Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3438203d3e20323632333137.roa
File:                     323830343a6261633a3a2f33322d3438203d3e20323632333137.roa (raw, json)
Hash identifier:          3qriczl1FmHSBuKhwyy62/M6KIBRC3lDHDncMztuWX4=
Subject key identifier:   88:A5:3D:7B:9D:6E:00:33:C4:A1:60:4C:F4:8E:F7:A3:F5:66:A6:7C
Certificate issuer:       /CN=719575E8618FCC47BDBFE563F69F5D0962836551
Certificate serial:       4F93D169A0D4C8C5BDC2BCAE8A4B4C1E5A1C8F2D
Authority key identifier: 71:95:75:E8:61:8F:CC:47:BD:BF:E5:63:F6:9F:5D:09:62:83:65:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3438203d3e20323632333137.roa
Signing time:             Mon 17 Mar 2025 19:10:35 +0000
ROA not before:           Mon 17 Mar 2025 19:05:35 +0000
ROA not after:            Mon 16 Mar 2026 19:10:35 +0000
asID:                     262317
IP address blocks:        2804:bac::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:93:d1:69:a0:d4:c8:c5:bd:c2:bc:ae:8a:4b:4c:1e:5a:1c:8f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719575E8618FCC47BDBFE563F69F5D0962836551
        Validity
            Not Before: Mar 17 19:05:35 2025 GMT
            Not After : Mar 16 19:10:35 2026 GMT
        Subject: CN=88A53D7B9D6E0033C4A1604CF48EF7A3F566A67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:54:e1:9d:0d:d2:d2:57:67:3d:b3:09:4c:
                    f6:9e:51:8a:6a:06:24:37:4f:c6:50:5c:30:02:5c:
                    71:59:ad:a8:78:4c:a3:80:6b:09:d8:5d:b2:f6:38:
                    2f:e8:9d:1a:6b:39:cb:09:a7:83:f9:99:1d:9e:dd:
                    c3:27:25:6e:3a:bc:47:63:89:2d:7e:0e:83:3e:07:
                    30:6d:23:94:b6:ff:f9:81:17:6e:1d:45:f1:10:53:
                    4b:95:15:81:da:53:34:7c:9f:16:f1:4f:80:3d:bf:
                    6c:6b:e1:bd:3e:11:fc:b2:f6:f8:e3:da:c3:cb:17:
                    9d:6b:43:0a:01:e1:7b:9e:75:c9:fb:ce:b0:a5:18:
                    27:58:b8:1c:c4:2b:6e:76:07:90:f1:b6:57:ad:86:
                    ac:33:cc:bb:f8:86:a7:14:20:dd:b1:52:9a:91:bb:
                    0f:9e:19:90:c0:3e:ec:42:e0:91:81:cf:e2:fd:e5:
                    9f:4e:dc:06:b8:46:d1:31:1a:3d:ab:0e:b4:d5:f6:
                    1c:78:55:cd:dd:9a:82:b2:61:5d:f8:02:56:53:e1:
                    4c:57:b6:a3:c4:f9:aa:ce:4a:a2:3c:9e:7a:d1:01:
                    be:6b:19:92:cf:69:66:97:6b:0b:64:33:62:4a:76:
                    7a:c0:61:b0:4e:f9:ce:1b:b2:34:13:ad:23:9d:b7:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:3D:7B:9D:6E:00:33:C4:A1:60:4C:F4:8E:F7:A3:F5:66:A6:7C
            X509v3 Authority Key Identifier:
                keyid:71:95:75:E8:61:8F:CC:47:BD:BF:E5:63:F6:9F:5D:09:62:83:65:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3438203d3e20323632333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:ad:c6:2f:02:cc:d1:57:c6:0e:d3:03:d5:1a:7f:9d:84:
         70:44:bc:0d:6d:85:8b:23:c0:bb:47:97:ec:9e:f7:5d:4f:c1:
         27:17:52:2e:e5:e7:a1:82:00:0e:f4:d2:0a:a3:7d:19:62:03:
         8f:8d:f8:88:48:6a:f4:4e:bb:bb:d1:39:cd:10:6a:bd:aa:65:
         90:1b:23:b0:bf:73:23:df:df:90:8b:7d:2c:ce:0f:47:0d:90:
         ca:9b:f3:5e:e2:93:0a:5d:7e:df:2a:f0:53:93:bf:e2:a2:ef:
         c8:2b:c6:57:a6:0b:2b:b3:bf:48:91:9c:90:3a:e0:f2:30:30:
         81:77:bb:3f:18:7e:e9:a9:9d:17:ee:d1:ca:ed:9b:01:29:47:
         de:c4:61:82:9d:d6:35:66:20:5c:41:46:ff:60:07:25:87:d1:
         1d:bd:7b:45:96:62:20:2c:9b:22:cd:25:d2:77:fd:d5:f8:f5:
         a9:3a:d1:b5:fd:97:c9:d0:f5:50:f2:2b:e5:2e:e2:ae:62:64:
         87:db:fe:2f:79:ce:ed:f9:ef:f6:1a:9c:04:82:5a:d6:41:4e:
         76:e1:69:9f:06:0a:dd:75:b5:a6:59:f5:ec:3d:60:01:38:a1:
         d6:f5:3d:44:20:9e:db:7c:e8:f0:2c:fe:03:5a:80:54:5a:f3:
         dd:50:0c:11
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUT5PRaaDUyMW9wryuiktMHlocjy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5NTc1RTg2MThGQ0M0N0JEQkZFNTYzRjY5RjVEMDk2
MjgzNjU1MTAeFw0yNTAzMTcxOTA1MzVaFw0yNjAzMTYxOTEwMzVaMDMxMTAvBgNV
BAMTKDg4QTUzRDdCOUQ2RTAwMzNDNEExNjA0Q0Y0OEVGN0EzRjU2NkE2N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EFThnQ3S0ldnPbMJTPaeUYpq
BiQ3T8ZQXDACXHFZrah4TKOAawnYXbL2OC/onRprOcsJp4P5mR2e3cMnJW46vEdj
iS1+DoM+BzBtI5S2//mBF24dRfEQU0uVFYHaUzR8nxbxT4A9v2xr4b0+Efyy9vjj
2sPLF51rQwoB4Xuedcn7zrClGCdYuBzEK252B5DxtlethqwzzLv4hqcUIN2xUpqR
uw+eGZDAPuxC4JGBz+L95Z9O3Aa4RtExGj2rDrTV9hx4Vc3dmoKyYV34AlZT4UxX
tqPE+arOSqI8nnrRAb5rGZLPaWaXawtkM2JKdnrAYbBO+c4bsjQTrSOdt0+VAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUiKU9e51uADPEoWBM9I73o/VmpnwwHwYDVR0j
BBgwFoAUcZV16GGPzEe9v+Vj9p9dCWKDZVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5zM0VYWFl6enhvZzl3Q01NcmFGc1N4MmVDZU1KcjVWTWJyR1ZuUHlM
b0IvMC83MTk1NzVFODYxOEZDQzQ3QkRCRkU1NjNGNjlGNUQwOTYyODM2NTUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxOTU3NUU4NjE4RkNDNDdC
REJGRTU2M0Y2OUY1RDA5NjI4MzY1NTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuczNFWFhZenp4b2c5d0NNTXJhRnNTeDJlQ2VNSnI1Vk1ickdWblB5TG9CLzAv
MzIzODMwMzQzYTYyNjE2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMz
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEC6wwDQYJKoZIhvcNAQELBQADggEBABKircYvAszR
V8YO0wPVGn+dhHBEvA1thYsjwLtHl+ye911PwScXUi7l56GCAA700gqjfRliA4+N
+IhIavROu7vROc0Qar2qZZAbI7C/cyPf35CLfSzOD0cNkMqb817ikwpdft8q8FOT
v+Ki78grxlemCyuzv0iRnJA64PIwMIF3uz8YfumpnRfu0crtmwEpR97EYYKd1jVm
IFxBRv9gByWH0R29e0WWYiAsmyLNJdJ3/dX49ak60bX9l8nQ9VDyK+Uu4q5iZIfb
/i95zu357/YanASCWtZBTnbhaZ8GCt11taZZ9ew9YAE4odb1PUQgntt86PAs/gNa
gFRa891QDBE=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:06 2025 by rpki-client