Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f33322d3332203d3e203532373036.roa
File:                     323830343a6337303a3a2f33322d3332203d3e203532373036.roa (raw, json)
Hash identifier:          9rQrXgyjxf79OL41viyhKVk2TQZTigMfF7gGBsQLYIs=
Subject key identifier:   1D:BE:10:95:82:E0:41:FF:27:CB:C1:EA:5D:A2:0A:CC:F0:EF:16:BD
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       38A253E86CA0C9D128AB5BB6D442781DA8D63BF0
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f33322d3332203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:44 +0000
ROA not before:           Thu 06 Mar 2025 02:26:44 +0000
ROA not after:            Thu 05 Mar 2026 02:31:44 +0000
asID:                     52706
IP address blocks:        2804:c70::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a2:53:e8:6c:a0:c9:d1:28:ab:5b:b6:d4:42:78:1d:a8:d6:3b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:44 2025 GMT
            Not After : Mar  5 02:31:44 2026 GMT
        Subject: CN=1DBE109582E041FF27CBC1EA5DA20ACCF0EF16BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:af:ed:75:da:17:29:2a:d0:f3:33:c6:af:
                    f2:73:4c:47:58:56:17:36:ef:5e:02:75:de:b6:cf:
                    70:38:c5:32:52:99:fe:89:e8:72:92:df:6b:80:04:
                    e9:b6:3f:f1:0f:7f:61:36:e6:ae:41:65:03:fa:8d:
                    b1:b8:5a:4d:0f:f5:88:76:e3:e9:37:3c:3a:30:26:
                    ca:f4:0f:61:e9:d2:b1:a1:dd:27:6e:cf:9f:41:72:
                    e8:10:34:8a:6e:b5:38:58:65:7b:9e:9e:ae:6d:25:
                    1d:f1:e5:6a:74:c5:98:ea:51:94:b4:aa:d7:d8:c6:
                    76:a0:16:1a:6e:41:f7:75:91:34:81:dd:52:af:e4:
                    5a:ff:50:35:aa:f7:12:e0:dd:46:7d:0b:0a:d2:32:
                    28:34:f5:3b:7b:57:27:13:4f:ec:87:23:f5:7b:8c:
                    08:e5:c2:99:c0:06:1c:4f:e2:eb:0f:4d:f9:8b:30:
                    30:94:98:ee:02:4d:36:d7:76:61:d2:4c:91:69:13:
                    31:0e:38:97:b4:e3:9f:17:6f:d9:84:2f:ec:4c:11:
                    0e:04:64:13:de:e8:3b:0b:a2:24:5e:eb:6e:8f:2d:
                    08:97:60:71:9f:09:3c:b3:f2:34:1c:b1:2b:1e:20:
                    70:57:ae:54:3a:81:46:f8:e9:33:21:94:89:a8:b0:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BE:10:95:82:E0:41:FF:27:CB:C1:EA:5D:A2:0A:CC:F0:EF:16:BD
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f33322d3332203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:42:86:75:c1:f7:a0:40:93:a6:f2:b9:ec:f6:2a:e6:ce:8d:
         28:47:ac:90:85:8f:1a:e6:a1:78:94:96:49:4c:1e:5c:e1:99:
         c9:e4:f3:0d:97:fc:86:b5:07:b3:b9:d0:7d:e4:6e:f6:b8:bc:
         1c:8f:ac:0f:a3:2c:05:dd:b3:fc:9e:c7:e5:2d:ae:af:af:ac:
         a0:99:90:7c:85:5b:18:24:51:65:ec:e9:a3:02:ef:b9:d8:f5:
         d9:cc:d5:fd:e5:15:0e:7c:9e:ec:4e:22:16:7a:73:ee:78:6e:
         7f:18:8e:3a:f1:a6:8a:f0:d5:ec:89:40:d2:1a:9d:ce:b8:6f:
         9e:3b:b6:01:39:30:65:d8:37:63:74:d6:8c:95:48:ff:90:ed:
         72:60:cc:f7:bc:7c:93:59:0c:6d:05:33:f8:17:f4:ee:2b:5e:
         a5:2d:da:e8:9a:0d:62:fa:78:46:ed:e2:75:ae:83:fe:39:6c:
         31:61:ae:af:dd:33:60:89:58:d1:a1:e0:91:c7:5e:4e:a5:51:
         e5:67:2e:c0:3e:be:d8:fb:8d:fe:32:51:ed:f6:65:24:a8:bf:
         69:21:af:62:9f:9b:8c:74:e2:46:03:03:7e:69:02:e1:d8:84:
         dc:85:74:58:b5:4b:c8:f7:66:85:c7:ba:ef:88:c5:bf:b7:c7:
         39:2d:6b:23
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUOKJT6GygydEoq1u21EJ4HajWO/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2NDRaFw0yNjAzMDUwMjMxNDRaMDMxMTAvBgNV
BAMTKDFEQkUxMDk1ODJFMDQxRkYyN0NCQzFFQTVEQTIwQUNDRjBFRjE2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZa/tddoXKSrQ8zPGr/JzTEdY
Vhc2714Cdd62z3A4xTJSmf6J6HKS32uABOm2P/EPf2E25q5BZQP6jbG4Wk0P9Yh2
4+k3PDowJsr0D2Hp0rGh3Sduz59BcugQNIputThYZXuenq5tJR3x5Wp0xZjqUZS0
qtfYxnagFhpuQfd1kTSB3VKv5Fr/UDWq9xLg3UZ9CwrSMig09Tt7VycTT+yHI/V7
jAjlwpnABhxP4usPTfmLMDCUmO4CTTbXdmHSTJFpEzEOOJe0458Xb9mEL+xMEQ4E
ZBPe6DsLoiRe626PLQiXYHGfCTyz8jQcsSseIHBXrlQ6gUb46TMhlImosP/HAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUHb4QlYLgQf8ny8HqXaIKzPDvFr0wHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNzMw
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAxwMA0GCSqGSIb3DQEBCwUAA4IBAQABQoZ1wfegQJOm
8rns9irmzo0oR6yQhY8a5qF4lJZJTB5c4ZnJ5PMNl/yGtQezudB95G72uLwcj6wP
oywF3bP8nsflLa6vr6ygmZB8hVsYJFFl7OmjAu+52PXZzNX95RUOfJ7sTiIWenPu
eG5/GI468aaK8NXsiUDSGp3OuG+eO7YBOTBl2DdjdNaMlUj/kO1yYMz3vHyTWQxt
BTP4F/TuK16lLdromg1i+nhG7eJ1roP+OWwxYa6v3TNgiVjRoeCRx15OpVHlZy7A
Pr7Y+43+MlHt9mUkqL9pIa9in5uMdOJGAwN+aQLh2ITchXRYtUvI92aFx7rviMW/
t8c5LWsj
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:56:09 2025 by rpki-client