Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33362d3336203d3e20323637343039.roa
File:                     323830343a346430633a3a2f33362d3336203d3e20323637343039.roa (raw, json)
Hash identifier:          T+BjCkW2BPVrLL/NS8/qVG4F7AuuP2eRZQ6yrDaYRns=
Subject key identifier:   11:19:9B:AC:05:64:7C:36:50:35:7C:D1:3D:86:4A:10:7B:DA:80:23
Certificate issuer:       /CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Certificate serial:       037C43AFBF5DDB266FF770ED9C69DD56EB982AC5
Authority key identifier: 91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33362d3336203d3e20323637343039.roa
Signing time:             Fri 21 Feb 2025 13:44:51 +0000
ROA not before:           Fri 21 Feb 2025 13:39:51 +0000
ROA not after:            Fri 20 Feb 2026 13:44:51 +0000
asID:                     267409
IP address blocks:        2804:4d0c::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7c:43:af:bf:5d:db:26:6f:f7:70:ed:9c:69:dd:56:eb:98:2a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
        Validity
            Not Before: Feb 21 13:39:51 2025 GMT
            Not After : Feb 20 13:44:51 2026 GMT
        Subject: CN=11199BAC05647C3650357CD13D864A107BDA8023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:d7:fb:d7:5a:ae:9b:8a:88:f9:66:cd:30:
                    7e:f5:7f:a8:2e:bc:40:32:7d:4f:eb:71:62:33:de:
                    e2:d5:d2:92:c7:1b:eb:cd:7a:c4:3c:dc:b9:1f:c7:
                    3c:c0:82:8e:b0:31:9e:47:91:f3:e9:32:35:1a:30:
                    91:bc:23:1a:4d:c4:0f:ab:c3:bd:90:41:b0:23:ed:
                    87:3b:db:2e:4a:9a:5f:ac:06:c5:75:75:35:96:f8:
                    24:ef:54:04:67:b5:eb:0d:6a:28:78:96:f3:c1:5e:
                    4b:30:6f:62:62:a7:83:73:81:b6:42:d0:57:ab:8d:
                    1a:b8:20:0e:76:88:50:f9:d6:68:89:60:53:c0:13:
                    b6:6f:35:df:d0:28:ab:6a:8a:24:15:9e:4e:f4:fa:
                    58:c9:34:3d:22:0e:56:c8:74:c6:39:a8:42:a2:b9:
                    3e:19:1c:d7:7e:6a:ce:69:e0:07:15:79:48:c6:f3:
                    4f:bd:1b:2e:68:bf:78:b0:c2:2a:22:87:22:5c:28:
                    ed:42:bf:10:04:40:0b:39:1c:1c:93:fa:f7:d6:e9:
                    08:8f:11:20:ff:a2:1c:23:9e:0f:8c:a2:6f:de:40:
                    c1:64:b6:32:5f:42:a4:f5:4f:76:45:e4:e3:fd:a6:
                    a2:37:73:eb:8d:0c:50:37:19:6b:f9:2a:d7:05:b3:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:19:9B:AC:05:64:7C:36:50:35:7C:D1:3D:86:4A:10:7B:DA:80:23
            X509v3 Authority Key Identifier:
                keyid:91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33362d3336203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d0c::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:d8:df:fc:e6:58:06:2b:d2:4a:35:8a:72:c2:e1:17:b7:
         60:1d:1f:0d:51:e9:24:18:c4:64:08:40:0b:46:94:7e:c7:dc:
         1c:0a:74:9e:47:5a:dd:41:72:16:36:b4:f0:ac:8c:7d:39:09:
         d6:d5:36:6a:64:b3:82:be:db:3d:ee:5c:ad:5e:44:06:f5:2e:
         a8:2f:59:c7:98:3e:cc:dc:b7:72:41:4a:93:5b:02:5c:fa:a3:
         c9:1c:79:63:b5:7a:e6:25:22:94:74:4b:01:1f:08:17:6c:e1:
         46:52:2e:7e:02:7a:98:f4:78:ea:fe:fe:04:5d:3d:68:72:ed:
         cd:43:93:7e:e9:c9:a5:12:e6:37:16:86:5b:40:bf:0e:05:a5:
         bb:7d:e7:62:ad:47:51:03:38:f5:f5:03:01:91:55:71:3d:b6:
         a7:e4:1b:29:ad:57:10:71:22:23:78:f3:d6:8c:9f:95:d3:6e:
         71:be:ef:06:45:7f:a3:cc:ff:65:ba:65:99:ca:c8:e0:01:7d:
         b0:91:36:f3:bf:fe:ff:2a:62:2b:92:1d:e4:8d:ac:c9:e1:88:
         d3:81:de:be:72:15:c5:c6:e7:eb:9c:a1:ae:8c:56:a9:23:34:
         1b:a7:4c:9f:ff:0b:8b:2c:be:76:a1:d9:aa:29:df:f2:08:7f:
         46:9f:5a:82
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA3xDr79d2yZv93DtnGndVuuYKsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE0MDE2RDIwRkM2QkYzOTIzODhFQkYyMTkyRDhGNUFB
NzhCOEZEMzAeFw0yNTAyMjExMzM5NTFaFw0yNjAyMjAxMzQ0NTFaMDMxMTAvBgNV
BAMTKDExMTk5QkFDMDU2NDdDMzY1MDM1N0NEMTNEODY0QTEwN0JEQTgwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBtf711qum4qI+WbNMH71f6gu
vEAyfU/rcWIz3uLV0pLHG+vNesQ83LkfxzzAgo6wMZ5HkfPpMjUaMJG8IxpNxA+r
w72QQbAj7Yc72y5Kml+sBsV1dTWW+CTvVARntesNaih4lvPBXkswb2Jip4NzgbZC
0FerjRq4IA52iFD51miJYFPAE7ZvNd/QKKtqiiQVnk70+ljJND0iDlbIdMY5qEKi
uT4ZHNd+as5p4AcVeUjG80+9Gy5ov3iwwioihyJcKO1CvxAEQAs5HByT+vfW6QiP
ESD/ohwjng+Mom/eQMFktjJfQqT1T3ZF5OP9pqI3c+uNDFA3GWv5KtcFs2a/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUERmbrAVkfDZQNXzRPYZKEHvagCMwHwYDVR0j
BBgwFoAUkUAW0g/GvzkjiOvyGS2PWqeLj9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkpDNGRmaVNKVURoR0hWc2tYb2tWMXZ4U0toQ1V4Y1c1U25mSmhEaFZT
SFAvMC85MTQwMTZEMjBGQzZCRjM5MjM4OEVCRjIxOTJEOEY1QUE3OEI4RkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNDAxNkQyMEZDNkJGMzky
Mzg4RUJGMjE5MkQ4RjVBQTc4QjhGRDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JKQzRkZmlTSlVEaEdIVnNrWG9rVjF2eFNLaENVeGNXNVNuZkpoRGhWU0hQLzAv
MzIzODMwMzQzYTM0NjQzMDYzM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM3
MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARNDAAwDQYJKoZIhvcNAQELBQADggEBAJfj2N/8
5lgGK9JKNYpywuEXt2AdHw1R6SQYxGQIQAtGlH7H3BwKdJ5HWt1BchY2tPCsjH05
CdbVNmpks4K+2z3uXK1eRAb1LqgvWceYPszct3JBSpNbAlz6o8kceWO1euYlIpR0
SwEfCBds4UZSLn4Cepj0eOr+/gRdPWhy7c1Dk37pyaUS5jcWhltAvw4Fpbt952Kt
R1EDOPX1AwGRVXE9tqfkGymtVxBxIiN489aMn5XTbnG+7wZFf6PM/2W6ZZnKyOAB
fbCRNvO//v8qYiuSHeSNrMnhiNOB3r5yFcXG5+ucoa6MVqkjNBunTJ//C4ssvnah
2aop3/IIf0afWoI=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:32 2025 by rpki-client