Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/323830343a336661343a3a2f33322d3332203d3e20323635393034.roa
File:                     323830343a336661343a3a2f33322d3332203d3e20323635393034.roa (raw, json)
Hash identifier:          shM+b+5cfEwQlDRMbDk31E3LcBlYLPwMWNeC0z8CZ4c=
Subject key identifier:   CB:B4:70:61:F1:CD:D5:47:A1:D3:03:1C:1C:C1:07:E9:E8:02:F1:EC
Certificate issuer:       /CN=C63806621ABBC4CDC2DA29D5A8E315B014535CDA
Certificate serial:       1CF2FA25ECD8058C981412276EFD621BADEF8960
Authority key identifier: C6:38:06:62:1A:BB:C4:CD:C2:DA:29:D5:A8:E3:15:B0:14:53:5C:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/323830343a336661343a3a2f33322d3332203d3e20323635393034.roa
Signing time:             Thu 20 Apr 2023 20:08:18 +0000
ROA not before:           Thu 20 Apr 2023 20:03:18 +0000
ROA not after:            Thu 18 Apr 2024 20:08:18 +0000
asID:                     265904
IP address blocks:        2804:3fa4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f2:fa:25:ec:d8:05:8c:98:14:12:27:6e:fd:62:1b:ad:ef:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C63806621ABBC4CDC2DA29D5A8E315B014535CDA
        Validity
            Not Before: Apr 20 20:03:18 2023 GMT
            Not After : Apr 18 20:08:18 2024 GMT
        Subject: CN=CBB47061F1CDD547A1D3031C1CC107E9E802F1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:5c:b7:5d:48:3e:07:ca:e3:11:0f:c2:0f:
                    e8:01:bf:5f:be:64:b1:52:8e:ac:08:2d:9f:d1:f7:
                    0b:71:cb:c6:b8:7b:bb:20:00:ea:c4:34:15:2c:d1:
                    75:0a:3d:85:65:a3:67:4a:b7:dd:32:3b:90:51:f4:
                    dd:e3:8d:67:a1:67:5e:60:21:56:59:43:ff:ff:6f:
                    ba:78:97:26:3c:f3:9e:32:04:9a:83:20:be:a0:3f:
                    ac:50:e8:7d:15:ae:a4:27:6c:57:d4:c0:24:c2:71:
                    43:70:3d:a4:31:b1:65:aa:88:4c:d3:74:63:23:5b:
                    d2:db:ea:c6:0e:e1:61:4e:24:4c:0c:e0:f6:99:51:
                    cf:62:4e:c9:3a:be:38:ac:85:58:3c:e2:42:8a:2b:
                    96:a2:8e:6f:14:f7:22:b0:c5:ec:63:be:85:6c:83:
                    a4:20:57:74:32:f8:26:b5:06:49:32:8e:b4:9d:70:
                    fe:39:d4:51:9c:18:d8:02:f3:0d:18:b9:86:44:5a:
                    18:f1:15:d3:1c:e1:25:96:35:b0:90:68:45:a0:56:
                    96:f9:8f:b2:80:cc:ce:5a:62:39:58:87:e4:b6:24:
                    65:5a:b9:7e:d2:5d:f3:d3:e7:93:07:fc:7f:2f:5c:
                    fa:b0:1a:b0:c8:2f:be:9b:de:b7:ae:4b:5a:19:4a:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B4:70:61:F1:CD:D5:47:A1:D3:03:1C:1C:C1:07:E9:E8:02:F1:EC
            X509v3 Authority Key Identifier:
                keyid:C6:38:06:62:1A:BB:C4:CD:C2:DA:29:D5:A8:E3:15:B0:14:53:5C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/323830343a336661343a3a2f33322d3332203d3e20323635393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:4c:52:66:f0:dc:a2:54:1e:a4:9a:8e:94:bd:44:3f:a9:1f:
         2d:b1:40:c1:15:69:b6:98:65:ba:3d:95:ed:43:44:ff:80:03:
         02:23:c4:18:d5:87:04:28:4f:72:98:e4:d8:8d:3b:44:7b:34:
         cc:bf:c9:ac:0c:77:2d:f4:38:44:e1:57:9c:90:09:d4:c3:a7:
         17:85:72:df:0e:12:83:80:8e:f2:ea:62:2a:ea:95:ea:3e:4d:
         e3:4a:21:21:89:5a:35:67:72:86:4e:e7:5d:cd:a0:b2:ff:07:
         65:f0:ae:29:c3:f3:17:3c:3b:a8:84:d2:b8:ce:71:02:d2:d4:
         ba:a9:b3:ad:07:fb:b8:85:81:7b:49:78:ea:d8:d4:a0:88:ab:
         cb:64:4a:eb:0c:a6:9c:43:e1:41:b1:61:7d:74:9e:b7:6f:e6:
         a3:12:43:9e:8b:52:73:63:72:ff:5b:cf:53:63:3e:ff:a8:a0:
         10:27:3c:d4:0a:ad:89:71:9f:02:0d:e8:1f:cf:ce:c0:fb:89:
         8b:41:96:a0:58:0d:e5:b8:38:14:64:90:6f:ec:19:cd:41:1d:
         da:f6:4f:63:eb:5e:43:23:ff:ba:c3:42:97:93:51:4f:3f:9d:
         e0:c2:d3:03:6f:21:02:62:2d:a3:11:70:d0:7e:7d:5e:57:fc:
         9f:b7:9a:eb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHPL6JezYBYyYFBInbv1iG63viWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzODA2NjIxQUJCQzRDREMyREEyOUQ1QThFMzE1QjAx
NDUzNUNEQTAeFw0yMzA0MjAyMDAzMThaFw0yNDA0MTgyMDA4MThaMDMxMTAvBgNV
BAMTKENCQjQ3MDYxRjFDREQ1NDdBMUQzMDMxQzFDQzEwN0U5RTgwMkYxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCat1y3XUg+B8rjEQ/CD+gBv1++
ZLFSjqwILZ/R9wtxy8a4e7sgAOrENBUs0XUKPYVlo2dKt90yO5BR9N3jjWehZ15g
IVZZQ///b7p4lyY8854yBJqDIL6gP6xQ6H0VrqQnbFfUwCTCcUNwPaQxsWWqiEzT
dGMjW9Lb6sYO4WFOJEwM4PaZUc9iTsk6vjishVg84kKKK5aijm8U9yKwxexjvoVs
g6QgV3Qy+Ca1BkkyjrSdcP451FGcGNgC8w0YuYZEWhjxFdMc4SWWNbCQaEWgVpb5
j7KAzM5aYjlYh+S2JGVauX7SXfPT55MH/H8vXPqwGrDIL76b3reuS1oZSusxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUy7RwYfHN1Ueh0wMcHMEH6egC8ewwHwYDVR0j
BBgwFoAUxjgGYhq7xM3C2inVqOMVsBRTXNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZEVkVZN2R3QTdrN1BmeFVQdXI2Mml0NU5iM0s1NFVENVVIa29MRjVR
R00vMC9DNjM4MDY2MjFBQkJDNENEQzJEQTI5RDVBOEUzMTVCMDE0NTM1Q0RBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2MzgwNjYyMUFCQkM0Q0RD
MkRBMjlENUE4RTMxNUIwMTQ1MzVDREEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2RFZFWTdkd0E3azdQZnhVUHVyNjJpdDVOYjNLNTRVRDVVSGtvTEY1UUdNLzAv
MzIzODMwMzQzYTMzNjY2MTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzkzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/pDANBgkqhkiG9w0BAQsFAAOCAQEAo0xSZvDc
olQepJqOlL1EP6kfLbFAwRVptphluj2V7UNE/4ADAiPEGNWHBChPcpjk2I07RHs0
zL/JrAx3LfQ4ROFXnJAJ1MOnF4Vy3w4Sg4CO8upiKuqV6j5N40ohIYlaNWdyhk7n
Xc2gsv8HZfCuKcPzFzw7qITSuM5xAtLUuqmzrQf7uIWBe0l46tjUoIiry2RK6wym
nEPhQbFhfXSet2/moxJDnotSc2Ny/1vPU2M+/6igECc81AqtiXGfAg3oH8/OwPuJ
i0GWoFgN5bg4FGSQb+wZzUEd2vZPY+teQyP/usNCl5NRTz+d4MLTA28hAmItoxFw
0H59Xlf8n7ea6w==
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:53:00 2025 by rpki-client