Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/323830343a6336343a3a2f33322d3332203d3e203532363939.roa
File:                     323830343a6336343a3a2f33322d3332203d3e203532363939.roa (raw, json)
Hash identifier:          zHr4IWzQpkcNPEzB+v9zw31NVOyAjUOv53hMJScVZyA=
Subject key identifier:   F7:2A:0B:EB:1F:92:58:4E:21:E3:0F:1C:35:B3:F9:52:5A:2A:C6:5A
Certificate issuer:       /CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02
Certificate serial:       56B2BCEF4B3A9872D8EEEBBE4D991BC1446FE96D
Authority key identifier: ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/323830343a6336343a3a2f33322d3332203d3e203532363939.roa
Signing time:             Sat 21 Dec 2024 16:10:24 +0000
ROA not before:           Sat 21 Dec 2024 16:05:24 +0000
ROA not after:            Sat 20 Dec 2025 16:10:24 +0000
asID:                     52699
IP address blocks:        2804:c64::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b2:bc:ef:4b:3a:98:72:d8:ee:eb:be:4d:99:1b:c1:44:6f:e9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02
        Validity
            Not Before: Dec 21 16:05:24 2024 GMT
            Not After : Dec 20 16:10:24 2025 GMT
        Subject: CN=F72A0BEB1F92584E21E30F1C35B3F9525A2AC65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:59:db:ad:b4:57:5b:7c:2c:e5:f0:ba:d9:
                    68:10:dc:a4:78:60:0a:26:43:01:2f:55:54:1a:fe:
                    1c:df:3e:a1:c0:2b:78:8f:ec:d6:34:97:47:89:4f:
                    d4:9b:ca:f8:ee:cb:08:d8:f2:22:28:92:0e:d3:08:
                    0d:bd:de:f9:9b:8a:8e:6c:d7:14:eb:9d:83:54:a1:
                    cb:e4:42:23:11:b1:50:69:03:85:54:9c:74:db:7a:
                    01:57:c3:68:07:9e:dd:c1:ba:26:83:34:33:c3:36:
                    3b:7f:0f:5e:d8:3a:28:14:e4:df:17:61:04:e7:0e:
                    07:9b:6e:38:97:06:f8:02:3f:11:12:ae:4e:a6:d7:
                    cd:fe:5f:47:a0:73:be:77:bd:1f:d2:58:b1:e8:9a:
                    17:23:8e:ca:21:52:5c:f9:ff:d0:4d:a1:cd:6a:fe:
                    45:32:47:77:b8:fe:d5:6f:02:06:fc:ab:8f:5e:59:
                    10:8e:3e:63:15:65:42:fb:2f:42:85:e0:a6:55:11:
                    d3:fe:73:62:d3:7f:09:75:1a:2d:8d:6f:56:af:a5:
                    98:04:e4:7e:b4:03:3d:a5:66:da:24:4b:a0:47:1e:
                    47:33:94:a6:65:64:5e:45:09:f8:20:d9:f5:7b:b5:
                    04:1d:72:2c:ac:00:31:5c:e0:33:8b:b5:7e:5d:a4:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:0B:EB:1F:92:58:4E:21:E3:0F:1C:35:B3:F9:52:5A:2A:C6:5A
            X509v3 Authority Key Identifier:
                keyid:ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/323830343a6336343a3a2f33322d3332203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:83:d1:ae:07:13:4b:9b:23:fd:1b:fe:30:2f:5d:09:8c:fa:
         ab:bc:1a:aa:d7:ef:5e:14:3f:92:05:f8:7f:5d:9a:78:f9:87:
         3c:be:d5:04:93:3c:d9:7c:63:d1:fc:31:f5:8a:2a:ca:ad:89:
         7f:2d:94:0a:7a:f4:fa:73:ed:b4:ee:ef:e9:06:41:ae:25:44:
         af:bf:22:69:f5:a5:75:05:27:ac:29:27:e9:e1:1b:54:b6:2c:
         e5:ab:6b:ac:d5:80:9f:f8:5a:58:d2:3c:6f:2f:3e:20:43:d3:
         c2:f0:e8:d3:3a:c0:3b:59:cc:f0:94:b4:0c:3d:28:8d:a6:bd:
         75:f4:f4:f9:c6:db:ef:d1:93:e2:9d:24:08:7f:36:75:2e:ca:
         0d:c4:c0:a9:e5:61:8f:05:91:c7:e8:87:a4:9a:76:3c:3f:26:
         a9:d3:e5:82:5b:6b:0e:68:c3:a6:d9:ce:5a:a7:a1:a5:5f:83:
         9a:4c:d9:ca:12:64:c3:07:3e:24:79:c9:31:e4:71:aa:a6:0a:
         8f:e2:27:54:54:76:42:33:f5:5a:e3:ac:e4:53:4c:b0:ea:a4:
         0b:71:57:bb:46:48:c9:a1:da:58:54:dd:12:4c:ef:9e:c9:9a:
         01:ed:99:82:12:df:4f:18:aa:c6:ac:1e:49:c5:9c:1a:8c:43:
         4b:12:f9:42
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUVrK870s6mHLY7uu+TZkbwURv6W0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ5RkRCODVCRkM4MEMwQTRDQjk0QjAwN0U3NUM2QjQy
NzlEQ0IwMjAeFw0yNDEyMjExNjA1MjRaFw0yNTEyMjAxNjEwMjRaMDMxMTAvBgNV
BAMTKEY3MkEwQkVCMUY5MjU4NEUyMUUzMEYxQzM1QjNGOTUyNUEyQUM2NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyw1nbrbRXW3ws5fC62WgQ3KR4
YAomQwEvVVQa/hzfPqHAK3iP7NY0l0eJT9SbyvjuywjY8iIokg7TCA293vmbio5s
1xTrnYNUocvkQiMRsVBpA4VUnHTbegFXw2gHnt3BuiaDNDPDNjt/D17YOigU5N8X
YQTnDgebbjiXBvgCPxESrk6m183+X0egc753vR/SWLHomhcjjsohUlz5/9BNoc1q
/kUyR3e4/tVvAgb8q49eWRCOPmMVZUL7L0KF4KZVEdP+c2LTfwl1Gi2Nb1avpZgE
5H60Az2lZtokS6BHHkczlKZlZF5FCfgg2fV7tQQdciysADFc4DOLtX5dpNiRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU9yoL6x+SWE4h4w8cNbP5UloqxlowHwYDVR0j
BBgwFoAU7Z/bhb/IDApMuUsAfnXGtCedywIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzhwbWNIQUpaUENlU2NpOFVjRFhhU01adEtqTTlqejZ3c0t1dndwUGZn
MVEvMC9FRDlGREI4NUJGQzgwQzBBNENCOTRCMDA3RTc1QzZCNDI3OURDQjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEOUZEQjg1QkZDODBDMEE0
Q0I5NEIwMDdFNzVDNkI0Mjc5RENCMDIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM4cG1jSEFKWlBDZVNjaThVY0RYYVNNWnRLak05ano2d3NLdXZ3cFBmZzFRLzAv
MzIzODMwMzQzYTYzMzYzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNjM5
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAxkMA0GCSqGSIb3DQEBCwUAA4IBAQAWg9GuBxNLmyP9
G/4wL10JjPqrvBqq1+9eFD+SBfh/XZp4+Yc8vtUEkzzZfGPR/DH1iirKrYl/LZQK
evT6c+207u/pBkGuJUSvvyJp9aV1BSesKSfp4RtUtizlq2us1YCf+FpY0jxvLz4g
Q9PC8OjTOsA7WczwlLQMPSiNpr119PT5xtvv0ZPinSQIfzZ1LsoNxMCp5WGPBZHH
6IekmnY8Pyap0+WCW2sOaMOm2c5ap6GlX4OaTNnKEmTDBz4keckx5HGqpgqP4idU
VHZCM/Va46zkU0yw6qQLcVe7RkjJodpYVN0STO+eyZoB7ZmCEt9PGKrGrB5JxZwa
jENLEvlC
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:50 2025 by rpki-client