Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a656230303a3a2f34302d3430203d3e203532383338.roa
File:                     323830343a6264383a656230303a3a2f34302d3430203d3e203532383338.roa (raw, json)
Hash identifier:          FW8uy2kfg6C2MzWQXKn6DxY2NbhvRqTMcF0EljaVqG0=
Subject key identifier:   3C:B8:02:C3:9E:AC:53:92:46:92:A4:F4:EE:E7:5A:8A:91:E8:78:D1
Certificate issuer:       /CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
Certificate serial:       3928867FA8CEC1F8C5C5FE0A2C944F4CA20ECADD
Authority key identifier: CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a656230303a3a2f34302d3430203d3e203532383338.roa
Signing time:             Tue 14 Jun 2022 20:09:21 +0000
ROA not before:           Tue 14 Jun 2022 20:04:21 +0000
ROA not after:            Tue 13 Jun 2023 20:09:21 +0000
asID:                     52838
IP address blocks:        2804:bd8:eb00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:28:86:7f:a8:ce:c1:f8:c5:c5:fe:0a:2c:94:4f:4c:a2:0e:ca:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
        Validity
            Not Before: Jun 14 20:04:21 2022 GMT
            Not After : Jun 13 20:09:21 2023 GMT
        Subject: CN=3CB802C39EAC53924692A4F4EEE75A8A91E878D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:5d:ab:3e:d3:27:44:00:11:89:ac:17:6f:
                    fd:b6:33:d8:4a:04:26:88:d8:93:65:c6:8a:56:dd:
                    19:a1:63:a4:22:19:51:2c:fe:e3:95:02:3e:32:cd:
                    9e:74:84:d2:a5:67:e3:6b:1e:e9:59:75:21:22:75:
                    3d:83:c9:fd:db:ff:ac:3c:b0:53:35:2a:52:18:19:
                    25:ad:fc:1e:74:f7:32:9e:a7:bc:18:53:3d:9b:86:
                    f3:10:2e:3e:3f:8a:be:ec:98:de:f6:63:f0:85:f8:
                    2e:9f:42:77:f8:c8:0e:cc:cf:46:68:6f:1c:b8:d9:
                    28:f6:a4:72:6d:2f:70:06:ad:0f:73:8e:66:e3:ce:
                    44:dd:45:c9:82:49:d2:d9:47:34:dc:c5:f0:43:dd:
                    24:ff:3d:2c:2a:02:34:a9:fb:7f:70:fb:96:e6:1b:
                    50:03:d8:ee:7d:98:79:c2:b4:4f:24:19:fc:a3:c0:
                    1c:d5:d8:00:3b:3f:49:ca:21:9b:7b:28:67:98:65:
                    08:51:a1:aa:8b:a8:91:3d:da:e3:36:48:7c:48:da:
                    05:96:94:6d:a0:83:2f:03:5c:f2:ae:aa:39:7e:5e:
                    c3:e6:c9:80:d2:04:64:a1:79:23:14:dc:f6:f0:e5:
                    ec:22:c5:95:d6:bb:ff:b4:0e:ba:62:88:c0:14:e4:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B8:02:C3:9E:AC:53:92:46:92:A4:F4:EE:E7:5A:8A:91:E8:78:D1
            X509v3 Authority Key Identifier:
                keyid:CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a656230303a3a2f34302d3430203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bd8:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:8f:4a:20:fa:36:ef:34:b7:47:f3:28:da:11:83:19:c0:
         65:34:31:61:ba:e9:a6:2e:d7:89:6a:50:5a:1b:8c:30:6e:77:
         da:e0:52:11:9a:32:e6:2e:17:6a:18:b5:fd:2e:ed:a5:04:5a:
         12:dc:53:e3:00:f3:94:fa:1c:64:c8:ac:c6:15:94:0e:82:09:
         8b:f5:71:3e:e6:49:79:98:42:9d:c6:ef:f6:9b:b1:7d:ea:66:
         7c:a7:07:d9:b4:21:d4:f7:e4:48:41:bb:16:72:d7:c5:f2:35:
         1f:d0:4c:eb:0e:60:ca:68:db:59:e6:2c:0f:99:51:7f:58:cc:
         17:70:fa:7f:3f:53:42:76:59:91:3d:76:1f:43:48:e8:66:e8:
         b6:08:4d:8e:6a:56:00:85:a7:8a:bb:20:a5:d5:dc:3f:84:76:
         54:4e:cb:25:d0:8c:70:4d:ac:3c:2f:2f:e2:82:d7:fe:51:c1:
         ab:64:1b:f6:2e:d6:b9:3a:6a:a4:59:42:5d:68:42:43:81:3b:
         39:f5:86:3b:1e:37:1d:cd:c3:3a:2e:49:63:83:d0:9c:ed:d2:
         2f:30:6e:f1:78:eb:cb:af:9c:ca:c2:cd:d0:f5:2c:fd:36:78:
         94:f0:43:9b:0e:55:18:e3:a4:54:9b:d8:0e:6f:23:41:52:7c:
         f6:97:ce:45
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUOSiGf6jOwfjFxf4KLJRPTKIOyt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q3MTM0NEM0NkZENUQ5RUYxRUE2MUEyRURGOTc2OTg1
MUUxNkJFMjAeFw0yMjA2MTQyMDA0MjFaFw0yMzA2MTMyMDA5MjFaMDMxMTAvBgNV
BAMTKDNDQjgwMkMzOUVBQzUzOTI0NjkyQTRGNEVFRTc1QThBOTFFODc4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4V2rPtMnRAARiawXb/22M9hK
BCaI2JNlxopW3RmhY6QiGVEs/uOVAj4yzZ50hNKlZ+NrHulZdSEidT2Dyf3b/6w8
sFM1KlIYGSWt/B509zKep7wYUz2bhvMQLj4/ir7smN72Y/CF+C6fQnf4yA7Mz0Zo
bxy42Sj2pHJtL3AGrQ9zjmbjzkTdRcmCSdLZRzTcxfBD3ST/PSwqAjSp+39w+5bm
G1AD2O59mHnCtE8kGfyjwBzV2AA7P0nKIZt7KGeYZQhRoaqLqJE92uM2SHxI2gWW
lG2ggy8DXPKuqjl+XsPmyYDSBGSheSMU3Pbw5ewixZXWu/+0DrpiiMAU5MfbAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUPLgCw56sU5JGkqT07udaipHoeNEwHwYDVR0j
BBgwFoAUzXE0TEb9XZ7x6mGi7fl2mFHha+IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvQ0Q3MTM0NEM0NkZENUQ5RUYxRUE2MUEyRURGOTc2OTg1MUUxNkJFMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9DRDcxMzQ0QzQ2RkQ1RDlFRjFF
QTYxQTJFREY5NzY5ODUxRTE2QkUyLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4G
CCsGAQUFBzALhoGRcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzIz
ODMwMzQzYTYyNjQzODNhNjU2MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz
NTMyMzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQL2OswDQYJKoZIhvcNAQELBQADggEBABTs
j0og+jbvNLdH8yjaEYMZwGU0MWG66aYu14lqUFobjDBud9rgUhGaMuYuF2oYtf0u
7aUEWhLcU+MA85T6HGTIrMYVlA6CCYv1cT7mSXmYQp3G7/absX3qZnynB9m0IdT3
5EhBuxZy18XyNR/QTOsOYMpo21nmLA+ZUX9YzBdw+n8/U0J2WZE9dh9DSOhm6LYI
TY5qVgCFp4q7IKXV3D+EdlROyyXQjHBNrDwvL+KC1/5RwatkG/Yu1rk6aqRZQl1o
QkOBOzn1hjseNx3NwzouSWOD0Jzt0i8wbvF468uvnMrCzdD1LP02eJTwQ5sOVRjj
pFSb2A5vI0FSfPaXzkU=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:24 2025 by rpki-client