Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a3a2f33322d3334203d3e20323632373737.roa
File:                     323830343a3831343a3a2f33322d3334203d3e20323632373737.roa (raw, json)
Hash identifier:          UR+J3sUKDVruTKyeUd/bc6uhRfAM8MKo06IVYG2JQ0M=
Subject key identifier:   C7:14:80:E1:49:79:1A:36:23:35:8A:67:6E:DB:59:1A:B6:1D:98:15
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       5938218896AA03DF86B0589E59A750EDC608943F
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a3a2f33322d3334203d3e20323632373737.roa
Signing time:             Mon 23 May 2022 11:27:39 +0000
ROA not before:           Mon 23 May 2022 11:22:39 +0000
ROA not after:            Mon 22 May 2023 11:27:39 +0000
asID:                     262777
IP address blocks:        2804:814::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:38:21:88:96:aa:03:df:86:b0:58:9e:59:a7:50:ed:c6:08:94:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: May 23 11:22:39 2022 GMT
            Not After : May 22 11:27:39 2023 GMT
        Subject: CN=C71480E149791A3623358A676EDB591AB61D9815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:f2:e8:c4:be:a0:09:9a:34:8c:77:03:b3:
                    fc:0c:95:51:6e:c6:c2:c1:af:ef:f7:28:d4:4c:3a:
                    52:e4:dd:21:3c:79:12:e7:88:d0:a8:26:e5:6d:94:
                    8b:91:2d:4c:53:89:8e:0c:c1:f3:d0:18:8d:39:52:
                    b5:0e:b8:8a:a6:7c:b4:a7:b7:5d:d9:9b:f2:66:67:
                    00:90:45:bd:8d:1c:1d:1c:42:68:76:74:1b:3d:a2:
                    f1:50:46:b4:80:95:fd:a5:af:1a:1b:fc:8b:63:09:
                    e7:bb:4a:60:12:70:31:84:37:20:52:74:b8:d6:24:
                    ac:8d:8e:57:41:b7:29:b7:7f:a7:b3:d4:49:51:1d:
                    a7:a3:69:f6:d0:f5:b5:55:c3:86:0e:e3:87:a5:fe:
                    79:81:9f:4c:a3:83:75:dd:e6:85:dc:7b:7f:b6:65:
                    9e:f3:59:3c:ec:ce:de:8c:dd:db:73:99:f9:81:4b:
                    5f:9a:1c:8c:78:f5:53:c7:a1:21:57:89:df:66:b7:
                    9e:25:9c:92:d8:3e:ac:8d:21:8f:94:ca:b1:96:89:
                    e8:cb:64:a7:e6:45:be:a9:22:3f:e8:89:96:4e:74:
                    d6:63:14:43:b7:a6:37:36:75:5e:21:6d:f3:e0:f9:
                    ff:6e:03:3a:f0:96:e5:00:da:2d:8f:c4:9d:ca:74:
                    11:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:80:E1:49:79:1A:36:23:35:8A:67:6E:DB:59:1A:B6:1D:98:15
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a3a2f33322d3334203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:814::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:c3:fd:94:96:27:95:af:a1:e1:37:d0:0a:4c:e6:b4:f2:d3:
         c3:89:e2:94:f2:a5:fc:e8:16:0f:73:d8:0e:aa:18:df:bf:76:
         50:00:c8:6a:6f:9a:f1:78:bd:95:01:ff:f5:88:68:a1:58:c5:
         82:8e:5b:9e:1d:36:ce:95:67:db:81:30:fe:02:35:aa:99:2b:
         18:58:17:90:b4:bc:70:00:1a:2b:41:dd:b3:99:8b:44:55:d5:
         ee:dc:7a:66:43:08:b9:df:4d:a2:5d:46:a2:e4:fb:8a:9d:5b:
         08:29:11:76:a1:b5:a4:80:6d:1e:b2:67:32:df:e4:05:b8:98:
         e2:63:69:53:e2:0c:44:8a:b7:40:35:d4:fa:03:64:f2:e3:cc:
         0c:04:6e:e3:c1:bf:6b:63:c7:eb:c7:dc:6e:9c:0e:a2:7e:cf:
         13:87:58:39:d7:45:02:b8:25:8c:9a:36:a9:a0:e3:98:08:b3:
         1e:50:0e:5a:2b:59:8f:ae:9f:86:1d:6f:ab:9a:44:0e:b3:d0:
         aa:55:5c:9d:b1:4f:9d:db:e9:94:ad:1f:3b:40:b4:74:f4:e0:
         d5:17:91:fb:91:7c:80:3c:1e:47:c0:c3:b8:fd:c3:6f:0d:c0:
         0b:fe:52:c1:7a:2d:a5:13:c2:cb:60:d7:0d:32:48:bc:db:72:
         0b:3e:a4:6d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUWTghiJaqA9+GsFieWadQ7cYIlD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJEMTE5Qjk5MTAxMDkxNDA5Q0IyQzY0NjYzQzlBMEQw
Rjk0REM1RjAeFw0yMjA1MjMxMTIyMzlaFw0yMzA1MjIxMTI3MzlaMDMxMTAvBgNV
BAMTKEM3MTQ4MEUxNDk3OTFBMzYyMzM1OEE2NzZFREI1OTFBQjYxRDk4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiPLoxL6gCZo0jHcDs/wMlVFu
xsLBr+/3KNRMOlLk3SE8eRLniNCoJuVtlIuRLUxTiY4MwfPQGI05UrUOuIqmfLSn
t13Zm/JmZwCQRb2NHB0cQmh2dBs9ovFQRrSAlf2lrxob/ItjCee7SmAScDGENyBS
dLjWJKyNjldBtym3f6ez1ElRHaejafbQ9bVVw4YO44el/nmBn0yjg3Xd5oXce3+2
ZZ7zWTzszt6M3dtzmfmBS1+aHIx49VPHoSFXid9mt54lnJLYPqyNIY+UyrGWiejL
ZKfmRb6pIj/oiZZOdNZjFEO3pjc2dV4hbfPg+f9uAzrwluUA2i2PxJ3KdBGDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUxxSA4Ul5GjYjNYpnbttZGrYdmBUwHwYDVR0j
BBgwFoAUItEZuZEBCRQJyyxkZjyaDQ+U3F8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FVUzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpN
S2IvMC8yMkQxMTlCOTkxMDEwOTE0MDlDQjJDNjQ2NjNDOUEwRDBGOTREQzVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIyRDExOUI5OTEwMTA5MTQw
OUNCMkM2NDY2M0M5QTBEMEY5NERDNUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhVVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzAv
MzIzODMwMzQzYTM4MzEzNDNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzMjM3
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECBQwDQYJKoZIhvcNAQELBQADggEBAJjD/ZSWJ5Wv
oeE30ApM5rTy08OJ4pTypfzoFg9z2A6qGN+/dlAAyGpvmvF4vZUB//WIaKFYxYKO
W54dNs6VZ9uBMP4CNaqZKxhYF5C0vHAAGitB3bOZi0RV1e7cemZDCLnfTaJdRqLk
+4qdWwgpEXahtaSAbR6yZzLf5AW4mOJjaVPiDESKt0A11PoDZPLjzAwEbuPBv2tj
x+vH3G6cDqJ+zxOHWDnXRQK4JYyaNqmg45gIsx5QDlorWY+un4Ydb6uaRA6z0KpV
XJ2xT53b6ZStHztAtHT04NUXkfuRfIA8HkfAw7j9w28NwAv+UsF6LaUTwstg1w0y
SLzbcgs+pG0=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:35 2025 by rpki-client