Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa
File:                     323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa (raw, json)
Hash identifier:          VZ5micvibTT/6Sf0KTI4GTkQH1ZZUL0xy/e+K6U9wck=
Subject key identifier:   16:32:F3:E6:9E:52:90:A7:30:D2:DA:4F:62:57:64:1F:E0:A0:D4:FA
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       54188D9161288D9F3B4B98715D7029F27CB209BE
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa
Signing time:             Wed 05 Mar 2025 19:32:39 +0000
ROA not before:           Wed 05 Mar 2025 19:27:39 +0000
ROA not after:            Wed 04 Mar 2026 19:32:39 +0000
asID:                     263989
IP address blocks:        2804:28f4:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:18:8d:91:61:28:8d:9f:3b:4b:98:71:5d:70:29:f2:7c:b2:09:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Mar  5 19:27:39 2025 GMT
            Not After : Mar  4 19:32:39 2026 GMT
        Subject: CN=1632F3E69E5290A730D2DA4F6257641FE0A0D4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:e9:b8:72:9f:45:ff:23:be:2c:98:7a:53:
                    0d:3a:c5:c2:43:dc:86:ca:e2:53:37:e6:bd:4e:e7:
                    28:78:0a:bd:f5:88:67:26:e5:d5:73:98:62:86:81:
                    a9:1b:b8:d3:ec:a6:ac:4b:7b:64:41:8c:54:26:62:
                    d9:85:e4:0c:f9:d0:81:0b:fc:b4:22:ba:68:1a:c6:
                    45:cd:13:3f:d8:66:3a:a6:f1:85:ca:ff:a9:c2:dd:
                    58:83:50:da:b5:74:7a:65:14:41:a5:a4:5c:77:79:
                    d3:eb:dc:8f:03:7e:42:60:b2:e2:18:ef:d9:b2:fd:
                    89:fb:63:d0:df:56:0a:91:15:53:8c:41:4a:d2:47:
                    dd:a7:d4:a4:17:70:64:ae:e1:76:46:2c:e8:e4:7b:
                    2c:45:53:f2:cf:55:bd:39:2f:5d:2c:e4:62:23:40:
                    d5:56:5b:be:5f:d6:b6:18:8d:70:18:49:30:13:58:
                    a3:f3:b9:da:c2:b9:98:8f:6f:58:78:ef:32:61:d1:
                    20:f3:15:96:de:59:85:53:e4:d5:c7:a2:77:2b:b1:
                    17:95:64:2f:32:43:59:61:d1:ef:a3:2c:e3:9c:f6:
                    a1:f6:01:1c:fa:74:41:a1:9e:04:29:64:c3:fd:e2:
                    f5:ea:fa:88:44:bb:2d:f4:8b:fb:db:a0:67:ea:5a:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:32:F3:E6:9E:52:90:A7:30:D2:DA:4F:62:57:64:1F:E0:A0:D4:FA
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c6:c8:cb:3d:f0:38:32:c6:7f:46:2f:03:22:00:dd:1c:f1:2b:
         96:a3:7a:55:30:f6:7e:08:a3:d9:2d:c9:ef:19:02:13:b0:1d:
         fa:83:da:ac:c3:e6:3d:95:a3:cf:59:05:73:94:c4:a3:f3:9e:
         26:44:0a:13:22:08:76:5a:2e:fb:cf:42:ca:b3:1a:27:c7:00:
         54:e8:53:be:82:26:d4:60:ed:7c:5f:fe:28:e9:76:cc:b8:a4:
         74:cf:8d:72:18:ef:c1:bb:c2:72:4e:35:fb:c2:b5:d8:cb:89:
         3e:11:f1:58:79:9a:2b:c6:75:52:c6:a5:15:89:8b:b5:8d:14:
         da:e9:41:5d:b0:e0:fd:54:54:a5:c2:8c:5c:1f:08:c5:e2:52:
         99:71:43:e1:99:1f:a4:9c:90:ab:bf:d6:a3:0e:ac:44:39:f5:
         16:84:b1:70:44:85:4e:56:77:52:41:34:9f:88:38:11:ae:e5:
         dd:65:74:77:d0:ab:8c:19:26:31:16:f5:07:f5:8c:86:fb:66:
         c2:93:9c:f5:69:02:6e:00:e9:a7:fc:db:79:5c:85:5f:a2:ca:
         d0:0c:3c:ec:68:c4:d5:69:df:f4:dc:fe:ac:d1:56:f0:8d:c5:
         96:21:52:dd:b2:81:b8:a0:b1:76:c8:bb:67:a3:d7:b8:77:83:
         52:bd:f4:76
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVBiNkWEojZ87S5hxXXAp8nyyCb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUyQ0ZBREUwREI5NjVCODMwRDRDOTJEMjE4MzkyMUFF
MTEzRDJBMjAeFw0yNTAzMDUxOTI3MzlaFw0yNjAzMDQxOTMyMzlaMDMxMTAvBgNV
BAMTKDE2MzJGM0U2OUU1MjkwQTczMEQyREE0RjYyNTc2NDFGRTBBMEQ0RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxem4cp9F/yO+LJh6Uw06xcJD
3IbK4lM35r1O5yh4Cr31iGcm5dVzmGKGgakbuNPspqxLe2RBjFQmYtmF5Az50IEL
/LQiumgaxkXNEz/YZjqm8YXK/6nC3ViDUNq1dHplFEGlpFx3edPr3I8DfkJgsuIY
79my/Yn7Y9DfVgqRFVOMQUrSR92n1KQXcGSu4XZGLOjkeyxFU/LPVb05L10s5GIj
QNVWW75f1rYYjXAYSTATWKPzudrCuZiPb1h47zJh0SDzFZbeWYVT5NXHoncrsReV
ZC8yQ1lh0e+jLOOc9qH2ARz6dEGhngQpZMP94vXq+ohEuy30i/vboGfqWlbfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFjLz5p5SkKcw0tpPYldkH+Cg1PowHwYDVR0j
BBgwFoAUbiz63g25Zbgw1MktIYOSGuET0qIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzZ6akppOTd4dkdYWUVKMldzQXJ0ZzhOd3RNdTcyclJTRGdrYVJ2QVJS
OG8vMS82RTJDRkFERTBEQjk2NUI4MzBENEM5MkQyMTgzOTIxQUUxMTNEMkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMkNGQURFMERCOTY1Qjgz
MEQ0QzkyRDIxODM5MjFBRTExM0QyQTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2empKaTk3eHZHWFlFSjJXc0FydGc4Tnd0TXU3MnJSU0Rna2FSdkFSUjhvLzEv
MzIzODMwMzQzYTMyMzg2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEKPSAMA0GCSqGSIb3DQEBCwUA
A4IBAQDGyMs98Dgyxn9GLwMiAN0c8SuWo3pVMPZ+CKPZLcnvGQITsB36g9qsw+Y9
laPPWQVzlMSj854mRAoTIgh2Wi77z0LKsxonxwBU6FO+gibUYO18X/4o6XbMuKR0
z41yGO/Bu8JyTjX7wrXYy4k+EfFYeZorxnVSxqUViYu1jRTa6UFdsOD9VFSlwoxc
HwjF4lKZcUPhmR+knJCrv9ajDqxEOfUWhLFwRIVOVndSQTSfiDgRruXdZXR30KuM
GSYxFvUH9YyG+2bCk5z1aQJuAOmn/Nt5XIVfosrQDDzsaMTVad/03P6s0VbwjcWW
IVLdsoG4oLF2yLtno9e4d4NSvfR2
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:15 2025 by rpki-client