Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa
File:                     323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa (raw, json)
Hash identifier:          Spq1tY6z3Y/H0oPbOhuRhUjh1pyePot0kj+xP5V7UFI=
Subject key identifier:   6D:D2:4B:D6:40:93:16:1A:D8:FE:A4:54:41:B2:39:E4:27:31:63:28
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       06A93D691C83A007C893CD61AEF6C87CAB5DDB44
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa
Signing time:             Wed 11 Jun 2025 17:00:01 +0000
ROA not before:           Wed 11 Jun 2025 16:55:01 +0000
ROA not after:            Wed 10 Jun 2026 17:00:01 +0000
asID:                     61778
IP address blocks:        2804:1934:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a9:3d:69:1c:83:a0:07:c8:93:cd:61:ae:f6:c8:7c:ab:5d:db:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jun 11 16:55:01 2025 GMT
            Not After : Jun 10 17:00:01 2026 GMT
        Subject: CN=6DD24BD64093161AD8FEA45441B239E427316328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7d:8c:9e:f1:b3:fa:5b:3f:e7:7a:c1:d9:6b:
                    04:93:9d:4f:aa:91:1d:cb:30:80:26:de:49:93:1e:
                    2b:31:d5:0e:4c:ea:27:27:2b:e4:b3:2a:f2:3b:0b:
                    28:ac:79:eb:54:f2:17:34:2e:55:ac:5a:77:10:7c:
                    70:d5:3e:2a:e4:62:be:7d:65:a9:60:4c:98:dc:2d:
                    2b:85:c3:cb:df:60:91:ff:d7:2d:ab:62:7e:e6:00:
                    98:ac:7b:9a:99:df:66:c1:1e:ac:23:94:b0:65:7d:
                    f8:db:46:ba:81:69:ce:7e:5d:84:df:ce:ff:90:57:
                    45:fb:66:46:2d:37:ba:ad:77:43:ae:01:56:ff:46:
                    fe:26:4d:77:46:9d:ea:83:e6:d8:14:c3:f0:46:23:
                    00:cc:90:59:39:95:99:97:1e:89:b3:0b:6f:45:34:
                    d3:b9:c9:11:bc:ae:e2:cf:d2:94:75:b3:1f:9b:c7:
                    b0:38:e4:6a:fd:09:1a:1f:4c:33:97:a8:9c:d8:02:
                    ea:50:5c:b8:39:75:aa:a2:89:bf:da:d2:5c:da:7e:
                    25:ea:dd:4c:0c:c5:35:36:f8:df:7c:1d:85:3a:77:
                    5e:fd:5f:d2:f0:e6:6e:3e:74:15:b2:39:7f:2f:0d:
                    af:b3:c5:34:ea:98:86:36:c4:58:b4:cb:a5:29:d7:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:4B:D6:40:93:16:1A:D8:FE:A4:54:41:B2:39:E4:27:31:63:28
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1934:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:e1:2e:d3:12:1e:a4:58:56:82:3e:46:48:e8:ac:c3:be:a4:
         c0:19:dd:c0:1d:f7:70:19:cd:1f:72:28:80:92:60:48:f7:14:
         fb:49:c8:dc:8f:5f:80:78:a3:91:4c:d6:53:53:6a:c9:2a:65:
         89:2e:de:b3:b5:25:ef:cc:aa:5c:7f:c2:9d:29:ad:93:9d:e1:
         18:27:6f:12:f0:09:8b:bb:67:1b:94:2b:c6:68:c7:bb:0a:1c:
         3d:03:f1:6f:02:89:0b:17:dd:f2:7a:16:6e:c0:9f:73:d4:1e:
         30:0c:de:2e:6f:d9:52:5e:0a:33:72:88:08:ac:28:f3:bc:a9:
         40:38:fd:63:b5:98:be:87:64:08:18:f4:03:29:fb:52:8c:78:
         e8:a3:15:7e:a2:f4:66:20:2f:93:3d:3e:40:1d:56:cb:b4:b3:
         00:d8:9f:b0:bb:65:91:db:0e:2e:90:cf:4a:da:04:87:98:93:
         98:8c:90:86:12:b6:93:17:68:fa:11:c1:15:13:9b:73:67:a3:
         0a:27:6e:88:8c:43:6e:f8:cb:5f:5e:42:91:e3:eb:fa:3d:97:
         b2:a3:6d:22:8f:fe:d3:86:9b:a8:23:9f:f8:4b:18:d8:92:dc:
         4d:9e:34:60:46:45:e7:ed:49:76:d5:78:4b:75:e9:03:6e:27:
         5c:99:be:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBqk9aRyDoAfIk81hrvbIfKtd20QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ5Njg2MENFRDQ2RTgyODYwNDk4REQ5NDY2MDFEMTY4
MTQ3OTIwQjAeFw0yNTA2MTExNjU1MDFaFw0yNjA2MTAxNzAwMDFaMDMxMTAvBgNV
BAMTKDZERDI0QkQ2NDA5MzE2MUFEOEZFQTQ1NDQxQjIzOUU0MjczMTYzMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlfYye8bP6Wz/nesHZawSTnU+q
kR3LMIAm3kmTHisx1Q5M6icnK+SzKvI7CyiseetU8hc0LlWsWncQfHDVPirkYr59
ZalgTJjcLSuFw8vfYJH/1y2rYn7mAJise5qZ32bBHqwjlLBlffjbRrqBac5+XYTf
zv+QV0X7ZkYtN7qtd0OuAVb/Rv4mTXdGneqD5tgUw/BGIwDMkFk5lZmXHomzC29F
NNO5yRG8ruLP0pR1sx+bx7A45Gr9CRofTDOXqJzYAupQXLg5daqiib/a0lzafiXq
3UwMxTU2+N98HYU6d179X9Lw5m4+dBWyOX8vDa+zxTTqmIY2xFi0y6Up1wVtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbdJL1kCTFhrY/qRUQbI55CcxYygwHwYDVR0j
BBgwFoAUNJaGDO1G6ChgSY3ZRmAdFoFHkgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndxcHdHZnE3NUZ1Ylk2ZnpFblZSaDF2QU5VRXh3dkxCcFpjRDd0d0Jp
VFMvMC8zNDk2ODYwQ0VENDZFODI4NjA0OThERDk0NjYwMUQxNjgxNDc5MjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0OTY4NjBDRUQ0NkU4Mjg2
MDQ5OEREOTQ2NjAxRDE2ODE0NzkyMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3cXB3R2ZxNzVGdWJZNmZ6RW5WUmgxdkFOVUV4d3ZMQnBaY0Q3dHdCaVRTLzAv
MzIzODMwMzQzYTMxMzkzMzM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBk0wDANBgkqhkiG9w0BAQsFAAOC
AQEAneEu0xIepFhWgj5GSOisw76kwBndwB33cBnNH3IogJJgSPcU+0nI3I9fgHij
kUzWU1NqySpliS7es7Ul78yqXH/CnSmtk53hGCdvEvAJi7tnG5QrxmjHuwocPQPx
bwKJCxfd8noWbsCfc9QeMAzeLm/ZUl4KM3KICKwo87ypQDj9Y7WYvodkCBj0Ayn7
Uox46KMVfqL0ZiAvkz0+QB1Wy7SzANifsLtlkdsOLpDPStoEh5iTmIyQhhK2kxdo
+hHBFRObc2ejCiduiIxDbvjLX15CkePr+j2XsqNtIo/+04abqCOf+EsY2JLcTZ40
YEZF5+1JdtV4S3XpA24nXJm+4w==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:17:55 2025 by rpki-client