Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/323830343a326138303a3a2f33322d3438203d3e203533303934.roa
File:                     323830343a326138303a3a2f33322d3438203d3e203533303934.roa (raw, json)
Hash identifier:          79tqhQcbT++ogZfcCfHWDR9LXdVMbYHLzF3ULVRWWRQ=
Subject key identifier:   86:08:52:C4:71:0F:CE:8C:3F:92:5A:7E:49:B1:1B:99:96:16:9E:F9
Certificate issuer:       /CN=7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C
Certificate serial:       63F73C9180CEA05A1CAF14C15619F14B2A9DFE3F
Authority key identifier: 7C:CB:30:60:46:AE:AE:0E:16:E8:91:3E:33:AF:6D:6E:C6:D2:F3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/323830343a326138303a3a2f33322d3438203d3e203533303934.roa
Signing time:             Tue 11 Mar 2025 17:25:34 +0000
ROA not before:           Tue 11 Mar 2025 17:20:34 +0000
ROA not after:            Tue 10 Mar 2026 17:25:34 +0000
asID:                     53094
IP address blocks:        2804:2a80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f7:3c:91:80:ce:a0:5a:1c:af:14:c1:56:19:f1:4b:2a:9d:fe:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C
        Validity
            Not Before: Mar 11 17:20:34 2025 GMT
            Not After : Mar 10 17:25:34 2026 GMT
        Subject: CN=860852C4710FCE8C3F925A7E49B11B9996169EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:2e:d3:a1:a6:16:b9:e4:d7:21:7d:e0:89:
                    46:85:5b:ec:4e:20:7c:c3:6d:a0:d9:b1:20:02:22:
                    09:22:76:72:d0:48:02:b9:a9:cf:d2:ad:b3:ab:cd:
                    88:4f:31:c8:a9:b6:13:8d:49:11:81:e6:73:a6:9d:
                    57:56:82:50:0f:08:51:e5:e3:77:c8:0e:cf:92:c5:
                    b5:c7:81:82:f5:d8:44:a0:8c:09:3f:11:cb:64:6a:
                    00:68:91:c9:b9:1c:d0:29:2d:e9:37:b9:b5:f4:6e:
                    66:e1:d1:22:fa:d4:21:7f:d0:6b:3d:48:00:cd:5d:
                    4d:09:b6:d0:c9:5e:14:34:9c:89:51:69:31:a7:37:
                    74:f2:e5:29:fc:c9:2f:6c:24:3c:83:c2:51:b8:17:
                    ca:63:ea:74:1b:54:a1:7f:8d:1d:a1:86:6f:5c:d1:
                    68:48:21:f2:aa:50:c8:ce:2b:81:ef:37:6b:a7:0d:
                    e8:44:35:2c:ff:d6:4c:92:02:94:c5:80:50:6a:a0:
                    71:2f:f2:87:45:68:10:49:0d:4a:67:80:77:d9:7d:
                    91:5d:aa:61:40:fa:b5:b8:c4:d2:34:2e:05:5d:80:
                    4e:ea:e9:08:72:1c:a6:67:e4:48:4d:fc:b9:02:a9:
                    7f:7f:8d:28:8a:45:b5:87:8c:f0:f0:0a:cb:c1:8f:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:08:52:C4:71:0F:CE:8C:3F:92:5A:7E:49:B1:1B:99:96:16:9E:F9
            X509v3 Authority Key Identifier:
                keyid:7C:CB:30:60:46:AE:AE:0E:16:E8:91:3E:33:AF:6D:6E:C6:D2:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/323830343a326138303a3a2f33322d3438203d3e203533303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:57:cd:4c:56:1f:ad:6d:97:27:53:13:b4:16:21:b8:c9:63:
         be:8b:21:6b:ca:3f:1c:bd:67:ac:3b:aa:e1:de:85:a7:d1:c0:
         b7:57:98:c6:4e:df:52:c7:02:d4:bd:08:0c:39:f6:db:5a:64:
         03:f8:76:41:7b:17:a5:d4:3d:07:54:bb:a7:e9:bc:39:d5:17:
         04:9c:7d:29:13:38:98:33:97:f8:77:24:ca:4b:09:f9:82:4f:
         df:1a:0a:a1:d6:a9:fc:e3:60:4a:f3:34:c7:47:1f:5f:78:9f:
         0f:b4:90:2a:98:59:ad:d1:61:6a:de:e5:9c:55:22:1d:9c:cd:
         0d:0b:ef:18:4b:2c:35:76:15:ba:8a:b7:0f:ff:35:bb:80:70:
         ee:46:ea:a0:7f:a9:86:d4:3a:5d:0a:33:f0:a3:c9:70:b8:07:
         2f:34:c5:a8:93:e9:6d:6a:f8:af:b1:6a:c6:39:01:5c:df:b1:
         68:c2:ab:54:15:3f:26:b3:22:f1:26:30:70:71:d1:88:ae:a1:
         85:fb:d9:97:b5:14:0e:65:ef:bd:45:fa:7f:45:76:91:47:ef:
         69:fc:16:df:bc:de:89:f0:b8:69:00:fc:0c:9c:b3:f8:d1:92:
         fb:f6:5b:09:21:06:85:61:17:65:0a:ab:40:a4:2a:e6:99:bc:
         0d:33:8e:d2
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUY/c8kYDOoFocrxTBVhnxSyqd/j8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NDQjMwNjA0NkFFQUUwRTE2RTg5MTNFMzNBRjZENkVD
NkQyRjMyQzAeFw0yNTAzMTExNzIwMzRaFw0yNjAzMTAxNzI1MzRaMDMxMTAvBgNV
BAMTKDg2MDg1MkM0NzEwRkNFOEMzRjkyNUE3RTQ5QjExQjk5OTYxNjlFRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbCy7ToaYWueTXIX3giUaFW+xO
IHzDbaDZsSACIgkidnLQSAK5qc/SrbOrzYhPMcipthONSRGB5nOmnVdWglAPCFHl
43fIDs+SxbXHgYL12ESgjAk/EctkagBokcm5HNApLek3ubX0bmbh0SL61CF/0Gs9
SADNXU0JttDJXhQ0nIlRaTGnN3Ty5Sn8yS9sJDyDwlG4F8pj6nQbVKF/jR2hhm9c
0WhIIfKqUMjOK4HvN2unDehENSz/1kySApTFgFBqoHEv8odFaBBJDUpngHfZfZFd
qmFA+rW4xNI0LgVdgE7q6QhyHKZn5EhN/LkCqX9/jSiKRbWHjPDwCsvBj2SnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUhghSxHEPzow/klp+SbEbmZYWnvkwHwYDVR0j
BBgwFoAUfMswYEaurg4W6JE+M69tbsbS8ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnBWSkJHc1F1OTN0aHZ6VVhSUkV4ajV3a3BmZmUzNEhFVlVFZ0Vma3A2
VksvMC83Q0NCMzA2MDQ2QUVBRTBFMTZFODkxM0UzM0FGNkQ2RUM2RDJGMzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQ0IzMDYwNDZBRUFFMEUx
NkU4OTEzRTMzQUY2RDZFQzZEMkYzMkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZwVkpCR3NRdTkzdGh2elVYUlJFeGo1d2twZmZlMzRIRVZVRWdFZmtwNlZLLzAv
MzIzODMwMzQzYTMyNjEzODMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMw
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEKoAwDQYJKoZIhvcNAQELBQADggEBADlXzUxWH61t
lydTE7QWIbjJY76LIWvKPxy9Z6w7quHehafRwLdXmMZO31LHAtS9CAw59ttaZAP4
dkF7F6XUPQdUu6fpvDnVFwScfSkTOJgzl/h3JMpLCfmCT98aCqHWqfzjYErzNMdH
H194nw+0kCqYWa3RYWre5ZxVIh2czQ0L7xhLLDV2FbqKtw//NbuAcO5G6qB/qYbU
Ol0KM/CjyXC4By80xaiT6W1q+K+xasY5AVzfsWjCq1QVPyazIvEmMHBx0YiuoYX7
2Ze1FA5l771F+n9FdpFH72n8Ft+83onwuGkA/Aycs/jRkvv2WwkhBoVhF2UKq0Ck
KuaZvA0zjtI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:46:59 2025 by rpki-client