Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/323830343a363765383a3a2f33322d3332203d3e20323639363538.roa
File:                     323830343a363765383a3a2f33322d3332203d3e20323639363538.roa (raw, json)
Hash identifier:          OSLGR/0U2MiuaW/kHMZUmTegxl8jBa+4/B3D1kAckdQ=
Subject key identifier:   67:CA:D8:24:7E:4E:29:3A:0C:E2:A7:1B:D7:C7:95:F6:4C:D0:4F:60
Certificate issuer:       /CN=A1FED06F7D1405C340D123EC721C6A72F607A3D4
Certificate serial:       7DD36DC25111E57E926EDF73B7C5D5FA1B89E6A1
Authority key identifier: A1:FE:D0:6F:7D:14:05:C3:40:D1:23:EC:72:1C:6A:72:F6:07:A3:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FED06F7D1405C340D123EC721C6A72F607A3D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/323830343a363765383a3a2f33322d3332203d3e20323639363538.roa
Signing time:             Wed 17 May 2023 02:22:11 +0000
ROA not before:           Wed 17 May 2023 02:17:11 +0000
ROA not after:            Wed 15 May 2024 02:22:11 +0000
asID:                     269658
IP address blocks:        2804:67e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:6d:c2:51:11:e5:7e:92:6e:df:73:b7:c5:d5:fa:1b:89:e6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1FED06F7D1405C340D123EC721C6A72F607A3D4
        Validity
            Not Before: May 17 02:17:11 2023 GMT
            Not After : May 15 02:22:11 2024 GMT
        Subject: CN=67CAD8247E4E293A0CE2A71BD7C795F64CD04F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:d2:3a:b7:cc:56:ab:7a:5f:da:83:6e:dd:
                    40:88:e6:76:1d:32:12:5d:be:c6:03:28:b9:a4:70:
                    dc:9a:c6:ee:c5:97:81:4e:8b:24:60:e8:3a:ba:fd:
                    c5:34:93:d2:28:7d:0b:34:df:b1:30:d6:80:ec:bb:
                    cb:54:5a:86:ed:63:8e:34:7d:de:b2:74:90:d5:a8:
                    e4:92:6a:5a:df:12:3e:92:8b:76:75:24:82:12:90:
                    b7:85:94:72:b9:d9:b3:9c:25:2b:37:b0:15:ea:f4:
                    c6:c7:dd:a4:a4:0c:43:87:95:b6:d4:72:59:98:33:
                    7e:86:38:a4:78:4c:66:e2:42:0f:8d:41:33:4d:8c:
                    18:aa:1e:11:e2:cc:3b:21:bc:26:df:cd:13:a6:e2:
                    6d:3a:9c:dc:0b:4e:c4:30:30:1b:d5:84:e5:49:cd:
                    dd:93:63:77:8f:b3:d0:ca:c3:29:a5:aa:f3:7c:a9:
                    3a:52:5a:8e:68:45:ea:f3:da:ad:d2:e9:2d:a9:bc:
                    a2:66:3e:39:17:67:2d:0f:a0:34:02:f4:f4:0e:6e:
                    1f:63:6f:c8:58:3d:48:47:77:88:80:26:e8:49:da:
                    70:5f:99:4a:c4:46:37:ae:7e:75:3e:d1:c7:00:8f:
                    24:51:76:bd:7f:fb:9c:49:2d:f4:d7:8e:5f:a2:8e:
                    11:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:D8:24:7E:4E:29:3A:0C:E2:A7:1B:D7:C7:95:F6:4C:D0:4F:60
            X509v3 Authority Key Identifier:
                keyid:A1:FE:D0:6F:7D:14:05:C3:40:D1:23:EC:72:1C:6A:72:F6:07:A3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/A1FED06F7D1405C340D123EC721C6A72F607A3D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FED06F7D1405C340D123EC721C6A72F607A3D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/323830343a363765383a3a2f33322d3332203d3e20323639363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:17:94:e7:c1:74:dc:a2:e2:37:78:6c:38:f7:fb:41:d0:
         ac:93:de:bf:e6:0d:75:38:c5:7c:b5:1b:64:4b:c0:12:97:41:
         03:21:8a:78:33:ff:4e:0d:09:1d:72:fc:30:bf:2c:82:48:d8:
         af:11:72:42:29:4d:55:36:21:58:ef:38:31:3b:2a:78:28:06:
         b8:de:82:e5:e5:ba:aa:5f:5d:b7:bf:fa:b2:1e:2c:00:a5:b7:
         50:26:de:b6:df:bf:3c:98:ec:c6:8d:47:55:97:0c:fa:57:2f:
         ae:1d:ec:cc:87:09:b9:4d:01:6b:4a:99:6a:c6:1e:ae:f5:e7:
         3c:51:b1:35:9d:14:e3:a0:38:79:60:21:7d:f2:12:a5:9c:a6:
         c2:59:ad:14:04:e2:f0:90:7f:8e:f6:b1:41:3d:bf:89:91:e6:
         c4:8d:e1:5a:3f:1c:ff:21:f4:58:a1:21:d5:a8:89:6e:34:25:
         fb:f5:e9:3d:73:d8:29:2c:74:13:08:63:ca:ee:87:56:43:6d:
         2b:8b:bd:a3:52:7d:13:4a:f2:4e:95:f5:81:5d:a4:4b:62:ec:
         59:28:7a:c9:8e:20:75:ba:9d:2f:a2:52:7d:13:74:fe:69:d5:
         68:26:b0:86:e1:ea:80:f5:bb:56:b1:77:ac:78:be:d6:47:94:
         b7:08:b9:8e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfdNtwlER5X6Sbt9zt8XV+huJ5qEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFGRUQwNkY3RDE0MDVDMzQwRDEyM0VDNzIxQzZBNzJG
NjA3QTNENDAeFw0yMzA1MTcwMjE3MTFaFw0yNDA1MTUwMjIyMTFaMDMxMTAvBgNV
BAMTKDY3Q0FEODI0N0U0RTI5M0EwQ0UyQTcxQkQ3Qzc5NUY2NENEMDRGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgeNI6t8xWq3pf2oNu3UCI5nYd
MhJdvsYDKLmkcNyaxu7Fl4FOiyRg6Dq6/cU0k9IofQs037Ew1oDsu8tUWobtY440
fd6ydJDVqOSSalrfEj6Si3Z1JIISkLeFlHK52bOcJSs3sBXq9MbH3aSkDEOHlbbU
clmYM36GOKR4TGbiQg+NQTNNjBiqHhHizDshvCbfzROm4m06nNwLTsQwMBvVhOVJ
zd2TY3ePs9DKwymlqvN8qTpSWo5oRerz2q3S6S2pvKJmPjkXZy0PoDQC9PQObh9j
b8hYPUhHd4iAJuhJ2nBfmUrERjeufnU+0ccAjyRRdr1/+5xJLfTXjl+ijhE7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZ8rYJH5OKToM4qcb18eV9kzQT2AwHwYDVR0j
BBgwFoAUof7Qb30UBcNA0SPschxqcvYHo9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2cxNXRRNDFNaHlOcW1Ed0FNeEV0WExLNk1mYU1QWWRkSGJ3RTFhU3pl
VUIvMS9BMUZFRDA2RjdEMTQwNUMzNDBEMTIzRUM3MjFDNkE3MkY2MDdBM0Q0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExRkVEMDZGN0QxNDA1QzM0
MEQxMjNFQzcyMUM2QTcyRjYwN0EzRDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnMTV0UTQxTWh5TnFtRHdBTXhFdFhMSzZNZmFNUFlkZEhid0UxYVN6ZVVCLzEv
MzIzODMwMzQzYTM2Mzc2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzYzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARn6DANBgkqhkiG9w0BAQsFAAOCAQEAKE0XlOfB
dNyi4jd4bDj3+0HQrJPev+YNdTjFfLUbZEvAEpdBAyGKeDP/Tg0JHXL8ML8sgkjY
rxFyQilNVTYhWO84MTsqeCgGuN6C5eW6ql9dt7/6sh4sAKW3UCbett+/PJjsxo1H
VZcM+lcvrh3szIcJuU0Ba0qZasYervXnPFGxNZ0U46A4eWAhffISpZymwlmtFATi
8JB/jvaxQT2/iZHmxI3hWj8c/yH0WKEh1aiJbjQl+/XpPXPYKSx0Ewhjyu6HVkNt
K4u9o1J9E0ryTpX1gV2kS2LsWSh6yY4gdbqdL6JSfRN0/mnVaCawhuHqgPW7VrF3
rHi+1keUtwi5jg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:35:13 2025 by rpki-client