Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a383030303a3a2f33342d3334203d3e20323636393131.roa
File:                     323830343a343533343a383030303a3a2f33342d3334203d3e20323636393131.roa (raw, json)
Hash identifier:          T7W9UXzIiMzDyAcvTJHJyTVAU+44wGk5Zt48WJhomLQ=
Subject key identifier:   7D:24:DC:39:65:52:ED:C0:EC:71:CC:25:7E:8D:E3:9C:1C:55:B5:B9
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       1EFA277250AE589F9980E866AD8C8D682B7DBAE3
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a383030303a3a2f33342d3334203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:51:27 +0000
ROA not before:           Wed 16 Aug 2023 13:46:27 +0000
ROA not after:            Wed 14 Aug 2024 13:51:27 +0000
asID:                     266911
IP address blocks:        2804:4534:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fa:27:72:50:ae:58:9f:99:80:e8:66:ad:8c:8d:68:2b:7d:ba:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:46:27 2023 GMT
            Not After : Aug 14 13:51:27 2024 GMT
        Subject: CN=7D24DC396552EDC0EC71CC257E8DE39C1C55B5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:2b:25:a4:f7:94:c9:55:79:a8:74:a7:97:
                    91:67:01:63:e3:59:55:f4:54:70:bf:43:1a:6c:36:
                    f3:34:dd:cb:67:33:bc:2b:c5:ce:aa:53:34:71:e7:
                    72:0a:be:56:5f:98:3a:00:fa:c8:20:1c:54:41:1e:
                    e7:0c:0a:ec:a8:e1:7c:26:8a:57:bb:3c:f7:b0:cb:
                    df:12:14:8f:9a:6d:e9:e7:d4:40:4b:26:29:00:99:
                    06:34:70:5a:fc:c0:5e:ea:cf:b9:a2:25:35:00:07:
                    a9:86:ea:18:3f:14:6f:e8:7b:49:90:07:48:39:0c:
                    69:82:27:05:ea:01:8f:47:34:1b:5b:22:1b:ee:b4:
                    b2:6b:53:e0:95:ca:95:9d:f6:b0:af:d4:75:29:66:
                    95:ca:c2:54:0f:cf:31:b9:3c:3d:d1:ef:06:ce:48:
                    5a:6c:99:2b:25:e5:67:9e:73:5d:3f:41:48:c7:a8:
                    5f:17:24:45:99:8b:03:0e:d2:80:46:e3:9f:1e:21:
                    ff:89:09:96:15:70:9b:54:77:4b:dd:a4:b5:92:cc:
                    59:b8:0a:a4:ab:d8:4a:2c:3b:e4:e7:a2:2e:58:75:
                    a1:09:cb:00:87:27:2e:68:43:77:50:37:7f:bb:b2:
                    63:a4:5e:46:62:6d:46:78:a3:c3:01:1f:37:3d:85:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:24:DC:39:65:52:ED:C0:EC:71:CC:25:7E:8D:E3:9C:1C:55:B5:B9
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a383030303a3a2f33342d3334203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4534:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:2b:9d:3a:9f:f6:11:40:6d:07:cf:69:1c:97:e5:7f:e0:
         f1:7d:bb:bb:8d:0a:54:87:5c:30:e6:e3:b2:c3:d9:b4:e4:bd:
         c7:56:fc:15:2a:35:ab:ce:87:50:a7:9c:92:c5:17:69:0c:e3:
         d4:9a:ce:7b:70:3a:c4:4a:ff:db:46:37:eb:1b:fa:44:fe:d4:
         f9:e4:48:d1:70:c2:f9:25:50:e4:b3:1e:eb:38:b1:8f:33:dc:
         71:2c:ee:9b:0b:67:27:bf:ca:69:16:ba:23:46:8a:1d:b4:57:
         7c:df:a5:73:6e:ec:23:30:24:ab:4e:c5:f5:cd:6f:c7:41:a3:
         78:01:bf:7e:e5:99:1b:e7:cd:70:d0:d7:1f:cf:9e:81:d1:ac:
         0f:0f:f3:a1:bf:b5:ee:a8:28:fc:06:47:aa:f9:fd:f2:90:95:
         b2:cb:08:86:17:3e:44:54:34:7d:92:6e:94:1b:8a:45:32:b0:
         e3:22:1a:4a:24:1b:75:05:e3:0b:4c:ad:b5:93:80:47:2d:6b:
         5e:8c:94:21:7b:1a:a1:dc:f7:aa:83:a7:97:b2:b1:50:01:6a:
         da:50:6b:2c:bd:16:e1:eb:ba:a8:8b:19:95:e8:a1:bb:9a:ab:
         ee:5c:2e:7e:53:50:dd:94:ae:5c:15:17:c7:01:68:bd:53:78:
         81:a1:b9:55
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHvonclCuWJ+ZgOhmrYyNaCt9uuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk3MEEzNkIwRDQzMDUwMkE1Njk1NTRGRTRGODVFNzM1
MDhFQTdDRjAeFw0yMzA4MTYxMzQ2MjdaFw0yNDA4MTQxMzUxMjdaMDMxMTAvBgNV
BAMTKDdEMjREQzM5NjU1MkVEQzBFQzcxQ0MyNTdFOERFMzlDMUM1NUI1QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0CslpPeUyVV5qHSnl5FnAWPj
WVX0VHC/QxpsNvM03ctnM7wrxc6qUzRx53IKvlZfmDoA+sggHFRBHucMCuyo4Xwm
ile7PPewy98SFI+abenn1EBLJikAmQY0cFr8wF7qz7miJTUAB6mG6hg/FG/oe0mQ
B0g5DGmCJwXqAY9HNBtbIhvutLJrU+CVypWd9rCv1HUpZpXKwlQPzzG5PD3R7wbO
SFpsmSsl5Weec10/QUjHqF8XJEWZiwMO0oBG458eIf+JCZYVcJtUd0vdpLWSzFm4
CqSr2EosO+Tnoi5YdaEJywCHJy5oQ3dQN3+7smOkXkZibUZ4o8MBHzc9hcQPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUfSTcOWVS7cDsccwlfo3jnBxVtbkwHwYDVR0j
BBgwFoAUKXCjaw1DBQKlaVVP5Phec1COp88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2g5NzZaYlJZY1RUaWVTdWVWQ0FDRkxHRG1SRUREM0N4aGpDSFFUTGVR
WHcvMC8yOTcwQTM2QjBENDMwNTAyQTU2OTU1NEZFNEY4NUU3MzUwOEVBN0NGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI5NzBBMzZCMEQ0MzA1MDJB
NTY5NTU0RkU0Rjg1RTczNTA4RUE3Q0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoOTc2WmJSWWNUVGllU3VlVkNBQ0ZMR0RtUkVERDNDeGhqQ0hRVExlUVh3LzAv
MzIzODMwMzQzYTM0MzUzMzM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERTSAMA0GCSqGSIb3DQEBCwUA
A4IBAQA91yudOp/2EUBtB89pHJflf+Dxfbu7jQpUh1ww5uOyw9m05L3HVvwVKjWr
zodQp5ySxRdpDOPUms57cDrESv/bRjfrG/pE/tT55EjRcML5JVDksx7rOLGPM9xx
LO6bC2cnv8ppFrojRoodtFd836VzbuwjMCSrTsX1zW/HQaN4Ab9+5Zkb581w0Ncf
z56B0awPD/Ohv7XuqCj8Bkeq+f3ykJWyywiGFz5EVDR9km6UG4pFMrDjIhpKJBt1
BeMLTK21k4BHLWtejJQhexqh3Peqg6eXsrFQAWraUGssvRbh67qoixmV6KG7mqvu
XC5+U1DdlK5cFRfHAWi9U3iBoblV
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:13 2025 by rpki-client