Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa
File:                     323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa (raw, json)
Hash identifier:          RPEWD60k2ispA1+g5U9pD64lRJAlRqQ/qP942eLPoRY=
Subject key identifier:   24:DE:0F:EE:BE:B6:8E:1A:CF:48:4C:D4:3D:F5:3F:0E:DE:28:2F:1E
Certificate issuer:       /CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
Certificate serial:       56DB806FDFA209EE619DC66B6F0729FD48D63E9A
Authority key identifier: 10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa
Signing time:             Fri 29 Nov 2024 12:35:34 +0000
ROA not before:           Fri 29 Nov 2024 12:30:34 +0000
ROA not after:            Fri 28 Nov 2025 12:35:34 +0000
asID:                     270600
IP address blocks:        2804:6e7c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:db:80:6f:df:a2:09:ee:61:9d:c6:6b:6f:07:29:fd:48:d6:3e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
        Validity
            Not Before: Nov 29 12:30:34 2024 GMT
            Not After : Nov 28 12:35:34 2025 GMT
        Subject: CN=24DE0FEEBEB68E1ACF484CD43DF53F0EDE282F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:1e:b4:8e:77:3e:47:ea:c7:58:68:a7:8f:
                    9f:e7:8b:5b:19:4a:a6:fb:c4:e5:a9:42:0b:49:05:
                    de:0b:9d:07:76:d0:08:d4:a0:41:18:4f:a4:cd:75:
                    fe:ce:4b:fc:ca:67:c1:34:09:9d:17:6e:cb:05:24:
                    f6:5a:7d:11:58:3e:f1:5f:fa:b3:04:3d:ef:a2:b7:
                    b4:72:d2:a4:61:9a:dc:64:08:41:33:bc:71:58:fd:
                    b1:6c:74:a7:00:17:28:4d:26:f8:fc:5b:35:ab:ec:
                    d6:6f:57:c0:ce:3e:13:e1:56:ab:19:74:15:12:d0:
                    e5:12:f9:1b:92:ad:b8:52:81:ca:7f:ba:78:ff:31:
                    41:95:3e:71:01:ce:13:22:b2:b1:a9:29:1c:fe:57:
                    0a:2a:e3:3f:31:9e:97:e1:37:2b:ac:e8:ab:84:74:
                    60:90:2e:17:6b:5b:82:e9:1f:8d:8e:89:14:a1:27:
                    56:be:2f:6c:63:ed:55:68:49:48:55:bd:74:42:73:
                    a8:99:c7:20:01:79:f9:91:af:09:7d:38:19:91:c9:
                    4e:f6:f5:6a:08:3e:77:a7:23:a9:5b:a9:01:18:24:
                    39:8e:5e:13:51:ef:59:35:03:f8:e9:93:d6:5f:fd:
                    e5:93:23:f7:e7:0a:dd:0c:d0:f2:a5:9a:1b:a1:43:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DE:0F:EE:BE:B6:8E:1A:CF:48:4C:D4:3D:F5:3F:0E:DE:28:2F:1E
            X509v3 Authority Key Identifier:
                keyid:10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:ad:d8:4d:53:2a:e3:c1:5f:ae:9b:e9:cd:d4:ec:5c:dd:
         45:15:85:1f:1e:a5:be:e0:4b:6a:22:93:86:71:bd:bc:41:d7:
         88:40:63:79:a0:76:5f:7e:a5:27:5d:6e:5d:de:f3:2a:6e:37:
         82:b2:a0:47:ac:6e:52:b6:73:8b:d9:00:e5:d2:58:ed:5f:bb:
         53:60:2a:25:f2:92:3a:d5:81:56:01:de:c3:4e:a5:70:1d:87:
         11:5d:1b:9e:a5:0d:a1:ec:2a:24:09:a4:aa:79:ce:2f:24:cf:
         33:c5:08:76:a3:72:c4:ca:dc:cf:5d:af:2b:fa:69:80:71:5f:
         1d:ae:8b:44:0b:74:71:76:01:a6:45:85:fc:14:6d:e7:5f:89:
         3c:2f:40:fc:dd:8d:2a:80:42:98:bd:b6:f3:62:22:3a:7e:b0:
         42:d7:00:62:7c:b8:e1:84:03:d9:95:bb:5b:a4:81:b8:84:d9:
         08:82:4e:c9:bd:dd:10:9a:99:aa:c7:81:5b:30:cf:37:20:07:
         8a:00:42:31:e0:f3:9b:a7:9a:3f:3a:bb:f4:a5:35:b6:09:12:
         d4:34:40:9d:5e:bc:05:40:03:9d:9f:1c:a4:96:02:4b:57:67:
         f5:bc:82:d1:09:16:4e:b4:eb:f4:30:ba:68:7a:57:37:b6:18:
         fa:b7:c4:33
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVtuAb9+iCe5hncZrbwcp/UjWPpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzOUE0Nzg3MjU2MzQyRTBEQUZFMDIxRTJCQzBENkE3
NEVGMDM1NDAeFw0yNDExMjkxMjMwMzRaFw0yNTExMjgxMjM1MzRaMDMxMTAvBgNV
BAMTKDI0REUwRkVFQkVCNjhFMUFDRjQ4NENENDNERjUzRjBFREUyODJGMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrwx60jnc+R+rHWGinj5/ni1sZ
Sqb7xOWpQgtJBd4LnQd20AjUoEEYT6TNdf7OS/zKZ8E0CZ0XbssFJPZafRFYPvFf
+rMEPe+it7Ry0qRhmtxkCEEzvHFY/bFsdKcAFyhNJvj8WzWr7NZvV8DOPhPhVqsZ
dBUS0OUS+RuSrbhSgcp/unj/MUGVPnEBzhMisrGpKRz+Vwoq4z8xnpfhNyus6KuE
dGCQLhdrW4LpH42OiRShJ1a+L2xj7VVoSUhVvXRCc6iZxyABefmRrwl9OBmRyU72
9WoIPnenI6lbqQEYJDmOXhNR71k1A/jpk9Zf/eWTI/fnCt0M0PKlmhuhQ2gPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJN4P7r62jhrPSEzUPfU/Dt4oLx4wHwYDVR0j
BBgwFoAUEDmkeHJWNC4Nr+Ah4rwNanTvA1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1Y0cEVvdUQ4cVRIREZwQW9kSE04QVZFbjU0UTFuWUFCWGZyazNzVUdF
czgvMC8xMDM5QTQ3ODcyNTYzNDJFMERBRkUwMjFFMkJDMEQ2QTc0RUYwMzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMzlBNDc4NzI1NjM0MkUw
REFGRTAyMUUyQkMwRDZBNzRFRjAzNTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NWNHBFb3VEOHFUSERGcEFvZEhNOEFWRW41NFExbllBQlhmcmszc1VHRXM4LzAv
MzIzODMwMzQzYTM2NjUzNzYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM2MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEbnyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBK1q3YTVMq48FfrpvpzdTsXN1FFYUfHqW+4EtqIpOGcb28QdeIQGN5oHZf
fqUnXW5d3vMqbjeCsqBHrG5StnOL2QDl0ljtX7tTYCol8pI61YFWAd7DTqVwHYcR
XRuepQ2h7CokCaSqec4vJM8zxQh2o3LEytzPXa8r+mmAcV8drotEC3RxdgGmRYX8
FG3nX4k8L0D83Y0qgEKYvbbzYiI6frBC1wBifLjhhAPZlbtbpIG4hNkIgk7Jvd0Q
mpmqx4FbMM83IAeKAEIx4PObp5o/Orv0pTW2CRLUNECdXrwFQAOdnxyklgJLV2f1
vILRCRZOtOv0MLpoelc3thj6t8Qz
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:31:08 2025 by rpki-client