Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1hydNrPaPPcAmXPXkXG6rYu36BqYjUJNxuETLLuwd5S/0/323830343a6236633a3a2f33322d313236203d3e203532373737.roa
File:                     323830343a6236633a3a2f33322d313236203d3e203532373737.roa (raw, json)
Hash identifier:          LQ2scS+zsJLsc4wjahEVgPGrjccpWmWQoDmRFPLiAjU=
Subject key identifier:   F0:E2:48:34:44:0A:7A:02:22:EC:83:7A:37:90:D5:B8:6B:3F:01:99
Certificate issuer:       /CN=082D7CDBA42665AF384956151549478CE3E68273
Certificate serial:       7F2B8AA24EF7FF9EFF8E14174B73EA0F919DBDD2
Authority key identifier: 08:2D:7C:DB:A4:26:65:AF:38:49:56:15:15:49:47:8C:E3:E6:82:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/082D7CDBA42665AF384956151549478CE3E68273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1hydNrPaPPcAmXPXkXG6rYu36BqYjUJNxuETLLuwd5S/0/323830343a6236633a3a2f33322d313236203d3e203532373737.roa
Signing time:             Wed 12 Apr 2023 01:38:23 +0000
ROA not before:           Wed 12 Apr 2023 01:33:23 +0000
ROA not after:            Wed 10 Apr 2024 01:38:23 +0000
asID:                     52777
IP address blocks:        2804:b6c::/32 maxlen: 126
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2b:8a:a2:4e:f7:ff:9e:ff:8e:14:17:4b:73:ea:0f:91:9d:bd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082D7CDBA42665AF384956151549478CE3E68273
        Validity
            Not Before: Apr 12 01:33:23 2023 GMT
            Not After : Apr 10 01:38:23 2024 GMT
        Subject: CN=F0E24834440A7A0222EC837A3790D5B86B3F0199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:76:2f:a5:81:2b:34:fd:a6:06:74:58:86:
                    fa:cc:c6:5a:06:f0:d1:f1:7b:79:ec:ca:b5:95:12:
                    42:e9:9e:39:3c:45:02:c4:a6:81:4c:30:e1:e8:1a:
                    12:b6:de:e6:98:f6:61:b5:5d:16:c0:ba:29:d6:11:
                    67:35:70:31:a9:7b:28:3e:f6:4b:3c:ee:9c:43:2d:
                    9c:db:db:6f:9c:97:0b:f6:5f:2a:4f:c2:f8:d7:61:
                    1f:69:1f:ba:8e:c4:8e:96:44:95:80:ce:8e:ee:ef:
                    09:96:2e:7b:a5:b4:06:9a:af:63:e6:16:ba:22:bd:
                    8b:ec:a2:5c:f1:b8:a3:18:98:8e:be:d5:17:d5:99:
                    99:8f:f1:56:18:7f:ca:b6:14:e4:65:1e:4c:42:6b:
                    47:89:a9:e3:4e:27:b6:f0:2f:14:64:2c:79:5c:1b:
                    3a:1e:1c:73:f4:7b:c2:59:2b:78:67:23:47:b4:f6:
                    54:62:70:86:14:f5:90:9e:ae:8c:82:e6:b2:7c:cd:
                    97:10:e4:43:b9:97:3c:71:3e:fc:67:4e:d1:c0:03:
                    d7:28:4f:00:97:40:a6:8e:ae:b8:56:a5:71:42:df:
                    a8:41:e6:1a:64:e8:18:83:97:ea:fe:de:c1:ee:cf:
                    c5:6b:90:cd:24:d7:ed:33:41:0c:96:87:a1:19:71:
                    52:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E2:48:34:44:0A:7A:02:22:EC:83:7A:37:90:D5:B8:6B:3F:01:99
            X509v3 Authority Key Identifier:
                keyid:08:2D:7C:DB:A4:26:65:AF:38:49:56:15:15:49:47:8C:E3:E6:82:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1hydNrPaPPcAmXPXkXG6rYu36BqYjUJNxuETLLuwd5S/0/082D7CDBA42665AF384956151549478CE3E68273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/082D7CDBA42665AF384956151549478CE3E68273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1hydNrPaPPcAmXPXkXG6rYu36BqYjUJNxuETLLuwd5S/0/323830343a6236633a3a2f33322d313236203d3e203532373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:79:85:8f:b3:70:61:52:25:68:4e:8a:c4:58:36:70:ba:
         50:43:f6:61:58:a4:42:1f:6f:7b:0d:c5:83:f1:fd:1b:45:37:
         6e:89:f2:80:a9:c6:4c:3d:28:bd:06:62:82:2f:3b:56:62:be:
         ed:06:3f:b6:78:c4:2f:df:51:81:76:14:2f:b6:c0:2d:f6:75:
         f4:8b:2f:6f:c5:d2:53:f3:38:c4:f3:f9:8d:bf:a3:00:4e:57:
         34:37:6a:1f:d1:08:5f:97:36:f9:ec:7c:45:51:b6:0f:58:1e:
         d0:b5:3c:be:a9:e3:95:fb:cd:2d:ba:ba:20:4e:07:68:b9:91:
         bc:75:9c:df:7f:8a:f8:5a:d0:a0:84:ba:36:e5:9d:97:8b:f6:
         11:4c:f8:d3:db:6e:f5:34:c1:e8:e7:9b:af:08:1e:06:de:1c:
         f9:9e:6d:dc:69:5e:ba:ae:a5:c3:8c:fc:12:20:a4:0a:d4:7d:
         46:74:3c:82:a0:e8:97:2d:7f:01:29:aa:85:18:29:b6:98:b5:
         f0:38:65:ed:b6:0a:ce:bc:5b:9d:8e:66:ed:3b:bf:cf:85:2b:
         00:d9:9b:93:fb:71:dd:49:12:54:7c:c1:7d:0b:1a:df:fc:54:
         1d:2b:fa:5c:79:24:9f:c1:a2:6a:14:50:15:ab:55:21:56:06:
         70:f5:42:91
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfyuKok73/57/jhQXS3PqD5GdvdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgyRDdDREJBNDI2NjVBRjM4NDk1NjE1MTU0OTQ3OENF
M0U2ODI3MzAeFw0yMzA0MTIwMTMzMjNaFw0yNDA0MTAwMTM4MjNaMDMxMTAvBgNV
BAMTKEYwRTI0ODM0NDQwQTdBMDIyMkVDODM3QTM3OTBENUI4NkIzRjAxOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHnYvpYErNP2mBnRYhvrMxloG
8NHxe3nsyrWVEkLpnjk8RQLEpoFMMOHoGhK23uaY9mG1XRbAuinWEWc1cDGpeyg+
9ks87pxDLZzb22+clwv2XypPwvjXYR9pH7qOxI6WRJWAzo7u7wmWLnultAaar2Pm
FroivYvsolzxuKMYmI6+1RfVmZmP8VYYf8q2FORlHkxCa0eJqeNOJ7bwLxRkLHlc
GzoeHHP0e8JZK3hnI0e09lRicIYU9ZCeroyC5rJ8zZcQ5EO5lzxxPvxnTtHAA9co
TwCXQKaOrrhWpXFC36hB5hpk6BiDl+r+3sHuz8VrkM0k1+0zQQyWh6EZcVLpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU8OJINEQKegIi7IN6N5DVuGs/AZkwHwYDVR0j
BBgwFoAUCC1826QmZa84SVYVFUlHjOPmgnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjFoeWROclBhUFBjQW1YUFhrWEc2cll1MzZCcVlqVUpOeHVFVExMdXdk
NVMvMC8wODJEN0NEQkE0MjY2NUFGMzg0OTU2MTUxNTQ5NDc4Q0UzRTY4MjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4MkQ3Q0RCQTQyNjY1QUYz
ODQ5NTYxNTE1NDk0NzhDRTNFNjgyNzMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0oxaHlkTnJQYVBQY0FtWFBYa1hHNnJZdTM2QnFZalVKTnh1RVRMTHV3ZDVTLzAv
MzIzODMwMzQzYTYyMzY2MzNhM2EyZjMzMzIyZDMxMzIzNjIwM2QzZTIwMzUzMjM3
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEC2wwDQYJKoZIhvcNAQELBQADggEBAFyqeYWPs3Bh
UiVoTorEWDZwulBD9mFYpEIfb3sNxYPx/RtFN26J8oCpxkw9KL0GYoIvO1Zivu0G
P7Z4xC/fUYF2FC+2wC32dfSLL2/F0lPzOMTz+Y2/owBOVzQ3ah/RCF+XNvnsfEVR
tg9YHtC1PL6p45X7zS26uiBOB2i5kbx1nN9/ivha0KCEujblnZeL9hFM+NPbbvU0
wejnm68IHgbeHPmebdxpXrqupcOM/BIgpArUfUZ0PIKg6JctfwEpqoUYKbaYtfA4
Ze22Cs68W52OZu07v8+FKwDZm5P7cd1JElR8wX0LGt/8VB0r+lx5JJ/BomoUUBWr
VSFWBnD1QpE=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:59:02 2025 by rpki-client