Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/323830343a373561343a3a2f33322d3438203d3e20323731303630.roa
File:                     323830343a373561343a3a2f33322d3438203d3e20323731303630.roa (raw, json)
Hash identifier:          ff9INnFQPwe9el+ZC1VzS87XtNdfH4NgTyLPVW1mL7U=
Subject key identifier:   80:76:AF:61:C0:D3:6B:4E:BF:8C:53:9C:91:D0:70:87:BF:CF:34:75
Certificate issuer:       /CN=7060E33282702ABCE5F9D4885CC70B1F11E76FED
Certificate serial:       27E6627118745CCFFDAD0CA09A9113614232BA95
Authority key identifier: 70:60:E3:32:82:70:2A:BC:E5:F9:D4:88:5C:C7:0B:1F:11:E7:6F:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/323830343a373561343a3a2f33322d3438203d3e20323731303630.roa
Signing time:             Thu 06 Mar 2025 01:51:45 +0000
ROA not before:           Thu 06 Mar 2025 01:46:45 +0000
ROA not after:            Thu 05 Mar 2026 01:51:45 +0000
asID:                     271060
IP address blocks:        2804:75a4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e6:62:71:18:74:5c:cf:fd:ad:0c:a0:9a:91:13:61:42:32:ba:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7060E33282702ABCE5F9D4885CC70B1F11E76FED
        Validity
            Not Before: Mar  6 01:46:45 2025 GMT
            Not After : Mar  5 01:51:45 2026 GMT
        Subject: CN=8076AF61C0D36B4EBF8C539C91D07087BFCF3475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:b3:ce:79:6a:58:0e:d3:75:27:d0:9f:cf:
                    85:2a:a0:67:ba:17:4f:8e:66:60:63:51:ea:61:13:
                    b8:94:61:7f:70:4b:32:2b:a1:9e:9a:fa:1d:19:99:
                    89:4e:49:19:53:4d:7b:79:94:6f:11:59:6f:0a:56:
                    0d:ab:da:d8:58:5a:24:76:00:56:b9:14:25:11:4e:
                    78:a6:98:bc:8e:f4:28:21:11:95:bb:96:87:02:bc:
                    97:5e:da:98:3a:62:b3:e2:94:a2:57:64:5f:c4:b2:
                    92:82:4f:8e:50:19:62:52:4a:7a:83:2b:8d:c2:19:
                    d9:35:dd:5b:b4:8a:06:28:90:e9:be:7b:ee:18:e2:
                    a5:c0:08:32:69:90:67:9d:c7:e6:73:49:1c:31:be:
                    7d:d6:12:51:f8:ef:a8:5a:4f:34:c8:d5:17:d3:3a:
                    38:2b:70:48:e2:bd:9c:77:e7:32:f0:00:49:ad:91:
                    0d:43:a8:2d:f2:e2:d0:e4:14:51:10:23:d2:10:7a:
                    62:25:ad:39:db:44:c9:40:4e:a9:3e:71:dc:d9:13:
                    59:8e:de:35:b5:ae:da:0f:6d:2f:7b:11:69:54:8a:
                    dd:66:8f:73:16:e1:10:74:0f:06:48:46:ee:95:81:
                    d2:1c:ab:d2:3c:9a:7c:b8:78:08:1c:9b:fb:13:11:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:76:AF:61:C0:D3:6B:4E:BF:8C:53:9C:91:D0:70:87:BF:CF:34:75
            X509v3 Authority Key Identifier:
                keyid:70:60:E3:32:82:70:2A:BC:E5:F9:D4:88:5C:C7:0B:1F:11:E7:6F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7060E33282702ABCE5F9D4885CC70B1F11E76FED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/1/323830343a373561343a3a2f33322d3438203d3e20323731303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:01:b3:b5:7c:d6:9b:11:dd:64:4e:b5:3f:20:cd:83:d6:
         a1:db:51:57:4e:bf:e0:8e:61:5a:41:de:4f:b4:34:9d:2e:c9:
         ad:df:d0:fb:7e:19:72:6a:f0:07:e8:0e:02:76:4d:50:93:22:
         a9:11:5f:51:8d:66:60:d0:db:3a:a6:87:00:2c:4a:e8:9b:a0:
         9f:42:95:52:da:2d:57:92:61:e2:e7:6f:67:c1:dc:86:c1:7d:
         78:d2:3a:81:2c:57:d3:31:40:8e:bb:78:6a:08:ae:42:09:bf:
         94:43:80:c1:fc:42:1f:a2:04:87:28:eb:a4:de:6f:7f:84:21:
         d8:07:94:f4:7c:42:0e:7b:39:53:dc:97:f8:63:8c:c1:8b:2a:
         36:fe:82:c4:73:cd:65:ba:33:29:8a:21:79:4b:f0:e0:33:45:
         0b:27:72:e9:43:3e:88:20:99:89:7e:fb:3a:cb:e0:36:99:bb:
         c5:a3:1c:c6:0e:d6:ac:be:9d:a0:7a:9c:89:1c:8f:8c:e9:e8:
         22:ce:0e:fc:e1:27:38:2c:f3:83:d2:c2:95:93:d0:47:0f:70:
         0b:99:35:90:fb:23:84:d6:34:6f:62:62:55:63:45:54:65:eb:
         10:e9:90:f9:bd:96:4e:50:80:01:f0:8b:f4:d7:1f:5e:cd:c3:
         4e:87:9e:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ+ZicRh0XM/9rQygmpETYUIyupUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA2MEUzMzI4MjcwMkFCQ0U1RjlENDg4NUNDNzBCMUYx
MUU3NkZFRDAeFw0yNTAzMDYwMTQ2NDVaFw0yNjAzMDUwMTUxNDVaMDMxMTAvBgNV
BAMTKDgwNzZBRjYxQzBEMzZCNEVCRjhDNTM5QzkxRDA3MDg3QkZDRjM0NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHLPOeWpYDtN1J9Cfz4UqoGe6
F0+OZmBjUephE7iUYX9wSzIroZ6a+h0ZmYlOSRlTTXt5lG8RWW8KVg2r2thYWiR2
AFa5FCURTnimmLyO9CghEZW7locCvJde2pg6YrPilKJXZF/EspKCT45QGWJSSnqD
K43CGdk13Vu0igYokOm+e+4Y4qXACDJpkGedx+ZzSRwxvn3WElH476haTzTI1RfT
OjgrcEjivZx35zLwAEmtkQ1DqC3y4tDkFFEQI9IQemIlrTnbRMlATqk+cdzZE1mO
3jW1rtoPbS97EWlUit1mj3MW4RB0DwZIRu6VgdIcq9I8mny4eAgcm/sTEatxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgHavYcDTa06/jFOckdBwh7/PNHUwHwYDVR0j
BBgwFoAUcGDjMoJwKrzl+dSIXMcLHxHnb+0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMllMQXJZQ0pBN1pWWXZETUZITjE4UmZ2c0xURThIVnZIaHgyTVR3c1Jq
V3IvMS83MDYwRTMzMjgyNzAyQUJDRTVGOUQ0ODg1Q0M3MEIxRjExRTc2RkVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwNjBFMzMyODI3MDJBQkNF
NUY5RDQ4ODVDQzcwQjFGMTFFNzZGRUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJZTEFyWUNKQTdaVll2RE1GSE4xOFJmdnNMVEU4SFZ2SGh4Mk1Ud3NSaldyLzEv
MzIzODMwMzQzYTM3MzU2MTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzAzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR1pDANBgkqhkiG9w0BAQsFAAOCAQEAL/MBs7V8
1psR3WROtT8gzYPWodtRV06/4I5hWkHeT7Q0nS7Jrd/Q+34ZcmrwB+gOAnZNUJMi
qRFfUY1mYNDbOqaHACxK6Jugn0KVUtotV5Jh4udvZ8HchsF9eNI6gSxX0zFAjrt4
agiuQgm/lEOAwfxCH6IEhyjrpN5vf4Qh2AeU9HxCDns5U9yX+GOMwYsqNv6CxHPN
ZbozKYoheUvw4DNFCydy6UM+iCCZiX77OsvgNpm7xaMcxg7WrL6doHqciRyPjOno
Is4O/OEnOCzzg9LClZPQRw9wC5k1kPsjhNY0b2JiVWNFVGXrEOmQ+b2WTlCAAfCL
9NcfXs3DToeeHA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:37:10 2025 by rpki-client