Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/323830343a353162633a3a2f33322d3332203d3e20323638343733.roa
File:                     323830343a353162633a3a2f33322d3332203d3e20323638343733.roa (raw, json)
Hash identifier:          V1QSeJmXdlBb3b4FCr3XYbzCJILuXcSLMu1QZLk9CRo=
Subject key identifier:   7C:55:20:88:FA:7B:B7:9B:1F:EB:F9:CB:30:23:ED:58:05:AB:DA:22
Certificate issuer:       /CN=027D8902566E7FEF90101053C0601032251D5D15
Certificate serial:       76A70D7F50CFB1E8091965EE843060DABDDEE0CA
Authority key identifier: 02:7D:89:02:56:6E:7F:EF:90:10:10:53:C0:60:10:32:25:1D:5D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/027D8902566E7FEF90101053C0601032251D5D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/323830343a353162633a3a2f33322d3332203d3e20323638343733.roa
Signing time:             Tue 07 Feb 2023 17:39:50 +0000
ROA not before:           Tue 07 Feb 2023 17:34:50 +0000
ROA not after:            Tue 06 Feb 2024 17:39:50 +0000
asID:                     268473
IP address blocks:        2804:51bc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a7:0d:7f:50:cf:b1:e8:09:19:65:ee:84:30:60:da:bd:de:e0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027D8902566E7FEF90101053C0601032251D5D15
        Validity
            Not Before: Feb  7 17:34:50 2023 GMT
            Not After : Feb  6 17:39:50 2024 GMT
        Subject: CN=7C552088FA7BB79B1FEBF9CB3023ED5805ABDA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:23:c0:53:fc:f3:85:9f:dd:04:d8:94:ff:
                    a5:cb:40:eb:ce:ac:f3:f0:dc:16:e3:c7:87:6b:ca:
                    54:33:87:11:1f:91:85:91:3e:3e:08:c2:5c:d9:92:
                    a3:c4:90:ec:51:cd:88:77:63:75:01:c5:cf:6f:8e:
                    86:12:d9:68:aa:47:85:51:c7:3f:9f:8a:eb:1b:ff:
                    37:72:0a:0c:be:8e:8f:8b:02:09:7a:96:22:43:ee:
                    e6:e2:6e:04:4c:e2:71:84:47:5b:05:0c:dd:89:18:
                    a4:32:8a:47:d2:46:de:22:82:3b:17:e8:b9:a5:8f:
                    57:90:ae:8e:f8:6f:91:c6:e7:70:de:ba:de:06:45:
                    69:04:6f:a8:17:36:62:76:f0:66:b4:58:a8:11:18:
                    4b:f9:56:66:44:bc:e6:b1:cc:51:fe:bf:85:f3:0e:
                    9c:72:8e:f6:69:b5:92:7b:1d:a3:23:30:49:30:93:
                    9a:73:4d:dd:35:23:4b:af:f0:87:01:df:f7:22:f6:
                    f3:2a:fe:40:2e:13:94:7e:2a:ee:77:d5:60:34:94:
                    4b:d5:8b:57:1e:3b:17:74:82:f2:7b:7e:9e:8a:54:
                    7d:20:6b:25:ed:ce:80:ab:be:3d:88:b5:f4:b7:da:
                    70:a8:c9:03:b9:c3:3b:53:ba:36:20:7f:06:5f:f8:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:55:20:88:FA:7B:B7:9B:1F:EB:F9:CB:30:23:ED:58:05:AB:DA:22
            X509v3 Authority Key Identifier:
                keyid:02:7D:89:02:56:6E:7F:EF:90:10:10:53:C0:60:10:32:25:1D:5D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/027D8902566E7FEF90101053C0601032251D5D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/027D8902566E7FEF90101053C0601032251D5D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/323830343a353162633a3a2f33322d3332203d3e20323638343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:79:2c:b7:28:74:9e:18:3d:de:7a:a5:f9:13:35:90:47:3a:
         73:c6:cd:ac:3f:fe:b9:fc:b1:4b:71:4b:c5:93:17:23:1c:6b:
         44:17:d7:20:80:eb:fc:0b:8d:26:a1:2e:e2:7e:cf:b4:88:52:
         db:e4:61:6b:32:9c:43:39:f3:2c:33:b5:a9:10:0f:da:3f:65:
         5d:a3:6b:45:81:bb:4e:66:1c:a1:e8:f3:07:96:89:41:a8:68:
         a2:00:65:7a:dd:5d:61:a2:7a:b4:7d:82:aa:0a:c2:7b:2f:64:
         27:f0:63:8b:8c:88:52:c5:b8:69:ed:e8:a6:20:3d:4a:a4:ad:
         2d:5b:4e:d8:3a:83:2d:de:0e:28:d5:3b:7d:5c:fe:4f:1b:43:
         6e:fc:1b:c2:3e:84:24:c8:86:a1:c3:d2:b9:67:6f:0a:3a:29:
         02:0f:2f:1b:dd:4a:3d:13:31:23:8f:ad:94:6d:ee:41:a3:71:
         c1:d7:75:4c:35:f4:9e:6e:cc:f2:b3:8d:d7:8a:ad:4d:86:c4:
         40:f8:bb:5e:79:e1:83:ad:b1:a9:36:4d:09:5f:3c:6d:92:b4:
         d9:89:ea:db:f5:a4:1d:64:89:9f:42:da:e9:72:16:aa:00:60:
         22:c4:a5:47:2e:89:7b:25:eb:79:5f:0f:03:54:97:c4:89:96:
         7f:27:53:cb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdqcNf1DPsegJGWXuhDBg2r3e4MowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI3RDg5MDI1NjZFN0ZFRjkwMTAxMDUzQzA2MDEwMzIy
NTFENUQxNTAeFw0yMzAyMDcxNzM0NTBaFw0yNDAyMDYxNzM5NTBaMDMxMTAvBgNV
BAMTKDdDNTUyMDg4RkE3QkI3OUIxRkVCRjlDQjMwMjNFRDU4MDVBQkRBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWiPAU/zzhZ/dBNiU/6XLQOvO
rPPw3Bbjx4drylQzhxEfkYWRPj4IwlzZkqPEkOxRzYh3Y3UBxc9vjoYS2WiqR4VR
xz+fiusb/zdyCgy+jo+LAgl6liJD7ubibgRM4nGER1sFDN2JGKQyikfSRt4igjsX
6Lmlj1eQro74b5HG53Deut4GRWkEb6gXNmJ28Ga0WKgRGEv5VmZEvOaxzFH+v4Xz
DpxyjvZptZJ7HaMjMEkwk5pzTd01I0uv8IcB3/ci9vMq/kAuE5R+Ku531WA0lEvV
i1ceOxd0gvJ7fp6KVH0gayXtzoCrvj2ItfS32nCoyQO5wztTujYgfwZf+PKXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfFUgiPp7t5sf6/nLMCPtWAWr2iIwHwYDVR0j
BBgwFoAUAn2JAlZuf++QEBBTwGAQMiUdXRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjkxckJMbW02ZVRqUEp2aVhWbUI2cXFnaDdTRmR4Z2ZaTXFtYkZGR3g0
TUcvMC8wMjdEODkwMjU2NkU3RkVGOTAxMDEwNTNDMDYwMTAzMjI1MUQ1RDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyN0Q4OTAyNTY2RTdGRUY5
MDEwMTA1M0MwNjAxMDMyMjUxRDVEMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5MXJCTG1tNmVUalBKdmlYVm1CNnFxZ2g3U0ZkeGdmWk1xbWJGRkd4NE1HLzAv
MzIzODMwMzQzYTM1MzE2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARRvDANBgkqhkiG9w0BAQsFAAOCAQEAKHkstyh0
nhg93nql+RM1kEc6c8bNrD/+ufyxS3FLxZMXIxxrRBfXIIDr/AuNJqEu4n7PtIhS
2+RhazKcQznzLDO1qRAP2j9lXaNrRYG7TmYcoejzB5aJQahoogBlet1dYaJ6tH2C
qgrCey9kJ/Bji4yIUsW4ae3opiA9SqStLVtO2DqDLd4OKNU7fVz+TxtDbvwbwj6E
JMiGocPSuWdvCjopAg8vG91KPRMxI4+tlG3uQaNxwdd1TDX0nm7M8rON14qtTYbE
QPi7Xnnhg62xqTZNCV88bZK02Ynq2/WkHWSJn0La6XIWqgBgIsSlRy6JeyXreV8P
A1SXxImWfydTyw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:40 2025 by rpki-client