2uUFkKaoBNsIHWlyJ7+WeRWn
zrgQWaJPlATLAHTGjPwxe9GCGuTeMQiIVxCz4qxoktoDdeNQdNoHLz9jvFi2CxWC
/w28bgVLm281BkJ104kfjjF7eO2XQC1L0nTKCsvotU+iiMGsQtNzA98x1ZEQH2na
iMc5aHOqNuCdp9cXtlG5ejK6d6P3Gw37oNVwMdhUozoq/HTeeP6Paap/8MtNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7pSFwo7BGaDttgud3uujxdlqgaAwHwYDVR0j
BBgwFoAUUkkD2AZJ8Fe4eTHF9thhSJxFk7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjl6aW9uVERNSlJkTmdCUG9CUUFzenhwQVlCUlBLU2dOdUJoZ1BwVWF0
aXcvMC81MjQ5MDNEODA2NDlGMDU3Qjg3OTMxQzVGNkQ4NjE0ODlDNDU5M0I3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyNDkwM0Q4MDY0OUYwNTdC
ODc5MzFDNUY2RDg2MTQ4OUM0NTkzQjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I5emlvblRETUpSZE5nQlBvQlFBc3p4cEFZQlJQS1NnTnVCaGdQcFVhdGl3LzAv
MzIzODMwMzQzYTM0MzY2MzYzM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM3
MzAzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARGzDANBgkqhkiG9w0BAQsFAAOCAQEApg3+VWjs
ncIV8TEbsNM2xZVlMpFFW/zfHKP0Tt6vIWr2Mwm42cL5l2Om9e+FxUWGWHEwQJYJ
GbU+KsMT2SmLFFy7l40I9p+5O6TgbcIHYNHEme0yioUpA7dS5SDRH7Tctd9eQ4Kd
wzeJuPthhzeekIbPsBkb5VsniAIA1u5I9WVLcxJYe+pnhHPRe0s8zd/JUFxvGVZw
9MsiOc8wneo0OKNoFN+/DjqKYKgGmaQQYwM74y23e5Uf0GGqXU4UkvJWHF38oo/v
ic508l77FLb4zA0nyUdQEwH/8Tx/07nDMDZFrGJVa+1ylB5n73sPftO3TMlcojsk
/Nq/7wSYtW/bmA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:59:59 2025 by rpki-client