Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3130303a3a2f34322d3432203d3e20323731363638.roa
File:                     323830343a376632303a3130303a3a2f34322d3432203d3e20323731363638.roa (raw, json)
Hash identifier:          99UNqwql/BnoBkldWTkeAjeGy/n0znHC4OqK6WPTTMY=
Subject key identifier:   2D:5C:68:3D:49:F4:EC:BE:BF:77:29:57:6E:E6:3C:82:22:71:73:E9
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       58EC6EAACF85E162239D10E45B6A278121F06D3F
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3130303a3a2f34322d3432203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:43 +0000
ROA not before:           Thu 11 Jul 2024 18:55:43 +0000
ROA not after:            Thu 10 Jul 2025 19:00:43 +0000
asID:                     271668
IP address blocks:        2804:7f20:100::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ec:6e:aa:cf:85:e1:62:23:9d:10:e4:5b:6a:27:81:21:f0:6d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:43 2024 GMT
            Not After : Jul 10 19:00:43 2025 GMT
        Subject: CN=2D5C683D49F4ECBEBF7729576EE63C82227173E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:35:37:8c:60:d4:b7:ca:1d:bc:0a:61:6a:
                    ec:2f:8e:82:02:d9:89:4f:be:11:90:a2:d0:c5:07:
                    9f:76:30:cf:7b:9c:8b:3b:85:52:37:db:0f:4f:2e:
                    b3:c5:a8:7b:7f:77:79:f4:c5:ac:e5:b3:0b:b8:98:
                    fe:60:40:ff:52:10:fc:dc:59:e0:57:ef:be:ac:ea:
                    aa:5a:0e:02:a2:22:53:8c:27:ef:9f:99:56:9e:61:
                    ff:2e:23:1b:ff:00:31:64:40:97:f0:3c:69:0b:1a:
                    dc:e9:57:04:c4:d6:3e:9c:ca:91:60:78:1b:08:b8:
                    18:bc:f0:e4:51:f9:39:24:ae:17:04:0d:a4:cf:68:
                    dd:b9:c9:4f:f6:33:7b:8f:f6:32:f4:e1:55:1a:b8:
                    0f:6e:08:41:14:20:66:f5:8c:a8:ec:c2:34:77:6f:
                    4a:5e:00:de:de:f8:34:db:a0:81:f9:2f:71:99:32:
                    42:ec:e2:51:af:5d:58:c0:09:5f:1e:6f:cf:0b:ac:
                    f2:b6:56:23:38:7f:49:12:fd:bd:97:02:61:d1:b4:
                    94:62:c1:3f:62:ac:6f:de:a3:a7:af:5c:53:0f:f2:
                    67:d4:d0:ec:28:25:47:3b:5c:33:9a:ae:4c:75:ec:
                    ff:00:be:6f:a9:e7:d2:be:7b:53:a9:7c:ea:41:06:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5C:68:3D:49:F4:EC:BE:BF:77:29:57:6E:E6:3C:82:22:71:73:E9
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3130303a3a2f34322d3432203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f20:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:78:b2:e5:68:1f:d5:5c:fd:a8:1c:bf:ee:f2:52:41:e3:
         09:69:29:d2:b7:03:a6:12:74:e3:f2:c3:9f:68:5d:87:b2:cf:
         1e:41:aa:fd:a0:85:2e:56:4b:df:db:75:31:d2:44:1b:28:79:
         d0:7b:fb:e6:1a:56:23:47:d5:64:c8:1a:5f:bb:71:36:89:c4:
         04:90:f8:94:53:24:f2:21:3f:84:4d:f5:0e:5b:c8:08:f2:9a:
         d0:11:5f:27:86:03:01:18:16:06:9e:58:58:9f:79:57:70:94:
         6a:01:76:4e:c9:fb:2c:6d:22:3a:34:f0:39:5b:29:7e:d4:ba:
         06:5f:61:0f:7f:94:1f:ed:3f:b5:5e:c0:7c:1c:79:f9:3c:9c:
         27:ec:6a:68:a2:41:9d:02:37:a7:97:5c:1a:8f:79:35:45:67:
         10:61:7b:6b:1c:8d:09:d6:6e:ba:07:c8:71:7f:39:42:ae:37:
         44:3d:ea:a8:2d:4a:1e:82:11:b9:87:3c:71:71:cf:36:ca:f8:
         b5:cc:68:9b:50:dc:2e:76:27:dc:62:dc:a8:ff:58:5a:18:ee:
         bc:76:5c:df:09:e6:c0:53:54:1b:50:ef:7b:44:7b:da:22:9b:
         d3:81:56:db:cf:2d:da:83:f1:fa:1b:e8:6a:34:6e:2f:3d:df:
         74:2b:db:24
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUWOxuqs+F4WIjnRDkW2ongSHwbT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc0QUVCQzVERjVCRjk3RTVFQzA2NEM3NkVDNDE5MUUz
OUVGNTZFMjAeFw0yNDA3MTExODU1NDNaFw0yNTA3MTAxOTAwNDNaMDMxMTAvBgNV
BAMTKDJENUM2ODNENDlGNEVDQkVCRjc3Mjk1NzZFRTYzQzgyMjI3MTczRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzTU3jGDUt8odvAphauwvjoIC
2YlPvhGQotDFB592MM97nIs7hVI32w9PLrPFqHt/d3n0xazlswu4mP5gQP9SEPzc
WeBX776s6qpaDgKiIlOMJ++fmVaeYf8uIxv/ADFkQJfwPGkLGtzpVwTE1j6cypFg
eBsIuBi88ORR+TkkrhcEDaTPaN25yU/2M3uP9jL04VUauA9uCEEUIGb1jKjswjR3
b0peAN7e+DTboIH5L3GZMkLs4lGvXVjACV8eb88LrPK2ViM4f0kS/b2XAmHRtJRi
wT9irG/eo6evXFMP8mfU0OwoJUc7XDOarkx17P8Avm+p59K+e1OpfOpBBkn/AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQULVxoPUn07L6/dylXbuY8giJxc+kwHwYDVR0j
BBgwFoAUx0rrxd9b+X5ewGTHbsQZHjnvVuIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNudzdNWmNhNXhBNVZLYTdZYXBVTDdDcDZ4VlAzRXUzTFlqZUdEZ1Jv
czcvMC9DNzRBRUJDNURGNUJGOTdFNUVDMDY0Qzc2RUM0MTkxRTM5RUY1NkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3NEFFQkM1REY1QkY5N0U1
RUMwNjRDNzZFQzQxOTFFMzlFRjU2RTIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zzbnc3TVpjYTV4QTVWS2E3WWFwVUw3Q3A2eFZQM0V1M0xZamVHRGdSb3M3LzAv
MzIzODMwMzQzYTM3NjYzMjMwM2EzMTMwMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNl
MjAzMjM3MzEzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBH8gAQAwDQYJKoZIhvcNAQELBQAD
ggEBAEtceLLlaB/VXP2oHL/u8lJB4wlpKdK3A6YSdOPyw59oXYeyzx5Bqv2ghS5W
S9/bdTHSRBsoedB7++YaViNH1WTIGl+7cTaJxASQ+JRTJPIhP4RN9Q5byAjymtAR
XyeGAwEYFgaeWFifeVdwlGoBdk7J+yxtIjo08DlbKX7UugZfYQ9/lB/tP7VewHwc
efk8nCfsamiiQZ0CN6eXXBqPeTVFZxBhe2scjQnWbroHyHF/OUKuN0Q96qgtSh6C
EbmHPHFxzzbK+LXMaJtQ3C52J9xi3Kj/WFoY7rx2XN8J5sBTVBtQ73tEe9oim9OB
VtvPLdqD8fob6Go0bi8933Qr2yQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:12:30 2025 by rpki-client