Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/323830343a343632383a3a2f33322d313238203d3e20323636393732.roa
File:                     323830343a343632383a3a2f33322d313238203d3e20323636393732.roa (raw, json)
Hash identifier:          8H9fA69ADY0ArED8dDiVnerJAQSQiMoS6P47DwS8X3I=
Subject key identifier:   25:BE:32:B6:FA:7C:B4:8A:77:FB:EB:6D:BF:EF:E1:BA:B2:95:91:01
Certificate issuer:       /CN=636E414FA84D71600AE3616725B19B3EA6BCD75B
Certificate serial:       5E85C9DA333B93B83D8A2979AA5EFA083F4A5B8D
Authority key identifier: 63:6E:41:4F:A8:4D:71:60:0A:E3:61:67:25:B1:9B:3E:A6:BC:D7:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636E414FA84D71600AE3616725B19B3EA6BCD75B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/323830343a343632383a3a2f33322d313238203d3e20323636393732.roa
Signing time:             Tue 04 Mar 2025 17:43:32 +0000
ROA not before:           Tue 04 Mar 2025 17:38:32 +0000
ROA not after:            Tue 03 Mar 2026 17:43:32 +0000
asID:                     266972
IP address blocks:        2804:4628::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:85:c9:da:33:3b:93:b8:3d:8a:29:79:aa:5e:fa:08:3f:4a:5b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636E414FA84D71600AE3616725B19B3EA6BCD75B
        Validity
            Not Before: Mar  4 17:38:32 2025 GMT
            Not After : Mar  3 17:43:32 2026 GMT
        Subject: CN=25BE32B6FA7CB48A77FBEB6DBFEFE1BAB2959101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:41:54:c8:95:25:d0:f7:0d:ee:2f:be:35:34:
                    7f:a9:a4:fe:d3:62:a6:12:52:84:e3:4e:04:c0:e7:
                    2e:a7:c6:47:39:cb:e5:42:93:10:92:10:ed:d9:1c:
                    7e:5f:4e:f4:70:57:c0:9e:fc:41:43:1a:d4:c7:bb:
                    fb:90:ac:c2:1b:80:40:73:21:65:2d:26:02:61:1c:
                    57:d8:24:cd:50:63:30:8b:73:4d:43:bd:3b:aa:4e:
                    6f:47:84:1a:35:3e:ff:96:7f:27:34:bb:2c:11:3d:
                    54:f8:b2:2c:00:cf:3e:64:80:a0:90:f8:a3:52:ff:
                    43:5f:a2:0c:a3:6a:1c:35:cb:1e:27:ce:92:05:a3:
                    e4:f2:1f:20:cb:0c:f1:5e:69:f4:8f:0b:57:a8:01:
                    e0:23:58:b3:bf:8d:7d:3a:ff:33:71:a4:d9:28:bb:
                    ca:b5:89:e8:b6:84:a3:d4:15:c1:25:a3:d2:3f:6c:
                    ad:b3:a5:23:7c:7d:fa:6f:e6:4d:f9:ba:7e:0c:bf:
                    1d:79:49:03:82:9e:65:94:0e:5f:f2:a8:91:8e:0b:
                    cc:9b:40:60:a7:03:6d:8d:36:96:74:e2:be:37:20:
                    ab:ff:27:18:85:00:aa:1a:f1:89:36:42:ae:04:11:
                    2e:d1:a1:a9:be:74:37:39:ee:4b:17:83:9c:77:ac:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BE:32:B6:FA:7C:B4:8A:77:FB:EB:6D:BF:EF:E1:BA:B2:95:91:01
            X509v3 Authority Key Identifier:
                keyid:63:6E:41:4F:A8:4D:71:60:0A:E3:61:67:25:B1:9B:3E:A6:BC:D7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/636E414FA84D71600AE3616725B19B3EA6BCD75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636E414FA84D71600AE3616725B19B3EA6BCD75B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/323830343a343632383a3a2f33322d313238203d3e20323636393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4628::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:f9:4a:04:ef:a1:51:4d:54:25:03:f0:27:d4:0d:ac:c1:
         23:07:f1:8a:c5:51:7e:08:74:a8:0b:6e:87:db:27:7f:d7:b3:
         8a:0e:4d:3e:c2:0f:94:4e:12:d1:13:37:ee:99:ed:88:50:ed:
         07:d6:56:8b:0d:24:8c:bf:ea:74:7a:ea:aa:4c:a1:5b:dd:95:
         e5:04:4c:4d:85:48:78:a4:fd:f4:33:c1:49:5b:d0:3d:33:1b:
         b7:c8:d7:d6:b8:a3:28:3d:3a:53:d6:dc:0d:25:99:e2:db:fc:
         bb:51:6c:14:47:fb:f6:d2:e7:51:72:b9:64:2e:5b:55:9b:09:
         e2:aa:06:6d:7f:0b:e2:5e:ae:0b:5e:5b:c6:3d:d6:bd:35:e9:
         be:a2:ea:61:6a:66:ca:77:0d:89:d9:41:ac:2e:dd:e1:46:e6:
         f5:a3:09:a8:f9:39:ce:cb:b1:63:79:35:68:a4:cb:04:06:54:
         fd:b3:9a:60:db:85:17:92:88:9b:12:09:b1:76:03:70:0d:52:
         14:05:37:16:5e:2e:9c:72:c4:c5:0d:32:57:af:e0:c5:5f:d7:
         01:0e:0b:37:58:7f:d2:0d:c9:75:8e:b7:23:4c:80:29:2e:8b:
         bc:63:9b:fd:10:b9:c0:9c:38:0f:9d:6c:d7:06:39:ff:58:35:
         20:10:d1:56
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUXoXJ2jM7k7g9iil5ql76CD9KW40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM2RTQxNEZBODRENzE2MDBBRTM2MTY3MjVCMTlCM0VB
NkJDRDc1QjAeFw0yNTAzMDQxNzM4MzJaFw0yNjAzMDMxNzQzMzJaMDMxMTAvBgNV
BAMTKDI1QkUzMkI2RkE3Q0I0OEE3N0ZCRUI2REJGRUZFMUJBQjI5NTkxMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuQVTIlSXQ9w3uL741NH+ppP7T
YqYSUoTjTgTA5y6nxkc5y+VCkxCSEO3ZHH5fTvRwV8Ce/EFDGtTHu/uQrMIbgEBz
IWUtJgJhHFfYJM1QYzCLc01DvTuqTm9HhBo1Pv+Wfyc0uywRPVT4siwAzz5kgKCQ
+KNS/0Nfogyjahw1yx4nzpIFo+TyHyDLDPFeafSPC1eoAeAjWLO/jX06/zNxpNko
u8q1iei2hKPUFcElo9I/bK2zpSN8ffpv5k35un4Mvx15SQOCnmWUDl/yqJGOC8yb
QGCnA22NNpZ04r43IKv/JxiFAKoa8Yk2Qq4EES7Roam+dDc57ksXg5x3rJLzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUJb4ytvp8tIp3++ttv+/hurKVkQEwHwYDVR0j
BBgwFoAUY25BT6hNcWAK42FnJbGbPqa811swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENSWTk0N25RaUNYVkJUUTJ3RXF6b3dXeXhtUGp1TW50cEZlSFZYYUdK
VXgvMC82MzZFNDE0RkE4NEQ3MTYwMEFFMzYxNjcyNUIxOUIzRUE2QkNENzVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzNkU0MTRGQTg0RDcxNjAw
QUUzNjE2NzI1QjE5QjNFQTZCQ0Q3NUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDUlk5NDduUWlDWFZCVFEyd0Vxem93V3l4bVBqdU1udHBGZUhWWGFHSlV4LzAv
MzIzODMwMzQzYTM0MzYzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEYoMA0GCSqGSIb3DQEBCwUAA4IBAQBRpPlK
BO+hUU1UJQPwJ9QNrMEjB/GKxVF+CHSoC26H2yd/17OKDk0+wg+UThLREzfume2I
UO0H1laLDSSMv+p0euqqTKFb3ZXlBExNhUh4pP30M8FJW9A9Mxu3yNfWuKMoPTpT
1twNJZni2/y7UWwUR/v20udRcrlkLltVmwniqgZtfwviXq4LXlvGPda9Nem+ouph
ambKdw2J2UGsLt3hRub1owmo+TnOy7FjeTVopMsEBlT9s5pg24UXkoibEgmxdgNw
DVIUBTcWXi6ccsTFDTJXr+DFX9cBDgs3WH/SDcl1jrcjTIApLou8Y5v9ELnAnDgP
nWzXBjn/WDUgENFW
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:50:13 2025 by rpki-client