Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a3a2f33342d3334203d3e20323730343934.roa
File:                     323830343a366364303a3a2f33342d3334203d3e20323730343934.roa (raw, json)
Hash identifier:          vyb1SyqK/X/vCQ9KOCW9XsiALBZb2htqiFWxtpISX2I=
Subject key identifier:   4C:72:E2:00:72:6A:B4:13:BE:98:CC:96:3D:5D:C0:FE:83:BD:49:66
Certificate issuer:       /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial:       7C299F542D7C0711894533AA6CDC1052B595438F
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a3a2f33342d3334203d3e20323730343934.roa
Signing time:             Fri 21 Feb 2025 21:50:47 +0000
ROA not before:           Fri 21 Feb 2025 21:45:47 +0000
ROA not after:            Fri 20 Feb 2026 21:50:47 +0000
asID:                     270494
IP address blocks:        2804:6cd0::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:29:9f:54:2d:7c:07:11:89:45:33:aa:6c:dc:10:52:b5:95:43:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
        Validity
            Not Before: Feb 21 21:45:47 2025 GMT
            Not After : Feb 20 21:50:47 2026 GMT
        Subject: CN=4C72E200726AB413BE98CC963D5DC0FE83BD4966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:b2:4e:fc:92:b7:fd:7d:fc:98:bd:53:ee:
                    6c:79:f7:9a:5b:14:f9:0a:eb:8c:fa:25:48:31:a0:
                    e1:18:55:0d:93:69:37:31:47:17:f4:cb:39:8f:60:
                    45:33:f9:4a:45:78:c9:ee:99:44:30:f8:7d:00:69:
                    35:9a:61:d0:6d:59:a6:4b:2e:d9:32:d2:24:36:56:
                    40:0f:e8:a0:98:44:08:42:85:15:68:ee:56:2b:c2:
                    eb:50:64:7d:63:41:55:e8:53:cc:e5:24:78:e7:41:
                    59:92:8c:3c:fa:c5:54:b9:5b:2e:85:56:31:31:d0:
                    48:88:52:59:dd:72:b2:20:bc:d9:90:0f:7f:ee:aa:
                    31:e1:5e:91:bc:0f:1e:e7:be:2c:0e:25:ac:c8:dc:
                    64:96:0e:d1:f5:79:7c:e3:5a:97:a5:1f:aa:f6:62:
                    de:c5:8a:0b:70:50:26:4f:76:a7:59:61:b8:d4:7c:
                    b7:e0:20:ea:89:3f:34:59:f2:60:0e:ba:6c:7a:38:
                    42:b1:c6:ae:59:e2:e7:24:cb:30:1d:34:cc:6e:ce:
                    93:78:da:34:bd:df:05:af:3c:39:77:67:47:02:62:
                    7b:c4:26:51:f1:0a:22:7a:25:56:c9:77:bd:6c:85:
                    31:53:f8:6d:8b:4e:c6:4d:96:95:e1:6a:2d:5f:7e:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:72:E2:00:72:6A:B4:13:BE:98:CC:96:3D:5D:C0:FE:83:BD:49:66
            X509v3 Authority Key Identifier:
                keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a3a2f33342d3334203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cd0::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:ec:16:80:77:3e:c0:5f:bd:d2:68:9d:e6:4d:92:d8:ab:64:
         23:73:5a:38:b6:b0:04:53:47:be:26:25:6b:c5:67:26:a2:21:
         b6:9a:a3:74:7c:b7:b6:e5:5f:19:7e:7c:7e:1a:5d:ad:2d:3d:
         a7:86:17:b9:aa:b4:0b:37:f3:d1:c3:be:7a:0b:50:a8:40:92:
         78:ba:9e:8b:ca:7d:72:4d:a4:b2:04:81:cb:d0:ea:25:2a:16:
         e9:cb:b9:17:f3:2a:40:3a:8e:f8:2c:28:9e:4e:88:ee:82:49:
         da:51:a9:d7:4d:d6:8f:c3:b8:f7:7d:e5:29:71:53:ce:71:e9:
         29:84:c9:a2:ef:e7:98:d7:71:67:45:0a:46:a5:3d:93:e2:2c:
         3e:65:00:ad:65:f8:7a:8e:17:6f:99:5c:f9:7f:4d:64:dc:bf:
         65:ed:82:38:79:8a:d4:5b:16:0b:38:c4:e9:bc:fe:f8:a2:5e:
         7c:8d:b6:67:da:bd:d3:f7:35:92:7d:51:23:bf:9d:61:89:b1:
         57:39:45:7f:4b:a7:38:1a:af:2b:52:de:d0:ba:02:f5:7b:6b:
         d9:6a:c7:be:fd:e2:a1:16:47:a9:56:fc:0a:3b:d6:74:80:9a:
         5b:09:52:07:a5:16:29:2d:85:4e:a9:5c:1e:0a:54:ed:97:8c:
         26:0d:42:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfCmfVC18BxGJRTOqbNwQUrWVQ48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4N0E2QjRBODY3RkIyNDZBRjNGMzA3ODA4REM5OTU5
MjEyOTIzMjAeFw0yNTAyMjEyMTQ1NDdaFw0yNjAyMjAyMTUwNDdaMDMxMTAvBgNV
BAMTKDRDNzJFMjAwNzI2QUI0MTNCRTk4Q0M5NjNENURDMEZFODNCRDQ5NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuLJO/JK3/X38mL1T7mx595pb
FPkK64z6JUgxoOEYVQ2TaTcxRxf0yzmPYEUz+UpFeMnumUQw+H0AaTWaYdBtWaZL
Ltky0iQ2VkAP6KCYRAhChRVo7lYrwutQZH1jQVXoU8zlJHjnQVmSjDz6xVS5Wy6F
VjEx0EiIUlndcrIgvNmQD3/uqjHhXpG8Dx7nviwOJazI3GSWDtH1eXzjWpelH6r2
Yt7FigtwUCZPdqdZYbjUfLfgIOqJPzRZ8mAOumx6OEKxxq5Z4uckyzAdNMxuzpN4
2jS93wWvPDl3Z0cCYnvEJlHxCiJ6JVbJd71shTFT+G2LTsZNlpXhai1ffhsFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTHLiAHJqtBO+mMyWPV3A/oO9SWYwHwYDVR0j
BBgwFoAU/oemtKhn+yRq8/MHgI3JlZISkjIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0Z1dkJLZ0FBU0ZrdDZSTjF4QTJDNko0Tkx2cGF1YkZGRnJGNXd1bmpY
akEvMC9GRTg3QTZCNEE4NjdGQjI0NkFGM0YzMDc4MDhEQzk5NTkyMTI5MjMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFODdBNkI0QTg2N0ZCMjQ2
QUYzRjMwNzgwOERDOTk1OTIxMjkyMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NGdXZCS2dBQVNGa3Q2Uk4xeEEyQzZKNE5MdnBhdWJGRkZyRjV3dW5qWGpBLzAv
MzIzODMwMzQzYTM2NjM2NDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMw
MzQzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARs0AAwDQYJKoZIhvcNAQELBQADggEBAKjsFoB3
PsBfvdJoneZNktirZCNzWji2sARTR74mJWvFZyaiIbaao3R8t7blXxl+fH4aXa0t
PaeGF7mqtAs389HDvnoLUKhAkni6novKfXJNpLIEgcvQ6iUqFunLuRfzKkA6jvgs
KJ5OiO6CSdpRqddN1o/DuPd95SlxU85x6SmEyaLv55jXcWdFCkalPZPiLD5lAK1l
+HqOF2+ZXPl/TWTcv2Xtgjh5itRbFgs4xOm8/viiXnyNtmfavdP3NZJ9USO/nWGJ
sVc5RX9LpzgarytS3tC6AvV7a9lqx7794qEWR6lW/Ao71nSAmlsJUgelFikthU6p
XB4KVO2XjCYNQnU=
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:48:38 2025 by rpki-client