Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d3438203d3e20323730393135.roa
File:                     323830343a373337303a3a2f33322d3438203d3e20323730393135.roa (raw, json)
Hash identifier:          ytSQ7W/eHhX17HOx5ia7WI5QyvplBNh9rwknLriJQ5w=
Subject key identifier:   22:2B:66:49:0A:2C:3B:6A:18:98:FC:D5:99:1E:B6:69:AE:C1:93:51
Certificate issuer:       /CN=6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2
Certificate serial:       4F2929E22D40054BCD82F17C2CFAB8317F305157
Authority key identifier: 6D:4A:90:70:C4:DB:0A:47:FF:D6:2E:0A:BD:47:B6:70:F8:5F:4B:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d3438203d3e20323730393135.roa
Signing time:             Thu 21 Mar 2024 00:06:08 +0000
ROA not before:           Thu 21 Mar 2024 00:01:08 +0000
ROA not after:            Thu 20 Mar 2025 00:06:08 +0000
asID:                     270915
IP address blocks:        2804:7370::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:29:29:e2:2d:40:05:4b:cd:82:f1:7c:2c:fa:b8:31:7f:30:51:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2
        Validity
            Not Before: Mar 21 00:01:08 2024 GMT
            Not After : Mar 20 00:06:08 2025 GMT
        Subject: CN=222B66490A2C3B6A1898FCD5991EB669AEC19351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:a8:e8:db:0e:2b:bc:bd:01:d9:99:16:aa:
                    ec:29:0f:07:88:9d:c8:ef:73:0b:68:c2:31:76:ee:
                    da:f0:0b:26:c2:6e:ef:c4:31:db:08:21:98:20:2e:
                    a3:68:68:7d:c4:2f:50:bb:42:3c:41:cb:de:cb:91:
                    47:68:df:8b:ea:6f:8c:a6:fc:9b:7a:69:03:c6:82:
                    b8:f3:45:b7:92:c0:b4:8b:2e:38:07:ca:97:ff:f9:
                    56:e7:4b:c7:33:66:61:f5:6f:dc:46:f4:4e:47:a9:
                    35:2a:86:8b:68:5a:18:5a:95:be:65:f8:81:0d:f4:
                    86:52:bc:30:7b:ba:13:05:4e:21:98:1f:83:0d:9e:
                    e1:f1:a5:05:22:a6:af:3b:1a:f6:9c:a2:b3:eb:de:
                    e1:6e:27:8c:4f:c0:aa:60:44:29:20:39:c7:05:78:
                    5a:35:72:90:95:ff:ba:ec:18:2f:fb:a8:04:81:f8:
                    5c:f6:59:e1:88:6a:0b:95:f6:13:f9:10:8c:8d:33:
                    9c:0a:8b:5f:8a:db:3d:58:36:39:68:38:f4:ef:bd:
                    e4:fa:41:b0:54:43:de:36:cb:92:fd:82:34:7d:4d:
                    46:85:f4:48:09:b6:c1:d5:4a:fc:97:77:bf:28:f2:
                    fd:55:a9:a3:f6:03:cc:4a:74:c9:f7:3b:38:5b:21:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2B:66:49:0A:2C:3B:6A:18:98:FC:D5:99:1E:B6:69:AE:C1:93:51
            X509v3 Authority Key Identifier:
                keyid:6D:4A:90:70:C4:DB:0A:47:FF:D6:2E:0A:BD:47:B6:70:F8:5F:4B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d3438203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7370::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:62:9e:9b:3c:c7:33:92:93:63:bd:3e:53:e0:0e:50:f9:a7:
         0e:99:e4:29:e8:b9:ec:db:14:7e:df:79:21:b2:ce:a5:06:82:
         06:07:65:73:92:38:95:40:20:2f:43:3c:73:71:91:f5:2d:08:
         3b:d8:4f:e0:ab:b2:f8:92:db:b8:19:de:b9:77:49:02:3c:dc:
         09:3d:fc:a8:e8:d8:b9:7d:0f:fd:bc:8c:ae:48:46:20:50:ec:
         b3:56:4b:81:33:18:4d:1f:13:9b:18:31:d4:84:dc:1c:56:5f:
         02:05:07:18:fa:38:96:38:8c:c7:46:14:19:45:0d:09:45:b5:
         0c:cd:c5:62:76:0b:6d:8f:13:1d:22:4e:7a:69:a0:a9:88:d4:
         d9:73:c8:d3:17:4e:69:65:d0:0b:61:5a:b5:ca:2e:08:bc:06:
         99:0c:d1:88:66:34:e7:2a:2f:e8:24:92:bd:41:e7:2a:b8:36:
         a9:f3:4a:89:92:68:7a:ab:b7:b4:37:84:67:f7:14:12:b3:83:
         ba:18:d6:5a:4e:56:ff:b7:97:5f:bd:e5:fa:f2:eb:e0:3a:24:
         8b:6c:fa:ab:64:db:7d:01:0d:9d:8b:90:d3:00:23:70:db:e2:
         8e:51:6c:71:0b:3f:26:ea:1a:c4:b5:1f:42:da:7e:f4:ea:6c:
         df:d8:63:d2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTykp4i1ABUvNgvF8LPq4MX8wUVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0QTkwNzBDNERCMEE0N0ZGRDYyRTBBQkQ0N0I2NzBG
ODVGNEJBMjAeFw0yNDAzMjEwMDAxMDhaFw0yNTAzMjAwMDA2MDhaMDMxMTAvBgNV
BAMTKDIyMkI2NjQ5MEEyQzNCNkExODk4RkNENTk5MUVCNjY5QUVDMTkzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69ajo2w4rvL0B2ZkWquwpDweI
ncjvcwtowjF27trwCybCbu/EMdsIIZggLqNoaH3EL1C7QjxBy97LkUdo34vqb4ym
/Jt6aQPGgrjzRbeSwLSLLjgHypf/+VbnS8czZmH1b9xG9E5HqTUqhotoWhhalb5l
+IEN9IZSvDB7uhMFTiGYH4MNnuHxpQUipq87GvacorPr3uFuJ4xPwKpgRCkgOccF
eFo1cpCV/7rsGC/7qASB+Fz2WeGIaguV9hP5EIyNM5wKi1+K2z1YNjloOPTvveT6
QbBUQ942y5L9gjR9TUaF9EgJtsHVSvyXd78o8v1VqaP2A8xKdMn3OzhbIYM7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIitmSQosO2oYmPzVmR62aa7Bk1EwHwYDVR0j
BBgwFoAUbUqQcMTbCkf/1i4KvUe2cPhfS6IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVdCUFBNMW9tRU00SGYzRlpUeThMWEJkQTZRZ0xmcVBkcDVlWDNxOERX
a1UvMC82RDRBOTA3MEM0REIwQTQ3RkZENjJFMEFCRDQ3QjY3MEY4NUY0QkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZENEE5MDcwQzREQjBBNDdG
RkQ2MkUwQUJENDdCNjcwRjg1RjRCQTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVXQlBQTTFvbUVNNEhmM0ZaVHk4TFhCZEE2UWdMZnFQZHA1ZVgzcThEV2tVLzAv
MzIzODMwMzQzYTM3MzMzNzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARzcDANBgkqhkiG9w0BAQsFAAOCAQEAsmKemzzH
M5KTY70+U+AOUPmnDpnkKei57NsUft95IbLOpQaCBgdlc5I4lUAgL0M8c3GR9S0I
O9hP4Kuy+JLbuBneuXdJAjzcCT38qOjYuX0P/byMrkhGIFDss1ZLgTMYTR8Tmxgx
1ITcHFZfAgUHGPo4ljiMx0YUGUUNCUW1DM3FYnYLbY8THSJOemmgqYjU2XPI0xdO
aWXQC2FatcouCLwGmQzRiGY05yov6CSSvUHnKrg2qfNKiZJoequ3tDeEZ/cUErOD
uhjWWk5W/7eXX73l+vLr4Doki2z6q2TbfQENnYuQ0wAjcNvijlFscQs/JuoaxLUf
Qtp+9Ops39hj0g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:49 2025 by rpki-client