Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa
File:                     323830343a336462303a3a2f33322d3332203d3e20323636353437.roa (raw, json)
Hash identifier:          WVdzaeCCtrIr8J+kFR7ctu3KTdz9jtXAWnA4LgLWavw=
Subject key identifier:   A7:7B:35:10:70:FB:F6:04:1A:C6:47:58:47:7B:DE:83:44:64:FE:0B
Certificate issuer:       /CN=164081884269A17674589E45798EE6EE0A93A94E
Certificate serial:       3098139600B635097D1E25AC34D049D7912158CB
Authority key identifier: 16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa
Signing time:             Thu 06 Mar 2025 09:20:43 +0000
ROA not before:           Thu 06 Mar 2025 09:15:43 +0000
ROA not after:            Thu 05 Mar 2026 09:20:43 +0000
asID:                     266547
IP address blocks:        2804:3db0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:98:13:96:00:b6:35:09:7d:1e:25:ac:34:d0:49:d7:91:21:58:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164081884269A17674589E45798EE6EE0A93A94E
        Validity
            Not Before: Mar  6 09:15:43 2025 GMT
            Not After : Mar  5 09:20:43 2026 GMT
        Subject: CN=A77B351070FBF6041AC64758477BDE834464FE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:1a:32:57:40:14:cb:66:77:62:7b:6d:e7:
                    42:1e:ae:4b:f0:c8:b6:d6:32:97:1c:fc:33:51:b1:
                    6b:8a:1a:25:3e:40:f4:26:7f:df:4a:c4:b1:15:2a:
                    f4:d6:5d:a9:11:b2:b4:d2:1a:e6:65:ca:6c:a9:12:
                    77:a1:ae:d7:0d:54:58:c0:e4:50:64:99:ce:68:bb:
                    bf:2c:fd:09:91:17:d0:b6:44:c6:0c:21:da:25:69:
                    86:15:b6:fc:c6:e4:28:15:cb:39:3a:c8:25:3e:ba:
                    27:92:32:6a:9d:5d:ff:68:27:6b:89:c6:9c:54:9f:
                    3a:7b:b0:16:a9:ab:e8:c8:ec:8a:33:57:e8:7e:91:
                    34:3a:87:a0:9e:2f:32:63:21:5a:2a:a9:18:91:f5:
                    59:91:ec:3f:0f:bc:7f:4a:96:a9:d7:3e:af:c0:bf:
                    85:7a:a8:fd:94:7a:14:8e:5b:2c:a8:5f:99:dc:20:
                    7f:96:d4:34:68:e2:46:6b:e1:98:59:54:1f:b7:9d:
                    ec:d9:57:60:90:b4:09:47:34:c9:2c:3e:ea:bd:5d:
                    3c:26:7c:bc:80:29:29:8b:b1:da:50:47:fb:98:f6:
                    f1:8d:bc:06:a8:5e:b1:48:a9:2b:0b:a8:b7:61:15:
                    2e:02:d9:2f:cc:0a:cd:28:21:d9:ca:25:bc:65:7e:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7B:35:10:70:FB:F6:04:1A:C6:47:58:47:7B:DE:83:44:64:FE:0B
            X509v3 Authority Key Identifier:
                keyid:16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:34:fa:ff:ec:43:8a:ba:1f:cc:02:34:20:15:5a:7d:d2:38:
         7d:18:4c:24:c0:b3:58:e4:93:46:de:44:51:55:57:1b:6b:0b:
         11:54:6b:23:91:8e:68:2b:7b:2e:38:50:1e:a4:fc:f0:d8:2d:
         f2:04:2a:81:2f:d3:bb:81:cd:b6:46:14:52:61:56:ae:59:84:
         a2:47:4f:17:e8:08:18:0c:24:4a:23:c3:d9:b7:f6:44:8b:86:
         c3:41:e4:e9:61:8e:08:95:8e:5a:42:f9:7d:dd:86:64:a1:18:
         06:13:d0:08:51:b7:06:47:40:ae:1e:b1:cc:c5:4e:28:05:46:
         f2:57:b0:2d:0a:8e:dd:02:35:ce:80:98:d8:e5:1c:99:f2:27:
         1b:ea:a9:ca:dc:e8:ca:3a:47:77:d6:31:bc:04:88:ee:39:38:
         ae:30:1f:21:6f:59:42:a5:09:13:19:65:da:91:c6:f8:55:bd:
         6c:f2:3e:c9:68:80:82:ef:b5:50:bf:af:cf:22:f3:b0:a0:bc:
         ee:2c:e4:e3:0f:99:3e:68:e8:1d:64:31:b2:35:6e:5d:7b:bf:
         22:ba:cf:57:c8:65:c9:a0:70:97:4f:5f:7e:d5:3a:bf:e7:7a:
         72:43:e5:fe:c1:a3:11:4b:07:b8:11:25:3d:47:df:83:fb:96:
         0f:ef:ee:bc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMJgTlgC2NQl9HiWsNNBJ15EhWMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MDgxODg0MjY5QTE3Njc0NTg5RTQ1Nzk4RUU2RUUw
QTkzQTk0RTAeFw0yNTAzMDYwOTE1NDNaFw0yNjAzMDUwOTIwNDNaMDMxMTAvBgNV
BAMTKEE3N0IzNTEwNzBGQkY2MDQxQUM2NDc1ODQ3N0JERTgzNDQ2NEZFMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOBoyV0AUy2Z3Yntt50Ierkvw
yLbWMpcc/DNRsWuKGiU+QPQmf99KxLEVKvTWXakRsrTSGuZlymypEnehrtcNVFjA
5FBkmc5ou78s/QmRF9C2RMYMIdolaYYVtvzG5CgVyzk6yCU+uieSMmqdXf9oJ2uJ
xpxUnzp7sBapq+jI7IozV+h+kTQ6h6CeLzJjIVoqqRiR9VmR7D8PvH9KlqnXPq/A
v4V6qP2UehSOWyyoX5ncIH+W1DRo4kZr4ZhZVB+3nezZV2CQtAlHNMksPuq9XTwm
fLyAKSmLsdpQR/uY9vGNvAaoXrFIqSsLqLdhFS4C2S/MCs0oIdnKJbxlft6lAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUp3s1EHD79gQaxkdYR3veg0Rk/gswHwYDVR0j
BBgwFoAUFkCBiEJpoXZ0WJ5FeY7m7gqTqU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1BUFVSYVFNVGtmakpkOVlNR0NqVmY4ZjQ1cmtWZm1QZFlXRkRlb0JW
OEEvMS8xNjQwODE4ODQyNjlBMTc2NzQ1ODlFNDU3OThFRTZFRTBBOTNBOTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NDA4MTg4NDI2OUExNzY3
NDU4OUU0NTc5OEVFNkVFMEE5M0E5NEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNQVBVUmFRTVRrZmpKZDlZTUdDalZmOGY0NXJrVmZtUGRZV0ZEZW9CVjhBLzEv
MzIzODMwMzQzYTMzNjQ2MjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzUzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ9sDANBgkqhkiG9w0BAQsFAAOCAQEAFzT6/+xD
irofzAI0IBVafdI4fRhMJMCzWOSTRt5EUVVXG2sLEVRrI5GOaCt7LjhQHqT88Ngt
8gQqgS/Tu4HNtkYUUmFWrlmEokdPF+gIGAwkSiPD2bf2RIuGw0Hk6WGOCJWOWkL5
fd2GZKEYBhPQCFG3BkdArh6xzMVOKAVG8lewLQqO3QI1zoCY2OUcmfInG+qpytzo
yjpHd9YxvASI7jk4rjAfIW9ZQqUJExll2pHG+FW9bPI+yWiAgu+1UL+vzyLzsKC8
7izk4w+ZPmjoHWQxsjVuXXu/IrrPV8hlyaBwl09fftU6v+d6ckPl/sGjEUsHuBEl
PUffg/uWD+/uvA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:22:44 2025 by rpki-client