Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a343030303a3a2f33342d3334203d3e20323734363633.roa
File:                     323830343a393163343a343030303a3a2f33342d3334203d3e20323734363633.roa (raw, json)
Hash identifier:          lSa/YdJjJkmYhObBFKkNmYzSCivD0BsEiA8rDVHehi0=
Subject key identifier:   26:B4:87:84:93:E8:E3:C8:C4:43:56:21:53:B5:83:73:21:F4:35:A1
Certificate issuer:       /CN=BDBA2324901F2A5030A374708C6F757D963E42AA
Certificate serial:       41616ED04C076769422B0783774F86900AD59BE0
Authority key identifier: BD:BA:23:24:90:1F:2A:50:30:A3:74:70:8C:6F:75:7D:96:3E:42:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBA2324901F2A5030A374708C6F757D963E42AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a343030303a3a2f33342d3334203d3e20323734363633.roa
Signing time:             Tue 28 Jan 2025 19:14:40 +0000
ROA not before:           Tue 28 Jan 2025 19:09:40 +0000
ROA not after:            Tue 27 Jan 2026 19:14:40 +0000
asID:                     274663
IP address blocks:        2804:91c4:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:61:6e:d0:4c:07:67:69:42:2b:07:83:77:4f:86:90:0a:d5:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBA2324901F2A5030A374708C6F757D963E42AA
        Validity
            Not Before: Jan 28 19:09:40 2025 GMT
            Not After : Jan 27 19:14:40 2026 GMT
        Subject: CN=26B4878493E8E3C8C443562153B5837321F435A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:f9:5a:65:30:6e:fc:7e:8f:09:70:be:0b:
                    0b:ed:03:f9:fe:98:9b:8e:14:03:a6:59:b1:60:c4:
                    3d:f6:d6:aa:58:39:fa:2c:f6:dc:cf:59:6d:db:dd:
                    9a:eb:c3:a8:23:1a:e8:62:c1:17:54:30:cc:75:75:
                    c8:3e:75:e3:f5:66:ae:82:9b:57:cb:56:91:84:3d:
                    b4:29:04:a7:a7:a3:7c:a2:55:5f:dc:ba:97:ec:3c:
                    73:dc:f6:2f:52:ca:3a:e3:d3:e6:27:c1:88:19:25:
                    91:fe:5c:25:d5:74:1b:35:9f:0b:82:6e:28:9f:c8:
                    a4:80:35:d3:4c:69:c9:1a:c2:40:5f:86:e0:66:e9:
                    18:2b:41:ff:63:da:e3:e0:f8:a4:98:ae:f3:b6:fa:
                    6d:75:ed:2d:70:ef:42:af:ce:f2:c0:ce:1a:56:25:
                    8c:6a:c9:e1:12:39:58:b8:2c:4c:a8:4d:54:f4:d9:
                    a7:83:d3:3c:b3:22:e8:ba:86:c6:67:6b:69:1e:5d:
                    fe:81:67:fa:a8:55:b5:ab:80:99:d3:94:56:e7:48:
                    6c:ee:99:1b:61:19:86:4c:11:6a:46:b3:7e:25:e2:
                    a4:6f:30:e1:74:44:23:c3:21:ab:81:b1:2c:d0:36:
                    ce:98:09:96:75:62:cd:e5:27:29:83:00:70:e4:1e:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:87:84:93:E8:E3:C8:C4:43:56:21:53:B5:83:73:21:F4:35:A1
            X509v3 Authority Key Identifier:
                keyid:BD:BA:23:24:90:1F:2A:50:30:A3:74:70:8C:6F:75:7D:96:3E:42:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/BDBA2324901F2A5030A374708C6F757D963E42AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBA2324901F2A5030A374708C6F757D963E42AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a343030303a3a2f33342d3334203d3e20323734363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:b8:8b:c9:c8:db:8f:5b:f3:39:c5:27:3d:6c:03:f8:c5:4b:
         9e:24:bf:a2:84:1c:2b:20:80:3c:4c:22:c3:9c:4e:ab:91:6a:
         6a:2b:af:da:85:f6:d6:9d:fe:1c:8e:1e:6e:9a:cd:fc:81:8f:
         65:81:5a:9f:84:3b:ea:36:51:ed:dd:94:17:b1:5a:44:98:06:
         74:98:c0:81:22:6d:fe:2c:fe:e4:b9:9c:f8:0f:19:fc:f2:d0:
         ec:a7:b3:83:aa:85:bb:29:75:ff:a9:9d:06:6f:93:c5:6e:55:
         0f:4a:43:9e:6a:94:90:ee:01:d0:5d:7b:48:a4:50:46:bc:de:
         5a:ce:4a:3f:8f:85:81:4f:a3:73:71:66:c5:ff:d1:e9:42:4d:
         62:bb:b4:32:95:cb:28:92:d2:fe:2d:83:b0:63:31:da:58:47:
         c8:23:3e:05:08:d6:ee:23:6b:d5:18:bd:70:04:fa:09:ab:d6:
         48:45:18:f5:14:dc:18:0a:bd:0c:df:50:5d:d8:eb:61:27:a6:
         e2:8e:80:92:ef:c1:a6:62:63:56:1a:e3:67:21:50:52:fb:28:
         8a:0d:35:85:49:e8:d9:e1:9b:65:56:92:41:02:41:4c:d6:7b:
         80:29:0d:e0:fa:0c:a0:28:d8:18:52:37:bd:ed:c0:ec:2d:02:
         7f:71:00:7f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQWFu0EwHZ2lCKweDd0+GkArVm+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRCQTIzMjQ5MDFGMkE1MDMwQTM3NDcwOEM2Rjc1N0Q5
NjNFNDJBQTAeFw0yNTAxMjgxOTA5NDBaFw0yNjAxMjcxOTE0NDBaMDMxMTAvBgNV
BAMTKDI2QjQ4Nzg0OTNFOEUzQzhDNDQzNTYyMTUzQjU4MzczMjFGNDM1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmC/laZTBu/H6PCXC+CwvtA/n+
mJuOFAOmWbFgxD321qpYOfos9tzPWW3b3Zrrw6gjGuhiwRdUMMx1dcg+deP1Zq6C
m1fLVpGEPbQpBKeno3yiVV/cupfsPHPc9i9Syjrj0+YnwYgZJZH+XCXVdBs1nwuC
biifyKSANdNMackawkBfhuBm6RgrQf9j2uPg+KSYrvO2+m117S1w70KvzvLAzhpW
JYxqyeESOVi4LEyoTVT02aeD0zyzIui6hsZna2keXf6BZ/qoVbWrgJnTlFbnSGzu
mRthGYZMEWpGs34l4qRvMOF0RCPDIauBsSzQNs6YCZZ1Ys3lJymDAHDkHrkRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJrSHhJPo48jEQ1YhU7WDcyH0NaEwHwYDVR0j
BBgwFoAUvbojJJAfKlAwo3RwjG91fZY+QqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1g4WEdDaFJTTkxMZ2t3eWJKYnU4QjkzRXdXRllVb0dQQmRtS2J5a0Vt
YmQvMC9CREJBMjMyNDkwMUYyQTUwMzBBMzc0NzA4QzZGNzU3RDk2M0U0MkFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQkEyMzI0OTAxRjJBNTAz
MEEzNzQ3MDhDNkY3NTdEOTYzRTQyQUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYOFhHQ2hSU05MTGdrd3liSmJ1OEI5M0V3V0ZZVW9HUEJkbUtieWtFbWJkLzAv
MzIzODMwMzQzYTM5MzE2MzM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczNDM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEkcRAMA0GCSqGSIb3DQEBCwUA
A4IBAQCLuIvJyNuPW/M5xSc9bAP4xUueJL+ihBwrIIA8TCLDnE6rkWpqK6/ahfbW
nf4cjh5ums38gY9lgVqfhDvqNlHt3ZQXsVpEmAZ0mMCBIm3+LP7kuZz4Dxn88tDs
p7ODqoW7KXX/qZ0Gb5PFblUPSkOeapSQ7gHQXXtIpFBGvN5azko/j4WBT6NzcWbF
/9HpQk1iu7QylcsoktL+LYOwYzHaWEfIIz4FCNbuI2vVGL1wBPoJq9ZIRRj1FNwY
Cr0M31Bd2OthJ6bijoCS78GmYmNWGuNnIVBS+yiKDTWFSejZ4ZtlVpJBAkFM1nuA
KQ3g+gygKNgYUje97cDsLQJ/cQB/
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:39:03 2025 by rpki-client