Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a633030303a3a2f33362d3336203d3e20323731303134.roa
File:                     323830343a373466343a633030303a3a2f33362d3336203d3e20323731303134.roa (raw, json)
Hash identifier:          oXBBsxwz44Espm7S2Mt486m805sSh4/wdbA2ZnJIQrM=
Subject key identifier:   F2:5E:3F:77:91:A4:92:3D:54:17:94:64:6D:73:9B:C7:6D:A3:B2:99
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       70F4594BD89FB4522A103140047062B5FD9BE7AD
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a633030303a3a2f33362d3336203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:59 +0000
ROA not before:           Thu 08 Feb 2024 14:00:59 +0000
ROA not after:            Thu 06 Feb 2025 14:05:59 +0000
asID:                     271014
IP address blocks:        2804:74f4:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f4:59:4b:d8:9f:b4:52:2a:10:31:40:04:70:62:b5:fd:9b:e7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:59 2024 GMT
            Not After : Feb  6 14:05:59 2025 GMT
        Subject: CN=F25E3F7791A4923D541794646D739BC76DA3B299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:e0:f8:b6:cf:7f:29:9f:50:75:3a:37:2e:
                    a5:8a:ff:e0:31:f9:3d:48:c5:0a:bd:f6:cd:5f:74:
                    d5:00:22:5e:69:a2:aa:bf:de:40:a5:8b:bd:42:d4:
                    bc:32:37:88:a6:51:94:ce:48:97:44:bf:a3:1a:dd:
                    4e:c2:3c:b4:e4:66:34:c7:92:bd:4b:6a:4f:58:5c:
                    86:44:d0:7a:a3:5b:98:32:31:71:20:4d:75:ec:c7:
                    4d:fc:ed:bb:e6:a0:75:48:30:45:26:83:5c:9f:54:
                    fa:61:99:90:2f:33:e5:e6:ad:a8:cf:99:5c:5a:9f:
                    32:72:56:0b:81:93:04:92:8b:65:10:7e:c4:ca:9d:
                    77:c7:23:a8:56:85:92:0c:09:d4:0d:12:0f:3e:e5:
                    9e:0d:44:58:ad:be:d3:a8:c1:9c:e8:1d:4c:bd:24:
                    b9:2d:a7:23:ba:a0:27:6c:99:68:31:85:66:7c:21:
                    44:e6:39:66:87:33:74:e2:bf:9f:94:23:14:9e:57:
                    09:f3:5f:b1:2e:f1:3d:55:bb:3e:36:b1:89:d3:49:
                    70:98:e0:b2:89:0e:e5:35:c9:40:78:ed:23:fc:a1:
                    b4:0f:72:ce:6f:a9:08:1e:6f:51:bc:dc:a6:24:3e:
                    ff:cf:6f:4c:15:1f:67:de:f2:2e:07:80:95:9b:f1:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:3F:77:91:A4:92:3D:54:17:94:64:6D:73:9B:C7:6D:A3:B2:99
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a633030303a3a2f33362d3336203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:7d:70:5d:11:3a:3e:c9:95:81:32:98:ae:65:35:2e:0b:82:
         99:a6:95:b9:92:13:9c:70:cc:3c:ca:61:f4:75:ae:c1:94:df:
         f8:56:a4:e0:ed:ea:ba:52:8f:86:b6:0d:8b:81:b2:07:74:87:
         ee:9b:b9:bf:de:24:9f:82:10:8d:7f:9e:b8:31:3a:53:e3:a6:
         ef:5f:0b:77:96:db:ca:60:07:34:12:bc:fd:79:cb:6c:46:02:
         3d:6d:43:f9:4b:d0:d3:ae:29:66:56:46:63:79:1a:d8:d5:26:
         16:17:de:fd:4d:cb:8c:00:33:91:54:46:2e:9c:c2:b4:c9:c5:
         39:01:b2:1c:56:39:3a:84:17:8e:17:0f:58:66:fc:8a:36:9b:
         9c:26:2e:2c:ea:1e:90:5d:32:46:a6:51:41:dc:98:d8:81:01:
         29:33:c1:0f:27:1d:70:9a:6c:6d:99:38:2f:41:c4:d3:ca:93:
         a9:b6:2b:9a:72:b3:7f:0a:c1:3b:10:d6:c3:f9:e9:de:aa:b5:
         ba:36:ad:b3:41:43:12:6c:80:63:4a:9c:35:88:4f:71:d5:43:
         64:5e:1c:fb:03:61:c2:7e:5e:c0:c2:fd:c2:dc:4d:27:9a:a8:
         99:72:5b:01:cb:ae:11:f2:f4:bb:d3:13:1d:dc:b3:e1:82:cd:
         f0:36:99:77
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcPRZS9iftFIqEDFABHBitf2b560wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDQUY0QzE0RDc5N0VFMTcxRTZBNkM1QzExOTg4QUVB
ODRCQzM1MjAeFw0yNDAyMDgxNDAwNTlaFw0yNTAyMDYxNDA1NTlaMDMxMTAvBgNV
BAMTKEYyNUUzRjc3OTFBNDkyM0Q1NDE3OTQ2NDZENzM5QkM3NkRBM0IyOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeAuD4ts9/KZ9QdTo3LqWK/+Ax
+T1IxQq99s1fdNUAIl5poqq/3kCli71C1LwyN4imUZTOSJdEv6Ma3U7CPLTkZjTH
kr1Lak9YXIZE0HqjW5gyMXEgTXXsx0387bvmoHVIMEUmg1yfVPphmZAvM+XmrajP
mVxanzJyVguBkwSSi2UQfsTKnXfHI6hWhZIMCdQNEg8+5Z4NRFitvtOowZzoHUy9
JLktpyO6oCdsmWgxhWZ8IUTmOWaHM3Tiv5+UIxSeVwnzX7Eu8T1Vuz42sYnTSXCY
4LKJDuU1yUB47SP8obQPcs5vqQgeb1G83KYkPv/Pb0wVH2fe8i4HgJWb8eShAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU8l4/d5Gkkj1UF5RkbXObx22jspkwHwYDVR0j
BBgwFoAUJMr0wU15fuFx5qbFwRmIrqhLw1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdn
RHcvMC8yNENBRjRDMTRENzk3RUUxNzFFNkE2QzVDMTE5ODhBRUE4NEJDMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0Q0FGNEMxNEQ3OTdFRTE3
MUU2QTZDNUMxMTk4OEFFQTg0QkMzNTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U0M0dkYm1peGNQWDg3eGlBUzN5dFdqZmY0c3ViQnVrZzZ0b2NVRExHZ0R3LzAv
MzIzODMwMzQzYTM3MzQ2NjM0M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTMwMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEdPTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBefXBdETo+yZWBMpiuZTUuC4KZppW5khOccMw8ymH0da7BlN/4VqTg7eq6
Uo+Gtg2LgbIHdIfum7m/3iSfghCNf564MTpT46bvXwt3ltvKYAc0Erz9ectsRgI9
bUP5S9DTrilmVkZjeRrY1SYWF979TcuMADORVEYunMK0ycU5AbIcVjk6hBeOFw9Y
ZvyKNpucJi4s6h6QXTJGplFB3JjYgQEpM8EPJx1wmmxtmTgvQcTTypOptiuacrN/
CsE7ENbD+eneqrW6Nq2zQUMSbIBjSpw1iE9x1UNkXhz7A2HCfl7Awv3C3E0nmqiZ
clsBy64R8vS70xMd3LPhgs3wNpl3
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:37 2025 by rpki-client