Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa
File:                     323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa (raw, json)
Hash identifier:          7kHuOrtEaw2pYln7NPe5DrovDyLinW50mhzwZuczDHA=
Subject key identifier:   A6:4B:36:AD:B6:FB:BF:DD:A0:CA:AF:23:88:25:DA:C0:75:8D:8E:A3
Certificate issuer:       /CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
Certificate serial:       29D03730EA7AC8CFD0378EDCCCE92CAA8B3A1D24
Authority key identifier: 11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa
Signing time:             Thu 07 Mar 2024 17:44:59 +0000
ROA not before:           Thu 07 Mar 2024 17:39:59 +0000
ROA not after:            Thu 06 Mar 2025 17:44:59 +0000
asID:                     267329
IP address blocks:        2804:4bc8:1800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d0:37:30:ea:7a:c8:cf:d0:37:8e:dc:cc:e9:2c:aa:8b:3a:1d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
        Validity
            Not Before: Mar  7 17:39:59 2024 GMT
            Not After : Mar  6 17:44:59 2025 GMT
        Subject: CN=A64B36ADB6FBBFDDA0CAAF238825DAC0758D8EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:e6:03:2f:59:a5:b1:54:03:fd:81:70:cd:
                    2d:c7:a3:9d:4a:e7:d7:7c:15:14:0e:be:66:1e:6e:
                    d9:e7:d2:b5:ad:0f:55:e6:b6:d1:f8:dc:ed:66:34:
                    61:fc:b3:a7:9c:71:54:24:86:cd:5b:14:ba:4f:d5:
                    30:91:fd:03:0b:ea:d8:54:94:65:b6:0b:2b:06:3e:
                    14:a7:92:e6:45:9e:3d:52:22:7b:e7:3b:4d:0f:ae:
                    e7:2a:23:8d:0c:22:7a:50:62:41:06:6b:db:61:63:
                    61:19:3a:8c:9d:e0:7d:d5:f9:05:89:51:03:25:d7:
                    f3:31:a1:96:42:3a:4f:8d:76:5e:1a:46:b8:b0:41:
                    d1:ef:e9:a7:89:26:f8:01:26:1f:46:87:f0:1f:30:
                    c5:84:cd:8b:08:b8:74:39:33:ca:0b:7f:2a:76:4a:
                    7b:b0:9c:7a:7d:88:60:59:53:28:9f:d1:a9:cb:de:
                    a0:f3:e9:66:14:3d:50:04:82:a5:54:be:4f:f2:07:
                    15:5b:c6:17:ba:72:cb:d9:ad:e5:57:31:38:a4:72:
                    39:a1:2e:49:14:c6:30:af:86:7e:29:52:a6:e2:47:
                    ff:a8:01:0d:04:7d:29:68:fe:d3:c7:b7:98:7b:95:
                    82:52:68:ff:05:80:1e:07:d8:a2:13:a0:69:2f:76:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4B:36:AD:B6:FB:BF:DD:A0:CA:AF:23:88:25:DA:C0:75:8D:8E:A3
            X509v3 Authority Key Identifier:
                keyid:11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:75:70:54:b0:b6:a4:87:b8:91:04:27:ac:a8:cc:5d:ce:87:
         cb:12:3d:e6:0f:ab:39:a9:a3:84:02:ab:4a:81:eb:83:4c:25:
         dd:c2:b5:64:a2:e9:41:82:ea:4a:93:9b:9e:a2:aa:b5:ee:01:
         2e:30:6f:76:4b:94:89:9f:b2:17:32:ef:db:67:68:5d:b6:9f:
         15:88:44:b5:5f:7e:57:e3:65:c9:62:eb:6a:c2:71:90:d7:fc:
         90:37:81:22:bc:6b:3f:14:b7:5a:44:e5:77:69:06:3e:a8:76:
         1a:d1:29:c8:cd:03:cb:f3:c5:77:6f:55:cf:9d:99:7f:fa:75:
         96:e2:12:cc:51:82:d9:7f:96:2c:6f:71:f6:8c:57:4b:af:fa:
         96:62:a7:e7:83:92:37:ce:37:29:f2:f0:74:9d:7a:79:04:9d:
         7d:18:02:9f:c4:e7:5a:84:9e:4b:88:30:72:1e:74:e6:32:b9:
         ad:d1:18:5c:1e:e9:33:2c:67:bc:a5:4e:a1:9a:36:34:6d:d9:
         93:b3:53:b3:48:e9:13:ef:0f:f3:b6:2f:fc:32:ac:6d:17:eb:
         d5:98:a3:17:9c:33:cc:9e:9d:05:57:9a:9f:5e:72:02:4b:ed:
         54:48:c2:85:57:5a:25:bc:f2:0c:88:26:84:4f:6d:07:96:16:
         86:40:a0:27
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKdA3MOp6yM/QN47czOksqos6HSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE1QzEyREM0QzYzMUMxNDEyRUQ3NEJGMTUzNTNEMDVG
OEYyOTc0RjAeFw0yNDAzMDcxNzM5NTlaFw0yNTAzMDYxNzQ0NTlaMDMxMTAvBgNV
BAMTKEE2NEIzNkFEQjZGQkJGRERBMENBQUYyMzg4MjVEQUMwNzU4RDhFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCps+YDL1mlsVQD/YFwzS3Ho51K
59d8FRQOvmYebtnn0rWtD1XmttH43O1mNGH8s6eccVQkhs1bFLpP1TCR/QML6thU
lGW2CysGPhSnkuZFnj1SInvnO00PrucqI40MInpQYkEGa9thY2EZOoyd4H3V+QWJ
UQMl1/MxoZZCOk+Ndl4aRriwQdHv6aeJJvgBJh9Gh/AfMMWEzYsIuHQ5M8oLfyp2
SnuwnHp9iGBZUyif0anL3qDz6WYUPVAEgqVUvk/yBxVbxhe6csvZreVXMTikcjmh
LkkUxjCvhn4pUqbiR/+oAQ0EfSlo/tPHt5h7lYJSaP8FgB4H2KIToGkvdpRBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpks2rbb7v92gyq8jiCXawHWNjqMwHwYDVR0j
BBgwFoAUEVwS3ExjHBQS7XS/FTU9Bfjyl08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VTRmlBSGh2WTd5aTFDZjlGNXFxc1I0RnluUTRuVHlXS3duUURudEEy
Y1AvMC8xMTVDMTJEQzRDNjMxQzE0MTJFRDc0QkYxNTM1M0QwNUY4RjI5NzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExNUMxMkRDNEM2MzFDMTQx
MkVENzRCRjE1MzUzRDA1RjhGMjk3NEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFU0ZpQUhodlk3eWkxQ2Y5RjVxcXNSNEZ5blE0blR5V0t3blFEbnRBMmNQLzAv
MzIzODMwMzQzYTM0NjI2MzM4M2EzMTM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzMzMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgES8gYMA0GCSqGSIb3DQEBCwUA
A4IBAQB2dXBUsLakh7iRBCesqMxdzofLEj3mD6s5qaOEAqtKgeuDTCXdwrVkoulB
gupKk5ueoqq17gEuMG92S5SJn7IXMu/bZ2hdtp8ViES1X35X42XJYutqwnGQ1/yQ
N4EivGs/FLdaROV3aQY+qHYa0SnIzQPL88V3b1XPnZl/+nWW4hLMUYLZf5Ysb3H2
jFdLr/qWYqfng5I3zjcp8vB0nXp5BJ19GAKfxOdahJ5LiDByHnTmMrmt0RhcHukz
LGe8pU6hmjY0bdmTs1OzSOkT7w/zti/8MqxtF+vVmKMXnDPMnp0FV5qfXnICS+1U
SMKFV1olvPIMiCaET20HlhaGQKAn
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:27 2025 by rpki-client