Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3336203d3e203238323133.roa
File:                     323830343a326537383a3a2f33322d3336203d3e203238323133.roa (raw, json)
Hash identifier:          lFO2HK3wB5vCkHCXgI9wPcwGfzIvZ0OJsnWfE9NLOkQ=
Subject key identifier:   BB:50:0E:54:11:2C:88:2C:EC:C0:DE:A6:A7:79:78:C5:D6:A7:DA:88
Certificate issuer:       /CN=62F4F05B7C2A87DC77F27F9FB9A29604D9FA0F1D
Certificate serial:       451D2D7BABD6715C717D07CCD33467FCA22B069A
Authority key identifier: 62:F4:F0:5B:7C:2A:87:DC:77:F2:7F:9F:B9:A2:96:04:D9:FA:0F:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62F4F05B7C2A87DC77F27F9FB9A29604D9FA0F1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3336203d3e203238323133.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28213
IP address blocks:        2804:2e78::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1d:2d:7b:ab:d6:71:5c:71:7d:07:cc:d3:34:67:fc:a2:2b:06:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F4F05B7C2A87DC77F27F9FB9A29604D9FA0F1D
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:55:6c:3a:97:3d:d1:36:40:ac:57:5c:55:e3:
                    56:1f:f7:69:56:8f:85:c8:9d:be:c0:eb:1b:8a:90:
                    ea:f6:a9:ca:a8:bf:c7:27:99:e0:f9:c1:bb:df:61:
                    85:10:ca:bb:16:b4:4f:10:65:2f:88:22:67:da:c4:
                    d0:7b:c5:5a:87:47:01:31:9c:b9:8d:76:4a:4a:83:
                    a4:dc:0b:26:2e:59:ac:21:c6:a1:e9:a6:2f:83:25:
                    6b:cb:1f:21:80:bf:3f:c9:56:b6:cd:82:95:9a:70:
                    3f:69:ce:6b:8b:b0:8c:8b:16:28:b1:88:d2:97:3a:
                    08:2c:9b:4d:d3:b4:e1:d6:19:4f:41:aa:47:e4:1a:
                    21:aa:2c:f4:d9:a0:8e:24:b9:0b:ec:41:06:0a:8c:
                    fb:43:b5:8e:c5:9a:fe:8d:7a:fc:fb:c0:3e:55:04:
                    ad:93:38:73:27:64:25:47:86:5f:af:a3:0b:41:33:
                    6e:20:9f:e8:bd:37:2a:f6:2b:23:60:bc:f1:bb:aa:
                    72:9c:9b:8d:c8:17:0e:61:29:4f:65:1b:76:06:5d:
                    f1:78:a4:3e:85:6a:fa:bb:45:c0:4f:44:2e:65:da:
                    a9:cb:fb:c6:84:50:b5:eb:dc:c5:3f:18:4d:dd:2f:
                    02:48:8e:1f:38:89:04:20:a2:47:88:a1:5c:ec:25:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:50:0E:54:11:2C:88:2C:EC:C0:DE:A6:A7:79:78:C5:D6:A7:DA:88
            X509v3 Authority Key Identifier:
                keyid:62:F4:F0:5B:7C:2A:87:DC:77:F2:7F:9F:B9:A2:96:04:D9:FA:0F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/62F4F05B7C2A87DC77F27F9FB9A29604D9FA0F1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62F4F05B7C2A87DC77F27F9FB9A29604D9FA0F1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3336203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:fc:22:9e:0c:91:29:e1:2d:94:2a:89:a3:86:2e:81:c9:
         12:da:f1:46:80:82:df:fd:46:0e:69:f5:7d:d5:c3:b9:f0:b4:
         24:d3:07:2b:8f:e6:9c:35:84:ab:70:14:e5:40:07:46:70:d9:
         4f:5b:12:6e:99:f6:e4:ff:15:63:cc:14:ee:9f:9b:54:b1:fa:
         fe:42:d6:4e:bb:66:a8:2a:08:cf:cf:47:05:23:2b:61:e8:4e:
         9e:24:ff:bb:27:e4:9d:94:9c:70:df:81:3b:ff:49:8d:89:c6:
         fd:07:84:b2:57:38:1f:65:f2:42:05:b9:65:d2:2e:92:c7:9e:
         f9:72:7f:84:99:92:b9:b9:8f:d2:da:0b:b5:01:41:ea:e8:be:
         88:c3:20:38:ad:94:f7:b4:69:c4:57:75:d4:60:ad:0c:e7:32:
         6b:9c:8d:4e:e1:a0:5f:d2:11:5b:a6:48:c4:72:6e:66:e3:4f:
         b6:d6:c1:21:e6:3c:52:0b:cf:f7:89:81:61:77:61:db:05:f3:
         03:c7:fe:84:5c:a8:5c:53:e9:ca:e4:a7:5b:41:b3:e0:1b:ee:
         86:94:eb:37:6c:e5:12:d7:60:d3:7d:61:5b:97:01:c9:a2:c0:
         88:fd:2c:45:92:92:7d:ab:0d:31:5d:39:3e:ed:ec:ca:16:10:
         ff:a6:dc:5c
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIURR0te6vWcVxxfQfM0zRn/KIrBpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJGNEYwNUI3QzJBODdEQzc3RjI3RjlGQjlBMjk2MDRE
OUZBMEYxRDAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTI1NTZDM0E5NzNERDEzNjQw
QUM1NzVDNTVFMzU2MUZGNzY5NTY4Rjg1Qzg5REJFQzBFQjFCOEE5MEVBRjZBOUNB
QThCRkM3Mjc5OUUwRjlDMUJCREY2MTg1MTBDQUJCMTZCNDRGMTA2NTJGODgyMjY3
REFDNEQwN0JDNTVBODc0NzAxMzE5Q0I5OEQ3NjRBNEE4M0E0REMwQjI2MkU1OUFD
MjFDNkExRTlBNjJGODMyNTZCQ0IxRjIxODBCRjNGQzk1NkI2Q0Q4Mjk1OUE3MDNG
NjlDRTZCOEJCMDhDOEIxNjI4QjE4OEQyOTczQTA4MkM5QjRERDNCNEUxRDYxOTRG
NDFBQTQ3RTQxQTIxQUEyQ0Y0RDlBMDhFMjRCOTBCRUM0MTA2MEE4Q0ZCNDNCNThF
QzU5QUZFOEQ3QUZDRkJDMDNFNTUwNEFEOTMzODczMjc2NDI1NDc4NjVGQUZBMzBC
NDEzMzZFMjA5RkU4QkQzNzJBRjYyQjIzNjBCQ0YxQkJBQTcyOUM5QjhEQzgxNzBF
NjEyOTRGNjUxQjc2MDY1REYxNzhBNDNFODU2QUZBQkI0NUMwNEY0NDJFNjVEQUE5
Q0JGQkM2ODQ1MEI1RUJEQ0M1M0YxODREREQyRjAyNDg4RTFGMzg4OTA0MjBBMjQ3
ODhBMTVDRUMyNUJDQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4lVsOpc90TZArFdcVeNWH/dpVo+FyJ2+wOsbipDq9qnKqL/HJ5ng
+cG732GFEMq7FrRPEGUviCJn2sTQe8Vah0cBMZy5jXZKSoOk3AsmLlmsIcah6aYv
gyVryx8hgL8/yVa2zYKVmnA/ac5ri7CMixYosYjSlzoILJtN07Th1hlPQapH5Boh
qiz02aCOJLkL7EEGCoz7Q7WOxZr+jXr8+8A+VQStkzhzJ2QlR4Zfr6MLQTNuIJ/o
vTcq9isjYLzxu6pynJuNyBcOYSlPZRt2Bl3xeKQ+hWr6u0XAT0QuZdqpy/vGhFC1
69zFPxhN3S8CSI4fOIkEIKJHiKFc7CW8uwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FLtQDlQRLIgs7MDepqd5eMXWp9qIMB8GA1UdIwQYMBaAFGL08Ft8Kofcd/J/n7mi
lgTZ+g8dMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NMMTU4elVuR0NCQ05p
dG9RWWFaR2pEcncyanFuc3FEN055U3g5VGdlTFJ1LzEvNjJGNEYwNUI3QzJBODdE
Qzc3RjI3RjlGQjlBMjk2MDREOUZBMEYxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MkY0RjA1QjdDMkE4N0RDNzdGMjdGOUZCOUEyOTYwNEQ5RkEw
RjFELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DTDE1OHpVbkdDQkNOaXRvUVlh
WkdqRHJ3MmpxbnNxRDdOeVN4OVRnZUxSdS8xLzMyMzgzMDM0M2EzMjY1MzczODNh
M2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzgzMjMxMzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBC54
MA0GCSqGSIb3DQEBCwUAA4IBAQAp5PwingyRKeEtlCqJo4YugckS2vFGgILf/UYO
afV91cO58LQk0wcrj+acNYSrcBTlQAdGcNlPWxJumfbk/xVjzBTun5tUsfr+QtZO
u2aoKgjPz0cFIyth6E6eJP+7J+SdlJxw34E7/0mNicb9B4SyVzgfZfJCBbll0i6S
x575cn+EmZK5uY/S2gu1AUHq6L6IwyA4rZT3tGnEV3XUYK0M5zJrnI1O4aBf0hFb
pkjEcm5m40+21sEh5jxSC8/3iYFhd2HbBfMDx/6EXKhcU+nK5KdbQbPgG+6GlOs3
bOUS12DTfWFblwHJosCI/SxFkpJ9qw0xXTk+7ezKFhD/ptxc
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:34:06 2025 by rpki-client