Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33332d3333203d3e20323637343230.roa
File:                     323830343a346433633a3a2f33332d3333203d3e20323637343230.roa (raw, json)
Hash identifier:          M0bRdwBvBAtsz1nPOzwq+lNxLNep0JUOv7R6KLAVido=
Subject key identifier:   14:7D:7F:2A:52:21:AB:B7:78:B6:46:47:9C:AB:74:6E:13:6D:B2:35
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       706B23CFBB83BB3126231C462E5D396945E49299
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33332d3333203d3e20323637343230.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     267420
IP address blocks:        2804:4d3c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6b:23:cf:bb:83:bb:31:26:23:1c:46:2e:5d:39:69:45:e4:92:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=147D7F2A5221ABB778B646479CAB746E136DB235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:95:35:95:32:72:6b:e0:18:9c:f2:0a:14:
                    b6:70:b4:ac:14:e1:a0:c3:e3:5d:07:cf:7e:40:70:
                    90:2f:5f:f2:10:47:18:f0:d0:73:6e:dc:ae:0f:05:
                    b7:13:c5:56:ab:af:01:af:0f:2d:30:85:7c:eb:e6:
                    d2:64:a2:8f:71:ab:05:d0:7d:d9:af:55:d8:cb:95:
                    6c:a8:77:ae:4c:3a:d1:f9:87:0f:cb:da:a8:21:c6:
                    67:aa:68:6a:ae:7b:e5:6c:67:1b:26:f3:76:16:87:
                    58:10:90:b2:c0:12:d0:d8:23:bf:74:83:06:78:cc:
                    46:33:9f:ec:4e:69:a7:4e:3c:cb:cf:be:62:26:6f:
                    4d:fd:ca:4c:82:f2:43:82:ce:fd:8a:18:b3:51:72:
                    68:9f:26:8f:ab:63:df:de:c1:22:9c:e5:c3:38:b6:
                    ac:c4:da:f9:36:1a:96:3d:1e:4d:2f:eb:4e:bb:3a:
                    34:ba:59:2f:a9:e0:68:38:a2:4a:36:c1:51:d7:ed:
                    52:7c:b6:f0:2e:31:fe:b1:aa:b4:59:05:b7:63:45:
                    29:ad:49:a2:54:57:d0:87:14:83:52:9a:84:68:cf:
                    28:eb:20:4f:84:ae:34:64:ae:4a:9a:69:42:9e:e5:
                    2d:b2:ed:ee:06:13:47:26:4f:02:b0:c0:2e:a3:63:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7D:7F:2A:52:21:AB:B7:78:B6:46:47:9C:AB:74:6E:13:6D:B2:35
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33332d3333203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:06:1e:8e:66:5c:e8:7d:20:ad:c9:fb:9a:2e:ac:b1:70:
         c2:0b:73:bd:82:42:8f:f8:9a:83:48:2d:64:2a:87:40:4e:93:
         9b:a1:6d:cc:f8:03:b1:2e:4c:76:59:b1:ac:73:59:f2:fe:62:
         8c:e4:04:38:05:c4:a5:2f:dc:a6:f8:05:fc:15:7a:53:0a:6f:
         ad:5d:80:2e:c0:2f:f3:ba:2f:38:f5:b5:b2:c6:6e:da:d0:aa:
         48:00:4b:e7:fe:21:dd:73:fd:e5:3b:86:31:5b:da:ab:a1:a7:
         45:e7:fa:8d:ed:91:e4:cd:82:f3:7a:e3:a3:7a:b1:01:6d:b9:
         f1:59:bc:89:1f:3a:3e:7c:7d:b0:99:db:a5:30:a6:bb:40:ca:
         10:dd:4d:37:09:93:ae:ab:ec:38:74:96:b3:77:76:28:17:70:
         1b:01:c0:b9:ed:6a:57:fe:08:19:bc:42:5a:fb:2e:92:3f:3b:
         09:31:b6:e3:38:93:f4:45:7f:e7:9f:85:5a:58:ab:54:af:6b:
         58:50:d8:31:b6:0f:e1:d4:a9:34:4e:9f:6d:be:84:58:60:52:
         6f:47:80:c2:8f:ef:40:48:85:a0:e6:83:ca:d4:bb:52:92:5d:
         17:5b:92:36:b9:04:12:cf:77:e7:bf:31:49:82:8c:07:86:ed:
         bf:78:8c:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcGsjz7uDuzEmIxxGLl05aUXkkpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3QkE5Mjk0NDY0QkUwMUI0QzJBNTAwNzA4REQ1NUNB
ODc5NTg0RDAeFw0yNDExMTkyMTE2MzZaFw0yNTExMTgyMTIxMzZaMDMxMTAvBgNV
BAMTKDE0N0Q3RjJBNTIyMUFCQjc3OEI2NDY0NzlDQUI3NDZFMTM2REIyMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhpU1lTJya+AYnPIKFLZwtKwU
4aDD410Hz35AcJAvX/IQRxjw0HNu3K4PBbcTxVarrwGvDy0whXzr5tJkoo9xqwXQ
fdmvVdjLlWyod65MOtH5hw/L2qghxmeqaGque+VsZxsm83YWh1gQkLLAEtDYI790
gwZ4zEYzn+xOaadOPMvPvmImb039ykyC8kOCzv2KGLNRcmifJo+rY9/ewSKc5cM4
tqzE2vk2GpY9Hk0v6067OjS6WS+p4Gg4oko2wVHX7VJ8tvAuMf6xqrRZBbdjRSmt
SaJUV9CHFINSmoRozyjrIE+ErjRkrkqaaUKe5S2y7e4GE0cmTwKwwC6jY5htAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFH1/KlIhq7d4tkZHnKt0bhNtsjUwHwYDVR0j
BBgwFoAUPHupKURkvgG0wqUAcI3VXKh5WE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC8zQzdCQTkyOTQ0NjRCRTAxQjRDMkE1MDA3MDhERDU1Q0E4Nzk1ODRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0JBOTI5NDQ2NEJFMDFC
NEMyQTUwMDcwOERENTVDQTg3OTU4NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzIzODMwMzQzYTM0NjQzMzYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzQzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARNPAAwDQYJKoZIhvcNAQELBQADggEBAA+OBh6O
ZlzofSCtyfuaLqyxcMILc72CQo/4moNILWQqh0BOk5uhbcz4A7EuTHZZsaxzWfL+
YozkBDgFxKUv3Kb4BfwVelMKb61dgC7AL/O6Lzj1tbLGbtrQqkgAS+f+Id1z/eU7
hjFb2quhp0Xn+o3tkeTNgvN646N6sQFtufFZvIkfOj58fbCZ26UwprtAyhDdTTcJ
k66r7Dh0lrN3digXcBsBwLntalf+CBm8Qlr7LpI/OwkxtuM4k/RFf+efhVpYq1Sv
a1hQ2DG2D+HUqTROn22+hFhgUm9HgMKP70BIhaDmg8rUu1KSXRdbkja5BBLPd+e/
MUmCjAeG7b94jAI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:46 2025 by rpki-client