Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          tmo1hQRfWlfjEJMeQ6hFO0dpyRv7g0MxEOiaaLjqlRk=
Subject key identifier:   8E:15:EA:C5:42:89:AE:CF:29:3A:5B:05:2A:DE:48:B4:10:BD:94:78
Certificate issuer:       /CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
Certificate serial:       6731513988792C2FF1E0ECEF9C40EFB04E097FD1
Authority key identifier: EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa
Signing time:             Mon 15 May 2023 02:00:01 +0000
ROA not before:           Mon 15 May 2023 01:55:01 +0000
ROA not after:            Wed 15 May 2024 02:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114:166::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:31:51:39:88:79:2c:2f:f1:e0:ec:ef:9c:40:ef:b0:4e:09:7f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
        Validity
            Not Before: May 15 01:55:01 2023 GMT
            Not After : May 15 02:00:01 2024 GMT
        Subject: CN=3082010A0282010100D96B7DB2AF4557025D17E4DD82B0FC224B62CA06414F772D8245FDB1E07C7E12095333CB593D263DF2C94A2E336239B3BD0BC0248E32074F9CBC943AD6BA9763F8FE2F8D2F965E765A4DDD6E23E446ADBCD0C638247398949CB4982E7D44BC298D6AE1801343E69D5EF1F8A3A2EE9472538E37136F7D19BA34F74EBBE7F8F147A22E897DBA2342CE4A7B413C36899DDBB2D71699F19CF2463E2DFAF08E10B0E58AE4864C35545E9974FB18A54C5C3D2A8C6D5AE12E47550D1F6BC15F6B8A6E97EF537F0E15BFA45CD1594552BA657BB82CDBE2710E3DBC9E4741C9DC5657DA177CA5E949CDED8B5B9EDA0FD63062CCBBCC7B8A4CD7BE6A300F24139449E960130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:7d:b2:af:45:57:02:5d:17:e4:dd:82:b0:
                    fc:22:4b:62:ca:06:41:4f:77:2d:82:45:fd:b1:e0:
                    7c:7e:12:09:53:33:cb:59:3d:26:3d:f2:c9:4a:2e:
                    33:62:39:b3:bd:0b:c0:24:8e:32:07:4f:9c:bc:94:
                    3a:d6:ba:97:63:f8:fe:2f:8d:2f:96:5e:76:5a:4d:
                    dd:6e:23:e4:46:ad:bc:d0:c6:38:24:73:98:94:9c:
                    b4:98:2e:7d:44:bc:29:8d:6a:e1:80:13:43:e6:9d:
                    5e:f1:f8:a3:a2:ee:94:72:53:8e:37:13:6f:7d:19:
                    ba:34:f7:4e:bb:e7:f8:f1:47:a2:2e:89:7d:ba:23:
                    42:ce:4a:7b:41:3c:36:89:9d:db:b2:d7:16:99:f1:
                    9c:f2:46:3e:2d:fa:f0:8e:10:b0:e5:8a:e4:86:4c:
                    35:54:5e:99:74:fb:18:a5:4c:5c:3d:2a:8c:6d:5a:
                    e1:2e:47:55:0d:1f:6b:c1:5f:6b:8a:6e:97:ef:53:
                    7f:0e:15:bf:a4:5c:d1:59:45:52:ba:65:7b:b8:2c:
                    db:e2:71:0e:3d:bc:9e:47:41:c9:dc:56:57:da:17:
                    7c:a5:e9:49:cd:ed:8b:5b:9e:da:0f:d6:30:62:cc:
                    bb:cc:7b:8a:4c:d7:be:6a:30:0f:24:13:94:49:e9:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:15:EA:C5:42:89:AE:CF:29:3A:5B:05:2A:DE:48:B4:10:BD:94:78
            X509v3 Authority Key Identifier:
                keyid:EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:166::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:14:36:e0:50:43:81:3f:50:0a:4c:67:c7:32:24:58:92:
         d9:de:ea:e8:a5:06:26:f7:b0:bf:c3:97:db:ae:36:a9:7b:e8:
         69:cd:fd:a6:2f:13:9a:d5:98:0b:4b:70:1e:75:4d:1e:8a:88:
         43:90:ac:a9:8e:82:45:4b:02:40:e3:37:f3:58:20:0b:f2:73:
         27:09:e7:44:71:18:45:22:aa:51:28:83:94:82:17:52:b8:53:
         d9:42:6b:b4:50:93:6b:e2:20:f3:2b:fa:4e:d5:21:8f:80:ac:
         75:8b:bd:98:c9:e2:3a:9d:e3:d2:1d:19:c7:51:d1:84:c6:04:
         ab:b1:60:71:22:f4:21:2c:fa:a9:ef:e6:8c:a9:68:81:a3:13:
         95:d1:c0:1a:49:a4:8d:b8:a8:64:9a:27:c2:55:0f:99:0c:e4:
         18:91:12:10:dd:96:6b:e2:ce:f7:ac:0a:8d:32:af:2d:87:7b:
         6a:e6:29:f7:f5:0a:c1:d0:4a:7f:e6:85:00:b4:7f:7c:e0:80:
         0e:1a:13:e3:27:b5:02:18:a1:2a:10:ad:2a:2b:8d:57:69:03:
         2e:6a:1f:4c:3e:bc:ef:88:79:57:0f:4b:9e:68:0e:07:2d:91:
         0c:94:67:f7:34:44:23:67:5b:97:8d:e6:e5:02:e0:ee:2b:bc:
         ae:67:a9:9a
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUZzFROYh5LC/x4OzvnEDvsE4Jf9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE4NENBQzYyMDhFQTk2RDdCQzBGM0MwMTkxMkU1OUJD
NDIwNTRGMTAeFw0yMzA1MTUwMTU1MDFaFw0yNDA1MTUwMjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDk2QjdEQjJBRjQ1NTcwMjVE
MTdFNEREODJCMEZDMjI0QjYyQ0EwNjQxNEY3NzJEODI0NUZEQjFFMDdDN0UxMjA5
NTMzM0NCNTkzRDI2M0RGMkM5NEEyRTMzNjIzOUIzQkQwQkMwMjQ4RTMyMDc0RjlD
QkM5NDNBRDZCQTk3NjNGOEZFMkY4RDJGOTY1RTc2NUE0RERENkUyM0U0NDZBREJD
RDBDNjM4MjQ3Mzk4OTQ5Q0I0OTgyRTdENDRCQzI5OEQ2QUUxODAxMzQzRTY5RDVF
RjFGOEEzQTJFRTk0NzI1MzhFMzcxMzZGN0QxOUJBMzRGNzRFQkJFN0Y4RjE0N0Ey
MkU4OTdEQkEyMzQyQ0U0QTdCNDEzQzM2ODk5RERCQjJENzE2OTlGMTlDRjI0NjNF
MkRGQUYwOEUxMEIwRTU4QUU0ODY0QzM1NTQ1RTk5NzRGQjE4QTU0QzVDM0QyQThD
NkQ1QUUxMkU0NzU1MEQxRjZCQzE1RjZCOEE2RTk3RUY1MzdGMEUxNUJGQTQ1Q0Qx
NTk0NTUyQkE2NTdCQjgyQ0RCRTI3MTBFM0RCQzlFNDc0MUM5REM1NjU3REExNzdD
QTVFOTQ5Q0RFRDhCNUI5RURBMEZENjMwNjJDQ0JCQ0M3QjhBNENEN0JFNkEzMDBG
MjQxMzk0NDlFOTYwMTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2Wt9sq9FVwJdF+TdgrD8IktiygZBT3ctgkX9seB8fhIJUzPLWT0m
PfLJSi4zYjmzvQvAJI4yB0+cvJQ61rqXY/j+L40vll52Wk3dbiPkRq280MY4JHOY
lJy0mC59RLwpjWrhgBND5p1e8fijou6UclOONxNvfRm6NPdOu+f48UeiLol9uiNC
zkp7QTw2iZ3bstcWmfGc8kY+LfrwjhCw5Yrkhkw1VF6ZdPsYpUxcPSqMbVrhLkdV
DR9rwV9rim6X71N/DhW/pFzRWUVSumV7uCzb4nEOPbyeR0HJ3FZX2hd8pelJze2L
W57aD9YwYsy7zHuKTNe+ajAPJBOUSelgEwIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FI4V6sVCia7PKTpbBSreSLQQvZR4MB8GA1UdIwQYMBaAFOqEysYgjqlte8DzwBkS
5ZvEIFTxMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z4azl2Y2d4MWI0ZERI
dVJWOE1yNWJMN1FOVGo1b2tWZ2VRUVM1UndZa0drLzAvRUE4NENBQzYyMDhFQTk2
RDdCQzBGM0MwMTkxMkU1OUJDNDIwNTRGMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQTg0Q0FDNjIwOEVBOTZEN0JDMEYzQzAxOTEyRTU5QkM0MjA1
NEYxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeGs5dmNneDFiNGRESHVSVjhN
cjViTDdRTlRqNW9rVmdlUVFTNVJ3WWtHay8wLzMyMzgzMDM0M2EzNzMxMzEzNDNh
MzEzNjM2M2EzYTJmMzQzODIwM2QzZTIwMzIzNzMwMzczNjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KARxFAFmMA0GCSqGSIb3DQEBCwUAA4IBAQANOhQ24FBDgT9QCkxnxzIkWJLZ3uro
pQYm97C/w5fbrjape+hpzf2mLxOa1ZgLS3AedU0eiohDkKypjoJFSwJA4zfzWCAL
8nMnCedEcRhFIqpRKIOUghdSuFPZQmu0UJNr4iDzK/pO1SGPgKx1i72YyeI6nePS
HRnHUdGExgSrsWBxIvQhLPqp7+aMqWiBoxOV0cAaSaSNuKhkmifCVQ+ZDOQYkRIQ
3ZZr4s73rAqNMq8th3tq5in39QrB0Ep/5oUAtH984IAOGhPjJ7UCGKEqEK0qK41X
aQMuah9MPrzviHlXD0ueaA4HLZEMlGf3NEQjZ1uXjeblAuDuK7yuZ6ma
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:28 2025 by rpki-client