Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/323830343a336335303a3a2f33322d313238203d3e20323636323033.roa
File:                     323830343a336335303a3a2f33322d313238203d3e20323636323033.roa (raw, json)
Hash identifier:          waBBO40KoSRTuTMjKJgz0cUCEEc7XJuz6IdZzvtc/h4=
Subject key identifier:   3B:C3:61:E1:83:F0:67:C9:0E:44:8A:7A:97:82:06:1F:C7:93:D3:06
Certificate issuer:       /CN=F9D84C3D06850C8C15024E633B370ACB99C29A0E
Certificate serial:       6D536521D69E6CBB80BE5D77CC0152F705F7AFDA
Authority key identifier: F9:D8:4C:3D:06:85:0C:8C:15:02:4E:63:3B:37:0A:CB:99:C2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9D84C3D06850C8C15024E633B370ACB99C29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/323830343a336335303a3a2f33322d313238203d3e20323636323033.roa
Signing time:             Tue 07 Mar 2023 11:02:45 +0000
ROA not before:           Tue 07 Mar 2023 10:57:45 +0000
ROA not after:            Tue 05 Mar 2024 11:02:45 +0000
asID:                     266203
IP address blocks:        2804:3c50::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:53:65:21:d6:9e:6c:bb:80:be:5d:77:cc:01:52:f7:05:f7:af:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D84C3D06850C8C15024E633B370ACB99C29A0E
        Validity
            Not Before: Mar  7 10:57:45 2023 GMT
            Not After : Mar  5 11:02:45 2024 GMT
        Subject: CN=3BC361E183F067C90E448A7A9782061FC793D306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:dc:72:32:5f:85:28:84:7c:ea:a7:be:ee:
                    e2:cc:af:05:38:96:a7:11:06:dd:d0:0d:0c:5c:cb:
                    15:a0:20:0e:42:6e:10:82:89:39:a3:bf:27:77:7a:
                    a8:c0:43:98:1e:43:4c:bc:2d:97:0f:ab:14:fc:8c:
                    13:16:24:b9:82:91:4e:fa:c0:01:3a:e1:f0:0d:0f:
                    64:c0:95:c1:31:35:77:90:cf:ea:ae:72:1a:db:a9:
                    1d:76:5c:4e:96:e0:49:58:e3:dc:8c:64:72:4e:fc:
                    79:11:fa:48:f5:d3:79:ba:85:a8:27:0c:ef:60:0a:
                    7a:ff:ff:6f:e0:ef:dd:13:72:9d:c6:33:d4:7f:d3:
                    40:81:d6:d6:96:93:f3:a4:e2:66:41:57:70:ee:6a:
                    32:28:81:c7:b1:35:63:93:86:3a:b6:4b:8c:7b:45:
                    94:d4:b1:89:f4:5b:21:1f:eb:36:ff:a1:84:f2:89:
                    e2:c9:77:d8:c6:9d:b2:5a:90:b1:27:98:3b:17:3a:
                    cd:17:7d:f9:c5:01:7e:96:75:1d:ef:28:16:d3:91:
                    59:ac:5a:2e:4d:a1:8b:76:20:9c:d3:55:52:3a:24:
                    b5:d9:24:6c:e0:66:79:c1:22:c4:cd:1f:fe:f7:72:
                    3c:06:50:d0:f8:72:c9:a1:b3:ac:0a:c9:a8:5a:19:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C3:61:E1:83:F0:67:C9:0E:44:8A:7A:97:82:06:1F:C7:93:D3:06
            X509v3 Authority Key Identifier:
                keyid:F9:D8:4C:3D:06:85:0C:8C:15:02:4E:63:3B:37:0A:CB:99:C2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/F9D84C3D06850C8C15024E633B370ACB99C29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9D84C3D06850C8C15024E633B370ACB99C29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/323830343a336335303a3a2f33322d313238203d3e20323636323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:55:8b:84:19:74:f3:53:37:56:9e:02:26:77:92:3d:08:29:
         12:46:ae:45:44:bb:9f:08:3f:4a:48:a9:80:53:23:28:dc:b0:
         9e:1d:16:a4:7c:0a:26:84:0e:5a:04:3b:18:71:00:32:50:1e:
         34:bb:97:dc:36:c4:71:81:07:18:7b:a7:49:b9:6e:d1:3d:b4:
         34:8d:91:c0:78:1e:41:db:7f:07:e0:44:3b:09:3e:02:6d:70:
         1c:d6:1e:5c:b5:aa:cc:12:9f:2c:24:89:d1:3b:2f:d3:38:78:
         fc:57:fe:c8:73:11:7e:65:24:e9:7c:62:62:6b:2f:37:aa:c1:
         75:a2:07:8c:06:5d:8c:5b:a0:2e:fc:0b:b5:f0:0c:d5:f8:0c:
         eb:98:67:ce:48:2a:34:33:b1:86:69:09:d4:17:d8:20:8e:16:
         c2:bb:83:df:57:9b:72:74:ce:47:9c:d6:c4:02:db:36:76:95:
         53:92:73:9d:a3:1e:2b:a9:70:8b:a0:57:aa:47:24:1b:c3:ff:
         6f:2e:9c:2e:ba:9b:39:71:59:c1:6b:b5:17:0e:ba:6f:c0:23:
         0d:af:b8:fd:b7:f7:57:78:94:8f:a6:95:f5:c8:f0:22:60:1d:
         80:3c:be:56:6a:8d:41:5d:38:2a:70:7c:d7:69:dd:5e:79:dd:
         f5:7f:e1:ca
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUbVNlIdaebLuAvl13zAFS9wX3r9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlEODRDM0QwNjg1MEM4QzE1MDI0RTYzM0IzNzBBQ0I5
OUMyOUEwRTAeFw0yMzAzMDcxMDU3NDVaFw0yNDAzMDUxMTAyNDVaMDMxMTAvBgNV
BAMTKDNCQzM2MUUxODNGMDY3QzkwRTQ0OEE3QTk3ODIwNjFGQzc5M0QzMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQdxyMl+FKIR86qe+7uLMrwU4
lqcRBt3QDQxcyxWgIA5CbhCCiTmjvyd3eqjAQ5geQ0y8LZcPqxT8jBMWJLmCkU76
wAE64fAND2TAlcExNXeQz+quchrbqR12XE6W4ElY49yMZHJO/HkR+kj103m6hagn
DO9gCnr//2/g790Tcp3GM9R/00CB1taWk/Ok4mZBV3DuajIogcexNWOThjq2S4x7
RZTUsYn0WyEf6zb/oYTyieLJd9jGnbJakLEnmDsXOs0XffnFAX6WdR3vKBbTkVms
Wi5NoYt2IJzTVVI6JLXZJGzgZnnBIsTNH/73cjwGUND4csmhs6wKyahaGetjAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUO8Nh4YPwZ8kORIp6l4IGH8eT0wYwHwYDVR0j
BBgwFoAU+dhMPQaFDIwVAk5jOzcKy5nCmg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXYyNms4MThERTZNS1JYZFU4Z2dRdTVLVk1uakZnTlMybkFxbXl6aWdI
NEIvMC9GOUQ4NEMzRDA2ODUwQzhDMTUwMjRFNjMzQjM3MEFDQjk5QzI5QTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y5RDg0QzNEMDY4NTBDOEMx
NTAyNEU2MzNCMzcwQUNCOTlDMjlBMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl2MjZrODE4REU2TUtSWGRVOGdnUXU1S1ZNbmpGZ05TMm5BcW15emlnSDRCLzAv
MzIzODMwMzQzYTMzNjMzNTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDxQMA0GCSqGSIb3DQEBCwUAA4IBAQAeVYuE
GXTzUzdWngImd5I9CCkSRq5FRLufCD9KSKmAUyMo3LCeHRakfAomhA5aBDsYcQAy
UB40u5fcNsRxgQcYe6dJuW7RPbQ0jZHAeB5B238H4EQ7CT4CbXAc1h5ctarMEp8s
JInROy/TOHj8V/7IcxF+ZSTpfGJiay83qsF1ogeMBl2MW6Au/Au18AzV+AzrmGfO
SCo0M7GGaQnUF9ggjhbCu4PfV5tydM5HnNbEAts2dpVTknOdox4rqXCLoFeqRyQb
w/9vLpwuups5cVnBa7UXDrpvwCMNr7j9t/dXeJSPppX1yPAiYB2APL5Wao1BXTgq
cHzXad1eed31f+HK
-----END CERTIFICATE-----
Generated at Thu May 15 15:09:41 2025 by rpki-client