Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a363a3a2f34382d3438203d3e20323731303432.roa
File:                     323830343a373536303a363a3a2f34382d3438203d3e20323731303432.roa (raw, json)
Hash identifier:          WXVu2UJGFYt47R5xZMK+2PClZL9HFx0zsMpnx03kS8o=
Subject key identifier:   0C:70:2E:88:24:57:2D:EA:C5:07:73:69:49:77:09:C4:48:B6:DC:38
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       2EEEA28F7F6DC4049A96630C00FB516B078E42D6
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a363a3a2f34382d3438203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:17 +0000
ROA not before:           Tue 07 Nov 2023 16:14:17 +0000
ROA not after:            Tue 05 Nov 2024 16:19:17 +0000
asID:                     271042
IP address blocks:        2804:7560:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ee:a2:8f:7f:6d:c4:04:9a:96:63:0c:00:fb:51:6b:07:8e:42:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:17 2023 GMT
            Not After : Nov  5 16:19:17 2024 GMT
        Subject: CN=0C702E8824572DEAC5077369497709C448B6DC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:ee:3c:10:2b:3c:5a:9e:e8:72:de:b3:8e:
                    fc:0c:23:5d:99:c5:59:34:0c:fe:4d:e7:1d:e0:96:
                    60:84:6b:a5:02:cf:66:04:36:18:2a:03:70:fe:55:
                    bd:11:c3:1b:66:a7:1a:a3:9e:44:0f:ea:c9:be:87:
                    48:4e:86:36:0f:7e:a5:7b:de:6b:29:0b:ab:90:d7:
                    71:bb:79:5a:53:43:d2:95:47:d3:4b:91:2e:21:d8:
                    c1:f3:7c:20:23:70:2d:ec:b1:a4:dc:b6:4b:c7:42:
                    fa:d0:98:3f:0f:4f:5f:9a:3f:b8:ae:75:58:b6:2e:
                    bb:86:9b:b1:ce:6d:db:c1:a5:e2:00:83:e4:b7:0d:
                    c8:a6:75:2e:8d:c8:78:f6:83:a4:2a:92:64:85:4e:
                    16:25:e3:83:8c:13:1f:2d:b0:b8:05:b2:33:a4:be:
                    ba:c5:d5:10:15:27:ec:b5:dc:a1:32:e6:11:15:8f:
                    7b:2b:33:c2:62:af:d8:d4:25:c7:37:1c:64:30:1b:
                    da:81:86:de:cf:ea:e4:09:d4:00:73:9e:18:a4:ae:
                    41:ea:61:f8:ca:31:64:ef:0d:98:11:41:3e:f9:52:
                    c4:1e:fa:c4:67:a5:5d:59:22:ee:e8:a1:9b:69:9e:
                    23:73:9e:ed:3e:00:25:15:d2:e0:6c:2a:99:40:a0:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:70:2E:88:24:57:2D:EA:C5:07:73:69:49:77:09:C4:48:B6:DC:38
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a363a3a2f34382d3438203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:03:57:91:00:88:21:09:ef:db:89:b8:16:70:91:d3:d2:8a:
         c2:66:88:15:bb:f0:c4:ac:90:18:d2:46:4e:d7:1b:5a:59:aa:
         f1:1a:e9:72:30:11:ef:d2:84:ef:9f:81:eb:5b:95:82:ea:5f:
         28:2b:1d:da:00:39:15:86:4e:25:49:dd:a6:b2:9e:54:f0:21:
         e5:33:13:03:b9:2e:cd:80:da:34:3b:50:63:96:61:4a:15:77:
         98:6a:81:c2:24:b4:b0:3a:04:d8:f8:1e:b8:03:88:2d:b6:0b:
         43:16:03:60:6e:f0:c7:cb:bc:5e:a3:75:46:d6:bf:de:77:12:
         a1:8e:34:c2:63:57:f2:2b:36:be:29:4c:42:65:2f:9e:6b:ae:
         c1:56:ac:5f:eb:e4:08:d1:d3:11:47:10:9e:d4:bd:36:96:9b:
         fa:d3:d5:79:b9:5c:0e:52:9f:50:39:a9:34:f4:56:96:ef:3a:
         25:95:14:94:1d:dd:af:4e:b2:ad:32:94:54:3b:6a:57:3d:69:
         46:8a:8b:7e:ed:62:de:0a:f5:e7:e5:86:fd:5c:8f:cd:c6:15:
         c5:21:a7:d9:cb:b7:64:60:31:f8:bc:94:3c:97:c9:73:f9:b1:
         c3:10:51:b3:32:57:80:e8:5f:21:81:c3:cf:e2:de:21:ee:9c:
         9b:ea:23:cc
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIULu6ij39txASalmMMAPtRaweOQtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1RkFFQTRDQ0RDN0Y3MDJENEY1RkE0QzEyNTgzOTU2
MTc5MDczQTAeFw0yMzExMDcxNjE0MTdaFw0yNDExMDUxNjE5MTdaMDMxMTAvBgNV
BAMTKDBDNzAyRTg4MjQ1NzJERUFDNTA3NzM2OTQ5NzcwOUM0NDhCNkRDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKd+48ECs8Wp7oct6zjvwMI12Z
xVk0DP5N5x3glmCEa6UCz2YENhgqA3D+Vb0RwxtmpxqjnkQP6sm+h0hOhjYPfqV7
3mspC6uQ13G7eVpTQ9KVR9NLkS4h2MHzfCAjcC3ssaTctkvHQvrQmD8PT1+aP7iu
dVi2LruGm7HObdvBpeIAg+S3DcimdS6NyHj2g6QqkmSFThYl44OMEx8tsLgFsjOk
vrrF1RAVJ+y13KEy5hEVj3srM8Jir9jUJcc3HGQwG9qBht7P6uQJ1ABznhikrkHq
YfjKMWTvDZgRQT75UsQe+sRnpV1ZIu7ooZtpniNznu0+ACUV0uBsKplAoE1HAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUDHAuiCRXLerFB3NpSXcJxEi23DgwHwYDVR0j
BBgwFoAUYV+upMzcf3AtT1+kwSWDlWF5BzowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2YyWUFRQTRlaWtOcER0OFc2c1VERDJVeHhoVXpuWDlqQmRxdktyYjJm
ZDgvMC82MTVGQUVBNENDREM3RjcwMkQ0RjVGQTRDMTI1ODM5NTYxNzkwNzNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxNUZBRUE0Q0NEQzdGNzAy
RDRGNUZBNEMxMjU4Mzk1NjE3OTA3M0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmMllBUUE0ZWlrTnBEdDhXNnNVREQyVXh4aFV6blg5akJkcXZLcmIyZmQ4LzAv
MzIzODMwMzQzYTM3MzUzNjMwM2EzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzczMTMwMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEdWAABjANBgkqhkiG9w0BAQsFAAOCAQEA
bQNXkQCIIQnv24m4FnCR09KKwmaIFbvwxKyQGNJGTtcbWlmq8RrpcjAR79KE75+B
61uVgupfKCsd2gA5FYZOJUndprKeVPAh5TMTA7kuzYDaNDtQY5ZhShV3mGqBwiS0
sDoE2PgeuAOILbYLQxYDYG7wx8u8XqN1Rta/3ncSoY40wmNX8is2vilMQmUvnmuu
wVasX+vkCNHTEUcQntS9Npab+tPVeblcDlKfUDmpNPRWlu86JZUUlB3dr06yrTKU
VDtqVz1pRoqLfu1i3gr15+WG/VyPzcYVxSGn2cu3ZGAx+LyUPJfJc/mxwxBRszJX
gOhfIYHDz+LeIe6cm+ojzA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:49 2025 by rpki-client