Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030363a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a393030363a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          Ibci1YTOrZV7tgvytHJZH8vxkTQHeA/ctrNjudkHawQ=
Subject key identifier:   33:6F:2C:1E:B3:A2:3F:F3:07:35:E3:E6:2F:F2:75:73:45:C3:08:C4
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       7E8848DD2E1478AB4E4653ADB3020B68EBA2C112
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030363a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:02 +0000
ROA not before:           Thu 08 Feb 2024 14:01:02 +0000
ROA not after:            Thu 06 Feb 2025 14:06:02 +0000
asID:                     271014
IP address blocks:        2804:74f4:9006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:88:48:dd:2e:14:78:ab:4e:46:53:ad:b3:02:0b:68:eb:a2:c1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:02 2024 GMT
            Not After : Feb  6 14:06:02 2025 GMT
        Subject: CN=336F2C1EB3A23FF30735E3E62FF2757345C308C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:79:99:31:05:b2:62:2e:81:d7:28:81:28:5b:
                    32:fc:96:67:8e:91:b6:e7:e9:92:37:7e:41:92:63:
                    54:94:68:fc:42:da:78:57:e6:fb:7f:a1:8b:cc:ad:
                    9f:d0:a2:a4:1e:b2:84:89:90:8e:67:20:12:83:a0:
                    ac:30:8e:2c:d9:8f:d1:93:76:f6:31:23:21:73:b7:
                    4a:a2:c1:ae:7e:9a:16:81:17:c8:7d:92:6a:0d:42:
                    65:97:26:d7:b8:cc:65:e6:48:ab:40:7b:92:02:11:
                    fe:f7:46:dd:9c:2e:bd:7c:e1:f0:64:41:d3:7b:d9:
                    05:a5:0d:c9:39:d2:b6:b0:d5:19:aa:e1:29:a2:0b:
                    61:ab:b2:bb:10:42:be:7f:96:20:bc:7a:b3:6d:d0:
                    48:8b:b0:c8:30:94:50:02:fa:5b:a8:03:06:c8:7f:
                    1d:cc:12:8c:0d:ed:c6:db:ec:61:ca:12:86:fa:d7:
                    03:6e:e8:5d:21:5d:8c:d3:c3:0b:cb:14:42:f9:c7:
                    76:7a:32:65:de:48:17:9c:fe:3b:11:52:43:f3:5c:
                    c4:94:74:7d:20:06:6c:51:4e:e7:6e:bc:01:7a:6c:
                    73:f5:be:f8:bc:7a:1a:cb:1f:63:af:b9:b6:cb:01:
                    b5:e7:41:e0:01:5b:02:41:a9:b6:f4:46:20:bb:55:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6F:2C:1E:B3:A2:3F:F3:07:35:E3:E6:2F:F2:75:73:45:C3:08:C4
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030363a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:9006::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:9f:b0:d2:70:5c:6c:6b:ee:06:c6:3b:0d:08:7e:8e:be:
         29:e3:70:1c:52:11:58:c8:d5:4b:f8:14:e3:7d:08:dc:fe:ec:
         92:3e:8d:8e:13:f1:83:02:24:31:31:b6:8a:ec:b3:2c:7d:1d:
         db:d4:f7:85:89:ad:ec:43:96:34:fc:11:b1:cc:4a:0d:c8:09:
         fd:50:c3:6c:87:cc:8a:9f:99:73:c6:68:a9:82:2e:60:0d:57:
         a1:a1:a0:02:9b:71:b0:9f:a4:18:18:ba:02:31:ba:ad:0c:8f:
         c2:d2:e0:dd:13:76:22:3d:4c:03:2e:fc:04:dc:3d:35:9b:6b:
         1e:d2:19:4d:b3:a9:f8:38:49:4d:87:7e:f0:1d:ec:b1:64:e3:
         c2:c8:ab:e8:fb:25:5d:7e:75:b5:32:dc:5c:ad:0f:25:e1:c4:
         77:bf:d7:33:f4:8d:74:93:a5:7d:23:5c:e5:31:8e:0c:65:73:
         9e:dd:d1:82:c3:46:5f:1f:1c:a7:fe:05:ea:27:bb:12:93:70:
         e0:d5:6e:14:64:c6:85:db:0c:ca:e0:46:5c:ab:89:9c:90:b9:
         3b:e6:06:30:54:e4:cb:62:29:9e:78:b6:f1:1c:98:90:08:f6:
         48:bd:86:85:6a:85:a5:fd:9a:ab:d9:72:8e:b0:3d:b7:c2:ce:
         13:98:89:26
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUfohI3S4UeKtORlOtswILaOuiwRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDQUY0QzE0RDc5N0VFMTcxRTZBNkM1QzExOTg4QUVB
ODRCQzM1MjAeFw0yNDAyMDgxNDAxMDJaFw0yNTAyMDYxNDA2MDJaMDMxMTAvBgNV
BAMTKDMzNkYyQzFFQjNBMjNGRjMwNzM1RTNFNjJGRjI3NTczNDVDMzA4QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDweZkxBbJiLoHXKIEoWzL8lmeO
kbbn6ZI3fkGSY1SUaPxC2nhX5vt/oYvMrZ/QoqQesoSJkI5nIBKDoKwwjizZj9GT
dvYxIyFzt0qiwa5+mhaBF8h9kmoNQmWXJte4zGXmSKtAe5ICEf73Rt2cLr184fBk
QdN72QWlDck50raw1Rmq4SmiC2GrsrsQQr5/liC8erNt0EiLsMgwlFAC+luoAwbI
fx3MEowN7cbb7GHKEob61wNu6F0hXYzTwwvLFEL5x3Z6MmXeSBec/jsRUkPzXMSU
dH0gBmxRTuduvAF6bHP1vvi8ehrLH2OvubbLAbXnQeABWwJBqbb0RiC7VS5LAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUM28sHrOiP/MHNePmL/J1c0XDCMQwHwYDVR0j
BBgwFoAUJMr0wU15fuFx5qbFwRmIrqhLw1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdn
RHcvMC8yNENBRjRDMTRENzk3RUUxNzFFNkE2QzVDMTE5ODhBRUE4NEJDMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0Q0FGNEMxNEQ3OTdFRTE3
MUU2QTZDNUMxMTk4OEFFQTg0QkMzNTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U0M0dkYm1peGNQWDg3eGlBUzN5dFdqZmY0c3ViQnVrZzZ0b2NVRExHZ0R3LzAv
MzIzODMwMzQzYTM3MzQ2NjM0M2EzOTMwMzAzNjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMTMwMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEdPSQBjANBgkqhkiG9w0BAQsF
AAOCAQEAXsifsNJwXGxr7gbGOw0Ifo6+KeNwHFIRWMjVS/gU430I3P7skj6NjhPx
gwIkMTG2iuyzLH0d29T3hYmt7EOWNPwRscxKDcgJ/VDDbIfMip+Zc8ZoqYIuYA1X
oaGgAptxsJ+kGBi6AjG6rQyPwtLg3RN2Ij1MAy78BNw9NZtrHtIZTbOp+DhJTYd+
8B3ssWTjwsir6PslXX51tTLcXK0PJeHEd7/XM/SNdJOlfSNc5TGODGVznt3RgsNG
Xx8cp/4F6ie7EpNw4NVuFGTGhdsMyuBGXKuJnJC5O+YGMFTky2Ipnni28RyYkAj2
SL2GhWqFpf2aq9lyjrA9t8LOE5iJJg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:15 2025 by rpki-client