Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a633030303a3a2f33342d3334203d3e20323633353730.roa
File:                     323830343a6633343a633030303a3a2f33342d3334203d3e20323633353730.roa (raw, json)
Hash identifier:          X4sEbxpN4ZUrbdkIVaZV8nQ++TUbjwrJOK12Y7WtS14=
Subject key identifier:   D0:F6:7F:75:AF:3C:6B:5B:80:7F:FD:10:8E:FF:3B:C9:41:27:E2:7D
Certificate issuer:       /CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Certificate serial:       1654356FC42E61DE8FB356AFF4213AFA087D741F
Authority key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a633030303a3a2f33342d3334203d3e20323633353730.roa
Signing time:             Thu 06 Feb 2025 13:57:38 +0000
ROA not before:           Thu 06 Feb 2025 13:52:38 +0000
ROA not after:            Thu 05 Feb 2026 13:57:38 +0000
asID:                     263570
IP address blocks:        2804:f34:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:54:35:6f:c4:2e:61:de:8f:b3:56:af:f4:21:3a:fa:08:7d:74:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
        Validity
            Not Before: Feb  6 13:52:38 2025 GMT
            Not After : Feb  5 13:57:38 2026 GMT
        Subject: CN=D0F67F75AF3C6B5B807FFD108EFF3BC94127E27D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:60:eb:09:c7:1d:63:7f:c0:12:e2:e3:4e:78:
                    ea:d4:a9:0f:8d:ee:c9:6d:49:19:d9:0b:f0:7b:28:
                    5f:e7:fb:05:9c:0c:ff:4a:ca:ae:82:90:88:b0:3c:
                    2e:8e:8b:43:cc:fc:67:a8:68:fb:2f:1f:ed:7d:2f:
                    02:3b:28:72:3c:38:58:33:ca:8e:64:f2:2e:ff:68:
                    65:77:3c:8d:2a:00:f2:22:16:87:d5:fc:bc:74:2d:
                    5c:8f:5f:01:97:5f:44:ba:5b:db:85:04:8b:0e:32:
                    21:f8:71:17:4c:52:11:40:0e:26:eb:e3:a4:c5:ca:
                    21:f1:4a:82:78:96:05:8a:7f:2b:29:34:1d:50:7f:
                    64:cf:a7:8c:41:ff:54:91:a6:86:51:c6:7b:58:76:
                    99:04:01:ce:97:91:ec:8d:32:ea:3f:32:e7:20:81:
                    b3:66:f4:46:a6:0d:b6:51:94:14:d6:cd:69:3a:c8:
                    93:fc:c2:63:d1:13:ed:8a:8a:b8:77:e1:3e:84:6b:
                    55:25:57:37:ee:57:97:2b:f6:3c:82:68:7c:6f:83:
                    62:a9:ff:93:7b:f7:cd:72:5b:af:46:55:ab:a6:8d:
                    f2:3f:3a:a7:43:75:06:bb:d6:c4:c5:61:5b:3e:bc:
                    dd:05:a8:a9:1b:51:b3:0f:7e:32:9c:88:5e:a6:64:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F6:7F:75:AF:3C:6B:5B:80:7F:FD:10:8E:FF:3B:C9:41:27:E2:7D
            X509v3 Authority Key Identifier:
                keyid:9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a633030303a3a2f33342d3334203d3e20323633353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f34:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:69:14:37:a5:41:aa:89:4c:45:49:89:d1:e0:77:66:c3:
         10:fe:37:de:65:ac:25:fc:d0:3a:23:c7:07:bc:95:5f:e3:86:
         17:8f:ec:5c:c0:cf:ad:85:f2:76:70:9d:10:53:b0:68:e1:fd:
         6d:5c:15:48:82:fb:06:82:9e:c9:44:d3:45:91:3d:bd:20:96:
         65:b7:ec:fe:89:79:be:ae:c4:82:78:fc:c3:9c:14:54:56:dd:
         86:e4:10:7c:34:ff:1b:dc:ec:5c:1e:dc:e7:cb:bb:eb:22:f2:
         fe:80:c0:1f:11:54:05:ec:d8:bd:94:71:1d:48:4a:1c:09:f9:
         94:10:00:c0:2d:cb:53:3e:32:da:38:75:f3:72:cf:6d:d5:8a:
         a8:24:a3:88:de:35:4e:c9:c4:38:ab:07:95:7f:bc:bf:34:e7:
         b5:1c:50:8e:17:f6:ab:bd:07:99:7b:c8:3f:dd:fb:78:43:58:
         1c:c8:24:db:a3:74:c6:0c:18:c7:de:13:6f:e7:e5:aa:ab:31:
         78:25:cc:60:71:cf:81:42:d2:e1:3c:76:df:71:a5:5d:48:32:
         d4:30:c4:76:1a:66:78:1d:03:c6:d5:73:04:6f:21:34:f3:10:
         48:01:50:98:33:de:25:92:6d:86:bc:7a:18:66:53:65:30:43:
         2e:de:ed:42
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUFlQ1b8QuYd6Ps1av9CE6+gh9dB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDQkVBRkM4RkU4QzE2QTI3NzA1MTVGMjFDMDY2NENB
OTFFQ0M4RTAeFw0yNTAyMDYxMzUyMzhaFw0yNjAyMDUxMzU3MzhaMDMxMTAvBgNV
BAMTKEQwRjY3Rjc1QUYzQzZCNUI4MDdGRkQxMDhFRkYzQkM5NDEyN0UyN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqYOsJxx1jf8AS4uNOeOrUqQ+N
7sltSRnZC/B7KF/n+wWcDP9Kyq6CkIiwPC6Oi0PM/GeoaPsvH+19LwI7KHI8OFgz
yo5k8i7/aGV3PI0qAPIiFofV/Lx0LVyPXwGXX0S6W9uFBIsOMiH4cRdMUhFADibr
46TFyiHxSoJ4lgWKfyspNB1Qf2TPp4xB/1SRpoZRxntYdpkEAc6XkeyNMuo/Mucg
gbNm9EamDbZRlBTWzWk6yJP8wmPRE+2Kirh34T6Ea1UlVzfuV5cr9jyCaHxvg2Kp
/5N7981yW69GVaumjfI/OqdDdQa71sTFYVs+vN0FqKkbUbMPfjKciF6mZGYhAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU0PZ/da88a1uAf/0Qjv87yUEn4n0wHwYDVR0j
BBgwFoAUnMvq/I/owWoncFFfIcBmTKkezI4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9wNlB2V3Nrd1l4Mlhpdlg3Qkdqd3VyWHp5YnNyR0RCQ1dKYUc5aHcyNmdK
LzAvOUNDQkVBRkM4RkU4QzE2QTI3NzA1MTVGMjFDMDY2NENBOTFFQ0M4RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85Q0NCRUFGQzhGRThDMTZBMjc3
MDUxNUYyMUMwNjY0Q0E5MUVDQzhFLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9w
NlB2V3Nrd1l4Mlhpdlg3Qkdqd3VyWHp5YnNyR0RCQ1dKYUc5aHcyNmdKLzAvMzIz
ODMwMzQzYTY2MzMzNDNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAz
MjM2MzMzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA80wDANBgkqhkiG9w0BAQsFAAOCAQEA
oT9pFDelQaqJTEVJidHgd2bDEP433mWsJfzQOiPHB7yVX+OGF4/sXMDPrYXydnCd
EFOwaOH9bVwVSIL7BoKeyUTTRZE9vSCWZbfs/ol5vq7Egnj8w5wUVFbdhuQQfDT/
G9zsXB7c58u76yLy/oDAHxFUBezYvZRxHUhKHAn5lBAAwC3LUz4y2jh183LPbdWK
qCSjiN41TsnEOKsHlX+8vzTntRxQjhf2q70HmXvIP937eENYHMgk26N0xgwYx94T
b+flqqsxeCXMYHHPgULS4Tx233GlXUgy1DDEdhpmeB0DxtVzBG8hNPMQSAFQmDPe
JZJthrx6GGZTZTBDLt7tQg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:52:21 2025 by rpki-client