Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a643030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a643030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          QG/7aEJ/qBEBgRjHsZJRrg4dFxJBWcTDEeijP2ru6H4=
Subject key identifier:   6A:04:3C:9D:46:26:D6:B9:C9:AE:69:4B:C7:61:65:85:DB:77:37:E6
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       5E8D81A6F24DB8950995FA727FD399534CFAE6F0
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a643030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:21 +0000
ROA not before:           Tue 21 Nov 2023 15:06:21 +0000
ROA not after:            Tue 19 Nov 2024 15:11:21 +0000
asID:                     272649
IP address blocks:        2804:8684:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8d:81:a6:f2:4d:b8:95:09:95:fa:72:7f:d3:99:53:4c:fa:e6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:21 2023 GMT
            Not After : Nov 19 15:11:21 2024 GMT
        Subject: CN=6A043C9D4626D6B9C9AE694BC7616585DB7737E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:9c:c9:f7:64:c8:65:2a:53:f6:36:92:ac:
                    58:d0:07:42:46:2c:df:88:3b:e7:65:b5:01:76:53:
                    3b:57:33:fc:dd:23:ca:df:f9:d3:ec:56:47:ba:b8:
                    0c:7d:07:57:85:4d:48:4f:46:d3:1e:98:e2:78:b5:
                    2e:69:9c:a7:6a:0e:6f:5f:1a:87:c6:b9:44:c3:e5:
                    02:18:82:af:33:95:ee:82:23:89:a6:20:a6:0b:51:
                    b0:8e:0c:19:0e:f2:a2:0c:95:c5:e2:db:71:5e:cc:
                    ea:d1:46:d5:05:82:26:3f:09:59:cc:d4:6e:4a:5e:
                    57:77:c3:74:50:42:d1:f5:50:04:0a:88:1d:ef:95:
                    e0:33:97:41:16:0b:d5:92:3e:ef:c4:fb:e0:fb:a6:
                    f2:e0:37:ab:c1:62:d7:36:ae:09:07:74:04:d4:da:
                    5f:f6:0a:cf:c9:67:38:7e:2d:d9:a5:5f:88:16:6f:
                    2f:69:fd:99:93:d2:84:90:cf:d1:1f:c4:66:c7:78:
                    86:a4:5e:50:13:e7:c8:c4:b9:57:1f:69:5f:16:2f:
                    67:cf:4b:4d:4e:b7:3b:e2:0a:f5:12:07:85:bf:5d:
                    1f:61:19:60:3b:c7:23:fd:42:1f:f8:71:da:8b:c5:
                    63:11:62:27:22:db:40:60:4e:04:a6:c5:84:8e:54:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:04:3C:9D:46:26:D6:B9:C9:AE:69:4B:C7:61:65:85:DB:77:37:E6
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a643030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:7b:9c:aa:56:42:42:27:43:71:18:0e:b5:fb:ee:bf:a7:
         4b:c7:12:ab:4b:3f:b7:54:a0:1d:a5:de:bf:70:d0:35:94:41:
         b2:6e:d8:71:b7:ec:20:0b:53:3d:d6:ce:ce:ea:dc:ce:7a:78:
         fa:80:33:60:ab:c8:88:24:24:7b:38:2e:19:43:95:6b:34:d8:
         0e:97:2a:e6:a2:35:e2:9d:dc:a3:40:5b:2d:45:0e:1b:2c:72:
         91:15:be:cf:92:75:c0:04:82:6c:60:32:19:d9:9e:e4:dd:10:
         ca:8d:1f:a6:ad:75:25:3f:6e:54:d7:8d:7b:c0:26:53:0d:67:
         1b:22:ad:2b:cc:c0:bc:c6:e5:e1:bd:d3:8b:5c:8b:88:ae:f7:
         c8:da:ef:86:78:44:f6:3b:b7:04:1d:4e:3a:d8:c3:c0:d0:7e:
         48:98:f0:ff:5b:5a:8a:cc:ab:40:36:cd:9d:0b:39:6e:d5:c3:
         cc:a9:cd:a9:c3:6e:f9:af:82:c1:0f:84:40:df:69:a4:ca:61:
         12:19:82:c6:a0:ce:db:7b:9a:2a:3b:d8:7d:cf:db:6b:79:bb:
         cb:44:ea:87:9b:99:9f:d2:80:4b:68:a9:db:ff:2b:eb:a9:66:
         47:f0:1a:fd:2c:57:d5:12:d6:76:5f:64:3b:09:e5:3c:74:03:
         99:48:c9:ee
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUXo2BpvJNuJUJlfpyf9OZU0z65vAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA0MjcxMTNDNzI4RjY1MzE3Njg2NkEyRTQ3RDk3NDZF
QTg2Qjg0MjAeFw0yMzExMjExNTA2MjFaFw0yNDExMTkxNTExMjFaMDMxMTAvBgNV
BAMTKDZBMDQzQzlENDYyNkQ2QjlDOUFFNjk0QkM3NjE2NTg1REI3NzM3RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDas5zJ92TIZSpT9jaSrFjQB0JG
LN+IO+dltQF2UztXM/zdI8rf+dPsVke6uAx9B1eFTUhPRtMemOJ4tS5pnKdqDm9f
GofGuUTD5QIYgq8zle6CI4mmIKYLUbCODBkO8qIMlcXi23FezOrRRtUFgiY/CVnM
1G5KXld3w3RQQtH1UAQKiB3vleAzl0EWC9WSPu/E++D7pvLgN6vBYtc2rgkHdATU
2l/2Cs/JZzh+LdmlX4gWby9p/ZmT0oSQz9EfxGbHeIakXlAT58jEuVcfaV8WL2fP
S01OtzviCvUSB4W/XR9hGWA7xyP9Qh/4cdqLxWMRYici20BgTgSmxYSOVLA9AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUagQ8nUYm1rnJrmlLx2Flhdt3N+YwHwYDVR0j
BBgwFoAUcEJxE8co9lMXaGai5H2XRuqGuEIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ValUzSzhhS1lkNEhDb0VMQVFXNDNHVHdFYUNjYW5VaHJVM1h1R29HZk5C
LzAvNzA0MjcxMTNDNzI4RjY1MzE3Njg2NkEyRTQ3RDk3NDZFQTg2Qjg0Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC83MDQyNzExM0M3MjhGNjUzMTc2
ODY2QTJFNDdEOTc0NkVBODZCODQyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9V
alUzSzhhS1lkNEhDb0VMQVFXNDNHVHdFYUNjYW5VaHJVM1h1R29HZk5CLzAvMzIz
ODMwMzQzYTM4MzYzODM0M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2Uy
MDMyMzczMjM2MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEhoTQMA0GCSqGSIb3DQEBCwUAA4IB
AQBr9HucqlZCQidDcRgOtfvuv6dLxxKrSz+3VKAdpd6/cNA1lEGybthxt+wgC1M9
1s7O6tzOenj6gDNgq8iIJCR7OC4ZQ5VrNNgOlyrmojXindyjQFstRQ4bLHKRFb7P
knXABIJsYDIZ2Z7k3RDKjR+mrXUlP25U1417wCZTDWcbIq0rzMC8xuXhvdOLXIuI
rvfI2u+GeET2O7cEHU462MPA0H5ImPD/W1qKzKtANs2dCzlu1cPMqc2pw275r4LB
D4RA32mkymESGYLGoM7be5oqO9h9z9trebvLROqHm5mf0oBLaKnb/yvrqWZH8Br9
LFfVEtZ2X2Q7CeU8dAOZSMnu
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:32 2025 by rpki-client