Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33332d3333203d3e20323731363236.roa
File:                     323830343a376537383a3a2f33332d3333203d3e20323731363236.roa (raw, json)
Hash identifier:          YdtbY25K+Ax/WlAGeKRQW/hDCjL9W9K7KNCoE762J7A=
Subject key identifier:   FE:F4:E8:F6:EC:B7:DC:B0:77:2B:98:61:20:1A:BD:97:A1:D0:EA:31
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       27DCE110BDC63D158881BDDA1F33BC3EA95F430D
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33332d3333203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:14 +0000
ROA not before:           Fri 22 Nov 2024 18:16:14 +0000
ROA not after:            Fri 21 Nov 2025 18:21:14 +0000
asID:                     271626
IP address blocks:        2804:7e78::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dc:e1:10:bd:c6:3d:15:88:81:bd:da:1f:33:bc:3e:a9:5f:43:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:14 2024 GMT
            Not After : Nov 21 18:21:14 2025 GMT
        Subject: CN=FEF4E8F6ECB7DCB0772B9861201ABD97A1D0EA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:60:91:c6:94:f6:63:85:37:13:eb:07:83:
                    4b:2c:3a:1a:56:cc:7d:86:d1:cb:ed:52:75:51:a4:
                    6e:30:79:a7:9c:44:26:ec:1f:7d:ac:df:7b:ec:59:
                    65:72:74:36:29:d2:f6:f7:e6:72:ce:63:cc:b4:6a:
                    79:d7:5a:20:57:76:0f:d0:71:1d:21:99:f9:ab:12:
                    d7:fd:2c:41:65:ad:56:79:18:91:57:8b:54:d9:f7:
                    42:ff:1a:b8:0c:9c:fc:0b:eb:74:c2:79:e9:b4:f8:
                    3d:3a:1e:3e:a4:43:ea:64:bf:63:74:95:72:16:9e:
                    e6:06:40:08:ca:71:34:94:6f:c0:2f:1b:30:14:f8:
                    31:be:6d:1a:d1:8b:c8:30:0b:03:69:14:16:7e:ed:
                    b3:79:cc:a3:8b:db:b8:f6:8a:d1:35:4e:48:76:81:
                    b2:16:1c:15:05:de:bc:18:7f:ac:93:ee:01:e7:34:
                    84:8c:34:ad:0e:0a:40:ca:ce:43:94:59:f2:b2:da:
                    af:dd:3f:4a:a7:8b:5e:a5:39:6b:24:11:31:a7:b8:
                    1c:42:17:8d:fe:57:10:33:cb:af:16:8a:16:db:14:
                    41:7c:df:e5:ab:dc:ad:b0:e2:0a:be:8d:d3:11:44:
                    a7:38:52:d4:ec:b3:ac:87:e1:49:59:ec:55:4e:d0:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F4:E8:F6:EC:B7:DC:B0:77:2B:98:61:20:1A:BD:97:A1:D0:EA:31
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33332d3333203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:48:83:36:90:83:b6:6c:72:58:07:7b:48:5b:85:3e:4e:
         3f:fe:56:00:29:7f:65:b5:ec:f9:63:ec:fb:91:6e:42:77:c1:
         96:d2:34:09:25:1a:60:e2:5f:28:e1:cb:6a:e7:e7:37:f2:7e:
         97:70:4e:8a:8d:b1:3e:14:fb:07:87:13:83:10:bc:f2:9f:e8:
         1a:d5:f8:72:88:e3:8c:f4:b9:0a:0c:ad:3b:93:35:c4:25:1f:
         fd:69:bf:d9:52:2e:07:13:51:31:fc:23:2c:eb:4b:42:b1:52:
         7d:5f:5b:76:19:36:de:0a:9d:77:92:43:de:00:34:98:dd:3f:
         26:a7:59:c6:87:64:4f:e9:39:e6:cf:86:9e:02:0a:ef:ad:b4:
         5a:2b:59:04:95:c5:7c:ce:80:7e:9f:de:be:1a:bf:73:bf:ef:
         2e:49:7f:61:79:e0:e6:4c:34:6d:4b:95:c2:75:6a:d5:15:6f:
         f4:36:bc:16:ea:f4:f6:fc:0c:a7:61:85:34:2a:c2:03:0f:6e:
         38:17:e2:a6:06:a9:db:07:e6:48:76:58:04:ab:87:ce:e5:4a:
         23:74:91:fe:92:c5:92:16:f1:f6:50:e0:11:11:66:ff:28:2f:
         94:a0:d1:66:eb:b2:5d:62:93:50:3e:e1:bb:49:b6:48:ea:e4:
         3d:f1:76:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ9zhEL3GPRWIgb3aHzO8PqlfQw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI2NTI0RjU1QUE3NjQyOTJBNTFCQjY2OUZDMkFEMEI0
QzQxNzI2NjAeFw0yNDExMjIxODE2MTRaFw0yNTExMjExODIxMTRaMDMxMTAvBgNV
BAMTKEZFRjRFOEY2RUNCN0RDQjA3NzJCOTg2MTIwMUFCRDk3QTFEMEVBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBGCRxpT2Y4U3E+sHg0ssOhpW
zH2G0cvtUnVRpG4weaecRCbsH32s33vsWWVydDYp0vb35nLOY8y0annXWiBXdg/Q
cR0hmfmrEtf9LEFlrVZ5GJFXi1TZ90L/GrgMnPwL63TCeem0+D06Hj6kQ+pkv2N0
lXIWnuYGQAjKcTSUb8AvGzAU+DG+bRrRi8gwCwNpFBZ+7bN5zKOL27j2itE1Tkh2
gbIWHBUF3rwYf6yT7gHnNISMNK0OCkDKzkOUWfKy2q/dP0qni16lOWskETGnuBxC
F43+VxAzy68WihbbFEF83+Wr3K2w4gq+jdMRRKc4UtTss6yH4UlZ7FVO0JwVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/vTo9uy33LB3K5hhIBq9l6HQ6jEwHwYDVR0j
BBgwFoAUImUk9VqnZCkqUbtmn8KtC0xBcmYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBT
bmgvMC8yMjY1MjRGNTVBQTc2NDI5MkE1MUJCNjY5RkMyQUQwQjRDNDE3MjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNjUyNEY1NUFBNzY0Mjky
QTUxQkI2NjlGQzJBRDBCNEM0MTcyNjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYUFpRVTdwald6VHdiNDdhNU16R3UyTXRTUE5IeUV2a25vYWpVZ0RQU25oLzAv
MzIzODMwMzQzYTM3NjUzNzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzYzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR+eAAwDQYJKoZIhvcNAQELBQADggEBAGlNSIM2
kIO2bHJYB3tIW4U+Tj/+VgApf2W17Plj7PuRbkJ3wZbSNAklGmDiXyjhy2rn5zfy
fpdwToqNsT4U+weHE4MQvPKf6BrV+HKI44z0uQoMrTuTNcQlH/1pv9lSLgcTUTH8
IyzrS0KxUn1fW3YZNt4KnXeSQ94ANJjdPyanWcaHZE/pOebPhp4CCu+ttForWQSV
xXzOgH6f3r4av3O/7y5Jf2F54OZMNG1LlcJ1atUVb/Q2vBbq9Pb8DKdhhTQqwgMP
bjgX4qYGqdsH5kh2WASrh87lSiN0kf6SxZIW8fZQ4BERZv8oL5Sg0Wbrsl1ik1A+
4btJtkjq5D3xdrs=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:32:08 2025 by rpki-client