Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3430203d3e203238313938.roa
File:                     323830343a6339303a3a2f33322d3430203d3e203238313938.roa (raw, json)
Hash identifier:          FJyJ8dcaeOFIu/vRcC41xr2250kbEVPvswbTQ2oNMfE=
Subject key identifier:   F4:80:85:B5:72:4E:28:DB:ED:5B:C3:6C:48:82:0B:4E:0F:4C:1A:97
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       27C23CB69CDD30888CD9723D8D6A6C7144E2A5EC
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3430203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:28:31 +0000
ROA not before:           Mon 21 Aug 2023 20:23:31 +0000
ROA not after:            Mon 19 Aug 2024 20:28:31 +0000
asID:                     28198
IP address blocks:        2804:c90::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c2:3c:b6:9c:dd:30:88:8c:d9:72:3d:8d:6a:6c:71:44:e2:a5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:23:31 2023 GMT
            Not After : Aug 19 20:28:31 2024 GMT
        Subject: CN=F48085B5724E28DBED5BC36C48820B4E0F4C1A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:35:97:ec:aa:ff:3a:23:93:98:61:9c:d7:
                    8b:07:7c:1c:db:c2:23:12:d5:ee:20:50:28:71:d3:
                    23:0d:b4:e6:b7:ad:f3:e8:39:cd:0f:22:d4:b2:f4:
                    0f:36:09:d4:ce:1a:d6:3b:fb:4d:af:6b:38:a6:c1:
                    01:6d:d4:63:44:40:1e:d3:9a:62:a0:57:9c:ac:92:
                    0f:8d:01:d0:33:40:76:4d:83:72:32:18:d6:29:c1:
                    06:ec:e4:1a:17:35:8a:a6:58:a8:0a:50:55:8c:92:
                    7b:aa:b8:72:65:f7:27:f3:bc:41:2b:c1:84:12:0c:
                    d7:d0:47:8d:3d:1b:7c:48:23:e5:a0:ea:11:77:d5:
                    23:04:4b:51:cc:9b:1f:dc:2c:8a:10:f3:e6:80:43:
                    fa:9b:10:6f:fc:2f:de:ce:65:cd:ef:54:02:38:a8:
                    84:10:f9:5a:21:35:22:36:a5:16:17:95:4b:e8:15:
                    9b:5c:bb:e8:38:06:77:92:f5:5d:30:5b:4e:6b:36:
                    f3:b3:93:26:a7:c1:46:e2:b9:67:22:32:6e:aa:97:
                    32:ce:ad:a8:4b:69:54:d8:4e:be:41:63:07:64:8c:
                    6f:23:d9:ca:2d:44:24:6b:ec:8d:08:5e:04:ce:e0:
                    c1:ec:61:be:31:99:39:27:6f:a5:eb:7c:be:ec:89:
                    09:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:85:B5:72:4E:28:DB:ED:5B:C3:6C:48:82:0B:4E:0F:4C:1A:97
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3430203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:cf:7e:03:87:06:6d:6a:df:9d:f0:71:95:db:96:1f:d8:6a:
         14:f2:2c:7d:5b:f1:ec:61:40:c6:91:05:37:c0:8c:06:79:36:
         d3:ca:5d:d8:0a:85:ca:46:d1:c6:2a:66:f3:9d:a0:bc:28:61:
         01:18:79:88:e8:7a:fa:e2:61:e0:49:05:5f:a6:cd:5a:ba:6d:
         63:31:a4:f2:fd:f1:6a:17:22:cc:0e:80:30:10:c6:4d:d6:b6:
         d6:47:72:96:59:4c:f1:dd:ac:22:b2:f6:4e:57:2d:5e:c5:f2:
         18:46:56:ff:37:e9:12:4b:ed:53:6b:f3:8a:59:09:7e:71:0c:
         e6:81:67:6e:54:b1:eb:4f:40:9d:d1:51:5c:d4:30:0f:97:fe:
         4c:6f:78:c1:de:7b:b8:0e:ba:45:0e:2a:fe:2d:5e:b3:c1:d7:
         b8:f0:57:fd:03:35:2d:23:e8:d4:c0:d4:07:da:0f:6a:ce:14:
         7d:89:19:88:a5:9a:c7:f8:75:ad:be:30:cb:ad:e7:72:b8:d6:
         ac:3e:48:d6:5e:de:1d:ee:1c:09:7b:89:db:c3:fd:dd:70:f2:
         67:e0:bd:5f:ac:cc:d4:60:8e:54:67:4c:45:10:2f:54:c7:71:
         e8:1e:48:9d:ef:26:ad:70:f9:33:58:a9:7a:ba:fd:f3:e0:82:
         91:b0:76:91
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJ8I8tpzdMIiM2XI9jWpscUTipewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNDMTg5M0U1NUY2NDUxNERCRkMzQjZCODAxQzE2RDAz
NjA5MTNGRTAeFw0yMzA4MjEyMDIzMzFaFw0yNDA4MTkyMDI4MzFaMDMxMTAvBgNV
BAMTKEY0ODA4NUI1NzI0RTI4REJFRDVCQzM2QzQ4ODIwQjRFMEY0QzFBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHDWX7Kr/OiOTmGGc14sHfBzb
wiMS1e4gUChx0yMNtOa3rfPoOc0PItSy9A82CdTOGtY7+02vazimwQFt1GNEQB7T
mmKgV5yskg+NAdAzQHZNg3IyGNYpwQbs5BoXNYqmWKgKUFWMknuquHJl9yfzvEEr
wYQSDNfQR409G3xII+Wg6hF31SMES1HMmx/cLIoQ8+aAQ/qbEG/8L97OZc3vVAI4
qIQQ+VohNSI2pRYXlUvoFZtcu+g4BneS9V0wW05rNvOzkyanwUbiuWciMm6qlzLO
rahLaVTYTr5BYwdkjG8j2cotRCRr7I0IXgTO4MHsYb4xmTknb6XrfL7siQlrAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU9ICFtXJOKNvtW8NsSIILTg9MGpcwHwYDVR0j
BBgwFoAUc8GJPlX2RRTb/DtrgBwW0DYJE/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC83M0MxODkzRTU1RjY0NTE0REJGQzNCNkI4MDFDMTZEMDM2MDkxM0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczQzE4OTNFNTVGNjQ1MTRE
QkZDM0I2QjgwMUMxNkQwMzYwOTEzRkUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzIzODMwMzQzYTYzMzkzMDNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzgzMTM5
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAyQMA0GCSqGSIb3DQEBCwUAA4IBAQADz34DhwZtat+d
8HGV25Yf2GoU8ix9W/HsYUDGkQU3wIwGeTbTyl3YCoXKRtHGKmbznaC8KGEBGHmI
6Hr64mHgSQVfps1aum1jMaTy/fFqFyLMDoAwEMZN1rbWR3KWWUzx3awisvZOVy1e
xfIYRlb/N+kSS+1Ta/OKWQl+cQzmgWduVLHrT0Cd0VFc1DAPl/5Mb3jB3nu4DrpF
Dir+LV6zwde48Ff9AzUtI+jUwNQH2g9qzhR9iRmIpZrH+HWtvjDLredyuNasPkjW
Xt4d7hwJe4nbw/3dcPJn4L1frMzUYI5UZ0xFEC9Ux3HoHkid7yatcPkzWKl6uv3z
4IKRsHaR
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:04 2025 by rpki-client