Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a633030303a3a2f33342d3334203d3e20323730343431.roa
File:                     323830343a366330383a633030303a3a2f33342d3334203d3e20323730343431.roa (raw, json)
Hash identifier:          3nrP+qPmQWA0LCHEDIkvzmkC4cGMpyge33vVmhsEamI=
Subject key identifier:   E5:FB:BD:C6:72:AD:B7:2C:1F:B5:3B:C7:57:F9:03:A9:41:67:C3:18
Certificate issuer:       /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial:       04AE6D49AC8870613ECF2DD9EBC656EFAE68644D
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a633030303a3a2f33342d3334203d3e20323730343431.roa
Signing time:             Tue 03 Dec 2024 14:13:51 +0000
ROA not before:           Tue 03 Dec 2024 14:08:51 +0000
ROA not after:            Tue 02 Dec 2025 14:13:51 +0000
asID:                     270441
IP address blocks:        2804:6c08:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:6d:49:ac:88:70:61:3e:cf:2d:d9:eb:c6:56:ef:ae:68:64:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
        Validity
            Not Before: Dec  3 14:08:51 2024 GMT
            Not After : Dec  2 14:13:51 2025 GMT
        Subject: CN=E5FBBDC672ADB72C1FB53BC757F903A94167C318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:f9:5c:26:bf:9e:b3:ff:6a:1a:c4:ca:d4:
                    f6:11:24:04:2f:37:a6:df:ef:d9:df:94:10:e0:73:
                    26:f3:ec:c6:4a:45:31:fd:55:b0:f9:46:ee:ba:23:
                    f7:f8:a3:bc:77:b0:60:2d:de:50:83:ad:7d:50:0b:
                    a4:08:08:06:54:6f:ef:bc:16:12:ed:b5:dc:6c:e8:
                    4d:d9:a4:29:00:cc:39:78:cb:c9:7e:39:1f:aa:00:
                    4a:f2:e5:24:a4:c6:26:1c:96:d8:bc:7c:fc:65:ca:
                    c4:02:86:d5:27:1f:c1:4e:d7:b6:af:34:57:b6:c1:
                    de:75:c6:7a:e6:e7:6d:54:2c:94:15:6a:57:a5:52:
                    ae:a0:27:33:35:21:18:55:9c:b5:1f:8a:75:e3:16:
                    9a:e2:08:0d:07:08:aa:d5:a9:e3:1a:39:d2:9f:50:
                    a6:a7:a7:44:fc:63:88:76:f7:2e:53:6f:2f:eb:90:
                    31:8f:52:37:50:a3:6d:cf:31:e8:6e:95:d8:0d:0f:
                    60:23:bf:91:a0:84:20:88:62:0b:6e:e3:00:86:d4:
                    b2:8d:a7:67:38:92:34:04:29:0d:9c:d1:3d:99:24:
                    30:81:97:05:8c:08:c0:cd:45:1a:8c:60:13:71:bb:
                    e6:ff:b0:50:27:ea:7c:8a:56:e2:04:15:85:1d:70:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FB:BD:C6:72:AD:B7:2C:1F:B5:3B:C7:57:F9:03:A9:41:67:C3:18
            X509v3 Authority Key Identifier:
                keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a633030303a3a2f33342d3334203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c08:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:73:95:7a:89:25:36:cf:2d:d6:75:bb:29:09:7a:57:4b:
         e0:6b:5f:f0:82:45:00:f9:7c:ff:c6:72:95:84:2b:c6:08:9b:
         ab:04:e7:b9:61:46:3a:d8:8b:d5:14:c9:dd:5c:02:fb:3e:8e:
         ef:57:e2:92:3e:81:1f:13:70:8b:a3:00:6d:1b:81:a0:13:70:
         1b:b9:70:ec:43:ac:29:04:89:6a:6c:50:fa:74:ad:59:69:4f:
         da:0e:2a:3f:e5:35:1a:23:a4:63:1f:6f:24:19:d4:e0:8b:12:
         e0:50:35:ae:c1:87:db:d5:99:fb:7c:b2:8c:9a:8c:39:38:e6:
         4c:9a:0f:a8:31:30:8c:3a:dc:ca:d1:06:21:ca:d3:5f:fc:4e:
         b4:75:21:03:cf:e4:93:58:2f:81:f9:f3:da:48:ba:44:00:64:
         ff:9f:63:4e:a8:a0:61:45:9d:f8:5d:a7:73:dc:e5:30:10:a4:
         12:50:6b:47:5e:69:cc:c8:19:b2:f8:30:6d:14:a0:89:72:6a:
         55:84:78:d9:9e:5b:31:01:70:80:13:4d:20:eb:87:25:51:89:
         7e:f6:04:5a:5c:63:47:70:4c:f0:71:6b:2f:ce:96:92:60:85:
         ea:ad:01:d0:39:5c:5c:18:e5:e1:a6:a8:2a:51:af:9c:bd:7b:
         0f:9d:d5:7e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBK5tSayIcGE+zy3Z68ZW765oZE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBNDdCOTU0RDhBRDg5MjNBN0E4RkFEQ0RCODI3ODdD
MzFGQjE2QTAeFw0yNDEyMDMxNDA4NTFaFw0yNTEyMDIxNDEzNTFaMDMxMTAvBgNV
BAMTKEU1RkJCREM2NzJBREI3MkMxRkI1M0JDNzU3RjkwM0E5NDE2N0MzMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6i/lcJr+es/9qGsTK1PYRJAQv
N6bf79nflBDgcybz7MZKRTH9VbD5Ru66I/f4o7x3sGAt3lCDrX1QC6QICAZUb++8
FhLttdxs6E3ZpCkAzDl4y8l+OR+qAEry5SSkxiYclti8fPxlysQChtUnH8FO17av
NFe2wd51xnrm521ULJQValelUq6gJzM1IRhVnLUfinXjFpriCA0HCKrVqeMaOdKf
UKanp0T8Y4h29y5Tby/rkDGPUjdQo23PMehuldgND2Ajv5GghCCIYgtu4wCG1LKN
p2c4kjQEKQ2c0T2ZJDCBlwWMCMDNRRqMYBNxu+b/sFAn6nyKVuIEFYUdcI0FAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5fu9xnKttywftTvHV/kDqUFnwxgwHwYDVR0j
BBgwFoAUt6R7lU2K2JI6eo+tzbgnh8MfsWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2Q3NDVkU0NqTmtDWHdKdWlFWDhyUXdqN1ZYdFl5TjI4d2doSmJCNUpC
eE0vMC9CN0E0N0I5NTREOEFEODkyM0E3QThGQURDREI4Mjc4N0MzMUZCMTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3QTQ3Qjk1NEQ4QUQ4OTIz
QTdBOEZBRENEQjgyNzg3QzMxRkIxNkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NkNzQ1ZFNDak5rQ1h3SnVpRVg4clF3ajdWWHRZeU4yOHdnaEpiQjVKQnhNLzAv
MzIzODMwMzQzYTM2NjMzMDM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM0MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEbAjAMA0GCSqGSIb3DQEBCwUA
A4IBAQBMLXOVeoklNs8t1nW7KQl6V0vga1/wgkUA+Xz/xnKVhCvGCJurBOe5YUY6
2IvVFMndXAL7Po7vV+KSPoEfE3CLowBtG4GgE3AbuXDsQ6wpBIlqbFD6dK1ZaU/a
Dio/5TUaI6RjH28kGdTgixLgUDWuwYfb1Zn7fLKMmow5OOZMmg+oMTCMOtzK0QYh
ytNf/E60dSEDz+STWC+B+fPaSLpEAGT/n2NOqKBhRZ34Xadz3OUwEKQSUGtHXmnM
yBmy+DBtFKCJcmpVhHjZnlsxAXCAE00g64clUYl+9gRaXGNHcEzwcWsvzpaSYIXq
rQHQOVxcGOXhpqgqUa+cvXsPndV+
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:15:39 2025 by rpki-client