Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
File:                     323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (raw, json)
Hash identifier:          BCC51P7ZxSQ0m7S8/6KLs4GlFQ1WTUXIjCsSOHZYl+g=
Subject key identifier:   6E:36:87:49:D3:AC:6D:E0:FD:F9:9D:80:38:D6:63:C3:23:20:E3:8E
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       3BD037CF2A66386635FF6122152627DBB6B13310
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
Signing time:             Thu 06 Mar 2025 02:14:52 +0000
ROA not before:           Thu 06 Mar 2025 02:09:52 +0000
ROA not after:            Thu 05 Mar 2026 02:14:52 +0000
asID:                     271001
IP address blocks:        2804:74c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d0:37:cf:2a:66:38:66:35:ff:61:22:15:26:27:db:b6:b1:33:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Mar  6 02:09:52 2025 GMT
            Not After : Mar  5 02:14:52 2026 GMT
        Subject: CN=6E368749D3AC6DE0FDF99D8038D663C32320E38E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:dd:15:34:da:81:cc:e5:57:1f:35:1d:20:
                    b0:05:fe:1b:00:db:d3:fa:46:55:b1:e4:a2:9e:1c:
                    4a:cd:93:37:b6:10:7b:7c:18:b4:a6:40:86:31:5b:
                    57:fe:87:c1:fc:0c:e5:63:80:49:66:0c:61:9a:5c:
                    6f:56:df:e3:56:ce:a0:7b:6a:ff:88:00:2d:f0:f2:
                    59:5f:45:c6:c9:a2:f9:23:fd:ad:6d:88:7b:ec:32:
                    2d:66:95:a7:d2:11:cb:34:d7:ff:34:30:82:a3:12:
                    81:b7:85:76:71:bd:9b:d6:2e:99:2a:d7:f3:b3:8b:
                    bd:9d:00:88:32:43:c2:e9:2a:20:7d:c5:52:c4:d7:
                    fb:07:a0:f1:31:94:ba:a4:3b:a6:1c:c8:f1:5e:c9:
                    99:1c:cb:2d:64:73:b0:c6:eb:df:2f:fd:62:4e:16:
                    69:70:fa:82:75:4d:14:2d:b3:d5:b5:15:33:1c:22:
                    06:37:bb:ef:b9:04:8d:a4:cd:29:16:46:00:b2:0e:
                    e4:18:46:6a:e2:8b:c7:c9:ae:27:e9:c0:2d:4a:9d:
                    0e:46:76:b9:7e:59:34:77:a7:33:13:39:6e:7b:fd:
                    d2:82:c1:75:4a:de:2e:96:28:79:09:c0:62:3e:0c:
                    fb:bf:4c:be:ac:83:2d:c3:3e:18:11:78:5b:47:10:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:87:49:D3:AC:6D:E0:FD:F9:9D:80:38:D6:63:C3:23:20:E3:8E
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:f6:5a:ad:df:de:67:72:19:75:23:52:3f:fc:08:ef:36:c7:
         86:cd:11:1e:b8:cd:db:58:12:34:83:48:9d:51:6c:f4:54:7c:
         94:a6:b1:89:2f:8f:5f:a3:f2:7c:53:0b:ef:04:a9:28:9d:0f:
         f6:fd:de:73:2c:63:03:73:2e:ba:36:53:3d:ae:af:f5:11:0c:
         3d:c8:67:63:47:1c:27:d5:c5:ca:45:0d:29:85:23:42:72:ba:
         c3:01:48:94:42:2a:66:2b:c4:1f:98:02:9b:df:30:8c:15:4f:
         16:f6:6f:d2:12:69:10:c6:9f:f6:fa:ab:49:cc:b3:af:9e:3d:
         2c:07:83:6c:bc:09:88:61:ec:4c:57:e8:2c:23:7a:94:76:8a:
         36:70:ad:cf:18:c6:3d:e1:8c:0d:3f:0f:09:09:09:f4:43:74:
         2e:d9:5d:43:2d:fc:d5:76:b4:45:57:31:0e:75:32:f0:f5:d7:
         37:1c:8a:d5:04:50:e7:b3:1f:c4:ae:6b:50:c1:5d:8e:d9:a5:
         ff:7b:71:4d:1b:93:0d:cf:14:c5:22:f1:4a:b2:2a:01:c9:9c:
         49:ea:ea:7f:86:cb:b1:9e:47:76:81:0f:3c:f0:ce:d0:d1:2e:
         cc:4b:15:dc:8c:f3:d1:20:f0:0c:e6:0b:22:2e:8d:27:d7:6c:
         a1:2f:0a:cf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO9A3zypmOGY1/2EiFSYn27axMxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC
RjVDNEE4MTAeFw0yNTAzMDYwMjA5NTJaFw0yNjAzMDUwMjE0NTJaMDMxMTAvBgNV
BAMTKDZFMzY4NzQ5RDNBQzZERTBGREY5OUQ4MDM4RDY2M0MzMjMyMEUzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBN0VNNqBzOVXHzUdILAF/hsA
29P6RlWx5KKeHErNkze2EHt8GLSmQIYxW1f+h8H8DOVjgElmDGGaXG9W3+NWzqB7
av+IAC3w8llfRcbJovkj/a1tiHvsMi1mlafSEcs01/80MIKjEoG3hXZxvZvWLpkq
1/Ozi72dAIgyQ8LpKiB9xVLE1/sHoPExlLqkO6YcyPFeyZkcyy1kc7DG698v/WJO
Fmlw+oJ1TRQts9W1FTMcIgY3u++5BI2kzSkWRgCyDuQYRmrii8fJrifpwC1KnQ5G
drl+WTR3pzMTOW57/dKCwXVK3i6WKHkJwGI+DPu/TL6sgy3DPhgReFtHEEqXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbjaHSdOsbeD9+Z2AONZjwyMg444wHwYDVR0j
BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX
RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0
OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NaNXVjdjcyMWQ0ZkRicUF1RTFVbThablFqOHBhcGFKNTFIU1JwSHhpV0RVLzEv
MzIzODMwMzQzYTM3MzQ2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzAzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR0wDANBgkqhkiG9w0BAQsFAAOCAQEAKPZard/e
Z3IZdSNSP/wI7zbHhs0RHrjN21gSNINInVFs9FR8lKaxiS+PX6PyfFML7wSpKJ0P
9v3ecyxjA3MuujZTPa6v9REMPchnY0ccJ9XFykUNKYUjQnK6wwFIlEIqZivEH5gC
m98wjBVPFvZv0hJpEMaf9vqrScyzr549LAeDbLwJiGHsTFfoLCN6lHaKNnCtzxjG
PeGMDT8PCQkJ9EN0LtldQy381Xa0RVcxDnUy8PXXNxyK1QRQ57MfxK5rUMFdjtml
/3txTRuTDc8UxSLxSrIqAcmcSerqf4bLsZ5HdoEPPPDO0NEuzEsV3Izz0SDwDOYL
Ii6NJ9dsoS8Kzw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:30 2025 by rpki-client