Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3332203d3e20323730373136.roa
File:                     323830343a373034343a3a2f33322d3332203d3e20323730373136.roa (raw, json)
Hash identifier:          48h0UCXsIUXxGTJivqeRln/yXTU80yeFv9TwSSx6f5g=
Subject key identifier:   2B:D4:F8:8D:10:EA:67:BA:6E:6F:37:D7:7B:D2:C9:E1:04:8D:9A:47
Certificate issuer:       /CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
Certificate serial:       1EF1673FECB11260BBD9722EC19197B7F1B224B9
Authority key identifier: 70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3332203d3e20323730373136.roa
Signing time:             Wed 19 Feb 2025 20:24:17 +0000
ROA not before:           Wed 19 Feb 2025 20:19:17 +0000
ROA not after:            Wed 18 Feb 2026 20:24:17 +0000
asID:                     270716
IP address blocks:        2804:7044::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f1:67:3f:ec:b1:12:60:bb:d9:72:2e:c1:91:97:b7:f1:b2:24:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
        Validity
            Not Before: Feb 19 20:19:17 2025 GMT
            Not After : Feb 18 20:24:17 2026 GMT
        Subject: CN=2BD4F88D10EA67BA6E6F37D77BD2C9E1048D9A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:51:6e:bb:13:1f:75:f7:ba:18:34:9c:e0:aa:
                    bb:24:fb:5f:e3:5c:31:9b:6a:a5:93:43:e2:38:31:
                    23:c1:59:7c:bb:42:1c:d6:c2:9f:ca:a5:47:41:b7:
                    11:fb:35:40:43:a8:c6:ed:ba:73:01:0e:26:a1:e0:
                    a4:7e:d7:23:01:fb:b2:2c:a9:b6:0a:ea:42:25:57:
                    26:93:12:2c:f1:6f:26:a6:44:62:d8:86:55:33:31:
                    d3:8b:ae:6c:23:a1:ba:bd:c7:fb:a1:08:7c:25:de:
                    e1:a6:b4:97:34:7f:74:ef:36:02:6f:a0:f9:98:9a:
                    48:98:f0:1a:03:18:84:e0:ba:8b:e1:a9:81:f0:e5:
                    22:6a:53:0e:af:8b:62:c2:24:f5:94:0d:ae:51:ca:
                    13:ba:79:f1:f2:c5:b3:43:ad:c8:ee:02:ff:02:02:
                    5c:31:da:f1:63:24:7f:9f:f9:c0:4a:38:06:a0:f9:
                    41:55:14:2b:93:d8:79:a6:0b:8b:40:b8:80:76:9e:
                    a5:f8:c1:7a:b0:db:a8:3a:5e:87:6e:8b:76:10:de:
                    ef:fb:2e:8a:94:8c:be:05:69:0e:01:c2:c2:05:73:
                    75:0d:78:d9:0c:60:8d:d5:76:b7:c1:db:8f:87:bc:
                    2a:78:e9:95:8b:c5:1c:1d:85:02:a3:03:82:ec:9a:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D4:F8:8D:10:EA:67:BA:6E:6F:37:D7:7B:D2:C9:E1:04:8D:9A:47
            X509v3 Authority Key Identifier:
                keyid:70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3332203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:73:23:11:68:85:c2:64:51:2f:5b:54:fb:b1:fa:fc:bc:
         bf:16:bd:8a:2c:3c:ff:4e:a0:97:1c:d8:c3:db:9d:cf:f6:0d:
         69:db:07:73:1c:70:17:a7:6a:38:55:09:d4:ec:3d:69:44:ab:
         f0:e4:f4:9c:c3:47:8a:78:50:b3:fe:1f:72:b8:f9:6f:44:95:
         fc:a7:9c:5e:e0:3f:43:41:b7:c6:77:8c:9e:e1:2a:5f:1a:56:
         2a:35:05:48:2c:9a:83:c3:1d:39:ce:8f:ac:a4:2b:b2:a5:a6:
         58:92:3e:ef:66:0e:f5:38:bc:27:46:ef:8e:ac:4b:10:70:a3:
         91:6f:bd:30:c2:54:d3:f5:18:da:e0:34:8c:d1:e8:95:b3:0e:
         1b:89:ba:96:57:be:b4:a0:9f:b2:7b:a8:fa:1f:12:31:60:31:
         0c:7b:25:d8:ce:75:02:be:f7:6c:b4:8e:0a:20:27:bf:92:91:
         93:f5:07:54:4e:c7:e6:6b:e2:3a:eb:41:af:de:a8:44:bb:95:
         a1:4a:a0:b8:32:5f:4b:d0:f1:c5:62:f7:bc:7d:e6:78:11:bc:
         d4:ba:36:8a:18:86:21:25:1d:3d:48:eb:57:14:b9:90:e1:fa:
         bd:b8:29:05:d2:d5:11:d7:1b:95:11:88:7a:19:71:75:04:a2:
         97:bb:32:9b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHvFnP+yxEmC72XIuwZGXt/GyJLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBGNzVDNkYyNkRCQzNGRjNFQzY3RUIyNDlFMzhGQkQ4
RjAwRkUzOTAeFw0yNTAyMTkyMDE5MTdaFw0yNjAyMTgyMDI0MTdaMDMxMTAvBgNV
BAMTKDJCRDRGODhEMTBFQTY3QkE2RTZGMzdENzdCRDJDOUUxMDQ4RDlBNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRUW67Ex9197oYNJzgqrsk+1/j
XDGbaqWTQ+I4MSPBWXy7QhzWwp/KpUdBtxH7NUBDqMbtunMBDiah4KR+1yMB+7Is
qbYK6kIlVyaTEizxbyamRGLYhlUzMdOLrmwjobq9x/uhCHwl3uGmtJc0f3TvNgJv
oPmYmkiY8BoDGITguovhqYHw5SJqUw6vi2LCJPWUDa5RyhO6efHyxbNDrcjuAv8C
Alwx2vFjJH+f+cBKOAag+UFVFCuT2HmmC4tAuIB2nqX4wXqw26g6Xodui3YQ3u/7
LoqUjL4FaQ4BwsIFc3UNeNkMYI3VdrfB24+HvCp46ZWLxRwdhQKjA4LsmkGnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUK9T4jRDqZ7pubzfXe9LJ4QSNmkcwHwYDVR0j
BBgwFoAUcPdcbybbw/8+xn6ySeOPvY8A/jkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YWHZ0NDFhUjJCSFRCZFFLZWtCUDFoaHpCSzQ3azRIV3Z2NzhVNUM0eWJV
LzAvNzBGNzVDNkYyNkRCQzNGRjNFQzY3RUIyNDlFMzhGQkQ4RjAwRkUzOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83MEY3NUM2RjI2REJDM0ZGM0VD
NjdFQjI0OUUzOEZCRDhGMDBGRTM5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
WHZ0NDFhUjJCSFRCZFFLZWtCUDFoaHpCSzQ3azRIV3Z2NzhVNUM0eWJVLzAvMzIz
ODMwMzQzYTM3MzAzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMwMzcz
MTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARwRDANBgkqhkiG9w0BAQsFAAOCAQEAbHRzIxFohcJk
US9bVPux+vy8vxa9iiw8/06glxzYw9udz/YNadsHcxxwF6dqOFUJ1Ow9aUSr8OT0
nMNHinhQs/4fcrj5b0SV/KecXuA/Q0G3xneMnuEqXxpWKjUFSCyag8MdOc6PrKQr
sqWmWJI+72YO9Ti8J0bvjqxLEHCjkW+9MMJU0/UY2uA0jNHolbMOG4m6lle+tKCf
snuo+h8SMWAxDHsl2M51Ar73bLSOCiAnv5KRk/UHVE7H5mviOutBr96oRLuVoUqg
uDJfS9DxxWL3vH3meBG81Lo2ihiGISUdPUjrVxS5kOH6vbgpBdLVEdcblRGIehlx
dQSil7symw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:20 2025 by rpki-client