Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa
File:                     323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa (raw, json)
Hash identifier:          QvHD+8bnZO2kmruKs7D43+Yv6hI4ZOC1zobZkNm/zBA=
Subject key identifier:   9A:EE:31:28:FA:6B:51:A9:CA:1B:D9:AB:98:F2:4C:76:5C:F1:41:D8
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       2453903D07DE2FA4C38F45093CE8C2ACE3C0B820
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa
Signing time:             Tue 25 Mar 2025 20:13:32 +0000
ROA not before:           Tue 25 Mar 2025 20:08:32 +0000
ROA not after:            Tue 24 Mar 2026 20:13:32 +0000
asID:                     271019
IP address blocks:        2804:7508:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:53:90:3d:07:de:2f:a4:c3:8f:45:09:3c:e8:c2:ac:e3:c0:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Mar 25 20:08:32 2025 GMT
            Not After : Mar 24 20:13:32 2026 GMT
        Subject: CN=9AEE3128FA6B51A9CA1BD9AB98F24C765CF141D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:e3:92:e4:fc:e7:4f:3c:c1:f5:60:a9:f8:
                    78:68:0a:1b:b8:cc:02:8c:0e:d6:bd:b6:21:7f:c4:
                    6a:6c:85:c2:c0:a3:39:57:d2:d0:1c:a8:2e:7e:d0:
                    5d:00:d3:56:60:32:f6:86:1d:3e:d4:a8:9d:f6:fd:
                    c4:28:79:fd:e2:75:b6:52:4c:35:75:46:2e:d0:c9:
                    c5:0d:53:bb:0d:4c:01:66:a1:32:d3:5d:5f:59:15:
                    d5:83:d6:4a:e5:10:ec:da:74:40:5d:b2:dc:16:45:
                    57:0e:a0:2b:e5:be:4d:4c:9a:5f:ec:88:53:00:50:
                    13:3e:14:23:4c:3f:97:61:af:58:bd:72:1b:cf:5c:
                    c0:64:0d:82:50:81:39:63:b1:78:12:81:df:85:c4:
                    87:9a:66:c1:1a:dc:48:90:92:bc:47:10:28:0c:bd:
                    8d:9b:39:a3:78:47:14:e6:cb:27:69:54:52:d3:2c:
                    46:93:7e:14:75:91:4b:2d:87:5e:fd:f4:7b:af:f5:
                    0e:fe:86:9b:61:04:b4:c3:93:83:57:72:9c:97:92:
                    3f:0e:a3:7f:5c:22:89:7b:c4:1d:4f:bd:f6:1e:7e:
                    35:b3:4c:46:79:ca:a9:7b:49:0e:14:0e:ed:4e:4c:
                    48:56:0b:1b:e5:19:d5:fb:47:9c:2c:f3:f0:42:6d:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EE:31:28:FA:6B:51:A9:CA:1B:D9:AB:98:F2:4C:76:5C:F1:41:D8
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7508:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:96:ce:3f:ab:27:8b:4f:3a:15:a3:8c:81:ba:09:ee:49:
         91:20:e9:30:35:ae:3e:c5:bb:7a:5c:39:34:14:3d:20:21:e7:
         95:4b:61:18:44:d7:c0:27:77:7b:7a:0b:89:f1:22:92:a9:1f:
         a3:76:7a:7c:09:87:98:05:ea:28:5e:ad:5d:38:ca:72:b5:93:
         7e:f4:38:a5:89:e5:37:ae:39:78:86:a5:b6:1f:b9:95:ee:cf:
         61:56:7f:9a:59:c0:0d:57:66:35:a8:e9:61:ef:99:de:3e:45:
         13:d8:6f:77:bc:4f:20:54:9d:8e:75:35:46:d4:f6:4f:ff:3d:
         9b:3e:43:2f:78:71:9c:15:7f:7c:95:06:49:b9:07:48:83:a9:
         72:79:b3:77:e0:83:a7:54:00:7b:87:84:65:cf:48:d1:35:56:
         9d:bf:c3:d6:e5:5c:1f:41:d2:34:74:67:be:24:0a:35:e7:a1:
         1e:ad:63:28:fa:2d:7f:cc:09:e2:23:6d:89:41:45:35:e2:d8:
         ba:1c:57:e2:9d:ed:11:8c:43:98:fe:17:b6:ec:2e:1d:b3:0f:
         ec:89:6b:aa:32:0e:46:f7:ab:27:51:62:11:be:88:a8:76:af:
         fd:dc:d3:41:be:d1:03:91:ff:ca:20:a9:13:78:e9:9a:37:dd:
         82:9e:d5:4e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJFOQPQfeL6TDj0UJPOjCrOPAuCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUwRTZBMzk3MjQ3RDQ5NkUzOUMwQTc4REZCMUU1MUE3
MURCQUFCNTAeFw0yNTAzMjUyMDA4MzJaFw0yNjAzMjQyMDEzMzJaMDMxMTAvBgNV
BAMTKDlBRUUzMTI4RkE2QjUxQTlDQTFCRDlBQjk4RjI0Qzc2NUNGMTQxRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NuOS5PznTzzB9WCp+HhoChu4
zAKMDta9tiF/xGpshcLAozlX0tAcqC5+0F0A01ZgMvaGHT7UqJ32/cQoef3idbZS
TDV1Ri7QycUNU7sNTAFmoTLTXV9ZFdWD1krlEOzadEBdstwWRVcOoCvlvk1Mml/s
iFMAUBM+FCNMP5dhr1i9chvPXMBkDYJQgTljsXgSgd+FxIeaZsEa3EiQkrxHECgM
vY2bOaN4RxTmyydpVFLTLEaTfhR1kUsth1799Huv9Q7+hpthBLTDk4NXcpyXkj8O
o39cIol7xB1PvfYefjWzTEZ5yql7SQ4UDu1OTEhWCxvlGdX7R5ws8/BCbdW1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUmu4xKPprUanKG9mrmPJMdlzxQdgwHwYDVR0j
BBgwFoAUbg5qOXJH1JbjnAp437HlGnHbqrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0di
WjUvMC82RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEU2QTM5NzI0N0Q0OTZF
MzlDMEE3OERGQjFFNTFBNzFEQkFBQjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NURXRhOU1BY0xNUVlKQ1RSYmIzODJMd1FxVW41N2lvQ3RvVHB5cXdHYlo1LzAv
MzIzODMwMzQzYTM3MzUzMDM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTMwMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEdQiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAbSJbOP6sni086FaOMgboJ7kmRIOkwNa4+xbt6XDk0FD0gIeeVS2EYRNfA
J3d7eguJ8SKSqR+jdnp8CYeYBeooXq1dOMpytZN+9DilieU3rjl4hqW2H7mV7s9h
Vn+aWcANV2Y1qOlh75nePkUT2G93vE8gVJ2OdTVG1PZP/z2bPkMveHGcFX98lQZJ
uQdIg6lyebN34IOnVAB7h4Rlz0jRNVadv8PW5VwfQdI0dGe+JAo156EerWMo+i1/
zAniI22JQUU14ti6HFfine0RjEOY/he27C4dsw/siWuqMg5G96snUWIRvoiodq/9
3NNBvtEDkf/KIKkTeOmaN92CntVO
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:52 2025 by rpki-client