Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33342d3334203d3e20323730393130.roa
File:                     323830343a373335633a3a2f33342d3334203d3e20323730393130.roa (raw, json)
Hash identifier:          wOVTBhLZ/xK4qbdGTIsZZwF4f4WAqEgw4jFqxwpKw78=
Subject key identifier:   9E:83:95:35:02:E4:DF:CD:50:64:88:E6:00:F8:E8:D1:2A:85:49:3E
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       4F0A078F694CE28AD103126458BA8A1A21E64E91
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33342d3334203d3e20323730393130.roa
Signing time:             Thu 04 Apr 2024 07:17:26 +0000
ROA not before:           Thu 04 Apr 2024 07:12:26 +0000
ROA not after:            Thu 03 Apr 2025 07:17:26 +0000
asID:                     270910
IP address blocks:        2804:735c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0a:07:8f:69:4c:e2:8a:d1:03:12:64:58:ba:8a:1a:21:e6:4e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  4 07:12:26 2024 GMT
            Not After : Apr  3 07:17:26 2025 GMT
        Subject: CN=9E83953502E4DFCD506488E600F8E8D12A85493E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:7d:a6:b2:5e:25:6b:b4:91:70:a9:40:b7:
                    3a:14:66:f4:c1:b8:49:e2:8c:e1:87:aa:2d:f3:cd:
                    e5:c2:7d:6b:56:ea:93:94:ac:a4:65:c5:c6:d7:51:
                    2d:2c:bc:32:c2:41:8e:19:66:d7:48:46:bc:bf:5a:
                    57:4c:c5:a8:58:db:a4:fa:28:e5:2e:e3:87:29:82:
                    bb:82:b6:c2:42:9f:05:18:3d:5d:68:22:9f:f8:47:
                    a7:90:6c:27:f4:91:0f:d7:a5:13:92:33:e1:7c:01:
                    5e:f9:f0:be:7a:d1:e3:3f:ba:46:b5:94:75:ab:11:
                    64:b0:c8:0c:3b:91:52:58:28:90:51:43:e6:40:6e:
                    b1:eb:09:b3:e5:b7:f5:92:f9:d6:1d:64:6e:29:db:
                    ff:89:4d:9f:f8:c2:f8:2a:dd:57:ab:b2:16:2f:64:
                    7a:cd:65:3a:16:46:4b:e7:eb:72:9b:8e:fa:9b:a7:
                    16:bc:f7:d1:95:9d:f5:46:c5:2e:2a:05:42:7e:37:
                    18:31:e7:23:a3:f5:63:28:e2:4b:f4:d3:f8:8c:10:
                    de:87:25:66:4c:5a:9c:d9:8b:ca:55:9d:3c:2f:4b:
                    53:01:2c:66:6a:f0:bf:18:81:32:4f:a1:6a:4f:c6:
                    3f:15:86:0e:1f:8b:91:c6:40:5d:47:00:24:96:9c:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:83:95:35:02:E4:DF:CD:50:64:88:E6:00:F8:E8:D1:2A:85:49:3E
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33342d3334203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:2d:e7:93:ff:53:d1:f4:aa:35:73:be:f2:b6:f8:5b:3f:
         21:33:cc:4f:82:dc:66:43:a9:58:c9:41:2b:fd:f9:d7:03:d7:
         1e:bb:dc:df:e8:02:00:0e:84:e9:59:bc:81:f8:8f:6a:ab:d5:
         db:fd:ba:ee:be:78:b3:90:9f:3a:04:fd:e5:f3:c0:40:95:98:
         58:e2:01:82:be:d0:a8:a6:3c:b4:d2:6b:93:50:79:3f:e0:ff:
         82:f4:a5:53:20:1b:06:e0:5d:63:8e:72:6b:39:70:22:c2:77:
         2e:67:23:df:1c:30:c6:6d:fd:93:d7:6c:a0:ae:29:a0:ac:3a:
         7b:03:3f:e7:96:a2:49:58:91:af:d7:49:d3:0f:fd:18:79:87:
         98:4a:2f:a6:dd:e4:43:4c:5b:10:2f:a5:82:b4:8f:0c:27:10:
         80:08:92:d7:77:dc:4b:9d:c7:71:50:e1:5a:71:07:ac:fa:42:
         c9:fa:83:ba:6a:1b:e8:93:32:62:15:46:c5:2d:87:a8:ac:91:
         73:12:54:a8:f1:c7:8c:50:32:0e:2f:61:95:c7:ce:c0:3a:74:
         0c:d1:ca:c7:98:05:73:67:dd:0b:69:86:34:4e:74:7c:2c:7a:
         7e:c7:af:8d:2d:89:9a:eb:65:6f:4d:db:47:31:54:a2:69:40:
         b6:5e:4d:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTwoHj2lM4orRAxJkWLqKGiHmTpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5
NENDM0I2NjAeFw0yNDA0MDQwNzEyMjZaFw0yNTA0MDMwNzE3MjZaMDMxMTAvBgNV
BAMTKDlFODM5NTM1MDJFNERGQ0Q1MDY0ODhFNjAwRjhFOEQxMkE4NTQ5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgt32msl4la7SRcKlAtzoUZvTB
uEnijOGHqi3zzeXCfWtW6pOUrKRlxcbXUS0svDLCQY4ZZtdIRry/WldMxahY26T6
KOUu44cpgruCtsJCnwUYPV1oIp/4R6eQbCf0kQ/XpROSM+F8AV758L560eM/uka1
lHWrEWSwyAw7kVJYKJBRQ+ZAbrHrCbPlt/WS+dYdZG4p2/+JTZ/4wvgq3VershYv
ZHrNZToWRkvn63Kbjvqbpxa899GVnfVGxS4qBUJ+Nxgx5yOj9WMo4kv00/iMEN6H
JWZMWpzZi8pVnTwvS1MBLGZq8L8YgTJPoWpPxj8Vhg4fi5HGQF1HACSWnJcXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnoOVNQLk381QZIjmAPjo0SqFST4wHwYDVR0j
BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0
MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzEv
MzIzODMwMzQzYTM3MzMzNTYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMw
MzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARzXAAwDQYJKoZIhvcNAQELBQADggEBAGHdLeeT
/1PR9Ko1c77ytvhbPyEzzE+C3GZDqVjJQSv9+dcD1x673N/oAgAOhOlZvIH4j2qr
1dv9uu6+eLOQnzoE/eXzwECVmFjiAYK+0KimPLTSa5NQeT/g/4L0pVMgGwbgXWOO
cms5cCLCdy5nI98cMMZt/ZPXbKCuKaCsOnsDP+eWoklYka/XSdMP/Rh5h5hKL6bd
5ENMWxAvpYK0jwwnEIAIktd33Eudx3FQ4VpxB6z6Qsn6g7pqG+iTMmIVRsUth6is
kXMSVKjxx4xQMg4vYZXHzsA6dAzRyseYBXNn3QtphjROdHwsen7Hr40tiZrrZW9N
20cxVKJpQLZeTbA=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:50 2025 by rpki-client