Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/323830343a313931303a3a2f33322d3438203d3e203631373732.roa
File:                     323830343a313931303a3a2f33322d3438203d3e203631373732.roa (raw, json)
Hash identifier:          YPsXL8l4RO+AXvb0/BTvSLNenniMgzsQhXJg5ix1908=
Subject key identifier:   00:E7:49:97:99:2B:1B:ED:E5:4D:2A:9D:A2:07:03:74:4A:9A:D5:EC
Certificate issuer:       /CN=FF386C9BDA689F9AA04623D5ADF743F1BA316CD5
Certificate serial:       6FDBD3A630CBAD701B7043466624CCD9E160103A
Authority key identifier: FF:38:6C:9B:DA:68:9F:9A:A0:46:23:D5:AD:F7:43:F1:BA:31:6C:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/323830343a313931303a3a2f33322d3438203d3e203631373732.roa
Signing time:             Wed 02 Aug 2023 20:00:00 +0000
ROA not before:           Wed 02 Aug 2023 19:55:00 +0000
ROA not after:            Wed 31 Jul 2024 20:00:00 +0000
asID:                     61772
IP address blocks:        2804:1910::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:db:d3:a6:30:cb:ad:70:1b:70:43:46:66:24:cc:d9:e1:60:10:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF386C9BDA689F9AA04623D5ADF743F1BA316CD5
        Validity
            Not Before: Aug  2 19:55:00 2023 GMT
            Not After : Jul 31 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:98:c5:05:8a:ef:a5:62:3b:81:b4:1d:13:
                    4f:04:32:e0:6e:08:a5:b9:21:6d:7a:a6:9b:c6:58:
                    a1:20:d0:7b:99:ad:61:f9:4a:77:5d:7e:89:f9:df:
                    e6:c0:a2:1e:ae:bc:2b:7c:22:a3:5e:77:fa:9d:dc:
                    c4:8f:81:82:8e:ac:28:9f:8d:5a:6b:3e:17:4e:f6:
                    02:51:c9:e3:09:00:15:d8:22:57:b4:64:9a:b1:88:
                    17:42:97:69:40:bf:3a:8a:51:ad:06:26:87:5b:85:
                    5a:eb:ea:24:f4:2a:f5:99:ea:81:48:69:49:ac:5b:
                    b0:c2:c2:74:26:5a:fd:9a:55:89:92:72:30:ac:4a:
                    3a:1c:c5:b3:ca:18:39:05:d2:04:5d:a4:08:98:ae:
                    b4:ca:22:77:4d:f4:d4:97:0e:00:59:23:91:ca:83:
                    b5:a5:05:5a:cd:97:68:81:68:c4:23:6c:ae:83:51:
                    42:9f:e3:be:4c:d6:49:65:38:68:14:f4:e1:1d:03:
                    e9:3c:ae:a2:c5:92:d5:fa:18:63:18:07:80:72:e2:
                    c4:79:9f:78:6e:2f:e1:6d:7b:3a:bd:ce:9c:41:b2:
                    20:80:c1:46:37:9e:56:46:2b:8e:75:34:1d:14:c8:
                    17:06:66:96:27:80:6a:c3:f7:ae:a2:ab:9c:05:26:
                    7e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:49:97:99:2B:1B:ED:E5:4D:2A:9D:A2:07:03:74:4A:9A:D5:EC
            X509v3 Authority Key Identifier:
                keyid:FF:38:6C:9B:DA:68:9F:9A:A0:46:23:D5:AD:F7:43:F1:BA:31:6C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/323830343a313931303a3a2f33322d3438203d3e203631373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1910::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:7f:ad:0c:7d:23:4d:ed:4a:22:fb:1d:28:0c:e9:ab:01:
         cb:87:75:46:37:b3:a2:1c:7a:64:d2:d8:5c:94:33:8a:da:e2:
         86:c3:87:13:65:e8:44:83:ec:23:cd:d1:0b:8c:ce:ae:7e:64:
         36:d3:86:a3:68:5f:2e:e5:7b:fb:f8:8e:2a:d1:ed:cb:83:2c:
         88:ba:6a:b7:3e:47:e4:67:fc:76:cd:c5:ab:0a:70:17:4f:84:
         78:9f:0a:c4:bb:1e:6b:8f:1e:d5:ca:b1:f1:05:6f:e6:57:11:
         1e:25:79:b5:d7:57:c5:11:b9:93:d1:8e:f8:e7:57:13:a1:ac:
         49:3b:65:bc:27:a4:f2:0e:76:1c:f6:c6:d9:34:c1:4b:67:3b:
         c8:6a:e4:6d:c4:11:5f:48:f9:fa:ac:eb:4e:36:06:fa:a6:54:
         47:c3:a0:32:5a:73:82:02:69:ee:8f:71:6d:62:fc:9f:f0:57:
         ec:c5:ae:30:b8:6d:06:d1:3a:a6:c6:0c:bb:48:37:ed:25:d0:
         f0:31:18:41:6f:7d:a4:43:a9:ba:b7:45:4d:85:8c:d9:8b:2b:
         b1:75:78:1f:4d:46:1d:94:47:19:3a:1d:c0:37:97:21:1d:ba:
         88:46:5a:d1:1d:a4:b5:6d:d9:44:28:06:ed:f5:52:a8:62:3c:
         bb:ec:67:18
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUb9vTpjDLrXAbcENGZiTM2eFgEDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzODZDOUJEQTY4OUY5QUEwNDYyM0Q1QURGNzQzRjFC
QTMxNkNENTAeFw0yMzA4MDIxOTU1MDBaFw0yNDA3MzEyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgwQzk4QzUwNThBRUZBNTYy
M0I4MUI0MUQxMzRGMDQzMkUwNkUwOEE1QjkyMTZEN0FBNjlCQzY1OEExMjBEMDdC
OTlBRDYxRjk0QTc3NUQ3RTg5RjlERkU2QzBBMjFFQUVCQzJCN0MyMkEzNUU3N0ZB
OUREQ0M0OEY4MTgyOEVBQzI4OUY4RDVBNkIzRTE3NEVGNjAyNTFDOUUzMDkwMDE1
RDgyMjU3QjQ2NDlBQjE4ODE3NDI5NzY5NDBCRjNBOEE1MUFEMDYyNjg3NUI4NTVB
RUJFQTI0RjQyQUY1OTlFQTgxNDg2OTQ5QUM1QkIwQzJDMjc0MjY1QUZEOUE1NTg5
OTI3MjMwQUM0QTNBMUNDNUIzQ0ExODM5MDVEMjA0NURBNDA4OThBRUI0Q0EyMjc3
NERGNEQ0OTcwRTAwNTkyMzkxQ0E4M0I1QTUwNTVBQ0Q5NzY4ODE2OEM0MjM2Q0FF
ODM1MTQyOUZFM0JFNENENjQ5NjUzODY4MTRGNEUxMUQwM0U5M0NBRUEyQzU5MkQ1
RkExODYzMTgwNzgwNzJFMkM0Nzk5Rjc4NkUyRkUxNkQ3QjNBQkRDRTlDNDFCMjIw
ODBDMTQ2Mzc5RTU2NDYyQjhFNzUzNDFEMTRDODE3MDY2Njk2Mjc4MDZBQzNGN0FF
QTJBQjlDMDUyNjdFRkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyAyYxQWK76ViO4G0HRNPBDLgbgiluSFteqabxlihINB7ma1h+Up3
XX6J+d/mwKIerrwrfCKjXnf6ndzEj4GCjqwon41aaz4XTvYCUcnjCQAV2CJXtGSa
sYgXQpdpQL86ilGtBiaHW4Va6+ok9Cr1meqBSGlJrFuwwsJ0Jlr9mlWJknIwrEo6
HMWzyhg5BdIEXaQImK60yiJ3TfTUlw4AWSORyoO1pQVazZdogWjEI2yug1FCn+O+
TNZJZThoFPThHQPpPK6ixZLV+hhjGAeAcuLEeZ94bi/hbXs6vc6cQbIggMFGN55W
RiuOdTQdFMgXBmaWJ4Bqw/euoqucBSZ++wIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FADnSZeZKxvt5U0qnaIHA3RKmtXsMB8GA1UdIwQYMBaAFP84bJvaaJ+aoEYj1a33
Q/G6MWzVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dlS3RVVGhmb3JjQjFa
YlY2RktteFpjcWVoZXlKRXFrUzFnZE11aFZreVZOLzAvRkYzODZDOUJEQTY4OUY5
QUEwNDYyM0Q1QURGNzQzRjFCQTMxNkNENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRjM4NkM5QkRBNjg5RjlBQTA0NjIzRDVBREY3NDNGMUJBMzE2
Q0Q1LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZUt0VVRoZm9yY0IxWmJWNkZL
bXhaY3FlaGV5SkVxa1MxZ2RNdWhWa3lWTi8wLzMyMzgzMDM0M2EzMTM5MzEzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzEzNzM3MzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBBkQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB5+n+tDH0jTe1KIvsdKAzpqwHLh3VGN7OiHHpk
0thclDOK2uKGw4cTZehEg+wjzdELjM6ufmQ204ajaF8u5Xv7+I4q0e3LgyyIumq3
PkfkZ/x2zcWrCnAXT4R4nwrEux5rjx7VyrHxBW/mVxEeJXm111fFEbmT0Y7451cT
oaxJO2W8J6TyDnYc9sbZNMFLZzvIauRtxBFfSPn6rOtONgb6plRHw6AyWnOCAmnu
j3FtYvyf8Ffsxa4wuG0G0Tqmxgy7SDftJdDwMRhBb32kQ6m6t0VNhYzZiyuxdXgf
TUYdlEcZOh3AN5chHbqIRlrRHaS1bdlEKAbt9VKoYjy77GcY
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:24 2025 by rpki-client