Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a3a2f33342d3334203d3e20323731333938.roa
File:                     323830343a376165343a3a2f33342d3334203d3e20323731333938.roa (raw, json)
Hash identifier:          QVbn4alUEXpeu4jJm3SI8FuWDHppv+b7Ak0pLFfFPdM=
Subject key identifier:   D1:DA:3D:B4:B3:61:DA:F7:09:0D:8A:6D:72:75:8A:48:C7:6D:0C:30
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       39A3FE74323DCB14DA81CF7428DACF79283CFCAA
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a3a2f33342d3334203d3e20323731333938.roa
Signing time:             Tue 18 Feb 2025 18:40:28 +0000
ROA not before:           Tue 18 Feb 2025 18:35:28 +0000
ROA not after:            Tue 17 Feb 2026 18:40:28 +0000
asID:                     271398
IP address blocks:        2804:7ae4::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a3:fe:74:32:3d:cb:14:da:81:cf:74:28:da:cf:79:28:3c:fc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Feb 18 18:35:28 2025 GMT
            Not After : Feb 17 18:40:28 2026 GMT
        Subject: CN=D1DA3DB4B361DAF7090D8A6D72758A48C76D0C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:20:b9:d3:53:e6:e8:e4:c4:d9:e9:e0:cf:
                    56:02:49:9f:6e:21:ca:c1:65:88:c5:91:37:40:45:
                    39:4d:12:90:4a:ae:0a:0b:d0:43:84:d7:86:d4:41:
                    a7:a6:4a:84:c1:8e:85:78:74:17:bb:20:6c:7d:03:
                    0a:bf:8f:8c:60:0d:ae:bf:24:12:a3:cb:70:1e:0d:
                    6d:b0:b2:17:28:84:87:01:7d:0b:b4:d2:ac:de:c6:
                    06:5d:bd:e2:e9:1e:52:5c:7d:65:d1:ce:9b:c7:99:
                    2e:6a:9a:b2:c4:85:eb:8b:8e:e6:2a:d3:86:87:ff:
                    70:31:a8:1d:d1:57:fc:29:91:16:5e:46:87:da:4c:
                    a0:35:1e:f8:e9:f8:21:f0:1d:95:62:95:6c:0a:6a:
                    b3:c0:28:31:9a:04:0c:87:8e:98:48:8a:04:6e:77:
                    53:44:ce:34:40:11:be:32:f3:df:84:ce:3f:25:87:
                    80:93:a7:3b:d6:e8:74:92:3b:c4:1e:7b:5e:fc:7e:
                    4d:b9:4d:37:5b:d9:10:19:20:d5:6d:dd:c0:a1:b2:
                    55:4b:da:6c:42:f5:e3:58:d7:f6:3e:a2:9c:bd:06:
                    f3:05:dc:50:53:83:26:f3:b3:2d:8d:4b:01:65:bf:
                    7c:82:8a:2d:69:47:55:70:67:8a:fd:00:0c:10:3a:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:3D:B4:B3:61:DA:F7:09:0D:8A:6D:72:75:8A:48:C7:6D:0C:30
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a3a2f33342d3334203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ae4::/34

    Signature Algorithm: sha256WithRSAEncryption
         c3:78:1e:bc:52:0f:f6:e8:8c:c1:11:d9:2f:4e:2d:5c:f7:40:
         e2:e9:23:12:25:d7:a8:2b:35:bc:ce:72:b2:d4:7a:bb:23:fd:
         01:72:d7:e8:5a:05:79:53:f0:c9:3e:be:94:12:a9:f9:30:07:
         37:26:55:4d:24:cf:59:b3:70:bb:d3:9b:a5:b5:18:04:08:29:
         09:12:36:0c:e8:fd:69:ec:2e:fa:7d:6e:ec:85:b3:ae:de:da:
         75:42:d0:e4:21:5a:e5:70:bd:0a:4e:3a:81:49:7d:ca:c0:c2:
         71:41:f2:87:27:1f:14:9f:1b:d7:30:8c:30:46:42:93:38:bb:
         12:6e:b0:b9:35:7d:da:35:03:39:3c:b9:45:c0:fd:7d:bc:74:
         1c:02:4b:ea:80:a7:5e:73:e0:7e:17:e5:99:e7:06:6b:71:aa:
         70:91:f6:df:c0:b4:f7:a1:b4:13:0f:a9:a9:b1:e9:41:08:02:
         40:b2:ca:1a:c3:75:5a:16:8d:e0:0b:83:23:43:8c:09:25:13:
         42:7a:c9:71:fe:01:97:28:73:da:a7:60:f8:95:0a:b1:56:66:
         05:85:d5:b2:b2:62:e7:61:be:83:57:61:b4:32:2b:a3:63:e6:
         c2:e3:31:cc:51:45:7c:4d:4a:de:c1:5c:aa:c2:8f:e5:2d:3a:
         da:e8:76:6f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOaP+dDI9yxTagc90KNrPeSg8/KowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VCNjZERUZERDk0MjczOThDQkU4MEI4RUMzRDFENUJD
RjMzMjFBQTAeFw0yNTAyMTgxODM1MjhaFw0yNjAyMTcxODQwMjhaMDMxMTAvBgNV
BAMTKEQxREEzREI0QjM2MURBRjcwOTBEOEE2RDcyNzU4QTQ4Qzc2RDBDMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJSC501Pm6OTE2engz1YCSZ9u
IcrBZYjFkTdARTlNEpBKrgoL0EOE14bUQaemSoTBjoV4dBe7IGx9Awq/j4xgDa6/
JBKjy3AeDW2wshcohIcBfQu00qzexgZdveLpHlJcfWXRzpvHmS5qmrLEheuLjuYq
04aH/3AxqB3RV/wpkRZeRofaTKA1Hvjp+CHwHZVilWwKarPAKDGaBAyHjphIigRu
d1NEzjRAEb4y89+Ezj8lh4CTpzvW6HSSO8Qee178fk25TTdb2RAZINVt3cChslVL
2mxC9eNY1/Y+opy9BvMF3FBTgybzsy2NSwFlv3yCii1pR1VwZ4r9AAwQOt0VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0do9tLNh2vcJDYptcnWKSMdtDDAwHwYDVR0j
BBgwFoAUfrZt792UJzmMvoC47D0dW88zIaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFc2aTRqbUpkbmFiMUdFZ3EzTWJ0aUI1UkJTTlpUUUVzVlZpRTk0eFRK
cmkvMC83RUI2NkRFRkREOTQyNzM5OENCRTgwQjhFQzNEMUQ1QkNGMzMyMUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFQjY2REVGREQ5NDI3Mzk4
Q0JFODBCOEVDM0QxRDVCQ0YzMzIxQUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRXNmk0am1KZG5hYjFHRWdxM01idGlCNVJCU05aVFFFc1ZWaUU5NHhUSnJpLzAv
MzIzODMwMzQzYTM3NjE2NTM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMx
MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR65AAwDQYJKoZIhvcNAQELBQADggEBAMN4HrxS
D/bojMER2S9OLVz3QOLpIxIl16grNbzOcrLUersj/QFy1+haBXlT8Mk+vpQSqfkw
BzcmVU0kz1mzcLvTm6W1GAQIKQkSNgzo/WnsLvp9buyFs67e2nVC0OQhWuVwvQpO
OoFJfcrAwnFB8ocnHxSfG9cwjDBGQpM4uxJusLk1fdo1Azk8uUXA/X28dBwCS+qA
p15z4H4X5ZnnBmtxqnCR9t/AtPehtBMPqamx6UEIAkCyyhrDdVoWjeALgyNDjAkl
E0J6yXH+AZcoc9qnYPiVCrFWZgWF1bKyYudhvoNXYbQyK6Nj5sLjMcxRRXxNSt7B
XKrCj+UtOtrodm8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:28:32 2025 by rpki-client