Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33362d3336203d3e20323636303032.roa
File:                     323830343a343131343a3a2f33362d3336203d3e20323636303032.roa (raw, json)
Hash identifier:          TR9/LSzNVggx/sd9CDGFhYcrz6l9YrvmwoUXcx/dOQE=
Subject key identifier:   43:D0:E4:A7:A0:38:C0:27:92:A7:0B:77:FB:20:55:2C:18:21:9D:22
Certificate issuer:       /CN=3742F5D0768B3C1CD0ED56183EAFAF5938C73431
Certificate serial:       01107C7B46D65A1546F3516A86DFC706836A381F
Authority key identifier: 37:42:F5:D0:76:8B:3C:1C:D0:ED:56:18:3E:AF:AF:59:38:C7:34:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33362d3336203d3e20323636303032.roa
Signing time:             Tue 17 Dec 2024 17:18:35 +0000
ROA not before:           Tue 17 Dec 2024 17:13:35 +0000
ROA not after:            Tue 16 Dec 2025 17:18:35 +0000
asID:                     266002
IP address blocks:        2804:4114::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:7c:7b:46:d6:5a:15:46:f3:51:6a:86:df:c7:06:83:6a:38:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3742F5D0768B3C1CD0ED56183EAFAF5938C73431
        Validity
            Not Before: Dec 17 17:13:35 2024 GMT
            Not After : Dec 16 17:18:35 2025 GMT
        Subject: CN=43D0E4A7A038C02792A70B77FB20552C18219D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:de:e5:4f:af:60:15:dd:60:4f:b1:0c:f5:
                    e7:29:d0:b5:54:98:e3:0f:f4:78:50:87:de:f7:0f:
                    e5:cc:af:fc:e6:93:bd:cb:dc:db:36:2e:78:d1:e4:
                    e1:6a:4b:82:8b:a2:fc:e5:7f:ab:60:40:a6:34:cb:
                    4b:35:9e:05:05:8c:4f:4d:cf:19:7f:ba:ae:67:d4:
                    ac:5d:7f:48:a2:dd:bf:26:56:ab:3f:90:a3:ab:79:
                    30:1c:fe:42:18:b0:68:99:40:fa:af:16:cb:95:14:
                    0d:78:0c:c4:51:21:ed:9c:31:55:93:78:59:0a:4e:
                    b9:5d:e4:76:86:81:a0:43:19:fc:a1:2f:72:66:e2:
                    0a:eb:fb:d3:ff:9d:d0:97:b8:f4:bf:7a:e2:e4:c1:
                    18:98:e4:6a:cf:a3:99:14:9b:54:5c:ef:04:a4:d9:
                    23:b7:1d:26:8f:aa:c2:5e:38:10:72:a4:e4:89:1d:
                    d3:37:3c:ea:31:79:f0:12:95:06:64:2e:32:d5:ee:
                    70:73:b3:44:a0:3b:8b:59:4b:13:a8:67:8e:c7:20:
                    4e:ac:89:a7:67:63:14:51:84:0d:46:4d:6f:9d:f4:
                    93:7d:4c:57:a0:ac:55:31:88:75:6b:ee:c6:67:c3:
                    94:b6:7d:19:5e:e0:5b:b8:69:2b:a4:39:ce:07:cd:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:E4:A7:A0:38:C0:27:92:A7:0B:77:FB:20:55:2C:18:21:9D:22
            X509v3 Authority Key Identifier:
                keyid:37:42:F5:D0:76:8B:3C:1C:D0:ED:56:18:3E:AF:AF:59:38:C7:34:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33362d3336203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4114::/36

    Signature Algorithm: sha256WithRSAEncryption
         ad:66:53:44:72:78:70:cc:88:69:19:40:d7:63:30:cc:8e:54:
         b4:6b:ee:65:5e:e9:84:f1:67:b8:8f:f7:11:8f:c1:1b:7a:4a:
         77:91:d8:37:3c:29:8b:17:26:15:2e:29:57:07:56:66:b4:d4:
         76:39:93:77:55:50:ee:58:23:64:1e:b9:25:4a:84:74:14:8f:
         81:8c:35:ff:1d:86:2c:c6:df:7a:80:10:ba:cc:ea:30:78:a1:
         1b:c4:cd:3f:bc:8f:58:7a:fc:0d:70:aa:04:5b:42:43:fa:a6:
         a4:d0:7f:c9:d6:6a:74:b1:ff:25:8f:94:2c:e4:b9:e9:6e:89:
         e4:bb:ef:a1:d4:cb:34:6f:3e:2b:5b:95:50:f9:7a:fe:8a:02:
         b8:64:ca:aa:dd:ff:08:6d:32:72:a6:2f:b1:4a:b3:68:58:d0:
         24:3e:6b:a8:24:31:4a:11:57:b9:8a:6a:03:ae:5b:ea:dd:cb:
         03:ae:24:c5:10:97:70:c1:3a:40:6d:29:36:9d:1c:72:34:87:
         eb:9c:8f:8e:9b:f6:cf:61:f6:dc:df:66:63:04:36:ac:33:0a:
         1c:8b:35:b8:38:37:92:d9:a7:96:fa:10:54:69:02:ca:2b:81:
         d7:ef:56:8b:fc:70:77:21:a3:f7:00:05:38:11:03:90:30:44:
         ed:16:94:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUARB8e0bWWhVG81Fqht/HBoNqOB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc0MkY1RDA3NjhCM0MxQ0QwRUQ1NjE4M0VBRkFGNTkz
OEM3MzQzMTAeFw0yNDEyMTcxNzEzMzVaFw0yNTEyMTYxNzE4MzVaMDMxMTAvBgNV
BAMTKDQzRDBFNEE3QTAzOEMwMjc5MkE3MEI3N0ZCMjA1NTJDMTgyMTlEMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HN7lT69gFd1gT7EM9ecp0LVU
mOMP9HhQh973D+XMr/zmk73L3Ns2LnjR5OFqS4KLovzlf6tgQKY0y0s1ngUFjE9N
zxl/uq5n1Kxdf0ii3b8mVqs/kKOreTAc/kIYsGiZQPqvFsuVFA14DMRRIe2cMVWT
eFkKTrld5HaGgaBDGfyhL3Jm4grr+9P/ndCXuPS/euLkwRiY5GrPo5kUm1Rc7wSk
2SO3HSaPqsJeOBBypOSJHdM3POoxefASlQZkLjLV7nBzs0SgO4tZSxOoZ47HIE6s
iadnYxRRhA1GTW+d9JN9TFegrFUxiHVr7sZnw5S2fRle4Fu4aSukOc4HzWlfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ9Dkp6A4wCeSpwt3+yBVLBghnSIwHwYDVR0j
BBgwFoAUN0L10HaLPBzQ7VYYPq+vWTjHNDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUdOZjNTNGo3WXQ4cFZObXpHREszUmNXZTlWY25UUXBTR3ozcWoxWUtu
VFcvMC8zNzQyRjVEMDc2OEIzQzFDRDBFRDU2MTgzRUFGQUY1OTM4QzczNDMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3NDJGNUQwNzY4QjNDMUNE
MEVENTYxODNFQUZBRjU5MzhDNzM0MzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VHTmYzUzRqN1l0OHBWTm16R0RLM1JjV2U5VmNuVFFwU0d6M3FqMVlLblRXLzAv
MzIzODMwMzQzYTM0MzEzMTM0M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM2
MzAzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARBFAAwDQYJKoZIhvcNAQELBQADggEBAK1mU0Ry
eHDMiGkZQNdjMMyOVLRr7mVe6YTxZ7iP9xGPwRt6SneR2Dc8KYsXJhUuKVcHVma0
1HY5k3dVUO5YI2QeuSVKhHQUj4GMNf8dhizG33qAELrM6jB4oRvEzT+8j1h6/A1w
qgRbQkP6pqTQf8nWanSx/yWPlCzkueluieS776HUyzRvPitblVD5ev6KArhkyqrd
/whtMnKmL7FKs2hY0CQ+a6gkMUoRV7mKagOuW+rdywOuJMUQl3DBOkBtKTadHHI0
h+ucj46b9s9h9tzfZmMENqwzChyLNbg4N5LZp5b6EFRpAsorgdfvVov8cHcho/cA
BTgRA5AwRO0WlNE=
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:53:30 2025 by rpki-client