Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d3438203d3e20323730323534.roa
File:                     323830343a363933303a3a2f33322d3438203d3e20323730323534.roa (raw, json)
Hash identifier:          q8XtaWBBYM9dQRRm7p4ow1Gl37fqmq3dgH3YDRnA878=
Subject key identifier:   61:AC:89:46:9E:20:B9:10:D1:7A:31:E2:14:55:D8:DA:05:E2:D5:E4
Certificate issuer:       /CN=62CC03B6D6EE5C7E5520F435DC43F70376CF6014
Certificate serial:       10EE864543E2B194326DD5AD0AB40C17A4861F32
Authority key identifier: 62:CC:03:B6:D6:EE:5C:7E:55:20:F4:35:DC:43:F7:03:76:CF:60:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CC03B6D6EE5C7E5520F435DC43F70376CF6014.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d3438203d3e20323730323534.roa
Signing time:             Fri 16 Dec 2022 22:09:04 +0000
ROA not before:           Fri 16 Dec 2022 22:04:04 +0000
ROA not after:            Fri 15 Dec 2023 22:09:04 +0000
asID:                     270254
IP address blocks:        2804:6930::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ee:86:45:43:e2:b1:94:32:6d:d5:ad:0a:b4:0c:17:a4:86:1f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62CC03B6D6EE5C7E5520F435DC43F70376CF6014
        Validity
            Not Before: Dec 16 22:04:04 2022 GMT
            Not After : Dec 15 22:09:04 2023 GMT
        Subject: CN=61AC89469E20B910D17A31E21455D8DA05E2D5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:bf:27:9b:c4:30:ed:06:2f:85:f3:ca:b6:
                    47:f0:45:24:cb:a1:61:df:ad:46:53:35:70:64:7a:
                    ca:52:a3:1f:38:35:34:12:cf:d6:3a:07:e6:de:3b:
                    65:7f:ff:1b:e6:0d:e3:0d:c8:ca:93:e7:32:f3:66:
                    dc:bf:23:2f:c0:09:35:54:c6:9b:df:5f:4f:8e:00:
                    60:e8:5f:c5:1f:90:a1:b3:23:47:86:1c:e8:9c:62:
                    13:0b:ed:e5:60:51:61:a1:4f:ca:de:fa:30:63:23:
                    56:69:4f:cf:ec:87:b0:51:67:e1:9f:ba:88:ac:44:
                    7f:ad:6f:95:19:84:43:6b:94:5c:8c:60:4b:7b:6d:
                    84:d6:63:00:5f:4a:fe:fe:d4:dc:9f:34:7f:9e:f2:
                    c2:c0:6e:f8:78:3f:78:8a:e6:81:4b:04:1c:4b:2d:
                    d8:a5:f7:58:f0:4f:f8:43:07:68:5f:45:d6:14:dc:
                    9b:7f:21:be:c3:47:7f:3c:1f:db:a7:7d:4d:7c:54:
                    c0:0a:2d:fd:b6:47:9a:f9:87:c5:f7:67:92:ce:5a:
                    b5:ed:8a:a0:36:e5:a1:11:96:18:8d:f4:77:07:93:
                    23:95:6c:b7:3b:55:2f:78:e2:51:7c:12:fa:2c:2a:
                    8c:78:ef:b9:f2:3f:1b:d7:a1:08:54:a4:e2:09:00:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AC:89:46:9E:20:B9:10:D1:7A:31:E2:14:55:D8:DA:05:E2:D5:E4
            X509v3 Authority Key Identifier:
                keyid:62:CC:03:B6:D6:EE:5C:7E:55:20:F4:35:DC:43:F7:03:76:CF:60:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/62CC03B6D6EE5C7E5520F435DC43F70376CF6014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CC03B6D6EE5C7E5520F435DC43F70376CF6014.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d3438203d3e20323730323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6930::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:26:cc:5f:03:c2:48:ef:66:1d:6f:64:fb:d7:24:02:63:
         eb:f2:51:19:40:9c:31:ff:77:62:78:cd:a2:45:95:46:f8:4e:
         ea:32:33:e9:ca:64:4e:ca:1e:2e:f4:dc:57:c7:5c:1b:de:6c:
         2b:08:17:c8:41:40:e8:29:f8:47:50:d9:4b:ad:dc:6d:0f:f8:
         58:23:30:d8:77:bd:a5:f2:a7:01:74:1c:21:51:be:6b:cb:af:
         7c:69:83:29:0e:85:94:80:8f:10:33:6b:52:a3:fd:23:90:7c:
         ba:fc:a7:e1:3d:52:d3:78:be:1e:11:49:5a:fd:44:f9:76:dc:
         d3:dc:b1:99:cd:96:ff:cd:2a:b1:da:af:02:ed:de:26:ad:ea:
         85:24:24:e8:5f:c4:82:fa:8a:2c:6e:3c:8c:e8:43:3e:74:ad:
         3d:ba:22:6c:71:89:9e:8a:8b:42:78:a4:e8:7c:b6:d9:1c:68:
         52:84:66:3c:7f:e1:97:70:f0:8b:31:93:58:45:90:8d:97:af:
         a4:97:c5:03:41:e6:df:a2:48:2b:d6:3f:ee:5b:51:17:0b:c2:
         28:b3:2b:4a:30:cb:83:fc:7e:74:b5:12:0c:7c:f6:db:83:16:
         74:5b:01:e7:e9:bc:27:ca:ab:b6:c3:26:db:fa:13:1a:55:7b:
         6f:fa:3c:48
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEO6GRUPisZQybdWtCrQMF6SGHzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJDQzAzQjZENkVFNUM3RTU1MjBGNDM1REM0M0Y3MDM3
NkNGNjAxNDAeFw0yMjEyMTYyMjA0MDRaFw0yMzEyMTUyMjA5MDRaMDMxMTAvBgNV
BAMTKDYxQUM4OTQ2OUUyMEI5MTBEMTdBMzFFMjE0NTVEOERBMDVFMkQ1RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtb8nm8Qw7QYvhfPKtkfwRSTL
oWHfrUZTNXBkespSox84NTQSz9Y6B+beO2V//xvmDeMNyMqT5zLzZty/Iy/ACTVU
xpvfX0+OAGDoX8UfkKGzI0eGHOicYhML7eVgUWGhT8re+jBjI1ZpT8/sh7BRZ+Gf
uoisRH+tb5UZhENrlFyMYEt7bYTWYwBfSv7+1NyfNH+e8sLAbvh4P3iK5oFLBBxL
Ldil91jwT/hDB2hfRdYU3Jt/Ib7DR388H9unfU18VMAKLf22R5r5h8X3Z5LOWrXt
iqA25aERlhiN9HcHkyOVbLc7VS944lF8EvosKox477nyPxvXoQhUpOIJAGb7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUYayJRp4guRDRejHiFFXY2gXi1eQwHwYDVR0j
BBgwFoAUYswDttbuXH5VIPQ13EP3A3bPYBQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz
LzAvNjJDQzAzQjZENkVFNUM3RTU1MjBGNDM1REM0M0Y3MDM3NkNGNjAxNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82MkNDMDNCNkQ2RUU1QzdFNTUy
MEY0MzVEQzQzRjcwMzc2Q0Y2MDE0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
RHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktzLzAvMzIz
ODMwMzQzYTM2MzkzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMwMzIz
NTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARpMDANBgkqhkiG9w0BAQsFAAOCAQEADegmzF8Dwkjv
Zh1vZPvXJAJj6/JRGUCcMf93YnjNokWVRvhO6jIz6cpkTsoeLvTcV8dcG95sKwgX
yEFA6Cn4R1DZS63cbQ/4WCMw2He9pfKnAXQcIVG+a8uvfGmDKQ6FlICPEDNrUqP9
I5B8uvyn4T1S03i+HhFJWv1E+Xbc09yxmc2W/80qsdqvAu3eJq3qhSQk6F/EgvqK
LG48jOhDPnStPboibHGJnoqLQnik6Hy22RxoUoRmPH/hl3DwizGTWEWQjZevpJfF
A0Hm36JIK9Y/7ltRFwvCKLMrSjDLg/x+dLUSDHz224MWdFsB5+m8J8qrtsMm2/oT
GlV7b/o8SA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:44 2025 by rpki-client