Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3438203d3e20323732323830.roa
File:                     323830343a383463343a3a2f33322d3438203d3e20323732323830.roa (raw, json)
Hash identifier:          SY4RJ3OMQN8pc9bj8iIfEkLqdImNRrEZmBHe+m+TG9w=
Subject key identifier:   57:C1:09:01:BE:D8:55:D4:A0:1D:93:6F:60:B7:2E:26:E3:47:65:5E
Certificate issuer:       /CN=72B246961AE39F1657B95A43A3A8C381ED03EC7C
Certificate serial:       61DAED55ABF65DD8BD012E6C15B1AA27FF412AE3
Authority key identifier: 72:B2:46:96:1A:E3:9F:16:57:B9:5A:43:A3:A8:C3:81:ED:03:EC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72B246961AE39F1657B95A43A3A8C381ED03EC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3438203d3e20323732323830.roa
Signing time:             Mon 20 Jan 2025 16:48:12 +0000
ROA not before:           Mon 20 Jan 2025 16:43:12 +0000
ROA not after:            Mon 19 Jan 2026 16:48:12 +0000
asID:                     272280
IP address blocks:        2804:84c4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:da:ed:55:ab:f6:5d:d8:bd:01:2e:6c:15:b1:aa:27:ff:41:2a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B246961AE39F1657B95A43A3A8C381ED03EC7C
        Validity
            Not Before: Jan 20 16:43:12 2025 GMT
            Not After : Jan 19 16:48:12 2026 GMT
        Subject: CN=57C10901BED855D4A01D936F60B72E26E347655E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:2b:32:15:b2:1a:f0:c5:de:50:a9:ce:b5:
                    49:eb:93:07:cc:1f:cc:91:6b:ba:47:8d:8b:1e:bc:
                    84:64:31:30:4d:34:ff:c6:71:69:d2:32:e5:9f:21:
                    43:77:8b:12:91:28:39:b0:5f:67:3c:c3:d8:17:40:
                    38:ab:b5:bb:9b:ca:44:54:8f:9d:8d:e6:09:18:07:
                    71:8b:85:3c:3f:87:0e:25:ce:d6:73:19:ee:10:f0:
                    35:af:43:b9:ad:41:03:ed:a3:e0:e0:dd:19:ce:61:
                    0a:fc:36:9e:67:19:ea:5d:13:96:10:c0:9b:f6:1e:
                    89:ea:db:bb:33:70:5a:38:1e:9f:d7:52:ce:91:99:
                    30:57:da:e4:db:ff:8c:e6:36:cf:5f:48:df:1b:30:
                    5a:7b:02:e1:5f:19:3f:b2:30:4e:28:83:87:54:07:
                    a8:8f:e9:b5:2b:63:b5:02:7e:bd:e9:29:fb:c5:0c:
                    1d:14:14:0f:de:62:16:09:d6:c0:a4:35:39:d0:ee:
                    bb:0c:31:63:8b:4d:30:93:61:f0:8b:30:a7:3a:e6:
                    1c:99:af:71:66:1c:b1:fb:b3:75:25:fc:e1:1c:79:
                    20:7c:6f:82:2c:79:b4:b6:53:4d:ca:a7:b6:18:17:
                    32:d9:92:7e:a1:fe:70:6c:2f:0a:b8:e9:82:20:45:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:09:01:BE:D8:55:D4:A0:1D:93:6F:60:B7:2E:26:E3:47:65:5E
            X509v3 Authority Key Identifier:
                keyid:72:B2:46:96:1A:E3:9F:16:57:B9:5A:43:A3:A8:C3:81:ED:03:EC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/72B246961AE39F1657B95A43A3A8C381ED03EC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72B246961AE39F1657B95A43A3A8C381ED03EC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3438203d3e20323732323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:63:e4:c0:9d:41:2e:99:83:db:99:96:de:4f:f3:11:ff:
         68:d0:72:7f:74:9b:0d:6a:29:9e:df:a2:76:e7:87:20:53:4a:
         41:80:e0:e5:68:6b:0e:65:36:d3:57:e9:26:6e:5b:5b:b6:fa:
         35:c7:0c:ed:aa:93:50:d0:87:90:68:56:c5:53:30:96:01:f5:
         98:c5:08:4f:f9:c9:3a:d2:5d:8d:0f:33:99:9f:ac:01:9e:42:
         88:38:97:07:75:12:98:0b:f9:58:06:d6:54:40:bb:bc:2a:c3:
         a7:11:26:be:f9:45:a4:81:50:d7:21:12:df:9d:18:35:01:ab:
         15:f9:08:b6:2a:29:50:a1:58:5e:bc:df:36:5a:05:f8:6f:97:
         e5:44:d3:e1:77:3a:5b:90:11:0d:9d:59:90:83:04:29:03:2f:
         98:d0:a7:f0:19:a0:cc:18:47:c6:8f:8f:d4:46:8c:81:7e:27:
         26:87:c0:40:dd:e0:62:f0:3b:e7:bc:de:11:fe:76:a1:a0:44:
         a3:87:5c:ba:7e:c0:4b:bf:39:29:8d:86:7e:c7:e0:7e:62:86:
         e5:a2:91:20:e9:44:9e:f5:9b:54:42:f9:08:bf:e3:c5:87:4c:
         c7:97:5a:71:5b:e9:ec:08:42:4b:28:41:de:a6:b1:a6:ed:89:
         9e:a6:dd:14
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYdrtVav2Xdi9AS5sFbGqJ/9BKuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCMjQ2OTYxQUUzOUYxNjU3Qjk1QTQzQTNBOEMzODFF
RDAzRUM3QzAeFw0yNTAxMjAxNjQzMTJaFw0yNjAxMTkxNjQ4MTJaMDMxMTAvBgNV
BAMTKDU3QzEwOTAxQkVEODU1RDRBMDFEOTM2RjYwQjcyRTI2RTM0NzY1NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSSsyFbIa8MXeUKnOtUnrkwfM
H8yRa7pHjYsevIRkMTBNNP/GcWnSMuWfIUN3ixKRKDmwX2c8w9gXQDirtbubykRU
j52N5gkYB3GLhTw/hw4lztZzGe4Q8DWvQ7mtQQPto+Dg3RnOYQr8Np5nGepdE5YQ
wJv2Honq27szcFo4Hp/XUs6RmTBX2uTb/4zmNs9fSN8bMFp7AuFfGT+yME4og4dU
B6iP6bUrY7UCfr3pKfvFDB0UFA/eYhYJ1sCkNTnQ7rsMMWOLTTCTYfCLMKc65hyZ
r3FmHLH7s3Ul/OEceSB8b4IsebS2U03Kp7YYFzLZkn6h/nBsLwq46YIgRSFHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUV8EJAb7YVdSgHZNvYLcuJuNHZV4wHwYDVR0j
BBgwFoAUcrJGlhrjnxZXuVpDo6jDge0D7HwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjZnWEpRa2o1SnlvelNuVlZ2eHBIcHFTNGJOQVZXQlNjVFlmQTFBUzJ2
Y1IvMC83MkIyNDY5NjFBRTM5RjE2NTdCOTVBNDNBM0E4QzM4MUVEMDNFQzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyQjI0Njk2MUFFMzlGMTY1
N0I5NUE0M0EzQThDMzgxRUQwM0VDN0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o2Z1hKUWtqNUp5b3pTblZWdnhwSHBxUzRiTkFWV0JTY1RZZkExQVMydmNSLzAv
MzIzODMwMzQzYTM4MzQ2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzIzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASExDANBgkqhkiG9w0BAQsFAAOCAQEAZdVj5MCd
QS6Zg9uZlt5P8xH/aNByf3SbDWopnt+idueHIFNKQYDg5WhrDmU201fpJm5bW7b6
NccM7aqTUNCHkGhWxVMwlgH1mMUIT/nJOtJdjQ8zmZ+sAZ5CiDiXB3USmAv5WAbW
VEC7vCrDpxEmvvlFpIFQ1yES350YNQGrFfkItiopUKFYXrzfNloF+G+X5UTT4Xc6
W5ARDZ1ZkIMEKQMvmNCn8BmgzBhHxo+P1EaMgX4nJofAQN3gYvA757zeEf52oaBE
o4dcun7AS785KY2GfsfgfmKG5aKRIOlEnvWbVEL5CL/jxYdMx5dacVvp7AhCSyhB
3qaxpu2JnqbdFA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:13:56 2025 by rpki-client