Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a323030303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a323030303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          9hKNDfZnFeLayYFh+FpU4WKck6znRQetWfkz66nfZAw=
Subject key identifier:   67:24:4E:5D:45:67:FF:FA:06:21:65:17:DF:85:A2:1D:09:8A:E7:84
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       7DDEB73444983C7E29034D509EC92428E9D05C90
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a323030303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Wed 05 Mar 2025 21:16:09 +0000
ROA not before:           Wed 05 Mar 2025 21:11:09 +0000
ROA not after:            Wed 04 Mar 2026 21:16:09 +0000
asID:                     52916
IP address blocks:        2804:2b10:2000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:de:b7:34:44:98:3c:7e:29:03:4d:50:9e:c9:24:28:e9:d0:5c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Mar  5 21:11:09 2025 GMT
            Not After : Mar  4 21:16:09 2026 GMT
        Subject: CN=67244E5D4567FFFA06216517DF85A21D098AE784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:66:d8:7c:6f:f0:8b:b2:0f:41:3e:08:08:
                    de:eb:d2:c6:06:86:9f:28:a1:0e:b2:be:b6:b6:f0:
                    01:60:c6:ee:16:86:d4:0e:86:de:b4:5f:2d:d5:bd:
                    14:3c:ba:30:c8:98:9a:bb:24:17:de:4b:60:c7:0d:
                    f5:25:39:b5:80:41:ec:75:52:a8:b7:d6:bf:25:24:
                    eb:3c:ba:96:a3:b6:7f:ca:a6:9f:80:74:e1:28:dd:
                    d6:09:21:ac:dd:1d:6c:5f:4a:27:8c:3f:d9:ee:88:
                    5b:65:8e:4a:6f:f8:77:0e:31:0d:35:1c:9a:d7:02:
                    2b:86:54:90:b5:b7:11:0f:01:6a:ba:f3:61:59:ee:
                    00:86:b3:3f:0b:51:1f:50:76:d8:da:f1:74:e3:10:
                    69:64:1c:0c:b6:78:fe:7b:d7:6f:2a:fc:b8:34:23:
                    e3:08:84:63:08:26:71:e2:26:01:a8:81:3f:a2:48:
                    34:85:8d:4b:12:17:51:58:55:ae:00:01:60:51:61:
                    b1:1e:4d:f3:c3:db:8a:38:0f:76:2b:20:bb:be:25:
                    bf:57:c7:e3:66:21:96:da:8b:5b:72:19:23:1f:15:
                    6f:8b:d2:49:3a:c8:0a:36:97:a9:83:bf:52:3a:cf:
                    11:85:4c:4f:e4:05:08:f2:d9:8e:b6:a7:ce:dd:4f:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:4E:5D:45:67:FF:FA:06:21:65:17:DF:85:A2:1D:09:8A:E7:84
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a323030303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:2000::/39

    Signature Algorithm: sha256WithRSAEncryption
         7d:ab:2a:bd:5a:0a:7e:28:2a:9e:71:9f:27:96:da:5c:06:52:
         34:24:c3:5c:d0:b6:18:7a:bb:23:6e:07:ba:54:6a:7a:0b:3b:
         a0:7e:ae:8c:58:8c:5c:77:2a:ec:f5:47:2f:d9:9f:04:9e:c6:
         fe:23:e3:29:1b:65:bd:f9:f9:79:9e:be:f7:3b:3a:87:5a:b0:
         06:99:63:cd:1f:e6:15:75:1d:6d:53:5a:6f:b1:e6:2a:5d:29:
         a4:51:f9:3b:6c:1e:ca:11:4c:be:4c:3d:a6:52:06:ee:5f:4d:
         3a:55:86:ca:ff:77:77:9d:c9:de:c9:2e:a7:0f:25:3e:0c:ce:
         3d:a5:24:2d:dc:de:e7:ef:61:20:5c:dc:e1:72:87:69:d7:f8:
         bd:78:55:d0:b6:f4:fc:89:50:a6:24:2b:58:5d:82:35:96:d6:
         0c:fe:95:f5:7e:32:38:84:34:80:f6:ed:b1:6f:9d:49:89:da:
         2a:cb:6c:81:b2:99:76:bf:15:fa:cd:ff:cb:8d:d9:4a:7d:1b:
         ea:9a:81:c5:26:eb:57:0f:85:58:61:9d:79:39:ff:5f:15:28:
         69:c8:4c:cb:70:bb:c1:59:3c:30:1c:c9:1b:eb:c6:a2:d0:a9:
         7f:1d:9f:d1:2f:e9:ac:9d:dc:54:77:f2:9e:32:6a:18:1e:d7:
         9a:0a:92:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfd63NESYPH4pA01QnskkKOnQXJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5MDhBMTc3RkFGM0VERUVBRjM5RUYxQkMzQjIwODIy
NTMwMkU3NzAeFw0yNTAzMDUyMTExMDlaFw0yNjAzMDQyMTE2MDlaMDMxMTAvBgNV
BAMTKDY3MjQ0RTVENDU2N0ZGRkEwNjIxNjUxN0RGODVBMjFEMDk4QUU3ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhGbYfG/wi7IPQT4ICN7r0sYG
hp8ooQ6yvra28AFgxu4WhtQOht60Xy3VvRQ8ujDImJq7JBfeS2DHDfUlObWAQex1
Uqi31r8lJOs8upajtn/Kpp+AdOEo3dYJIazdHWxfSieMP9nuiFtljkpv+HcOMQ01
HJrXAiuGVJC1txEPAWq682FZ7gCGsz8LUR9Qdtja8XTjEGlkHAy2eP57128q/Lg0
I+MIhGMIJnHiJgGogT+iSDSFjUsSF1FYVa4AAWBRYbEeTfPD24o4D3YrILu+Jb9X
x+NmIZbai1tyGSMfFW+L0kk6yAo2l6mDv1I6zxGFTE/kBQjy2Y62p87dT3HXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZyROXUVn//oGIWUX34WiHQmK54QwHwYDVR0j
BBgwFoAU75CKF3+vPt7q857xvDsggiUwLncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMS9FRjkwOEExNzdGQUYzRURFRUFGMzlFRjFCQzNCMjA4MjI1MzAyRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOTA4QTE3N0ZBRjNFREVF
QUYzOUVGMUJDM0IyMDgyMjUzMDJFNzcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzEv
MzIzODMwMzQzYTMyNjIzMTMwM2EzMjMwMzAzMDNhM2EyZjMzMzkyZDMzMzkyMDNk
M2UyMDM1MzIzOTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgEoBCsQIDANBgkqhkiG9w0BAQsFAAOC
AQEAfasqvVoKfigqnnGfJ5baXAZSNCTDXNC2GHq7I24HulRqegs7oH6ujFiMXHcq
7PVHL9mfBJ7G/iPjKRtlvfn5eZ6+9zs6h1qwBpljzR/mFXUdbVNab7HmKl0ppFH5
O2weyhFMvkw9plIG7l9NOlWGyv93d53J3skupw8lPgzOPaUkLdze5+9hIFzc4XKH
adf4vXhV0Lb0/IlQpiQrWF2CNZbWDP6V9X4yOIQ0gPbtsW+dSYnaKstsgbKZdr8V
+s3/y43ZSn0b6pqBxSbrVw+FWGGdeTn/XxUoachMy3C7wVk8MBzJG+vGotCpfx2f
0S/prJ3cVHfynjJqGB7XmgqS2g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:27:32 2025 by rpki-client