Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33322d3332203d3e20323632333132.roa
File:                     323830343a333730303a3a2f33322d3332203d3e20323632333132.roa (raw, json)
Hash identifier:          UUSZtp63UrOS2A2cprDQjNRmLdiHDDTwuDs/pyyG53U=
Subject key identifier:   AF:30:78:22:FC:CA:3D:50:98:6D:17:5F:6E:B4:71:61:21:14:BB:13
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       70AC10D311FFABA305E069009CE1069DFFE9A55A
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33322d3332203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:25 +0000
ROA not before:           Fri 16 Aug 2024 16:21:25 +0000
ROA not after:            Fri 15 Aug 2025 16:26:25 +0000
asID:                     262312
IP address blocks:        2804:3700::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ac:10:d3:11:ff:ab:a3:05:e0:69:00:9c:e1:06:9d:ff:e9:a5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:25 2024 GMT
            Not After : Aug 15 16:26:25 2025 GMT
        Subject: CN=AF307822FCCA3D50986D175F6EB471612114BB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:0d:44:dc:24:f3:97:76:b9:c6:81:87:d9:
                    4b:a0:1e:38:06:37:23:7b:c8:6e:98:5a:b3:55:6f:
                    4a:6f:88:64:5a:ca:07:09:9f:72:ad:d4:ca:e4:e8:
                    b7:61:cf:66:63:12:ca:e1:63:46:48:a5:66:4e:11:
                    76:db:95:4b:02:49:23:4e:5c:7a:d1:75:19:82:00:
                    bc:61:9d:c0:8a:78:13:b9:6c:2c:bb:2b:f0:36:17:
                    ad:bf:53:76:ee:dc:8c:09:77:40:e3:ce:86:26:60:
                    65:26:1c:0a:9b:23:b7:eb:4c:4d:17:f4:3f:05:c0:
                    da:34:fb:2d:55:bb:4f:90:74:62:af:19:a4:da:2b:
                    3d:3e:2e:d1:33:c1:58:35:c2:11:5d:85:bf:dc:2c:
                    a8:d3:81:49:a1:84:fc:95:65:79:c9:7f:d6:f6:20:
                    5a:6a:46:ff:50:36:b5:58:f3:27:dc:27:31:fd:d3:
                    cc:7b:d9:ce:cf:5b:04:0b:80:f0:fd:49:c6:95:18:
                    a0:d3:f8:6a:f1:95:05:a3:6b:d0:45:1f:dd:73:e0:
                    0e:cb:07:07:3e:60:62:c1:6c:b3:c8:17:95:a5:16:
                    36:09:d6:8a:99:13:11:59:76:4a:83:35:ce:a1:93:
                    3e:27:da:d1:a2:7b:0c:93:02:6a:78:e1:76:55:e3:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:78:22:FC:CA:3D:50:98:6D:17:5F:6E:B4:71:61:21:14:BB:13
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33322d3332203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3700::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:e7:94:3c:f3:56:48:15:82:68:13:6f:6e:3f:a1:30:cf:fe:
         53:a8:ef:b7:af:7b:e4:2f:6a:d6:c0:83:2a:91:aa:00:28:8a:
         a2:26:74:8b:03:f0:1c:d8:6a:5b:26:9d:6a:be:25:71:d9:60:
         5d:9b:66:b0:53:18:40:2d:d4:29:b0:f7:08:89:1e:12:3c:00:
         a6:57:63:0f:18:6b:fe:9d:99:b8:56:5b:e3:89:71:fe:e1:20:
         7b:e5:c1:30:56:f5:90:81:21:ef:94:84:5d:1b:cd:58:3b:b3:
         92:ce:11:40:9a:b1:b5:31:a1:e7:fd:fa:ce:e8:de:ef:19:c0:
         14:52:23:ec:70:c5:4c:b5:03:e7:72:be:2d:a0:73:f8:4e:19:
         9e:a9:b8:2a:2f:a8:04:08:55:67:3d:f0:5b:38:ad:e5:dd:39:
         7f:cb:77:95:1f:04:b6:da:35:ff:ea:b7:5e:16:a0:ba:85:a2:
         41:3b:31:18:2f:46:1f:b4:c6:72:0b:8f:9e:ed:20:46:a5:af:
         f1:c7:9e:77:0d:f7:9b:d3:52:3e:8f:5a:54:69:e4:53:9b:9d:
         8b:6b:45:ff:37:0b:39:94:69:41:2e:f8:18:bf:a0:25:00:35:
         36:3d:bd:5d:ff:56:2c:28:02:20:80:d5:66:7a:08:b7:a5:63:
         09:ce:0a:51
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcKwQ0xH/q6MF4GkAnOEGnf/ppVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NjBDNTYzQUUyQUU3ODE1QTVBRkY1NDgyNkE3MDND
MTY2OUZEMjAeFw0yNDA4MTYxNjIxMjVaFw0yNTA4MTUxNjI2MjVaMDMxMTAvBgNV
BAMTKEFGMzA3ODIyRkNDQTNENTA5ODZEMTc1RjZFQjQ3MTYxMjExNEJCMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFQ1E3CTzl3a5xoGH2UugHjgG
NyN7yG6YWrNVb0pviGRaygcJn3Kt1Mrk6Ldhz2ZjEsrhY0ZIpWZOEXbblUsCSSNO
XHrRdRmCALxhncCKeBO5bCy7K/A2F62/U3bu3IwJd0DjzoYmYGUmHAqbI7frTE0X
9D8FwNo0+y1Vu0+QdGKvGaTaKz0+LtEzwVg1whFdhb/cLKjTgUmhhPyVZXnJf9b2
IFpqRv9QNrVY8yfcJzH908x72c7PWwQLgPD9ScaVGKDT+GrxlQWja9BFH91z4A7L
Bwc+YGLBbLPIF5WlFjYJ1oqZExFZdkqDNc6hkz4n2tGiewyTAmp44XZV4/WFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrzB4IvzKPVCYbRdfbrRxYSEUuxMwHwYDVR0j
BBgwFoAULZYMVjrirngVpa/1SCanA8Fmn9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3pUM1JkcmpEV3l1dHI0MVlLcmdHUUtHUmdFRVRrV1Y1aFhoTkhnMVlW
Q1MvMC8yRDk2MEM1NjNBRTJBRTc4MTVBNUFGRjU0ODI2QTcwM0MxNjY5RkQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEOTYwQzU2M0FFMkFFNzgx
NUE1QUZGNTQ4MjZBNzAzQzE2NjlGRDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6VDNSZHJqRFd5dXRyNDFZS3JnR1FLR1JnRUVUa1dWNWhYaE5IZzFZVkNTLzAv
MzIzODMwMzQzYTMzMzczMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ3ADANBgkqhkiG9w0BAQsFAAOCAQEApeeUPPNW
SBWCaBNvbj+hMM/+U6jvt6975C9q1sCDKpGqACiKoiZ0iwPwHNhqWyadar4lcdlg
XZtmsFMYQC3UKbD3CIkeEjwApldjDxhr/p2ZuFZb44lx/uEge+XBMFb1kIEh75SE
XRvNWDuzks4RQJqxtTGh5/36zuje7xnAFFIj7HDFTLUD53K+LaBz+E4Znqm4Ki+o
BAhVZz3wWzit5d05f8t3lR8Etto1/+q3XhaguoWiQTsxGC9GH7TGcguPnu0gRqWv
8ceedw33m9NSPo9aVGnkU5udi2tF/zcLOZRpQS74GL+gJQA1Nj29Xf9WLCgCIIDV
ZnoIt6VjCc4KUQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:16 2025 by rpki-client