Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a343030303a3a2f33352d3335203d3e20323730353834.roa
File:                     323830343a366534303a343030303a3a2f33352d3335203d3e20323730353834.roa (raw, json)
Hash identifier:          9qPpD/kQ3XWWasc5H9hMrScSwHhEnW8MSgT9ADsaX/M=
Subject key identifier:   04:53:B1:BC:98:95:2E:CE:68:F0:32:A6:AE:A9:68:C5:26:00:EE:DE
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       48D7F737B2A5BFE34D8A767254AC59332AD150B2
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a343030303a3a2f33352d3335203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:55 +0000
ROA not before:           Fri 31 Mar 2023 16:27:55 +0000
ROA not after:            Fri 29 Mar 2024 16:32:55 +0000
asID:                     270584
IP address blocks:        2804:6e40:4000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d7:f7:37:b2:a5:bf:e3:4d:8a:76:72:54:ac:59:33:2a:d1:50:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:55 2023 GMT
            Not After : Mar 29 16:32:55 2024 GMT
        Subject: CN=0453B1BC98952ECE68F032A6AEA968C52600EEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ea:ed:94:c5:f9:90:9b:d8:ec:cf:39:29:e2:
                    b4:8d:60:18:fa:82:fd:15:8c:53:04:26:f9:e5:07:
                    b8:21:d1:26:74:e3:85:8d:ad:b4:22:9a:2f:49:2d:
                    d5:8f:02:88:04:a1:64:e0:13:fd:a5:8d:f9:18:52:
                    42:47:ff:b4:6d:b4:8c:77:ac:fe:7c:64:f8:fa:58:
                    a5:72:86:fb:90:dd:a4:58:20:ab:4d:97:c2:fb:cd:
                    46:e4:12:b0:5b:1c:37:80:26:a4:a1:3c:a3:e3:be:
                    6d:2a:50:05:af:4c:9b:fa:1a:c6:7b:3f:10:41:08:
                    a8:82:80:cd:83:eb:f4:6f:d8:cf:7b:a4:b5:50:e2:
                    dd:d6:83:2b:0a:76:a9:4a:85:9d:84:81:2e:3a:40:
                    7e:48:0c:eb:57:f0:80:9c:ce:37:20:f3:f8:e8:95:
                    97:92:43:4d:1f:b9:c0:72:53:44:56:eb:c2:6e:9b:
                    b0:2a:b0:f9:91:6b:3a:6f:1e:97:81:dd:49:15:88:
                    a2:87:53:26:ee:22:92:e8:62:33:ea:c8:3b:07:7d:
                    1e:a5:61:9a:9b:ed:d0:05:5d:9f:15:fb:65:be:50:
                    26:a4:db:31:0a:77:b7:b0:e4:9a:f8:bf:98:16:20:
                    d4:d1:23:d9:a3:09:0b:df:f9:ff:ff:72:4c:d8:f4:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:53:B1:BC:98:95:2E:CE:68:F0:32:A6:AE:A9:68:C5:26:00:EE:DE
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a343030303a3a2f33352d3335203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e40:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:12:be:a5:80:0f:b8:c4:13:91:a5:70:f9:71:98:32:3c:
         51:24:4c:85:42:53:e9:a5:2a:8f:58:8f:f0:d0:73:e1:4b:5e:
         b4:ae:92:98:4f:a1:a5:76:0f:5e:e9:69:cf:d3:21:0e:ec:8e:
         4c:77:97:44:c0:0d:4c:a4:ab:f0:03:3d:8f:40:29:23:02:f7:
         a1:d1:03:b0:2e:26:70:b1:9e:59:19:34:52:0b:2b:b2:19:08:
         67:8e:fe:cf:d6:4d:04:ff:30:e2:3c:ea:6a:ae:5a:89:ed:f7:
         3b:45:ed:ad:df:4c:e8:5a:cf:85:26:8f:9c:40:c3:26:bf:8a:
         0f:de:a0:a2:54:cd:39:1d:90:a8:97:ec:c2:6c:2d:7a:35:59:
         d2:65:7a:6a:eb:2b:85:7c:c1:ad:bd:bd:ab:61:11:f6:9c:51:
         b7:f4:86:2e:00:8e:ea:19:d0:00:d1:52:74:b7:16:ed:01:f4:
         7e:da:90:cc:47:35:af:89:36:4e:23:fa:d7:b8:75:d2:e4:de:
         3d:62:66:e0:78:4a:b1:5b:a3:48:5f:b3:ce:79:42:a6:dc:0a:
         b5:35:87:ec:cd:9e:88:a7:84:4f:fe:38:35:f5:5b:c3:21:f4:
         2d:07:6f:da:ec:de:39:9f:f8:9b:30:c8:45:f5:c8:92:ee:d0:
         8d:4d:dd:60
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUSNf3N7Klv+NNinZyVKxZMyrRULIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlBRUVFNTY3QjA3QkZFRkZFQkE2N0VBNUE4NzJBNjdB
RTI4QTlDNzAeFw0yMzAzMzExNjI3NTVaFw0yNDAzMjkxNjMyNTVaMDMxMTAvBgNV
BAMTKDA0NTNCMUJDOTg5NTJFQ0U2OEYwMzJBNkFFQTk2OEM1MjYwMEVFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6u2UxfmQm9jszzkp4rSNYBj6
gv0VjFMEJvnlB7gh0SZ044WNrbQimi9JLdWPAogEoWTgE/2ljfkYUkJH/7RttIx3
rP58ZPj6WKVyhvuQ3aRYIKtNl8L7zUbkErBbHDeAJqShPKPjvm0qUAWvTJv6GsZ7
PxBBCKiCgM2D6/Rv2M97pLVQ4t3WgysKdqlKhZ2EgS46QH5IDOtX8ICczjcg8/jo
lZeSQ00fucByU0RW68Jum7AqsPmRazpvHpeB3UkViKKHUybuIpLoYjPqyDsHfR6l
YZqb7dAFXZ8V+2W+UCak2zEKd7ew5Jr4v5gWINTRI9mjCQvf+f//ckzY9JQfAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUBFOxvJiVLs5o8DKmrqloxSYA7t4wHwYDVR0j
BBgwFoAUaa7uVnsHv+/+umfqWocqZ64oqccwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uYWZjMURMb2I4MWVhazl2cTRxNm5qTWpMQmFWR3A0VWRFTnRCYm5wRW5L
LzAvNjlBRUVFNTY3QjA3QkZFRkZFQkE2N0VBNUE4NzJBNjdBRTI4QTlDNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82OUFFRUU1NjdCMDdCRkVGRkVC
QTY3RUE1QTg3MkE2N0FFMjhBOUM3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
YWZjMURMb2I4MWVhazl2cTRxNm5qTWpMQmFWR3A0VWRFTnRCYm5wRW5LLzAvMzIz
ODMwMzQzYTM2NjUzNDMwM2EzNDMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNkM2Uy
MDMyMzczMDM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEbkBAMA0GCSqGSIb3DQEBCwUAA4IB
AQCH7BK+pYAPuMQTkaVw+XGYMjxRJEyFQlPppSqPWI/w0HPhS160rpKYT6Gldg9e
6WnP0yEO7I5Md5dEwA1MpKvwAz2PQCkjAveh0QOwLiZwsZ5ZGTRSCyuyGQhnjv7P
1k0E/zDiPOpqrlqJ7fc7Re2t30zoWs+FJo+cQMMmv4oP3qCiVM05HZCol+zCbC16
NVnSZXpq6yuFfMGtvb2rYRH2nFG39IYuAI7qGdAA0VJ0txbtAfR+2pDMRzWviTZO
I/rXuHXS5N49YmbgeEqxW6NIX7POeUKm3Aq1NYfszZ6Ip4RP/jg19VvDIfQtB2/a
7N45n/ibMMhF9ciS7tCNTd1g
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:41:42 2025 by rpki-client