Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653030303a3a2f33372d3337203d3e20323730333035.roa
File:                     323830343a366130303a653030303a3a2f33372d3337203d3e20323730333035.roa (raw, json)
Hash identifier:          53zSAi/scsQoh72DHDVzPErKwxDDEuYYzcfQ5W3myZ8=
Subject key identifier:   0F:1C:96:B6:01:81:57:93:06:C5:4A:B8:8D:50:F6:DA:68:53:7D:01
Certificate issuer:       /CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
Certificate serial:       37F649AF1C1BE2F6098517EAA7DD8F1111A1738A
Authority key identifier: 16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653030303a3a2f33372d3337203d3e20323730333035.roa
Signing time:             Thu 29 Aug 2024 13:57:54 +0000
ROA not before:           Thu 29 Aug 2024 13:52:54 +0000
ROA not after:            Thu 28 Aug 2025 13:57:54 +0000
asID:                     270305
IP address blocks:        2804:6a00:e000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f6:49:af:1c:1b:e2:f6:09:85:17:ea:a7:dd:8f:11:11:a1:73:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
        Validity
            Not Before: Aug 29 13:52:54 2024 GMT
            Not After : Aug 28 13:57:54 2025 GMT
        Subject: CN=0F1C96B60181579306C54AB88D50F6DA68537D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:d0:67:9d:b7:d9:61:36:b7:15:cb:58:4a:
                    cf:42:d0:5d:2f:97:3a:a4:ac:00:03:ab:dc:57:4a:
                    ad:93:c9:50:33:2e:a5:43:33:52:de:31:15:e6:e5:
                    99:96:02:63:8e:20:c3:62:67:84:ff:91:28:32:c3:
                    ac:4b:ef:d0:e7:f2:3f:ff:2f:5b:ce:b0:12:e4:5e:
                    ca:3c:1d:79:c1:f2:ee:3e:62:a0:bc:65:7e:c7:8a:
                    60:ac:eb:9c:a7:6b:93:2c:4a:d9:8e:b7:a5:aa:94:
                    4a:7c:11:96:ec:6b:18:ee:ca:9d:20:95:b7:31:ac:
                    27:8d:a6:a5:cb:e7:28:aa:f4:a7:9b:08:b4:08:dd:
                    a5:51:11:3f:7c:3e:02:eb:ce:1c:eb:ed:de:a5:42:
                    d4:4c:1e:b9:12:30:98:ff:57:25:9c:e3:2b:fa:6c:
                    6e:25:1d:a1:80:47:06:86:6c:c3:3a:6c:c0:27:06:
                    ad:92:76:95:e9:67:18:a4:85:ad:66:53:3e:16:5f:
                    22:4f:a6:79:3d:6f:3c:38:83:74:25:54:d5:2c:1c:
                    6f:6d:12:48:c6:21:54:a4:9e:fe:ef:72:e4:61:63:
                    0d:2b:d3:b0:0e:e0:3b:c6:6b:38:41:5a:97:97:30:
                    3c:d6:5e:83:22:a4:de:09:27:23:0c:c1:5b:39:b2:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1C:96:B6:01:81:57:93:06:C5:4A:B8:8D:50:F6:DA:68:53:7D:01
            X509v3 Authority Key Identifier:
                keyid:16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/16E70819DD21A2FE7437CF06E669511B1282A5D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653030303a3a2f33372d3337203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:e000::/37

    Signature Algorithm: sha256WithRSAEncryption
         73:34:84:97:c5:05:51:8b:c2:d7:be:b6:93:e1:d9:5e:a3:69:
         54:88:0b:5c:48:00:1a:7e:f9:7e:1b:88:a4:8a:1a:73:90:ee:
         5a:27:6e:ed:b2:18:a0:e0:ac:de:23:42:4d:72:8f:57:1f:6a:
         a8:e1:3c:a4:94:a8:7b:f5:07:07:9a:c6:03:9f:6d:83:1d:f7:
         e5:3b:79:64:f2:f3:62:49:4f:f9:c7:4a:d1:c5:0a:80:73:c7:
         ae:db:9c:d9:2d:87:4d:67:7d:70:02:42:05:a0:62:d5:c9:64:
         c7:bd:8a:ac:0d:2c:4d:e1:be:fa:1d:97:b2:82:e6:64:e2:cd:
         b4:df:87:9a:e5:6c:b5:66:91:ff:22:c5:e7:90:db:19:b8:f9:
         29:fe:73:6a:75:c1:72:ff:66:83:05:6f:a1:4e:0d:8b:10:2f:
         9b:02:2c:d2:d9:00:41:cf:65:88:17:f9:89:25:c0:f6:8e:78:
         f7:b5:9f:60:ee:30:9e:37:6e:2e:36:d8:8a:09:de:95:86:8f:
         a0:65:58:4c:21:a3:3f:e5:fa:86:1c:f1:e2:7c:33:f4:4a:7d:
         fa:fe:0b:d7:cf:37:80:ee:36:fe:5b:6d:d9:cf:80:6c:fc:91:
         19:1f:90:7f:c4:56:93:f4:9a:21:4c:60:74:1e:80:5a:bc:6a:
         d7:bd:1c:f4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUN/ZJrxwb4vYJhRfqp92PERGhc4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFNzA4MTlERDIxQTJGRTc0MzdDRjA2RTY2OTUxMUIx
MjgyQTVENjAeFw0yNDA4MjkxMzUyNTRaFw0yNTA4MjgxMzU3NTRaMDMxMTAvBgNV
BAMTKDBGMUM5NkI2MDE4MTU3OTMwNkM1NEFCODhENTBGNkRBNjg1MzdEMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjtBnnbfZYTa3FctYSs9C0F0v
lzqkrAADq9xXSq2TyVAzLqVDM1LeMRXm5ZmWAmOOIMNiZ4T/kSgyw6xL79Dn8j//
L1vOsBLkXso8HXnB8u4+YqC8ZX7HimCs65yna5MsStmOt6WqlEp8EZbsaxjuyp0g
lbcxrCeNpqXL5yiq9KebCLQI3aVRET98PgLrzhzr7d6lQtRMHrkSMJj/VyWc4yv6
bG4lHaGARwaGbMM6bMAnBq2SdpXpZxikha1mUz4WXyJPpnk9bzw4g3QlVNUsHG9t
EkjGIVSknv7vcuRhYw0r07AO4DvGazhBWpeXMDzWXoMipN4JJyMMwVs5srirAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUDxyWtgGBV5MGxUq4jVD22mhTfQEwHwYDVR0j
BBgwFoAUFucIGd0hov50N88G5mlRGxKCpdYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzAvMTZFNzA4MTlERDIxQTJGRTc0MzdDRjA2RTY2OTUxMUIxMjgyQTVENi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xNkU3MDgxOUREMjFBMkZFNzQz
N0NGMDZFNjY5NTExQjEyODJBNUQ2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzAvMzIz
ODMwMzQzYTM2NjEzMDMwM2E2NTMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNkM2Uy
MDMyMzczMDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEagDgMA0GCSqGSIb3DQEBCwUAA4IB
AQBzNISXxQVRi8LXvraT4dleo2lUiAtcSAAafvl+G4ikihpzkO5aJ27tshig4Kze
I0JNco9XH2qo4TyklKh79QcHmsYDn22DHfflO3lk8vNiSU/5x0rRxQqAc8eu25zZ
LYdNZ31wAkIFoGLVyWTHvYqsDSxN4b76HZeyguZk4s2034ea5Wy1ZpH/IsXnkNsZ
uPkp/nNqdcFy/2aDBW+hTg2LEC+bAizS2QBBz2WIF/mJJcD2jnj3tZ9g7jCeN24u
NtiKCd6Vho+gZVhMIaM/5fqGHPHifDP0Sn36/gvXzzeA7jb+W23Zz4Bs/JEZH5B/
xFaT9JohTGB0HoBavGrXvRz0
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:15:55 2025 by rpki-client