Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/323830343a363630383a3a2f33322d313238203d3e20323639353239.roa
File:                     323830343a363630383a3a2f33322d313238203d3e20323639353239.roa (raw, json)
Hash identifier:          QgxOU1wusoHzXmV+nt4aJEtXFJSNw4md6lI8nYZLt/k=
Subject key identifier:   08:8C:A7:87:4C:EF:62:7E:76:93:46:CB:DC:61:50:96:2E:82:D8:64
Certificate issuer:       /CN=30C124FDC8D6BEBE26543F78B069AB896B0FF4EE
Certificate serial:       0D2866A10043B2577DF2599C8491FE7D003B3C4C
Authority key identifier: 30:C1:24:FD:C8:D6:BE:BE:26:54:3F:78:B0:69:AB:89:6B:0F:F4:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/323830343a363630383a3a2f33322d313238203d3e20323639353239.roa
Signing time:             Fri 17 Jan 2025 20:27:00 +0000
ROA not before:           Fri 17 Jan 2025 20:22:00 +0000
ROA not after:            Fri 16 Jan 2026 20:27:00 +0000
asID:                     269529
IP address blocks:        2804:6608::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:28:66:a1:00:43:b2:57:7d:f2:59:9c:84:91:fe:7d:00:3b:3c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C124FDC8D6BEBE26543F78B069AB896B0FF4EE
        Validity
            Not Before: Jan 17 20:22:00 2025 GMT
            Not After : Jan 16 20:27:00 2026 GMT
        Subject: CN=088CA7874CEF627E769346CBDC6150962E82D864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:46:0f:f4:4f:e8:85:ad:cf:cb:cd:9e:e9:
                    a2:3f:1f:98:e7:66:c7:86:a1:ef:ca:71:d8:12:bc:
                    4f:ca:7b:dc:a9:39:d3:c0:c5:3b:28:16:cc:64:ec:
                    2c:c7:e7:86:40:61:83:69:66:47:e5:89:a7:1c:15:
                    ed:4b:39:29:5f:b0:cd:ef:3e:40:c3:51:7d:38:e3:
                    bd:2f:b7:58:8a:c3:a1:9a:21:a0:d0:5b:fb:d1:00:
                    35:b7:94:85:c6:53:a7:a6:be:18:9c:74:1b:ac:45:
                    8d:b4:81:03:47:df:f1:45:6a:00:a1:22:ba:a1:e6:
                    9e:5e:77:8d:df:69:a0:2f:14:5b:9f:0e:4e:f5:6f:
                    e2:e6:a5:86:06:35:a2:84:12:fa:5c:57:d7:f6:f6:
                    95:75:c4:06:07:42:8d:3d:57:ad:87:ee:d8:74:05:
                    29:3c:28:f3:96:4a:d2:07:99:46:81:0a:b0:01:fa:
                    24:ca:75:fe:0b:73:6f:cd:b6:5a:c0:b7:c3:f6:d5:
                    1d:a4:6a:20:ef:3e:51:e5:4a:a9:e9:13:62:71:38:
                    53:99:e4:b2:94:d1:4c:a6:c1:a8:e3:dd:16:48:79:
                    84:22:4d:f2:96:92:0c:2f:a0:b1:4c:77:11:95:da:
                    7b:53:14:93:a1:c3:15:f0:5e:b0:e4:fd:97:06:0f:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:A7:87:4C:EF:62:7E:76:93:46:CB:DC:61:50:96:2E:82:D8:64
            X509v3 Authority Key Identifier:
                keyid:30:C1:24:FD:C8:D6:BE:BE:26:54:3F:78:B0:69:AB:89:6B:0F:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/323830343a363630383a3a2f33322d313238203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6608::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:a7:8d:0c:73:58:a8:3a:62:34:16:67:92:50:85:84:62:4f:
         af:7e:83:1c:57:12:26:d0:70:e0:d0:29:16:8a:41:f0:3a:b2:
         d8:ca:a6:40:44:bf:4c:ff:cc:e7:5b:5e:24:c4:56:7e:9a:01:
         d5:4d:e7:3c:75:41:5b:15:32:55:74:68:7b:b4:ae:08:fd:8d:
         e5:9b:4d:16:2d:15:fa:04:a0:83:9e:58:b4:82:fd:8d:a8:08:
         de:e7:b0:25:69:3d:a9:a6:44:4a:36:b6:f5:02:aa:9b:75:7c:
         08:f2:5d:88:d7:4b:6f:93:8f:4b:f4:85:aa:87:8a:d3:65:07:
         f3:c9:e3:cd:e2:3f:6e:49:43:1d:5a:7e:74:79:c8:57:78:43:
         db:2a:12:1e:b2:20:c6:a7:d9:f1:31:5b:67:21:b1:69:1c:51:
         fd:59:93:cc:ca:cf:04:98:aa:3b:e4:16:33:f0:06:e7:b2:cb:
         a6:4f:14:2f:08:49:f9:62:c0:3f:c7:91:51:83:ae:74:f5:0c:
         d3:27:16:47:5a:be:b0:53:82:fe:77:4c:7e:f4:d5:82:68:f1:
         54:4e:d4:7c:76:51:65:0c:b6:49:78:5e:e0:45:89:dd:be:f2:
         65:f6:bc:66:92:c2:da:96:43:f7:5d:6d:9f:4f:47:28:4e:fa:
         91:e3:1e:02
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUDShmoQBDsld98lmchJH+fQA7PEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBDMTI0RkRDOEQ2QkVCRTI2NTQzRjc4QjA2OUFCODk2
QjBGRjRFRTAeFw0yNTAxMTcyMDIyMDBaFw0yNjAxMTYyMDI3MDBaMDMxMTAvBgNV
BAMTKDA4OENBNzg3NENFRjYyN0U3NjkzNDZDQkRDNjE1MDk2MkU4MkQ4NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7EYP9E/oha3Py82e6aI/H5jn
ZseGoe/KcdgSvE/Ke9ypOdPAxTsoFsxk7CzH54ZAYYNpZkfliaccFe1LOSlfsM3v
PkDDUX04470vt1iKw6GaIaDQW/vRADW3lIXGU6emvhicdBusRY20gQNH3/FFagCh
Irqh5p5ed43faaAvFFufDk71b+LmpYYGNaKEEvpcV9f29pV1xAYHQo09V62H7th0
BSk8KPOWStIHmUaBCrAB+iTKdf4Lc2/NtlrAt8P21R2kaiDvPlHlSqnpE2JxOFOZ
5LKU0Uymwajj3RZIeYQiTfKWkgwvoLFMdxGV2ntTFJOhwxXwXrDk/ZcGD//fAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUCIynh0zvYn52k0bL3GFQli6C2GQwHwYDVR0j
BBgwFoAUMMEk/cjWvr4mVD94sGmriWsP9O4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NBUzh0emZaMVRCbUFxUzR1ejNQUGhRMWFOSmM0dW1yeGtaa3kxQVRn
alEvMC8zMEMxMjRGREM4RDZCRUJFMjY1NDNGNzhCMDY5QUI4OTZCMEZGNEVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwQzEyNEZEQzhENkJFQkUy
NjU0M0Y3OEIwNjlBQjg5NkIwRkY0RUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTQVM4dHpmWjFUQm1BcVM0dXozUFBoUTFhTkpjNHVtcnhrWmt5MUFUZ2pRLzAv
MzIzODMwMzQzYTM2MzYzMDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGYIMA0GCSqGSIb3DQEBCwUAA4IBAQBsp40M
c1ioOmI0FmeSUIWEYk+vfoMcVxIm0HDg0CkWikHwOrLYyqZARL9M/8znW14kxFZ+
mgHVTec8dUFbFTJVdGh7tK4I/Y3lm00WLRX6BKCDnli0gv2NqAje57AlaT2ppkRK
Nrb1AqqbdXwI8l2I10tvk49L9IWqh4rTZQfzyePN4j9uSUMdWn50echXeEPbKhIe
siDGp9nxMVtnIbFpHFH9WZPMys8EmKo75BYz8AbnssumTxQvCEn5YsA/x5FRg650
9QzTJxZHWr6wU4L+d0x+9NWCaPFUTtR8dlFlDLZJeF7gRYndvvJl9rxmksLalkP3
XW2fT0coTvqR4x4C
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:28:34 2025 by rpki-client