Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a3a2f33322d3332203d3e20323634323432.roa
File:                     323830343a323463633a3a2f33322d3332203d3e20323634323432.roa (raw, json)
Hash identifier:          zJXz5A7bu3LvpeZFr7Ch/c6wrRvIo85AVfrPbxhDpco=
Subject key identifier:   59:EC:81:D5:A6:C5:F1:67:43:9C:E0:E9:52:14:00:EC:43:49:C2:7A
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       738994C0619483626A2EE57FE00DE5264285429B
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a3a2f33322d3332203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:24 +0000
ROA not before:           Sun 23 Jul 2023 00:03:24 +0000
ROA not after:            Sun 21 Jul 2024 00:08:24 +0000
asID:                     264242
IP address blocks:        2804:24cc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:89:94:c0:61:94:83:62:6a:2e:e5:7f:e0:0d:e5:26:42:85:42:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:24 2023 GMT
            Not After : Jul 21 00:08:24 2024 GMT
        Subject: CN=59EC81D5A6C5F167439CE0E9521400EC4349C27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:b6:3f:bc:c1:99:ea:ca:cd:ca:db:22:96:
                    a0:7d:dd:6a:9d:0f:70:20:f3:48:d4:b2:f6:d2:df:
                    c5:0b:02:92:11:40:39:06:b0:19:b0:6d:1b:0e:75:
                    28:a2:dc:9f:0d:51:95:15:c7:02:94:0e:7e:5e:7b:
                    9b:80:93:e3:50:6f:b7:bd:53:18:b8:df:6b:ac:89:
                    fb:b7:ba:85:f8:9a:b1:cc:a5:35:19:dc:d2:09:1c:
                    3d:c7:2c:1d:03:e1:90:21:9f:52:e6:cb:f7:c0:26:
                    71:38:00:98:d3:7f:8a:e1:3b:8a:3f:47:0b:f7:d0:
                    38:58:52:be:51:4f:df:1e:86:0d:8c:b1:12:e3:4f:
                    56:2b:08:be:04:ba:07:d2:5e:a7:90:8d:e7:58:66:
                    7d:f0:6d:f0:7f:73:80:03:25:ee:88:15:78:c7:e3:
                    fa:19:1e:bd:09:4a:50:1b:ff:82:57:95:46:73:83:
                    ab:3a:fc:01:8d:79:9e:53:f0:9e:bd:27:a3:b7:31:
                    dd:15:2a:c8:0e:71:70:ec:b2:50:83:6b:5c:d6:27:
                    6a:06:70:e7:1b:63:5e:d7:50:69:d2:3b:e3:e5:25:
                    5e:fd:5f:c5:9e:7e:64:26:35:a1:e4:9b:b3:0a:05:
                    bc:6b:1a:f9:9c:cb:9d:af:bb:ba:06:1b:f7:6d:53:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EC:81:D5:A6:C5:F1:67:43:9C:E0:E9:52:14:00:EC:43:49:C2:7A
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a3a2f33322d3332203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:c1:4e:d0:2d:e5:0e:fb:24:b4:a8:79:22:92:d7:b1:6f:64:
         63:68:29:2f:44:ea:f8:7a:d3:84:df:e3:21:20:aa:f6:8f:5d:
         52:12:ca:7f:ce:05:c5:af:d7:7b:b7:f2:15:87:db:17:29:97:
         01:67:57:48:15:0b:85:05:21:4d:fa:a8:98:a1:64:15:23:ff:
         08:e7:2a:49:26:6e:2b:ea:08:87:d3:5a:0d:0d:fa:d4:c4:31:
         bb:5b:2a:dc:dd:52:ea:52:48:dc:a4:e2:12:f2:05:58:e8:f7:
         4d:d8:c9:fa:e7:04:c5:0d:44:6d:f7:ba:ac:15:8a:31:bb:39:
         bb:e5:c9:8e:21:b2:75:62:3b:d9:ba:5a:49:70:dc:fb:09:cc:
         dc:62:09:ee:26:2c:81:14:05:22:a5:5f:82:d8:ff:d7:37:86:
         66:0f:6d:7d:88:12:64:38:73:e4:2a:0f:cf:ec:c2:58:c5:f3:
         31:e7:da:4f:c2:10:fd:e3:e4:68:0b:70:98:87:13:38:40:1b:
         12:89:aa:43:a8:f0:50:f2:ce:8b:df:94:b3:ff:4b:0f:0f:a3:
         ce:79:b1:86:c4:5f:9b:8b:51:f5:1a:21:30:4b:47:ad:d5:a5:
         bb:97:ee:4b:94:29:b1:34:dc:6c:40:62:aa:d4:39:ea:49:37:
         80:56:07:20
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUc4mUwGGUg2JqLuV/4A3lJkKFQpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2N0E4MUM2NzgxNDMwQjgwNzQyQ0UyQUQ3N0Q1OUQ0
RDY5MUZFRTAeFw0yMzA3MjMwMDAzMjRaFw0yNDA3MjEwMDA4MjRaMDMxMTAvBgNV
BAMTKDU5RUM4MUQ1QTZDNUYxNjc0MzlDRTBFOTUyMTQwMEVDNDM0OUMyN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGLY/vMGZ6srNytsilqB93Wqd
D3Ag80jUsvbS38ULApIRQDkGsBmwbRsOdSii3J8NUZUVxwKUDn5ee5uAk+NQb7e9
Uxi432usifu3uoX4mrHMpTUZ3NIJHD3HLB0D4ZAhn1Lmy/fAJnE4AJjTf4rhO4o/
Rwv30DhYUr5RT98ehg2MsRLjT1YrCL4EugfSXqeQjedYZn3wbfB/c4ADJe6IFXjH
4/oZHr0JSlAb/4JXlUZzg6s6/AGNeZ5T8J69J6O3Md0VKsgOcXDsslCDa1zWJ2oG
cOcbY17XUGnSO+PlJV79X8WefmQmNaHkm7MKBbxrGvmcy52vu7oGG/dtU8//AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWeyB1abF8WdDnODpUhQA7ENJwnowHwYDVR0j
BBgwFoAUdmeoHGeBQwuAdCzirXfVnU1pH+4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KbzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6
LzAvNzY2N0E4MUM2NzgxNDMwQjgwNzQyQ0UyQUQ3N0Q1OUQ0RDY5MUZFRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC83NjY3QTgxQzY3ODE0MzBCODA3
NDJDRTJBRDc3RDU5RDRENjkxRkVFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
bzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6LzAvMzIz
ODMwMzQzYTMyMzQ2MzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0MzIz
NDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQkzDANBgkqhkiG9w0BAQsFAAOCAQEAcsFO0C3lDvsk
tKh5IpLXsW9kY2gpL0Tq+HrThN/jISCq9o9dUhLKf84Fxa/Xe7fyFYfbFymXAWdX
SBULhQUhTfqomKFkFSP/COcqSSZuK+oIh9NaDQ361MQxu1sq3N1S6lJI3KTiEvIF
WOj3TdjJ+ucExQ1Ebfe6rBWKMbs5u+XJjiGydWI72bpaSXDc+wnM3GIJ7iYsgRQF
IqVfgtj/1zeGZg9tfYgSZDhz5CoPz+zCWMXzMefaT8IQ/ePkaAtwmIcTOEAbEomq
Q6jwUPLOi9+Us/9LDw+jznmxhsRfm4tR9RohMEtHrdWlu5fuS5QpsTTcbEBiqtQ5
6kk3gFYHIA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:46 2025 by rpki-client