Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/323830343a3731303a3a2f33322d3332203d3e203137323232.roa
File:                     323830343a3731303a3a2f33322d3332203d3e203137323232.roa (raw, json)
Hash identifier:          x+JGQCSn/eVt9X5lXscukOLU9i+94vDqUOaXYpuPJHY=
Subject key identifier:   93:E1:B9:27:AB:93:5F:EE:D2:1B:B8:FD:0E:13:6E:1C:FB:29:2D:B9
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       3B5B22D8B833C6D39AEA72B7D2732EE9DEA2E17C
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/323830343a3731303a3a2f33322d3332203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        2804:710::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5b:22:d8:b8:33:c6:d3:9a:ea:72:b7:d2:73:2e:e9:de:a2:e1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=93E1B927AB935FEED21BB8FD0E136E1CFB292DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:4b:cd:45:4d:99:62:32:39:48:56:59:eb:
                    78:97:fb:7f:cf:27:b8:43:d7:e0:5f:1b:0b:d5:0e:
                    93:79:11:ff:a3:d0:cc:36:6b:68:05:f5:fa:50:65:
                    91:dc:7e:07:40:ad:fd:71:4b:75:c7:43:2e:81:d6:
                    4b:14:36:e1:ec:14:f5:18:45:84:2e:21:69:c0:c0:
                    0a:c0:a9:9f:22:87:d4:b7:1a:14:b5:cf:df:71:46:
                    9a:02:27:f0:77:22:13:0d:11:47:65:90:0b:69:73:
                    82:d1:58:7b:8c:7d:1a:c0:a6:de:dd:5f:50:57:40:
                    09:90:98:25:6d:2c:fa:19:cf:d0:bb:cc:49:ed:3a:
                    4b:de:c6:59:d7:64:79:39:d9:6d:b8:cd:d6:43:77:
                    bb:58:55:c0:e2:32:60:fc:55:23:30:57:03:ea:a5:
                    f6:1a:14:cd:88:d5:04:c7:6d:e8:b6:43:ca:17:a3:
                    db:31:1b:69:ac:80:30:63:65:d5:15:98:51:f2:99:
                    35:81:b3:cb:84:c6:46:d3:34:e1:9b:b7:72:1c:83:
                    ad:d0:f4:6d:51:e9:5f:8c:40:41:a5:4c:c3:13:2a:
                    ec:57:49:65:09:65:2e:eb:eb:7b:bf:2d:f1:da:c5:
                    95:f3:5b:11:4a:6e:71:7c:d9:af:0b:1d:49:1d:8c:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E1:B9:27:AB:93:5F:EE:D2:1B:B8:FD:0E:13:6E:1C:FB:29:2D:B9
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/323830343a3731303a3a2f33322d3332203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:710::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:1d:60:2c:6a:20:ef:d7:d9:fa:ac:a1:ac:0d:4f:c4:66:ab:
         71:b8:8f:8e:fe:fc:4a:22:0d:9b:76:43:ef:07:e7:a1:36:0b:
         c9:9d:b1:b9:7c:6f:e1:db:52:d3:bd:7e:3e:4f:6a:74:df:29:
         95:ba:1f:0b:57:01:6c:73:45:24:3b:e4:f9:73:5f:aa:1b:59:
         99:ea:ae:a5:7f:0f:3b:a4:14:ed:b6:41:00:48:72:c7:78:20:
         8b:e0:36:3f:37:48:a5:1c:11:09:6b:88:cf:9e:fa:92:d6:09:
         57:25:4c:f9:93:f1:4a:48:b0:16:b7:c3:2c:e9:9e:4e:27:56:
         f8:30:36:0a:d6:87:95:9d:dd:94:20:03:16:69:9c:bb:09:55:
         55:34:2e:52:4d:07:d2:a3:9e:dd:22:43:0d:aa:67:b2:4b:58:
         61:c6:f3:c5:7e:ee:67:e6:17:ce:7b:d3:a7:74:21:c2:a8:d9:
         0e:cd:80:ae:96:15:20:d7:28:ed:a1:ff:cb:65:99:6d:b7:aa:
         db:6c:10:dc:dd:4d:ed:fc:0a:87:f7:82:eb:67:12:b5:c8:a2:
         3c:81:e3:d6:d3:28:eb:86:4a:a4:ff:ad:a9:ab:a5:5a:1d:03:
         7e:46:6f:97:2b:cc:9f:20:43:d6:ae:f2:f5:2f:ca:9f:68:a4:
         fe:14:44:aa
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUO1si2LgzxtOa6nK30nMu6d6i4XwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGOUJGQkY1M0NCNjY2QUFGNzZGRTczMjc2QjcwMUM3
RTIzN0E2RTAeFw0yNDAzMjUyMjUwNDBaFw0yNTAzMjQyMjU1NDBaMDMxMTAvBgNV
BAMTKDkzRTFCOTI3QUI5MzVGRUVEMjFCQjhGRDBFMTM2RTFDRkIyOTJEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/i0vNRU2ZYjI5SFZZ63iX+3/P
J7hD1+BfGwvVDpN5Ef+j0Mw2a2gF9fpQZZHcfgdArf1xS3XHQy6B1ksUNuHsFPUY
RYQuIWnAwArAqZ8ih9S3GhS1z99xRpoCJ/B3IhMNEUdlkAtpc4LRWHuMfRrApt7d
X1BXQAmQmCVtLPoZz9C7zEntOkvexlnXZHk52W24zdZDd7tYVcDiMmD8VSMwVwPq
pfYaFM2I1QTHbei2Q8oXo9sxG2msgDBjZdUVmFHymTWBs8uExkbTNOGbt3Icg63Q
9G1R6V+MQEGlTMMTKuxXSWUJZS7r63u/LfHaxZXzWxFKbnF82a8LHUkdjMUVAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUk+G5J6uTX+7SG7j9DhNuHPspLbkwHwYDVR0j
BBgwFoAUQ/m/v1PLZmqvdv5zJ2twHH4jem4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURNQWVjU0ZGN0RqVEdxZTh4TFdwUDJIa2dZVVRHTWdtTWE1UTd3Tlg0
WjQvMC80M0Y5QkZCRjUzQ0I2NjZBQUY3NkZFNzMyNzZCNzAxQzdFMjM3QTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzRjlCRkJGNTNDQjY2NkFB
Rjc2RkU3MzI3NkI3MDFDN0UyMzdBNkUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VETUFlY1NGRjdEalRHcWU4eExXcFAySGtnWVVUR01nbU1hNVE3d05YNFo0LzAv
MzIzODMwMzQzYTM3MzEzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzczMjMy
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAcQMA0GCSqGSIb3DQEBCwUAA4IBAQBdHWAsaiDv19n6
rKGsDU/EZqtxuI+O/vxKIg2bdkPvB+ehNgvJnbG5fG/h21LTvX4+T2p03ymVuh8L
VwFsc0UkO+T5c1+qG1mZ6q6lfw87pBTttkEASHLHeCCL4DY/N0ilHBEJa4jPnvqS
1glXJUz5k/FKSLAWt8Ms6Z5OJ1b4MDYK1oeVnd2UIAMWaZy7CVVVNC5STQfSo57d
IkMNqmeyS1hhxvPFfu5n5hfOe9OndCHCqNkOzYCulhUg1yjtof/LZZltt6rbbBDc
3U3t/AqH94LrZxK1yKI8gePW0yjrhkqk/62pq6VaHQN+Rm+XK8yfIEPWrvL1L8qf
aKT+FESq
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:51 2025 by rpki-client