Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33342d3334203d3e20323633313436.roa
File:                     323830343a313737383a3a2f33342d3334203d3e20323633313436.roa (raw, json)
Hash identifier:          JhgAs4nv+KOuzb5Lsq9kx/NKwiu1pLvE8ryU+bTqNRQ=
Subject key identifier:   B1:BB:27:46:17:C4:85:44:71:A0:A2:11:2D:57:96:B1:F5:80:CE:89
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       61B5E74DA1E98B2F6BDF1CCF627D18D3ECA33244
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33342d3334203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:47 +0000
ROA not before:           Tue 27 Feb 2024 17:25:47 +0000
ROA not after:            Tue 25 Feb 2025 17:30:47 +0000
asID:                     263146
IP address blocks:        2804:1778::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b5:e7:4d:a1:e9:8b:2f:6b:df:1c:cf:62:7d:18:d3:ec:a3:32:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:47 2024 GMT
            Not After : Feb 25 17:30:47 2025 GMT
        Subject: CN=B1BB274617C4854471A0A2112D5796B1F580CE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:60:e6:9c:12:a8:39:74:33:02:64:7a:e6:
                    7e:b9:90:7b:00:3f:66:5b:8c:2e:e8:4a:2c:bb:8f:
                    2d:5f:3e:f3:e4:b6:b0:b3:72:f9:b5:ce:7b:95:96:
                    5f:bd:56:f3:8f:9a:36:0f:31:a4:58:7c:31:31:bc:
                    c5:80:ca:71:b5:bf:35:02:84:8c:c4:b0:11:a3:b7:
                    f2:32:6f:87:d8:4f:85:6c:eb:e5:7a:d9:bd:13:a5:
                    6e:88:9e:2b:bc:d2:f1:88:f6:5b:b9:0a:4b:79:af:
                    40:00:74:30:fc:35:32:13:5c:f6:af:ab:c7:fb:4e:
                    60:1a:d8:e4:be:07:8e:39:3d:62:03:3f:ba:ee:c9:
                    0d:1b:ba:d6:69:14:66:0f:90:f1:15:8f:09:64:b9:
                    ba:29:bb:b3:a5:8c:17:b7:e1:04:fa:b2:52:ca:02:
                    dc:fa:fe:a0:ad:b8:63:39:5a:fc:77:e3:a2:30:26:
                    1b:28:10:bd:43:e5:6c:c2:1e:e5:54:15:cb:1a:e7:
                    3a:8e:e8:d7:d7:a7:24:e3:d8:f0:b7:ce:f3:e5:dd:
                    8a:df:bb:c7:d1:0a:f3:a0:5c:97:1f:7c:60:88:4b:
                    5c:cd:65:a0:77:3a:c0:c9:1b:e7:1a:bc:45:f8:25:
                    a6:fc:8d:58:b8:9e:37:3a:94:4e:26:04:0c:9a:e0:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BB:27:46:17:C4:85:44:71:A0:A2:11:2D:57:96:B1:F5:80:CE:89
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a3a2f33342d3334203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:79:cd:1e:58:2a:8b:f7:50:c6:f8:38:dd:a6:b3:9f:e1:cb:
         09:d8:41:8e:c1:ed:52:ea:56:1b:4f:77:96:53:77:9a:f8:91:
         84:f5:85:57:1a:27:32:1c:fb:3d:72:9f:cc:e2:e2:8e:06:43:
         f3:28:86:77:e4:2e:de:ab:71:68:7e:51:c6:77:96:1c:dd:8e:
         e6:3c:f4:08:08:62:c3:ec:41:a4:b6:72:11:14:25:67:89:b7:
         c2:2f:8c:32:1b:2c:5a:93:08:33:e9:43:05:51:75:0d:39:e6:
         23:06:05:3a:22:a1:06:8a:1c:30:f9:e2:16:ea:1a:7f:b2:c8:
         0c:5a:85:12:f2:d2:95:64:75:af:cc:94:92:ab:2c:99:fa:21:
         f3:c2:78:ee:05:c1:b1:fd:a9:cb:6a:cd:6f:56:23:6c:0c:b4:
         61:43:2b:4a:53:cf:d1:03:f6:25:9a:2b:4f:9a:73:ce:39:e7:
         dd:29:03:87:a2:a2:60:b9:77:a7:08:84:38:ca:b6:5d:20:fa:
         ae:62:0f:e3:8b:d9:ba:c3:c7:21:38:86:fc:2b:db:73:db:f0:
         16:4d:42:ff:5a:d4:32:f0:ae:3d:4f:e6:d1:d2:83:0a:55:67:
         a5:09:b5:20:12:a5:86:2c:c2:ab:b2:92:84:be:e3:cf:20:95:
         d5:02:39:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYbXnTaHpiy9r3xzPYn0Y0+yjMkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxNzMwMzFGNEQ0MjVERjA5REI3MzFFNEY3QUMxMDEx
REU2NkYxOTAeFw0yNDAyMjcxNzI1NDdaFw0yNTAyMjUxNzMwNDdaMDMxMTAvBgNV
BAMTKEIxQkIyNzQ2MTdDNDg1NDQ3MUEwQTIxMTJENTc5NkIxRjU4MENFODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG62DmnBKoOXQzAmR65n65kHsA
P2ZbjC7oSiy7jy1fPvPktrCzcvm1znuVll+9VvOPmjYPMaRYfDExvMWAynG1vzUC
hIzEsBGjt/Iyb4fYT4Vs6+V62b0TpW6Iniu80vGI9lu5Ckt5r0AAdDD8NTITXPav
q8f7TmAa2OS+B445PWIDP7ruyQ0butZpFGYPkPEVjwlkubopu7OljBe34QT6slLK
Atz6/qCtuGM5Wvx346IwJhsoEL1D5WzCHuVUFcsa5zqO6NfXpyTj2PC3zvPl3Yrf
u8fRCvOgXJcffGCIS1zNZaB3OsDJG+cavEX4Jab8jVi4njc6lE4mBAya4LYbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsbsnRhfEhURxoKIRLVeWsfWAzokwHwYDVR0j
BBgwFoAUQhcwMfTUJd8J23MeT3rBAR3mbxkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMC80MjE3MzAzMUY0RDQyNURGMDlEQjczMUU0RjdBQzEwMTFERTY2RjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMTczMDMxRjRENDI1REYw
OURCNzMxRTRGN0FDMTAxMURFNjZGMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzAv
MzIzODMwMzQzYTMxMzczNzM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMz
MzEzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQXeAAwDQYJKoZIhvcNAQELBQADggEBAHV5zR5Y
Kov3UMb4ON2ms5/hywnYQY7B7VLqVhtPd5ZTd5r4kYT1hVcaJzIc+z1yn8zi4o4G
Q/MohnfkLt6rcWh+UcZ3lhzdjuY89AgIYsPsQaS2chEUJWeJt8IvjDIbLFqTCDPp
QwVRdQ055iMGBToioQaKHDD54hbqGn+yyAxahRLy0pVkda/MlJKrLJn6IfPCeO4F
wbH9qctqzW9WI2wMtGFDK0pTz9ED9iWaK0+ac845590pA4eiomC5d6cIhDjKtl0g
+q5iD+OL2brDxyE4hvwr23Pb8BZNQv9a1DLwrj1P5tHSgwpVZ6UJtSASpYYswquy
koS+488gldUCOTU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:53 2025 by rpki-client