Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a316536383a3a2f33322d3332203d3e203533303036.roa
File:                     323830343a316536383a3a2f33322d3332203d3e203533303036.roa (raw, json)
Hash identifier:          /H0SLmTgUs7ldt+4fAA/oTeU0qsxNgxOFR7ZWsEt/5I=
Subject key identifier:   AC:F0:11:54:66:15:61:83:76:EA:F8:33:96:22:8E:56:F2:0F:5B:53
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       50E0D5E2DCF1E0DC4E72F84AC658B7E38251FC49
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a316536383a3a2f33322d3332203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:27:16 +0000
ROA not before:           Sat 11 Dec 2021 18:22:16 +0000
ROA not after:            Sat 10 Dec 2022 18:27:16 +0000
asID:                     53006
IP address blocks:        2804:1e68::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e0:d5:e2:dc:f1:e0:dc:4e:72:f8:4a:c6:58:b7:e3:82:51:fc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:22:16 2021 GMT
            Not After : Dec 10 18:27:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:fe:1e:86:70:f2:50:05:3e:a9:b4:42:77:
                    0b:97:26:55:a0:96:c9:e8:6f:23:21:77:ff:41:26:
                    c0:50:3f:f4:03:4c:93:2b:56:21:62:14:3e:2a:e7:
                    fa:9b:ec:1a:cb:d1:ab:c9:80:2e:93:29:fc:c6:14:
                    00:eb:96:e7:84:5b:1f:37:94:9d:7e:b7:e5:e6:6a:
                    4d:f5:22:b7:62:96:5d:bc:cc:4a:61:96:f2:3d:e0:
                    60:e5:d4:75:28:11:d7:00:42:cc:f1:40:8a:97:78:
                    34:28:f2:da:82:d7:74:0d:36:6c:02:78:ef:28:53:
                    a6:b8:00:23:7e:a2:40:a6:cc:61:ce:f4:23:ff:64:
                    fe:50:85:bb:32:dc:84:b7:4b:b4:f2:09:35:d4:ab:
                    0e:7e:76:54:f6:0c:55:23:bd:de:d3:57:c7:a1:9b:
                    cd:a5:6a:ae:a9:fa:9e:de:66:d6:67:21:6c:2b:14:
                    48:80:ad:b2:f3:4f:b6:d1:9e:ed:f0:0d:4d:f8:02:
                    14:84:2d:56:d1:54:b3:ad:fc:55:ed:75:11:a6:ad:
                    8e:40:dd:54:bb:aa:70:16:f7:7a:16:5c:d8:a8:9a:
                    3f:6a:90:5f:03:82:48:86:cd:ed:7a:18:fc:ba:ae:
                    66:86:b3:7a:b5:de:32:be:4e:16:12:50:d5:b3:78:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F0:11:54:66:15:61:83:76:EA:F8:33:96:22:8E:56:F2:0F:5B:53
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a316536383a3a2f33322d3332203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:61:45:e6:09:96:ba:e0:b3:8e:6c:b8:62:50:6c:44:42:bf:
         08:c4:f7:c8:8a:34:25:b6:7c:ff:32:bd:9a:db:c1:50:ea:58:
         51:67:c0:d6:47:bf:37:78:64:06:43:c2:e8:5a:c2:ac:bd:fe:
         c5:d5:1a:a1:51:5a:44:38:42:dd:aa:94:45:06:07:7a:ed:f9:
         27:b9:2e:90:ce:4f:73:d6:9c:fe:a9:63:eb:f1:ce:1e:8c:cc:
         ce:c4:aa:83:72:28:a0:1d:9e:04:72:ef:c6:1c:e8:2c:75:08:
         6f:9d:69:c5:81:25:00:e7:8d:a4:ae:3b:63:c2:f5:f1:eb:01:
         10:ac:d5:58:76:b1:6b:b0:cb:c9:4b:ce:b9:cb:fe:99:ac:02:
         c8:08:c7:a0:f6:a0:d7:2e:b2:29:7b:90:1f:fc:26:a4:3a:7e:
         46:41:c1:23:1f:7a:c3:81:58:72:1c:c4:58:18:d5:ee:c6:fe:
         5f:d2:e4:15:fc:a0:df:41:22:ae:15:98:da:a1:ef:f2:da:10:
         e6:44:29:b2:7f:1c:0c:88:c3:00:6b:a3:72:49:93:fa:9e:bc:
         16:6c:6d:d4:93:bb:7c:37:a7:3b:23:f8:83:b9:99:92:64:90:
         96:ea:fe:b5:16:0a:05:ca:cd:5c:4d:60:a4:d6:d2:f6:b4:c5:
         57:8b:7d:d3
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUUODV4tzx4NxOcvhKxli344JR/EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODIyMTZaFw0yMjEyMTAxODI3MTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTlENUZFMUU4NjcwRjI1MDA1
M0VBOUI0NDI3NzBCOTcyNjU1QTA5NkM5RTg2RjIzMjE3N0ZGNDEyNkMwNTAzRkY0
MDM0QzkzMkI1NjIxNjIxNDNFMkFFN0ZBOUJFQzFBQ0JEMUFCQzk4MDJFOTMyOUZD
QzYxNDAwRUI5NkU3ODQ1QjFGMzc5NDlEN0VCN0U1RTY2QTRERjUyMkI3NjI5NjVE
QkNDQzRBNjE5NkYyM0RFMDYwRTVENDc1MjgxMUQ3MDA0MkNDRjE0MDhBOTc3ODM0
MjhGMkRBODJENzc0MEQzNjZDMDI3OEVGMjg1M0E2QjgwMDIzN0VBMjQwQTZDQzYx
Q0VGNDIzRkY2NEZFNTA4NUJCMzJEQzg0Qjc0QkI0RjIwOTM1RDRBQjBFN0U3NjU0
RjYwQzU1MjNCRERFRDM1N0M3QTE5QkNEQTU2QUFFQTlGQTlFREU2NkQ2NjcyMTZD
MkIxNDQ4ODBBREIyRjM0RkI2RDE5RUVERjAwRDRERjgwMjE0ODQyRDU2RDE1NEIz
QURGQzU1RUQ3NTExQTZBRDhFNDBERDU0QkJBQTcwMTZGNzdBMTY1Q0Q4QTg5QTNG
NkE5MDVGMDM4MjQ4ODZDREVEN0ExOEZDQkFBRTY2ODZCMzdBQjVERTMyQkU0RTE2
MTI1MEQ1QjM3OEUyREIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmdX+HoZw8lAFPqm0QncLlyZVoJbJ6G8jIXf/QSbAUD/0A0yTK1Yh
YhQ+Kuf6m+way9GryYAukyn8xhQA65bnhFsfN5Sdfrfl5mpN9SK3YpZdvMxKYZby
PeBg5dR1KBHXAELM8UCKl3g0KPLagtd0DTZsAnjvKFOmuAAjfqJApsxhzvQj/2T+
UIW7MtyEt0u08gk11KsOfnZU9gxVI73e01fHoZvNpWquqfqe3mbWZyFsKxRIgK2y
80+20Z7t8A1N+AIUhC1W0VSzrfxV7XURpq2OQN1Uu6pwFvd6FlzYqJo/apBfA4JI
hs3tehj8uq5mhrN6td4yvk4WElDVs3ji2wIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FKzwEVRmFWGDdur4M5YijlbyD1tTMB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMyMzgzMDM0M2EzMTY1MzYzODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzMzMDMwMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBB5o
MA0GCSqGSIb3DQEBCwUAA4IBAQBFYUXmCZa64LOObLhiUGxEQr8IxPfIijQltnz/
Mr2a28FQ6lhRZ8DWR783eGQGQ8LoWsKsvf7F1RqhUVpEOELdqpRFBgd67fknuS6Q
zk9z1pz+qWPr8c4ejMzOxKqDciigHZ4Ecu/GHOgsdQhvnWnFgSUA542krjtjwvXx
6wEQrNVYdrFrsMvJS865y/6ZrALICMeg9qDXLrIpe5Af/CakOn5GQcEjH3rDgVhy
HMRYGNXuxv5f0uQV/KDfQSKuFZjaoe/y2hDmRCmyfxwMiMMAa6NySZP6nrwWbG3U
k7t8N6c7I/iDuZmSZJCW6v61FgoFys1cTWCk1tL2tMVXi33T
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:26 2025 by rpki-client