Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/323830343a3239383a3a2f33322d3438203d3e203533303837.roa
File:                     323830343a3239383a3a2f33322d3438203d3e203533303837.roa (raw, json)
Hash identifier:          Pd5yThh7UgSl9cX+EVD8DqiXSmmKjLbffnbpZmg1zyM=
Subject key identifier:   EF:12:E0:60:25:2C:2A:39:9E:96:E6:D7:87:C2:B5:47:B0:87:8D:B5
Certificate issuer:       /CN=39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3
Certificate serial:       50A2280B107334D26CE86C8C7497EC0ACA57FA88
Authority key identifier: 39:EA:95:46:DD:0B:CE:E3:FD:D6:F5:C3:AC:59:80:00:21:01:4E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/323830343a3239383a3a2f33322d3438203d3e203533303837.roa
Signing time:             Mon 30 May 2022 20:08:59 +0000
ROA not before:           Mon 30 May 2022 20:03:59 +0000
ROA not after:            Mon 29 May 2023 20:08:59 +0000
asID:                     53087
IP address blocks:        2804:298::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a2:28:0b:10:73:34:d2:6c:e8:6c:8c:74:97:ec:0a:ca:57:fa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3
        Validity
            Not Before: May 30 20:03:59 2022 GMT
            Not After : May 29 20:08:59 2023 GMT
        Subject: CN=EF12E060252C2A399E96E6D787C2B547B0878DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:4f:46:8c:92:ae:88:ca:c1:6f:20:b6:1c:
                    dd:dd:5e:db:78:33:bd:c5:96:10:0c:c1:e6:62:da:
                    2e:ab:c9:95:5c:b0:61:95:dd:a3:08:97:07:a5:cd:
                    37:1f:cf:0e:e5:a9:d6:8f:9a:8d:b3:2a:5e:25:ef:
                    63:e5:d8:20:d8:d2:92:a2:d4:5e:c6:8e:d3:d3:ae:
                    5d:6d:03:81:aa:be:d2:1d:af:e6:81:59:fa:a4:3b:
                    9a:01:ae:b6:0c:17:91:09:1e:c4:f9:03:d5:11:5c:
                    ab:f6:81:61:cc:05:9e:1a:9a:41:ca:7c:bf:d7:e5:
                    69:93:0b:1a:a4:df:97:20:12:21:5b:56:8a:42:a6:
                    50:ee:73:f6:02:e1:1e:12:28:81:7b:da:91:ef:4f:
                    1c:ce:07:0e:bb:74:bd:ff:62:f3:d0:32:d7:dd:9b:
                    e6:60:4b:5b:25:9e:c4:1d:e6:29:3a:a7:e7:93:59:
                    9d:f2:17:f5:ff:30:4b:c7:3b:23:ef:0c:ef:d1:c1:
                    15:6c:48:fc:64:2b:1f:15:5f:33:37:ea:33:ba:91:
                    9c:0c:95:42:65:d5:4f:cc:13:c2:41:32:3d:6a:c8:
                    7e:1f:17:cb:1e:7f:df:13:36:c6:ab:ef:42:87:0b:
                    87:65:72:c9:ea:7a:13:92:55:3a:50:60:51:70:63:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:E0:60:25:2C:2A:39:9E:96:E6:D7:87:C2:B5:47:B0:87:8D:B5
            X509v3 Authority Key Identifier:
                keyid:39:EA:95:46:DD:0B:CE:E3:FD:D6:F5:C3:AC:59:80:00:21:01:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/323830343a3239383a3a2f33322d3438203d3e203533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:298::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:4b:2c:ea:dd:60:55:a0:ac:80:6b:65:80:8a:d2:f8:e4:cb:
         f4:9c:a7:df:fa:80:fb:19:9d:cc:6e:29:d1:86:29:6c:54:0b:
         0f:e8:c3:1d:6c:b8:2e:5f:22:3e:2a:85:9d:4a:e7:60:fc:b4:
         2b:29:5d:e1:4f:f5:d5:5b:1a:c2:81:d1:90:bb:05:63:e7:db:
         f4:b5:84:b3:f1:e8:93:09:2c:d0:af:91:98:01:5e:4c:3c:51:
         77:f8:26:e7:6b:64:8a:3b:be:d2:d0:4c:b1:bf:ef:8f:48:77:
         6f:df:10:89:79:6e:af:78:9e:78:34:95:1c:a7:02:21:45:a3:
         b3:a2:09:9d:38:d9:c4:ce:7e:32:b3:93:d1:50:2f:03:7a:82:
         f2:41:1d:64:05:ec:1e:a3:32:24:81:6e:c6:23:d0:78:1b:a1:
         61:09:c6:c5:7f:6c:cb:f9:73:37:0c:91:4b:01:bd:0b:38:aa:
         8f:3f:b2:8a:b5:98:e6:0a:58:26:5c:d0:58:7a:53:7d:5b:fa:
         23:a7:f4:a7:7d:8c:a3:fb:d3:dc:43:96:77:48:59:02:16:a2:
         ca:7a:75:a5:51:b5:88:4e:14:2a:df:8e:c4:b1:eb:8e:46:25:
         bf:2c:95:21:54:86:91:32:ea:43:1d:62:37:a6:0a:ba:3d:59:
         ea:e5:2f:a3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUUKIoCxBzNNJs6GyMdJfsCspX+ogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlFQTk1NDZERDBCQ0VFM0ZERDZGNUMzQUM1OTgwMDAy
MTAxNEVEMzAeFw0yMjA1MzAyMDAzNTlaFw0yMzA1MjkyMDA4NTlaMDMxMTAvBgNV
BAMTKEVGMTJFMDYwMjUyQzJBMzk5RTk2RTZENzg3QzJCNTQ3QjA4NzhEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eE9GjJKuiMrBbyC2HN3dXtt4
M73FlhAMweZi2i6ryZVcsGGV3aMIlwelzTcfzw7lqdaPmo2zKl4l72Pl2CDY0pKi
1F7GjtPTrl1tA4GqvtIdr+aBWfqkO5oBrrYMF5EJHsT5A9URXKv2gWHMBZ4amkHK
fL/X5WmTCxqk35cgEiFbVopCplDuc/YC4R4SKIF72pHvTxzOBw67dL3/YvPQMtfd
m+ZgS1slnsQd5ik6p+eTWZ3yF/X/MEvHOyPvDO/RwRVsSPxkKx8VXzM36jO6kZwM
lUJl1U/ME8JBMj1qyH4fF8sef98TNsar70KHC4dlcsnqehOSVTpQYFFwY3NZAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU7xLgYCUsKjmelubXh8K1R7CHjbUwHwYDVR0j
BBgwFoAUOeqVRt0LzuP91vXDrFmAACEBTtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRms3a2ZqNlg2d3I1dnhYekN1OFlnUlRONlB3ejRVUWk3UWFROE5aQnJp
N3QvMC8zOUVBOTU0NkREMEJDRUUzRkRENkY1QzNBQzU5ODAwMDIxMDE0RUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM5RUE5NTQ2REQwQkNFRTNG
REQ2RjVDM0FDNTk4MDAwMjEwMTRFRDMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZrN2tmajZYNndyNXZ4WHpDdThZZ1JUTjZQd3o0VVFpN1FhUThOWkJyaTd0LzAv
MzIzODMwMzQzYTMyMzkzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMDM4
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAKYMA0GCSqGSIb3DQEBCwUAA4IBAQBdSyzq3WBVoKyA
a2WAitL45Mv0nKff+oD7GZ3MbinRhilsVAsP6MMdbLguXyI+KoWdSudg/LQrKV3h
T/XVWxrCgdGQuwVj59v0tYSz8eiTCSzQr5GYAV5MPFF3+Cbna2SKO77S0Eyxv++P
SHdv3xCJeW6veJ54NJUcpwIhRaOzogmdONnEzn4ys5PRUC8DeoLyQR1kBeweozIk
gW7GI9B4G6FhCcbFf2zL+XM3DJFLAb0LOKqPP7KKtZjmClgmXNBYelN9W/ojp/Sn
fYyj+9PcQ5Z3SFkCFqLKenWlUbWIThQq347EseuORiW/LJUhVIaRMupDHWI3pgq6
PVnq5S+j
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:21 2025 by rpki-client