Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a653030303a3a2f34362d3436203d3e20323731303134.roa
File:                     323830343a373466343a653030303a3a2f34362d3436203d3e20323731303134.roa (raw, json)
Hash identifier:          wQdlrEVHPRfpDoy2JE8J7IYJBLBAqlLYwgp/uXbgt64=
Subject key identifier:   58:BF:17:32:75:7B:E2:6B:0F:6C:DE:7F:E3:23:41:C8:9A:66:1B:45
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       524D9DE492B5465436579EA16F426BF8D667E007
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a653030303a3a2f34362d3436203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:57 +0000
ROA not before:           Thu 08 Feb 2024 14:00:57 +0000
ROA not after:            Thu 06 Feb 2025 14:05:57 +0000
asID:                     271014
IP address blocks:        2804:74f4:e000::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4d:9d:e4:92:b5:46:54:36:57:9e:a1:6f:42:6b:f8:d6:67:e0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:57 2024 GMT
            Not After : Feb  6 14:05:57 2025 GMT
        Subject: CN=58BF1732757BE26B0F6CDE7FE32341C89A661B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:7a:bd:7f:2a:f9:1b:56:9e:58:29:b1:e2:
                    ec:e5:b7:90:46:c2:1a:b4:e9:d8:d3:6f:66:ee:45:
                    cf:65:a3:53:eb:05:79:cd:58:8c:02:66:29:a2:f1:
                    ca:43:d7:1a:88:1f:60:f3:41:e3:b6:a4:f1:87:03:
                    24:bb:30:be:fe:4f:06:18:10:3e:c7:f2:78:8e:e1:
                    9f:21:77:47:6b:2d:6f:d1:ea:40:c4:b4:26:94:a5:
                    61:a4:de:02:02:97:4f:e7:0b:a1:40:56:ab:1d:aa:
                    ff:cb:76:50:5b:a8:3c:fd:de:b6:43:40:fd:04:8e:
                    27:82:34:ea:c2:b1:82:ed:be:c2:c8:6f:bb:82:0f:
                    b8:19:46:9e:8d:00:e3:15:6b:c8:20:49:00:81:65:
                    46:4b:4a:21:fa:c9:73:c1:07:fd:96:c1:ad:73:a7:
                    8a:72:19:69:28:ac:47:cc:92:04:71:c7:ed:07:c8:
                    8e:c3:72:cf:c9:e6:78:f1:65:78:40:3e:18:a7:14:
                    c0:97:4f:7b:76:74:84:62:e4:bf:40:52:56:60:0f:
                    86:3b:42:55:21:80:1c:c0:ad:1d:70:ba:21:41:1c:
                    4e:b6:24:62:d2:df:fe:51:3e:b5:56:18:00:6e:77:
                    b5:08:36:b5:c2:38:87:52:b7:38:0d:21:84:04:b3:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BF:17:32:75:7B:E2:6B:0F:6C:DE:7F:E3:23:41:C8:9A:66:1B:45
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a653030303a3a2f34362d3436203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:e000::/46

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:3c:a5:cd:1f:51:69:24:ae:f2:53:74:c4:25:a7:79:8b:
         f8:11:3b:c2:9c:96:be:33:9a:ed:69:d9:e5:02:f4:56:50:2a:
         84:08:d3:90:01:95:71:1f:b6:e8:b2:26:72:e8:8a:e3:a7:4d:
         b2:8a:85:09:da:cb:c9:de:9c:52:75:79:52:01:95:0a:70:bf:
         47:cd:9b:75:c7:48:c3:52:ff:61:ce:6b:be:86:03:bc:c5:d0:
         91:87:e3:52:30:18:59:87:8f:8b:1a:5c:1f:df:7b:f1:24:4d:
         b8:77:b3:23:4f:52:ae:60:cb:ea:95:19:e5:14:3b:ca:53:d7:
         69:89:11:4e:63:c3:9c:88:a9:15:5e:b7:0f:cb:4f:25:cd:74:
         a8:20:78:2f:02:aa:75:7e:02:ff:87:b3:e4:35:1c:e5:38:13:
         38:4e:a7:00:03:72:98:b5:80:b5:9c:f1:0e:98:18:04:0f:9f:
         53:43:1b:66:5f:79:24:4d:a0:37:05:72:90:54:d1:a6:80:61:
         75:66:34:22:47:f6:96:12:56:3f:f1:d4:74:06:19:dc:4b:56:
         d4:47:66:cd:84:48:56:8a:b7:f3:e4:58:18:3a:53:c7:c9:4d:
         e8:74:28:4c:06:06:6f:c0:c1:e5:ba:55:75:07:ca:0d:ef:70:
         10:65:1e:26
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUUk2d5JK1RlQ2V56hb0Jr+NZn4AcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDQUY0QzE0RDc5N0VFMTcxRTZBNkM1QzExOTg4QUVB
ODRCQzM1MjAeFw0yNDAyMDgxNDAwNTdaFw0yNTAyMDYxNDA1NTdaMDMxMTAvBgNV
BAMTKDU4QkYxNzMyNzU3QkUyNkIwRjZDREU3RkUzMjM0MUM4OUE2NjFCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuh3q9fyr5G1aeWCmx4uzlt5BG
whq06djTb2buRc9lo1PrBXnNWIwCZimi8cpD1xqIH2DzQeO2pPGHAyS7ML7+TwYY
ED7H8niO4Z8hd0drLW/R6kDEtCaUpWGk3gICl0/nC6FAVqsdqv/LdlBbqDz93rZD
QP0EjieCNOrCsYLtvsLIb7uCD7gZRp6NAOMVa8ggSQCBZUZLSiH6yXPBB/2Wwa1z
p4pyGWkorEfMkgRxx+0HyI7Dcs/J5njxZXhAPhinFMCXT3t2dIRi5L9AUlZgD4Y7
QlUhgBzArR1wuiFBHE62JGLS3/5RPrVWGABud7UINrXCOIdStzgNIYQEs8KJAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUWL8XMnV74msPbN5/4yNByJpmG0UwHwYDVR0j
BBgwFoAUJMr0wU15fuFx5qbFwRmIrqhLw1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdn
RHcvMC8yNENBRjRDMTRENzk3RUUxNzFFNkE2QzVDMTE5ODhBRUE4NEJDMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0Q0FGNEMxNEQ3OTdFRTE3
MUU2QTZDNUMxMTk4OEFFQTg0QkMzNTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U0M0dkYm1peGNQWDg3eGlBUzN5dFdqZmY0c3ViQnVrZzZ0b2NVRExHZ0R3LzAv
MzIzODMwMzQzYTM3MzQ2NjM0M2E2NTMwMzAzMDNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDMyMzczMTMwMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEdPTgADANBgkqhkiG9w0BAQsF
AAOCAQEAYis8pc0fUWkkrvJTdMQlp3mL+BE7wpyWvjOa7WnZ5QL0VlAqhAjTkAGV
cR+26LImcuiK46dNsoqFCdrLyd6cUnV5UgGVCnC/R82bdcdIw1L/Yc5rvoYDvMXQ
kYfjUjAYWYePixpcH9978SRNuHezI09SrmDL6pUZ5RQ7ylPXaYkRTmPDnIipFV63
D8tPJc10qCB4LwKqdX4C/4ez5DUc5TgTOE6nAANymLWAtZzxDpgYBA+fU0MbZl95
JE2gNwVykFTRpoBhdWY0Ikf2lhJWP/HUdAYZ3EtW1EdmzYRIVoq38+RYGDpTx8lN
6HQoTAYGb8DB5bpVdQfKDe9wEGUeJg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 06:04:27 2025 by rpki-client