Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3234383a3a2f34352d3435203d3e20323637323730.roa
File:                     323830343a346165343a3234383a3a2f34352d3435203d3e20323637323730.roa (raw, json)
Hash identifier:          20gX1AeQ+X40nwwpOtrnC5seTqriRqVKP0pxn4wYlpc=
Subject key identifier:   61:DC:7C:F6:70:5A:C3:38:04:7B:B4:73:39:62:A2:EB:71:56:A0:C0
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       663AC68911C5C127C076D0E4AB74B67426D6A77C
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3234383a3a2f34352d3435203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:39 +0000
ROA not before:           Wed 16 Aug 2023 18:39:39 +0000
ROA not after:            Wed 14 Aug 2024 18:44:39 +0000
asID:                     267270
IP address blocks:        2804:4ae4:248::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3a:c6:89:11:c5:c1:27:c0:76:d0:e4:ab:74:b6:74:26:d6:a7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:39 2023 GMT
            Not After : Aug 14 18:44:39 2024 GMT
        Subject: CN=61DC7CF6705AC338047BB4733962A2EB7156A0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:88:04:df:c7:eb:a0:f5:b4:b6:ba:b1:99:
                    e5:ef:a1:9b:24:b8:ff:82:73:fb:39:49:24:dc:0c:
                    c0:4a:ab:b0:e9:f7:67:e2:73:76:de:cf:cf:1a:84:
                    49:d9:2b:48:bb:6e:b5:30:ac:d0:4e:d6:9e:e2:8d:
                    8b:07:42:49:c4:0b:4f:ce:9c:bc:1d:42:bf:ba:fc:
                    00:28:19:bb:8b:52:c0:28:3e:f3:d7:65:ff:bf:79:
                    c6:0e:65:b7:f0:ae:54:95:43:f5:ca:4a:d4:38:9f:
                    15:7e:03:f0:a3:d9:78:30:9b:52:47:e5:f3:b2:56:
                    aa:ea:47:cf:f8:09:8c:87:25:53:60:ba:55:78:a2:
                    34:f7:db:f4:25:5e:59:30:05:fa:50:d1:cd:4d:01:
                    bf:b9:35:e1:eb:7e:0f:3f:ca:b9:60:05:9f:ad:f5:
                    98:12:9d:c7:88:e5:e2:0b:84:17:92:17:d3:fe:df:
                    d6:c3:9e:0d:e0:e8:b3:ba:38:3d:a0:55:e9:b0:99:
                    e3:4e:4d:94:88:67:4a:b8:00:65:15:2f:4d:db:f0:
                    2b:51:d0:d1:85:d1:4c:33:e3:d5:72:1f:4c:ce:f1:
                    3b:b4:ec:de:70:58:72:d7:2d:0d:05:77:38:69:c3:
                    27:b0:ee:c8:93:bf:3c:8e:81:af:bd:b0:2f:a2:c3:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DC:7C:F6:70:5A:C3:38:04:7B:B4:73:39:62:A2:EB:71:56:A0:C0
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3234383a3a2f34352d3435203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4:248::/45

    Signature Algorithm: sha256WithRSAEncryption
         7e:2f:52:46:da:69:8b:03:ff:5d:7a:50:89:10:dc:47:2f:1c:
         95:3f:84:05:3d:1b:f2:31:41:f1:a9:a1:4b:f6:ba:33:95:b4:
         81:b8:7a:07:06:54:a5:b6:81:ce:08:a8:6d:df:ab:29:8f:78:
         66:f9:76:b9:ce:1b:62:91:36:d1:3c:bf:e8:a3:26:4c:57:b3:
         b5:eb:89:b0:53:4b:87:95:6d:e8:cc:fe:07:6e:e6:b4:49:75:
         c3:16:59:44:77:ff:8b:65:11:ff:e7:0c:bf:1d:ee:1b:e0:74:
         2f:f1:c1:ea:4e:4e:d8:e4:7b:50:54:d1:6b:34:ba:c1:a6:b9:
         7b:aa:69:1e:8c:44:5e:52:2d:2e:67:f8:83:54:32:7b:11:b7:
         9f:39:de:01:9f:98:12:38:ed:e8:43:72:f5:d1:6d:19:c6:9d:
         2d:52:01:58:9d:a7:1f:6b:a7:df:6e:86:72:85:fb:8a:ba:51:
         2b:84:62:dc:ca:59:e9:b8:72:ab:45:41:85:00:aa:32:9b:c0:
         fe:79:af:2c:cb:08:fa:d6:ae:d3:f9:51:de:8b:2b:da:78:75:
         ad:d0:e6:45:59:9b:7f:3a:3d:b3:da:ae:61:2a:3b:a1:27:ca:
         3c:98:5b:45:64:12:1b:e4:b3:f3:75:f1:01:29:ae:a3:2b:59:
         c4:1b:e7:65
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUZjrGiRHFwSfAdtDkq3S2dCbWp3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFCMzJBMERGRDM1QTc2MUEwRTQ3NzNCRjIwOTk3OEYx
OENCQThGOTAeFw0yMzA4MTYxODM5MzlaFw0yNDA4MTQxODQ0MzlaMDMxMTAvBgNV
BAMTKDYxREM3Q0Y2NzA1QUMzMzgwNDdCQjQ3MzM5NjJBMkVCNzE1NkEwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvYgE38froPW0trqxmeXvoZsk
uP+Cc/s5SSTcDMBKq7Dp92fic3bez88ahEnZK0i7brUwrNBO1p7ijYsHQknEC0/O
nLwdQr+6/AAoGbuLUsAoPvPXZf+/ecYOZbfwrlSVQ/XKStQ4nxV+A/Cj2Xgwm1JH
5fOyVqrqR8/4CYyHJVNgulV4ojT32/QlXlkwBfpQ0c1NAb+5NeHrfg8/yrlgBZ+t
9ZgSnceI5eILhBeSF9P+39bDng3g6LO6OD2gVemwmeNOTZSIZ0q4AGUVL03b8CtR
0NGF0Uwz49VyH0zO8Tu07N5wWHLXLQ0Fdzhpwyew7siTvzyOga+9sC+iww39AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUYdx89nBawzgEe7RzOWKi63FWoMAwHwYDVR0j
BBgwFoAUgbMqDf01p2Gg5Hc78gmXjxjLqPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWp2VWhhc3haWkxCeW5Qb0EydGVhTnVqVmI4bXZxbmdxd1ozWTJwS2ll
Rk4vMC84MUIzMkEwREZEMzVBNzYxQTBFNDc3M0JGMjA5OTc4RjE4Q0JBOEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgxQjMyQTBERkQzNUE3NjFB
MEU0NzczQkYyMDk5NzhGMThDQkE4RjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlqdlVoYXN4WlpMQnluUG9BMnRlYU51alZiOG12cW5ncXdaM1kycEtpZUZOLzAv
MzIzODMwMzQzYTM0NjE2NTM0M2EzMjM0MzgzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM2MzczMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBErkAkgwDQYJKoZIhvcNAQELBQAD
ggEBAH4vUkbaaYsD/116UIkQ3EcvHJU/hAU9G/IxQfGpoUv2ujOVtIG4egcGVKW2
gc4IqG3fqymPeGb5drnOG2KRNtE8v+ijJkxXs7XribBTS4eVbejM/gdu5rRJdcMW
WUR3/4tlEf/nDL8d7hvgdC/xwepOTtjke1BU0Ws0usGmuXuqaR6MRF5SLS5n+INU
MnsRt5853gGfmBI47ehDcvXRbRnGnS1SAVidpx9rp99uhnKF+4q6USuEYtzKWem4
cqtFQYUAqjKbwP55ryzLCPrWrtP5Ud6LK9p4da3Q5kVZm386PbParmEqO6EnyjyY
W0VkEhvks/N18QEprqMrWcQb52U=
-----END CERTIFICATE-----
Generated at Sun May 11 09:22:14 2025 by rpki-client