Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33342d3334203d3e20323730333735.roa
File:                     323830343a366231303a3a2f33342d3334203d3e20323730333735.roa (raw, json)
Hash identifier:          XvkKS8rQ8RTCodA7d61FiJdEc+iR2QkDrAHfamRJRT0=
Subject key identifier:   1E:7A:21:BC:26:7A:11:AF:AA:C3:28:D5:9E:DE:55:79:DD:42:56:13
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       274EDFAD2AA1143A48ECAE27543C5336ACF6C207
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33342d3334203d3e20323730333735.roa
Signing time:             Tue 09 Apr 2024 14:20:14 +0000
ROA not before:           Tue 09 Apr 2024 14:15:14 +0000
ROA not after:            Tue 08 Apr 2025 14:20:14 +0000
asID:                     270375
IP address blocks:        2804:6b10::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4e:df:ad:2a:a1:14:3a:48:ec:ae:27:54:3c:53:36:ac:f6:c2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Apr  9 14:15:14 2024 GMT
            Not After : Apr  8 14:20:14 2025 GMT
        Subject: CN=1E7A21BC267A11AFAAC328D59EDE5579DD425613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:a9:2b:a3:7f:99:94:7c:c8:7c:c4:4b:1f:
                    f1:ac:81:21:56:e9:ab:b4:a3:3e:dc:c5:78:ba:e4:
                    cc:59:6b:a3:6f:ab:97:8f:6c:7e:a8:1b:4e:2c:72:
                    c0:f4:32:97:57:bd:9c:78:cd:d5:91:06:d9:a8:5d:
                    f2:e2:02:d0:c8:ba:60:0e:ca:d6:8f:aa:21:e0:63:
                    94:04:a5:e5:35:9e:4f:99:34:f9:39:bc:14:a5:66:
                    20:2d:bd:e1:9c:1e:a9:3a:db:f2:9d:7f:34:8c:14:
                    a2:6a:1d:1b:59:d8:f8:0e:27:f0:b9:10:10:06:58:
                    35:3e:c0:6d:61:a2:62:05:f4:6d:68:6a:48:3f:7a:
                    8a:aa:a4:b3:e6:46:69:ef:e7:a6:d4:82:74:53:15:
                    d5:8d:0a:c6:e7:1c:82:4f:02:f2:18:f9:5e:73:8c:
                    89:08:06:52:ed:c6:be:d8:3f:d0:f2:fc:9a:13:92:
                    80:80:ad:10:5c:0c:07:8c:fb:7f:68:5b:ab:61:6f:
                    c1:4f:fe:f2:6b:cd:1a:ab:b4:6b:6f:44:b6:c2:61:
                    81:63:aa:e0:c8:ef:4a:16:01:7e:1b:40:22:e5:13:
                    d8:66:4b:ba:c6:ba:47:75:9d:c0:fb:ff:34:77:b5:
                    a1:c1:29:3d:b7:ab:8f:6e:04:f7:71:00:d3:5e:4f:
                    d5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:21:BC:26:7A:11:AF:AA:C3:28:D5:9E:DE:55:79:DD:42:56:13
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33342d3334203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b10::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:47:62:9a:06:51:01:e1:4a:4d:47:ba:4d:71:5d:29:77:d2:
         54:1a:b4:d6:55:27:17:c9:c9:bf:3a:cf:48:42:84:4b:9e:14:
         9d:0e:a2:1d:30:48:e6:f7:91:ad:78:8d:c5:15:54:94:9f:c2:
         03:61:43:74:49:a0:31:0c:32:a2:02:e4:05:aa:cd:84:c6:aa:
         32:a5:4b:3f:9f:2b:57:34:de:23:b5:d1:76:30:aa:d3:7e:fd:
         f6:da:02:82:e0:dc:4c:11:55:0d:e7:fd:00:cd:dc:44:c3:b3:
         f7:dc:cb:50:e0:3e:ba:c4:b4:26:37:7d:77:23:fe:5a:f4:9b:
         56:20:a5:b6:cc:d7:83:81:3d:05:97:02:f0:47:6c:0d:3d:6c:
         07:9c:9a:0d:ed:57:62:b2:b3:13:ca:30:07:c7:a7:af:0f:a9:
         e7:5c:fc:65:d8:40:44:bd:2c:f4:98:ad:84:f7:d6:3b:b7:d3:
         a3:49:52:44:da:4e:5c:3c:74:39:80:6c:36:75:41:b7:91:56:
         50:66:a2:91:b5:e2:61:e5:4c:f9:59:75:fe:2e:6c:04:2f:4a:
         2c:70:3f:e2:4d:39:39:37:37:2b:17:2a:d2:70:53:1e:23:4f:
         ab:ec:45:e5:98:53:27:0f:da:79:2d:be:99:f6:0e:2d:c4:5e:
         a0:09:e6:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ07frSqhFDpI7K4nVDxTNqz2wgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ0Q0Y0MTQzN0MwQUM4NzQzRUY4Njc5QzM2MDI3N0M3
NDk3QUJGQzAeFw0yNDA0MDkxNDE1MTRaFw0yNTA0MDgxNDIwMTRaMDMxMTAvBgNV
BAMTKDFFN0EyMUJDMjY3QTExQUZBQUMzMjhENTlFREU1NTc5REQ0MjU2MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRakro3+ZlHzIfMRLH/GsgSFW
6au0oz7cxXi65MxZa6Nvq5ePbH6oG04scsD0MpdXvZx4zdWRBtmoXfLiAtDIumAO
ytaPqiHgY5QEpeU1nk+ZNPk5vBSlZiAtveGcHqk62/KdfzSMFKJqHRtZ2PgOJ/C5
EBAGWDU+wG1homIF9G1oakg/eoqqpLPmRmnv56bUgnRTFdWNCsbnHIJPAvIY+V5z
jIkIBlLtxr7YP9Dy/JoTkoCArRBcDAeM+39oW6thb8FP/vJrzRqrtGtvRLbCYYFj
quDI70oWAX4bQCLlE9hmS7rGukd1ncD7/zR3taHBKT23q49uBPdxANNeT9XLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHnohvCZ6Ea+qwyjVnt5Ved1CVhMwHwYDVR0j
BBgwFoAUTUz0FDfArIdD74Z5w2AnfHSXq/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXR3VzhDNDJGWU50d1dGcGh1N2F3RDFwUzV4NFplTG5rREFtR1lwd0pY
cUIvMC80RDRDRjQxNDM3QzBBQzg3NDNFRjg2NzlDMzYwMjc3Qzc0OTdBQkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRENENGNDE0MzdDMEFDODc0
M0VGODY3OUMzNjAyNzdDNzQ5N0FCRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V0d1c4QzQyRllOdHdXRnBodTdhd0QxcFM1eDRaZUxua0RBbUdZcHdKWHFCLzAv
MzIzODMwMzQzYTM2NjIzMTMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMw
MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARrEAAwDQYJKoZIhvcNAQELBQADggEBAEBHYpoG
UQHhSk1Huk1xXSl30lQatNZVJxfJyb86z0hChEueFJ0Ooh0wSOb3ka14jcUVVJSf
wgNhQ3RJoDEMMqIC5AWqzYTGqjKlSz+fK1c03iO10XYwqtN+/fbaAoLg3EwRVQ3n
/QDN3ETDs/fcy1DgPrrEtCY3fXcj/lr0m1YgpbbM14OBPQWXAvBHbA09bAecmg3t
V2KysxPKMAfHp68Pqedc/GXYQES9LPSYrYT31ju306NJUkTaTlw8dDmAbDZ1QbeR
VlBmopG14mHlTPlZdf4ubAQvSixwP+JNOTk3NysXKtJwUx4jT6vsReWYUycP2nkt
vpn2Di3EXqAJ5u8=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:42:34 2025 by rpki-client