Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383130303a3a2f34302d3430203d3e20323731303834.roa
File:                     323830343a373032303a383130303a3a2f34302d3430203d3e20323731303834.roa (raw, json)
Hash identifier:          QOTS5wNmG56S4M22MfiE1vVKVVa7Sq/GxIRTyMJBgO8=
Subject key identifier:   7E:34:F2:DA:8C:1C:E5:D5:42:B7:3C:BE:39:39:67:94:E1:2F:F3:87
Certificate issuer:       /CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Certificate serial:       2A53094D2DE9772FA0372033382D79D52F5C1002
Authority key identifier: 70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383130303a3a2f34302d3430203d3e20323731303834.roa
Signing time:             Sun 04 Jun 2023 06:51:19 +0000
ROA not before:           Sun 04 Jun 2023 06:46:19 +0000
ROA not after:            Sun 02 Jun 2024 06:51:19 +0000
asID:                     271084
IP address blocks:        2804:7020:8100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:53:09:4d:2d:e9:77:2f:a0:37:20:33:38:2d:79:d5:2f:5c:10:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
        Validity
            Not Before: Jun  4 06:46:19 2023 GMT
            Not After : Jun  2 06:51:19 2024 GMT
        Subject: CN=7E34F2DA8C1CE5D542B73CBE39396794E12FF387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:bd:8f:69:d1:c2:a8:cc:38:74:63:18:cf:
                    51:0a:48:20:3e:65:73:16:a5:6a:18:a7:c8:66:c7:
                    bb:22:89:b3:5d:1c:58:ee:c1:51:44:42:50:af:6f:
                    d1:08:1c:0c:d3:b5:9a:ec:8c:9c:1f:15:56:64:02:
                    87:5b:08:28:53:c6:8f:75:33:76:44:69:a7:c1:5b:
                    65:d8:4a:b2:f3:62:3b:b0:5f:9c:9d:4e:d6:b5:8b:
                    0b:37:41:69:ab:fa:6e:63:75:6a:7f:59:30:03:64:
                    6f:8a:16:a4:c5:1b:ee:be:7b:d5:e7:1c:b1:7a:46:
                    78:34:e9:a5:27:3d:0b:21:ac:00:fe:d0:0e:06:b2:
                    8c:93:4a:3c:5f:1c:ca:a3:0f:5e:85:a8:06:ea:20:
                    96:79:51:e2:7e:e3:f8:40:0c:91:53:11:6e:90:01:
                    7c:c8:27:b7:5f:70:51:f2:43:de:6b:0e:ed:75:eb:
                    7a:07:2e:4b:06:0f:28:63:fe:c3:7a:9f:68:61:99:
                    ff:8c:bf:a0:be:62:f5:f4:8d:ec:0c:ec:ab:8a:83:
                    82:d0:6e:75:ca:98:ba:32:d5:bf:2e:68:a8:f6:02:
                    e3:e6:5d:27:46:3e:86:0d:2f:d7:45:c8:91:23:e5:
                    32:ad:a9:38:5a:ac:77:a1:e4:1d:27:84:a0:74:47:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:34:F2:DA:8C:1C:E5:D5:42:B7:3C:BE:39:39:67:94:E1:2F:F3:87
            X509v3 Authority Key Identifier:
                keyid:70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a383130303a3a2f34302d3430203d3e20323731303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7020:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:c2:fd:88:01:63:e5:12:e1:08:50:99:d7:70:f7:8e:18:f6:
         43:cb:76:40:57:ab:07:c0:3b:92:a2:f0:44:c3:26:c6:7f:15:
         27:cb:bd:e2:c3:8d:0d:0c:64:04:9a:c7:27:75:3b:47:14:61:
         78:59:70:5e:2c:76:56:86:57:4d:83:61:50:31:46:23:43:eb:
         d5:4d:b6:d1:64:67:17:9d:04:b7:cc:18:09:7e:1b:09:02:30:
         3a:36:dd:5f:70:18:18:2d:48:1d:09:55:89:4b:f6:34:7e:06:
         80:ff:80:60:26:cb:09:ff:a6:c0:92:cf:99:89:27:63:1c:14:
         b7:3e:0d:eb:ec:e2:8f:92:d1:a8:6a:b1:40:06:dc:12:8c:a8:
         ef:17:46:df:eb:11:bd:af:07:6e:11:ec:29:8a:5b:84:d8:3f:
         04:03:43:83:63:42:33:5b:b9:71:b2:10:8e:28:36:74:0a:14:
         15:7c:c9:59:a9:80:7f:12:30:18:a1:20:8d:bc:81:bf:3d:97:
         4a:dd:34:73:85:49:64:9b:e7:86:16:e0:a6:b8:54:9b:76:44:
         36:05:af:e1:5a:15:e5:9a:f0:17:09:67:bd:52:e9:b8:8d:dc:
         1a:c0:b6:b9:1f:88:6d:bf:92:42:44:9a:1d:57:e5:2e:cc:4f:
         d3:51:19:56
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKlMJTS3pdy+gNyAzOC151S9cEAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBENDJFRjI5MjYzOUQyMEU4MTdEQTMyQUEzREUyMzA2
RENENEM0NTAeFw0yMzA2MDQwNjQ2MTlaFw0yNDA2MDIwNjUxMTlaMDMxMTAvBgNV
BAMTKDdFMzRGMkRBOEMxQ0U1RDU0MkI3M0NCRTM5Mzk2Nzk0RTEyRkYzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQh72PadHCqMw4dGMYz1EKSCA+
ZXMWpWoYp8hmx7siibNdHFjuwVFEQlCvb9EIHAzTtZrsjJwfFVZkAodbCChTxo91
M3ZEaafBW2XYSrLzYjuwX5ydTta1iws3QWmr+m5jdWp/WTADZG+KFqTFG+6+e9Xn
HLF6Rng06aUnPQshrAD+0A4GsoyTSjxfHMqjD16FqAbqIJZ5UeJ+4/hADJFTEW6Q
AXzIJ7dfcFHyQ95rDu1163oHLksGDyhj/sN6n2hhmf+Mv6C+YvX0jewM7KuKg4LQ
bnXKmLoy1b8uaKj2AuPmXSdGPoYNL9dFyJEj5TKtqTharHeh5B0nhKB0Rxy/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUfjTy2owc5dVCtzy+OTlnlOEv84cwHwYDVR0j
BBgwFoAUcNQu8pJjnSDoF9oyqj3iMG3NTEUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0NmancyUXBCaTZxVDZuQXZudHZpR0Q0cmh5ZVJmVXl5Mlp3b29Rb2NQ
VFcvMC83MEQ0MkVGMjkyNjM5RDIwRTgxN0RBMzJBQTNERTIzMDZEQ0Q0QzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwRDQyRUYyOTI2MzlEMjBF
ODE3REEzMkFBM0RFMjMwNkRDRDRDNDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dDZmp3MlFwQmk2cVQ2bkF2bnR2aUdENHJoeWVSZlV5eTJad29vUW9jUFRXLzAv
MzIzODMwMzQzYTM3MzAzMjMwM2EzODMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMTMwMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcCCBMA0GCSqGSIb3DQEBCwUA
A4IBAQDGwv2IAWPlEuEIUJnXcPeOGPZDy3ZAV6sHwDuSovBEwybGfxUny73iw40N
DGQEmscndTtHFGF4WXBeLHZWhldNg2FQMUYjQ+vVTbbRZGcXnQS3zBgJfhsJAjA6
Nt1fcBgYLUgdCVWJS/Y0fgaA/4BgJssJ/6bAks+ZiSdjHBS3Pg3r7OKPktGoarFA
BtwSjKjvF0bf6xG9rwduEewpiluE2D8EA0ODY0IzW7lxshCOKDZ0ChQVfMlZqYB/
EjAYoSCNvIG/PZdK3TRzhUlkm+eGFuCmuFSbdkQ2Ba/hWhXlmvAXCWe9Uum4jdwa
wLa5H4htv5JCRJodV+UuzE/TURlW
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:26:34 2025 by rpki-client