Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa
File:                     323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa (raw, json)
Hash identifier:          3WEgfh4OjJ5itl4teE42nWqCKfQDpNMQjz1Z0AdbRgU=
Subject key identifier:   E1:03:1C:EF:B3:7E:60:31:3C:BA:D4:0A:38:89:F7:A5:BC:31:C0:BB
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       12E43C144917E3804993B4EFC10F0F368FF32A32
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa
Signing time:             Thu 06 Mar 2025 04:00:06 +0000
ROA not before:           Thu 06 Mar 2025 03:55:06 +0000
ROA not after:            Thu 05 Mar 2026 04:00:06 +0000
asID:                     269373
IP address blocks:        2804:63a0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e4:3c:14:49:17:e3:80:49:93:b4:ef:c1:0f:0f:36:8f:f3:2a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Mar  6 03:55:06 2025 GMT
            Not After : Mar  5 04:00:06 2026 GMT
        Subject: CN=E1031CEFB37E60313CBAD40A3889F7A5BC31C0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f7:6a:22:35:26:14:1c:54:dc:bb:17:ec:98:
                    17:45:54:a5:db:7d:07:14:94:b5:34:6e:b8:ea:94:
                    26:24:77:73:e4:9f:87:0a:9e:6f:f0:97:a5:33:df:
                    ba:d5:58:8e:3a:69:29:c1:20:13:39:a9:db:c3:1e:
                    26:f4:e0:f8:89:17:09:52:3e:79:e8:28:e8:43:c0:
                    b8:f0:a9:e8:59:73:ef:c1:14:e2:02:04:ca:c8:de:
                    a7:65:26:1b:1b:44:26:1a:fb:1d:8e:30:f5:a8:9d:
                    a3:56:a3:0c:2a:ed:33:d0:2c:1f:89:48:c1:0a:75:
                    59:27:10:24:7b:9f:c6:e7:18:e2:3a:3e:98:bc:8d:
                    e6:76:9b:08:80:c9:dd:05:0b:d9:f6:07:45:d1:de:
                    fa:fa:7f:48:2b:67:6a:c0:93:9c:a2:1b:d8:64:40:
                    d8:c4:3e:18:21:a4:4c:2f:5f:cc:7f:0a:ea:67:c4:
                    c1:99:1b:ab:f3:36:b5:d9:f4:5a:b9:b8:da:79:d1:
                    70:64:6b:fd:9d:10:27:c0:64:d3:70:5b:be:e6:a6:
                    24:7b:75:e2:3c:1f:76:ff:7c:79:94:85:95:ba:2c:
                    96:52:7c:47:80:b5:5d:94:77:3a:08:25:e9:4d:47:
                    03:a8:a8:05:26:f0:2c:0b:c2:79:6a:bb:83:48:84:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:1C:EF:B3:7E:60:31:3C:BA:D4:0A:38:89:F7:A5:BC:31:C0:BB
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63a0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:00:bc:c2:d4:8f:84:1a:59:3e:83:39:d4:66:bb:2c:20:69:
         33:c9:34:5e:12:b4:bb:e3:15:c3:f8:19:c7:15:ff:0b:c7:77:
         c2:91:18:5e:3d:84:51:8f:48:dd:c2:18:d6:9e:d6:d1:1e:06:
         61:91:82:ef:d7:0d:7c:8e:f2:37:a0:69:01:4e:4e:c7:10:d0:
         c6:5c:1f:56:73:90:92:6e:78:7a:3f:19:62:b3:c3:fb:73:63:
         4d:aa:f5:c5:ea:3c:d6:e0:04:bb:07:d6:f7:4b:1f:b5:91:af:
         0f:cf:f3:60:a7:2c:95:c5:d8:2d:46:17:a9:fe:94:d1:34:3b:
         ed:0c:96:f1:b6:df:56:16:37:6a:8a:74:a2:e6:64:6f:4a:78:
         05:05:6a:e5:6a:3c:42:b2:be:1d:9d:4f:f6:c6:b4:85:fa:2f:
         90:df:b9:e0:a2:4a:67:dd:ef:bb:4d:20:cb:9b:5d:59:81:2a:
         02:4d:2a:62:3f:9d:30:f9:6f:de:33:ff:eb:06:ac:40:30:17:
         f3:b2:90:33:03:ac:35:7a:cb:d2:23:9d:c6:8f:70:99:1f:f9:
         cc:73:b4:ef:ad:f3:54:f6:b8:c8:21:58:67:bd:61:ec:ec:e6:
         b6:d3:ac:50:ad:3e:1b:38:b9:64:3c:06:92:4c:dd:d4:ef:42:
         46:52:0d:f4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEuQ8FEkX44BJk7TvwQ8PNo/zKjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNDMEIyMkQ3QzJCNUMyODZGRUFCNTQ5OEZGRjM0MTFG
RTZDMTk5RDAeFw0yNTAzMDYwMzU1MDZaFw0yNjAzMDUwNDAwMDZaMDMxMTAvBgNV
BAMTKEUxMDMxQ0VGQjM3RTYwMzEzQ0JBRDQwQTM4ODlGN0E1QkMzMUMwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo92oiNSYUHFTcuxfsmBdFVKXb
fQcUlLU0brjqlCYkd3Pkn4cKnm/wl6Uz37rVWI46aSnBIBM5qdvDHib04PiJFwlS
PnnoKOhDwLjwqehZc+/BFOICBMrI3qdlJhsbRCYa+x2OMPWonaNWowwq7TPQLB+J
SMEKdVknECR7n8bnGOI6Ppi8jeZ2mwiAyd0FC9n2B0XR3vr6f0grZ2rAk5yiG9hk
QNjEPhghpEwvX8x/CupnxMGZG6vzNrXZ9Fq5uNp50XBka/2dECfAZNNwW77mpiR7
deI8H3b/fHmUhZW6LJZSfEeAtV2UdzoIJelNRwOoqAUm8CwLwnlqu4NIhH99AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU4QMc77N+YDE8utQKOIn3pbwxwLswHwYDVR0j
BBgwFoAULMCyLXwrXChv6rVJj/80Ef5sGZ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjZVN3pKWWp4enhodlJVcWlSVzFCZUJCY0w3aW1uR0w0M3BKczRNSFE3
eG8vMS8yQ0MwQjIyRDdDMkI1QzI4NkZFQUI1NDk4RkZGMzQxMUZFNkMxOTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQzBCMjJEN0MyQjVDMjg2
RkVBQjU0OThGRkYzNDExRkU2QzE5OUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o2VTd6SllqeHp4aHZSVXFpUlcxQmVCQmNMN2ltbkdMNDNwSnM0TUhRN3hvLzEv
MzIzODMwMzQzYTM2MzM2MTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTMzMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEY6CAMA0GCSqGSIb3DQEBCwUA
A4IBAQCnALzC1I+EGlk+gznUZrssIGkzyTReErS74xXD+BnHFf8Lx3fCkRhePYRR
j0jdwhjWntbRHgZhkYLv1w18jvI3oGkBTk7HENDGXB9Wc5CSbnh6Pxlis8P7c2NN
qvXF6jzW4AS7B9b3Sx+1ka8Pz/NgpyyVxdgtRhep/pTRNDvtDJbxtt9WFjdqinSi
5mRvSngFBWrlajxCsr4dnU/2xrSF+i+Q37ngokpn3e+7TSDLm11ZgSoCTSpiP50w
+W/eM//rBqxAMBfzspAzA6w1esvSI53Gj3CZH/nMc7TvrfNU9rjIIVhnvWHs7Oa2
06xQrT4bOLlkPAaSTN3U70JGUg30
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:22:03 2025 by rpki-client