Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a3a2f33322d3334203d3e20323636323332.roa
File:                     323830343a336363303a3a2f33322d3334203d3e20323636323332.roa (raw, json)
Hash identifier:          8WjrZpzgiQ0dTt7T4vTu4BYbXTWUzvrPkAPk+OYMo00=
Subject key identifier:   02:BD:44:F5:D5:D5:52:20:5F:69:4E:08:3E:6E:27:0E:93:6D:E8:51
Certificate issuer:       /CN=DEC7D95EABAC6E27B59D47C1F7198CE2294C1289
Certificate serial:       59D560600548BB340CBC1F958599667FA0BF5CB9
Authority key identifier: DE:C7:D9:5E:AB:AC:6E:27:B5:9D:47:C1:F7:19:8C:E2:29:4C:12:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a3a2f33322d3334203d3e20323636323332.roa
Signing time:             Fri 10 Jun 2022 18:12:24 +0000
ROA not before:           Fri 10 Jun 2022 18:07:24 +0000
ROA not after:            Fri 09 Jun 2023 18:12:24 +0000
asID:                     266232
IP address blocks:        2804:3cc0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d5:60:60:05:48:bb:34:0c:bc:1f:95:85:99:66:7f:a0:bf:5c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEC7D95EABAC6E27B59D47C1F7198CE2294C1289
        Validity
            Not Before: Jun 10 18:07:24 2022 GMT
            Not After : Jun  9 18:12:24 2023 GMT
        Subject: CN=02BD44F5D5D552205F694E083E6E270E936DE851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:d3:56:fc:45:1d:97:c3:1a:6b:7c:04:5b:
                    c7:63:00:9b:09:9c:c7:a6:d2:a9:37:4a:78:84:27:
                    7e:d3:95:86:a5:72:2d:dc:c6:92:b0:2a:80:f1:c9:
                    33:d8:4f:60:1b:f7:c5:7b:7b:9a:e5:a8:91:ff:7c:
                    fd:6b:19:24:3e:82:35:d3:53:8e:56:5f:c0:3a:36:
                    4c:0c:b7:9f:05:0e:45:5a:38:6f:73:88:a5:bf:31:
                    a6:2f:a4:fe:11:a1:41:bd:7b:1e:27:78:5b:96:05:
                    1a:ae:bb:29:35:82:74:cd:e1:30:2f:8a:c5:63:6e:
                    88:42:42:67:0b:8a:42:80:75:de:00:33:82:4d:b7:
                    4a:80:68:21:21:88:a5:3f:1d:c9:c3:e3:1a:b9:9c:
                    22:fb:ec:55:5d:19:0f:83:d8:5b:f2:51:e4:74:55:
                    8a:53:0d:02:29:5b:f4:3e:df:16:5b:cc:68:36:8a:
                    e4:ef:d6:86:45:3a:fd:73:13:46:47:40:68:ad:2d:
                    6c:1b:b6:a8:f2:2b:b8:a8:09:e8:54:50:25:8d:75:
                    62:ff:4b:a0:2e:39:dc:2e:4f:09:38:f2:e2:b0:9c:
                    12:61:50:64:0a:e8:62:f8:c6:1d:cb:c8:1f:a8:a3:
                    a3:3e:2e:bf:72:84:2f:e6:52:a4:97:e3:a6:58:8a:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BD:44:F5:D5:D5:52:20:5F:69:4E:08:3E:6E:27:0E:93:6D:E8:51
            X509v3 Authority Key Identifier:
                keyid:DE:C7:D9:5E:AB:AC:6E:27:B5:9D:47:C1:F7:19:8C:E2:29:4C:12:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a3a2f33322d3334203d3e20323636323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:65:b9:7e:e5:9a:fe:b3:38:e0:5f:ac:25:3d:94:52:d8:d2:
         41:dc:55:5c:14:a1:82:33:75:17:d9:04:8e:11:cf:7f:16:20:
         67:9a:58:4f:79:c9:6a:c1:b2:c2:00:87:0d:e6:96:d1:c5:0c:
         4b:a8:98:69:e9:d4:04:9b:83:01:59:40:4b:64:a2:84:ea:02:
         2a:36:b2:76:5f:b6:99:2b:f4:3d:29:04:34:b2:12:74:99:1a:
         de:e6:59:9f:be:6d:1b:f6:fb:a4:4e:ce:b5:79:df:37:10:72:
         52:1a:00:6a:64:38:82:3a:95:f1:6d:9e:ca:d3:66:e6:08:b8:
         3d:2e:da:d3:a3:6a:4d:66:be:f0:e2:22:8f:cc:66:11:65:ec:
         bf:d6:44:ec:1c:d4:13:ac:c6:49:b1:60:c3:ab:aa:d5:3a:23:
         d8:f9:45:55:e3:f6:f5:12:47:f9:ec:8f:83:36:98:d7:96:92:
         9b:a2:d6:0d:93:8c:79:e6:90:a9:b5:d3:3d:78:8f:c8:bf:34:
         42:22:30:4f:db:bb:6a:74:08:a7:46:f1:dd:2f:7c:54:f7:d4:
         0e:89:88:1b:81:76:7e:4a:07:c4:66:ca:35:86:62:0e:80:61:
         d7:52:41:d5:3d:20:05:f9:d8:50:a3:90:09:d6:32:12:d2:32:
         f9:cb:74:8d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWdVgYAVIuzQMvB+VhZlmf6C/XLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVDN0Q5NUVBQkFDNkUyN0I1OUQ0N0MxRjcxOThDRTIy
OTRDMTI4OTAeFw0yMjA2MTAxODA3MjRaFw0yMzA2MDkxODEyMjRaMDMxMTAvBgNV
BAMTKDAyQkQ0NEY1RDVENTUyMjA1RjY5NEUwODNFNkUyNzBFOTM2REU4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKdNW/EUdl8Maa3wEW8djAJsJ
nMem0qk3SniEJ37TlYalci3cxpKwKoDxyTPYT2Ab98V7e5rlqJH/fP1rGSQ+gjXT
U45WX8A6NkwMt58FDkVaOG9ziKW/MaYvpP4RoUG9ex4neFuWBRquuyk1gnTN4TAv
isVjbohCQmcLikKAdd4AM4JNt0qAaCEhiKU/HcnD4xq5nCL77FVdGQ+D2FvyUeR0
VYpTDQIpW/Q+3xZbzGg2iuTv1oZFOv1zE0ZHQGitLWwbtqjyK7ioCehUUCWNdWL/
S6AuOdwuTwk48uKwnBJhUGQK6GL4xh3LyB+oo6M+Lr9yhC/mUqSX46ZYisKNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAr1E9dXVUiBfaU4IPm4nDpNt6FEwHwYDVR0j
BBgwFoAU3sfZXqusbie1nUfB9xmM4ilMEokwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2V2VVFmMlFiMmVwVXh4aXBKQkJIMWZWRE1qUXRUR1V0aUJzb2VrUG9K
a1UvMC9ERUM3RDk1RUFCQUM2RTI3QjU5RDQ3QzFGNzE5OENFMjI5NEMxMjg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFQzdEOTVFQUJBQzZFMjdC
NTlENDdDMUY3MTk4Q0UyMjk0QzEyODkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NldlVRZjJRYjJlcFV4eGlwSkJCSDFmVkRNalF0VEdVdGlCc29la1BvSmtVLzAv
MzIzODMwMzQzYTMzNjM2MzMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM2
MzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ8wDANBgkqhkiG9w0BAQsFAAOCAQEAtGW5fuWa
/rM44F+sJT2UUtjSQdxVXBShgjN1F9kEjhHPfxYgZ5pYT3nJasGywgCHDeaW0cUM
S6iYaenUBJuDAVlAS2SihOoCKjaydl+2mSv0PSkENLISdJka3uZZn75tG/b7pE7O
tXnfNxByUhoAamQ4gjqV8W2eytNm5gi4PS7a06NqTWa+8OIij8xmEWXsv9ZE7BzU
E6zGSbFgw6uq1Toj2PlFVeP29RJH+eyPgzaY15aSm6LWDZOMeeaQqbXTPXiPyL80
QiIwT9u7anQIp0bx3S98VPfUDomIG4F2fkoHxGbKNYZiDoBh11JB1T0gBfnYUKOQ
CdYyEtIy+ct0jQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:21 2025 by rpki-client