Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393033383a3a2f34352d3435203d3e20323633313434.roa
File:                     323830343a313736383a393033383a3a2f34352d3435203d3e20323633313434.roa (raw, json)
Hash identifier:          TitpPURAPbljhWh1NfPQq0Kffj3ngqYaq12asn1RtLM=
Subject key identifier:   B1:28:91:46:57:1F:E5:5E:21:1C:65:21:32:6B:03:33:A3:B7:89:0A
Certificate issuer:       /CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
Certificate serial:       14710094111A3513528476995D021F8D23F505AC
Authority key identifier: 6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393033383a3a2f34352d3435203d3e20323633313434.roa
Signing time:             Sat 22 Jan 2022 23:31:37 +0000
ROA not before:           Sat 22 Jan 2022 23:26:37 +0000
ROA not after:            Sat 21 Jan 2023 23:31:37 +0000
asID:                     263144
IP address blocks:        2804:1768:9038::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:71:00:94:11:1a:35:13:52:84:76:99:5d:02:1f:8d:23:f5:05:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
        Validity
            Not Before: Jan 22 23:26:37 2022 GMT
            Not After : Jan 21 23:31:37 2023 GMT
        Subject: CN=B1289146571FE55E211C6521326B0333A3B7890A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4e:89:c7:c8:1d:f3:1f:99:38:4b:0a:10:96:
                    80:08:6b:54:9c:be:32:df:f3:48:13:ec:8d:a7:85:
                    7c:2f:95:21:55:c5:5e:7e:fa:c5:b4:a6:ef:e6:02:
                    ac:de:4b:3b:63:61:73:c4:95:61:70:38:5b:90:01:
                    d9:62:75:be:5a:36:a2:88:dd:31:3e:23:c2:8f:e0:
                    51:7e:00:63:65:b8:41:7a:c9:c5:fc:18:0c:e6:fb:
                    f8:0f:57:49:48:05:fa:ad:e4:c5:db:4b:26:47:80:
                    57:8f:df:98:e2:fb:18:c8:af:24:7a:41:2c:30:2d:
                    aa:9a:55:41:f6:76:a9:79:96:9c:9c:97:96:1b:bc:
                    e4:ab:88:8b:47:ee:42:14:b6:ef:37:48:ee:51:df:
                    5b:cf:45:d6:ed:fa:f6:b5:5b:d1:12:b5:2f:3b:6d:
                    7d:7a:1e:9c:82:ed:ef:41:ec:5d:f6:8d:5a:a1:c8:
                    a3:62:ce:ed:d9:73:5a:39:6f:ce:ff:12:2e:44:03:
                    e1:a2:d2:28:ff:49:3a:0f:ec:d1:22:89:e7:24:82:
                    77:c7:7a:d2:79:1d:92:d2:6e:50:db:bd:28:e3:0a:
                    57:b4:6c:ee:3c:f1:85:6a:90:4a:e3:91:2a:49:3e:
                    65:17:98:f7:7d:f0:6d:96:b2:c0:86:94:c4:49:c2:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:28:91:46:57:1F:E5:5E:21:1C:65:21:32:6B:03:33:A3:B7:89:0A
            X509v3 Authority Key Identifier:
                keyid:6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393033383a3a2f34352d3435203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:9038::/45

    Signature Algorithm: sha256WithRSAEncryption
         15:73:7f:52:ac:ff:92:f8:f0:1f:70:53:77:98:70:09:61:10:
         53:6f:40:c7:d7:3e:6e:15:f7:2d:f5:de:0b:95:e5:61:9b:6f:
         cc:54:d0:c2:40:57:d2:44:6e:95:d3:0c:e9:c9:6c:d4:31:65:
         8c:3a:46:40:61:3c:7a:b6:7f:b8:7d:11:3e:89:1a:31:8a:c9:
         e0:2c:40:eb:42:2f:5f:3b:e7:96:8f:1a:59:27:c1:bd:d9:74:
         95:6a:fd:7b:7c:78:97:a1:f4:c5:69:60:74:4b:13:b5:80:76:
         94:21:e6:31:73:b1:dd:0a:5f:5c:b7:62:df:25:d1:94:7d:06:
         2d:ff:dc:e5:17:f5:68:9f:73:3b:af:b1:8e:6c:26:10:ed:b8:
         d0:17:55:22:1c:89:53:8f:a3:7f:02:75:87:47:75:0a:c5:78:
         9c:f2:82:de:ce:48:37:40:cb:8f:15:ad:1b:31:a9:d5:ef:45:
         d1:d7:f7:11:7d:26:75:20:cd:fb:f7:0f:9d:13:e8:c9:c9:a4:
         b4:24:44:95:71:ca:b9:03:8e:8c:1a:83:31:02:66:73:50:c9:
         6c:55:9f:33:4b:62:d5:1d:0f:a8:47:64:b3:d9:8b:8e:c3:b0:
         e8:36:d5:54:27:e3:65:8d:c8:5d:0f:2e:37:c8:37:6e:f3:77:
         67:64:8f:9b
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUFHEAlBEaNRNShHaZXQIfjSP1BawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFERUNDRENFMTQ3MUFDRkNENEY0OEUwRDg5RTVDRDNG
QTc5OEQ3RTAeFw0yMjAxMjIyMzI2MzdaFw0yMzAxMjEyMzMxMzdaMDMxMTAvBgNV
BAMTKEIxMjg5MTQ2NTcxRkU1NUUyMTFDNjUyMTMyNkIwMzMzQTNCNzg5MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyTonHyB3zH5k4SwoQloAIa1Sc
vjLf80gT7I2nhXwvlSFVxV5++sW0pu/mAqzeSztjYXPElWFwOFuQAdlidb5aNqKI
3TE+I8KP4FF+AGNluEF6ycX8GAzm+/gPV0lIBfqt5MXbSyZHgFeP35ji+xjIryR6
QSwwLaqaVUH2dql5lpycl5YbvOSriItH7kIUtu83SO5R31vPRdbt+va1W9EStS87
bX16HpyC7e9B7F32jVqhyKNizu3Zc1o5b87/Ei5EA+Gi0ij/SToP7NEiieckgnfH
etJ5HZLSblDbvSjjCle0bO488YVqkErjkSpJPmUXmPd98G2WssCGlMRJwq8DAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUsSiRRlcf5V4hHGUhMmsDM6O3iQowHwYDVR0j
BBgwFoAUat7M3OFHGs/NT0jg2J5c0/p5jX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJSMVNCZ01YMUN2ekVYMWlpUXMzM3lTZG5kQjIzVUd1b29VRHJDNndO
UWIvMC82QURFQ0NEQ0UxNDcxQUNGQ0Q0RjQ4RTBEODlFNUNEM0ZBNzk4RDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBREVDQ0RDRTE0NzFBQ0ZD
RDRGNDhFMEQ4OUU1Q0QzRkE3OThEN0UuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyUjFTQmdNWDFDdnpFWDFpaVFzMzN5U2RuZEIyM1VHdW9vVURyQzZ3TlFiLzAv
MzIzODMwMzQzYTMxMzczNjM4M2EzOTMwMzMzODNhM2EyZjM0MzUyZDM0MzUyMDNk
M2UyMDMyMzYzMzMxMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygEF2iQODANBgkqhkiG9w0BAQsF
AAOCAQEAFXN/Uqz/kvjwH3BTd5hwCWEQU29Ax9c+bhX3LfXeC5XlYZtvzFTQwkBX
0kRuldMM6cls1DFljDpGQGE8erZ/uH0RPokaMYrJ4CxA60IvXzvnlo8aWSfBvdl0
lWr9e3x4l6H0xWlgdEsTtYB2lCHmMXOx3QpfXLdi3yXRlH0GLf/c5Rf1aJ9zO6+x
jmwmEO240BdVIhyJU4+jfwJ1h0d1CsV4nPKC3s5IN0DLjxWtGzGp1e9F0df3EX0m
dSDN+/cPnRPoycmktCRElXHKuQOOjBqDMQJmc1DJbFWfM0ti1R0PqEdks9mLjsOw
6DbVVCfjZY3IXQ8uN8g3bvN3Z2SPmw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:09 2025 by rpki-client