Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          xrSVkjIbs2qIjpqVnswKKl2b7Uj818muoC1dLvSccpg=
Subject key identifier:   9F:98:B2:54:1A:E9:5C:25:A4:49:13:F9:2C:E2:22:0B:07:F4:5D:BD
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       31D5FB5453F7060886158DCF926452B6BC812BC8
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:20 +0000
ROA not before:           Tue 13 Jun 2023 17:19:20 +0000
ROA not after:            Tue 11 Jun 2024 17:24:20 +0000
asID:                     267451
IP address blocks:        2804:41b4::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d5:fb:54:53:f7:06:08:86:15:8d:cf:92:64:52:b6:bc:81:2b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:20 2023 GMT
            Not After : Jun 11 17:24:20 2024 GMT
        Subject: CN=9F98B2541AE95C25A44913F92CE2220B07F45DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:69:c5:3e:6b:58:9e:8a:11:66:6d:95:85:
                    f0:d8:64:e2:6c:1b:41:f6:45:ff:98:d7:4b:ab:54:
                    44:22:0c:e2:2a:6c:63:13:d0:d6:14:89:d8:94:d9:
                    0c:dc:5b:af:25:d1:aa:85:3c:2c:16:c0:ab:50:e6:
                    39:4a:c4:c9:c3:69:f1:4c:56:6e:fb:1d:0a:87:b7:
                    9f:f1:ed:cb:70:33:e0:53:53:5f:ae:ff:50:91:d5:
                    dc:f2:66:d9:f4:b8:6a:c9:91:a0:1a:af:bb:0b:78:
                    2a:e4:79:ed:52:e9:a9:ec:1e:05:0b:46:38:18:2e:
                    88:87:82:96:20:73:7e:fa:6a:d1:43:6e:39:14:97:
                    37:6f:40:3e:62:44:ec:76:b1:a3:5c:40:ad:e4:13:
                    d3:58:65:c5:f9:d9:e2:a9:51:a9:68:29:da:a7:82:
                    e1:9f:7b:4e:c2:0f:d1:50:0d:2c:b4:7e:f1:75:2e:
                    7c:65:ea:80:f9:ce:b1:cb:e4:23:21:33:47:0f:5f:
                    7a:c1:fa:1b:e3:e2:0a:8a:09:cd:2b:6d:fb:53:df:
                    56:5e:c1:20:93:76:60:df:c6:b2:63:e6:08:99:70:
                    5b:54:82:77:f0:4b:4a:1b:e0:74:69:51:f2:f6:2a:
                    21:a0:81:32:91:a8:ef:65:76:be:6a:45:3a:fd:b8:
                    06:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:98:B2:54:1A:E9:5C:25:A4:49:13:F9:2C:E2:22:0B:07:F4:5D:BD
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4::/36

    Signature Algorithm: sha256WithRSAEncryption
         d4:1e:4b:f9:4f:d4:ce:2c:a7:fd:c1:05:a2:a1:93:21:17:42:
         70:7d:7c:28:f1:43:a5:e3:5b:0a:de:99:41:ba:bf:dc:f7:48:
         0f:8c:e6:e0:0c:36:5e:f2:d5:b2:94:59:da:eb:30:2a:fc:c3:
         9c:91:b6:ad:83:68:a2:ea:00:b3:97:ed:a9:b8:9d:aa:23:b7:
         d6:c1:f3:dc:6a:67:be:6a:01:d3:e5:89:b2:57:b5:66:b7:78:
         a9:59:6b:0f:6a:13:b9:8e:f9:50:db:68:e5:d9:d3:b6:6a:b7:
         e7:48:39:47:f4:08:80:8b:ca:c8:9c:31:f6:70:f4:f7:29:5e:
         b5:fb:85:db:87:47:1f:bf:5b:df:e4:31:13:e5:f3:38:62:56:
         ca:3f:e6:da:d6:af:39:63:e1:35:d0:56:93:db:80:ed:c1:22:
         45:3d:74:88:4c:36:d3:17:97:f6:84:5e:f6:16:59:4d:34:3a:
         20:f0:e2:65:db:cf:41:ea:a5:0d:e4:ca:34:fc:41:13:91:b3:
         50:47:cf:46:fa:86:d7:d0:af:7e:72:ea:82:c8:17:b8:91:a0:
         59:a1:d4:cf:da:f0:ea:9b:99:18:ad:64:92:e1:ef:10:f6:c9:
         b8:2d:4f:8f:ed:2c:21:28:11:14:93:78:40:b2:2f:16:9c:11:
         b8:9a:b5:81
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMdX7VFP3BgiGFY3PkmRStryBK8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVDRTk0OTc3NjVDQkZGNUFERjE4OEQ5RUFFRDMzNDQ1
ODQ0NDk1RDAeFw0yMzA2MTMxNzE5MjBaFw0yNDA2MTExNzI0MjBaMDMxMTAvBgNV
BAMTKDlGOThCMjU0MUFFOTVDMjVBNDQ5MTNGOTJDRTIyMjBCMDdGNDVEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2GnFPmtYnooRZm2VhfDYZOJs
G0H2Rf+Y10urVEQiDOIqbGMT0NYUidiU2QzcW68l0aqFPCwWwKtQ5jlKxMnDafFM
Vm77HQqHt5/x7ctwM+BTU1+u/1CR1dzyZtn0uGrJkaAar7sLeCrkee1S6ansHgUL
RjgYLoiHgpYgc376atFDbjkUlzdvQD5iROx2saNcQK3kE9NYZcX52eKpUaloKdqn
guGfe07CD9FQDSy0fvF1Lnxl6oD5zrHL5CMhM0cPX3rB+hvj4gqKCc0rbftT31Ze
wSCTdmDfxrJj5giZcFtUgnfwS0ob4HRpUfL2KiGggTKRqO9ldr5qRTr9uAaTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUn5iyVBrpXCWkSRP5LOIiCwf0Xb0wHwYDVR0j
BBgwFoAUns6Ul3Zcv/Wt8YjZ6u0zRFhESV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hFSnVBN21vbkI1RkRnRjJSRVBtMzlWSGFpTlJhbTFRazNFaFZtNFNU
M3MvMC85RUNFOTQ5Nzc2NUNCRkY1QURGMTg4RDlFQUVEMzM0NDU4NDQ0OTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFQ0U5NDk3NzY1Q0JGRjVB
REYxODhEOUVBRUQzMzQ0NTg0NDQ5NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIRUp1QTdtb25CNUZEZ0YyUkVQbTM5VkhhaU5SYW0xUWszRWhWbTRTVDNzLzAv
MzIzODMwMzQzYTM0MzE2MjM0M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM3
MzQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARBtAAwDQYJKoZIhvcNAQELBQADggEBANQeS/lP
1M4sp/3BBaKhkyEXQnB9fCjxQ6XjWwremUG6v9z3SA+M5uAMNl7y1bKUWdrrMCr8
w5yRtq2DaKLqALOX7am4naojt9bB89xqZ75qAdPlibJXtWa3eKlZaw9qE7mO+VDb
aOXZ07Zqt+dIOUf0CICLysicMfZw9PcpXrX7hduHRx+/W9/kMRPl8zhiVso/5trW
rzlj4TXQVpPbgO3BIkU9dIhMNtMXl/aEXvYWWU00OiDw4mXbz0HqpQ3kyjT8QROR
s1BHz0b6htfQr35y6oLIF7iRoFmh1M/a8OqbmRitZJLh7xD2ybgtT4/tLCEoERST
eECyLxacEbiatYE=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:49 2025 by rpki-client