Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a383030303a3a2f33342d3334203d3e20323632383033.roa
File:                     323830343a3235303a383030303a3a2f33342d3334203d3e20323632383033.roa (raw, json)
Hash identifier:          1iUkvK//1x/l7nbdZ5mM7iqnUW/9DLcwkAsE93a4kHY=
Subject key identifier:   B4:25:B3:BA:EC:87:8F:EC:F8:1A:8B:62:33:14:B6:E4:70:AA:D2:A4
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       20635C0FB2C68AE0209B22473EE65B0EF758318A
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a383030303a3a2f33342d3334203d3e20323632383033.roa
Signing time:             Wed 17 Jul 2024 13:27:58 +0000
ROA not before:           Wed 17 Jul 2024 13:22:58 +0000
ROA not after:            Wed 16 Jul 2025 13:27:58 +0000
asID:                     262803
IP address blocks:        2804:250:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:63:5c:0f:b2:c6:8a:e0:20:9b:22:47:3e:e6:5b:0e:f7:58:31:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Jul 17 13:22:58 2024 GMT
            Not After : Jul 16 13:27:58 2025 GMT
        Subject: CN=B425B3BAEC878FECF81A8B623314B6E470AAD2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:ee:f8:73:1d:75:12:90:ee:34:4e:68:7a:
                    80:52:7f:af:46:55:1f:d8:98:8f:15:17:48:51:64:
                    dc:8b:59:9a:70:61:5c:28:a3:af:9e:4f:9d:74:76:
                    9d:25:21:b5:51:a0:6b:6e:b9:44:93:44:d3:24:0a:
                    0d:1c:52:fd:8e:79:4f:be:a1:41:2b:e0:f6:be:23:
                    6a:a1:d2:c8:2b:cf:88:b7:35:c8:41:9e:09:8d:2f:
                    63:b0:6a:75:dc:fb:a2:3f:01:12:ed:65:40:af:9c:
                    44:1b:95:23:4a:39:92:bf:fc:ad:f8:94:0c:78:41:
                    5d:1c:c5:4d:ae:94:11:30:02:80:60:8a:75:45:92:
                    a4:90:0c:04:fc:4d:cf:ad:75:12:93:4b:01:f9:9a:
                    ca:ae:d3:af:60:de:74:7a:c9:d3:e8:11:be:13:d4:
                    4b:c6:03:db:f6:c4:52:91:2e:3a:fd:19:d7:72:41:
                    fb:03:97:00:a2:2f:c7:38:8e:57:ba:2f:e8:30:79:
                    08:33:35:16:9d:ed:af:7c:9d:35:5c:07:be:c6:0b:
                    f0:c3:a4:4d:42:10:01:ac:3f:36:46:be:67:fe:2e:
                    3c:67:55:57:ef:69:96:05:f2:32:4f:a6:54:d2:78:
                    a9:47:9f:a9:0d:28:5f:bd:10:19:b9:00:81:e9:9a:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:B3:BA:EC:87:8F:EC:F8:1A:8B:62:33:14:B6:E4:70:AA:D2:A4
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a383030303a3a2f33342d3334203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:b6:65:a2:4f:17:f8:79:25:f9:86:7f:81:ed:5e:89:27:02:
         a3:dc:13:da:8e:30:74:f4:a8:4a:3a:5f:63:9b:77:49:d1:3f:
         2f:e2:f5:e4:37:62:16:b8:eb:96:31:6c:9d:6f:74:fc:40:45:
         50:cb:36:fb:2f:7d:73:cc:47:3d:01:c9:60:99:46:9b:64:af:
         59:59:bd:70:9c:4a:22:4e:c6:48:c2:ac:a3:61:72:59:f5:69:
         98:1c:d8:84:80:25:3e:03:c9:b6:0c:de:d1:29:48:8c:63:cd:
         0e:be:68:62:ef:e0:f7:c6:ce:5a:49:4a:4f:1d:f8:2b:58:b7:
         9f:95:24:81:22:00:41:13:3d:83:30:9c:0c:dc:2c:5e:d8:37:
         28:d7:b2:ed:cc:b6:c8:f6:cf:e9:7e:2c:25:36:2f:30:a0:3f:
         c0:79:20:4f:23:64:76:3b:6d:50:4c:67:55:53:16:41:73:61:
         b8:f7:56:11:e7:04:01:10:41:dc:d3:3a:a6:08:2b:09:9c:0e:
         6e:35:e3:73:99:e9:49:de:7b:e4:1e:31:95:61:a9:fa:aa:74:
         0f:b1:64:d5:4c:bb:b7:92:f8:8b:cd:4c:ee:b5:99:c9:2e:77:
         a3:8d:c9:a7:57:a6:2f:51:1d:90:b1:4f:f0:d5:e6:f5:90:48:
         5a:e9:f4:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIGNcD7LGiuAgmyJHPuZbDvdYMYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0OEYwNDdFNjEyQkRDOTQ3Qzk3NDdGQzlCNjJEMjgx
RjA3OTZBNDAeFw0yNDA3MTcxMzIyNThaFw0yNTA3MTYxMzI3NThaMDMxMTAvBgNV
BAMTKEI0MjVCM0JBRUM4NzhGRUNGODFBOEI2MjMzMTRCNkU0NzBBQUQyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnu74cx11EpDuNE5oeoBSf69G
VR/YmI8VF0hRZNyLWZpwYVwoo6+eT510dp0lIbVRoGtuuUSTRNMkCg0cUv2OeU++
oUEr4Pa+I2qh0sgrz4i3NchBngmNL2OwanXc+6I/ARLtZUCvnEQblSNKOZK//K34
lAx4QV0cxU2ulBEwAoBginVFkqSQDAT8Tc+tdRKTSwH5msqu069g3nR6ydPoEb4T
1EvGA9v2xFKRLjr9GddyQfsDlwCiL8c4jle6L+gweQgzNRad7a98nTVcB77GC/DD
pE1CEAGsPzZGvmf+LjxnVVfvaZYF8jJPplTSeKlHn6kNKF+9EBm5AIHpmvRLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtCWzuuyHj+z4GotiMxS25HCq0qQwHwYDVR0j
BBgwFoAUbUjwR+YSvclHyXR/ybYtKB8HlqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1U24xZE5zR1Bq
UEovMC82RDQ4RjA0N0U2MTJCREM5NDdDOTc0N0ZDOUI2MkQyODFGMDc5NkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZENDhGMDQ3RTYxMkJEQzk0
N0M5NzQ3RkM5QjYyRDI4MUYwNzk2QTQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhZGFrZ1BkZ21FN044TFp0RWpCTnBoZm1zcWlwamdldVNuMWROc0dQalBKLzAv
MzIzODMwMzQzYTMyMzUzMDNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzIzODMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBAJQgDANBgkqhkiG9w0BAQsFAAOC
AQEAIrZlok8X+Hkl+YZ/ge1eiScCo9wT2o4wdPSoSjpfY5t3SdE/L+L15DdiFrjr
ljFsnW90/EBFUMs2+y99c8xHPQHJYJlGm2SvWVm9cJxKIk7GSMKso2FyWfVpmBzY
hIAlPgPJtgze0SlIjGPNDr5oYu/g98bOWklKTx34K1i3n5UkgSIAQRM9gzCcDNws
Xtg3KNey7cy2yPbP6X4sJTYvMKA/wHkgTyNkdjttUExnVVMWQXNhuPdWEecEARBB
3NM6pggrCZwObjXjc5npSd575B4xlWGp+qp0D7Fk1Uy7t5L4i81M7rWZyS53o43J
p1emL1EdkLFP8NXm9ZBIWun0XA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:49 2025 by rpki-client