Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa
File:                     323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa (raw, json)
Hash identifier:          966aRkvG7KU/aiZL7biffa/Lyd24KTNqlC2bZ3FhMas=
Subject key identifier:   F9:FF:B5:D1:9A:10:F0:01:46:50:65:CF:F4:17:DB:85:0D:DE:6D:26
Certificate issuer:       /CN=A24962CC4C921C7064CF78BB8DF4A9C8638402C7
Certificate serial:       3AF0A00131EFD35E09CC7343E622BAD0BB2FB1D9
Authority key identifier: A2:49:62:CC:4C:92:1C:70:64:CF:78:BB:8D:F4:A9:C8:63:84:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa
Signing time:             Thu 20 Mar 2025 12:32:26 +0000
ROA not before:           Thu 20 Mar 2025 12:27:26 +0000
ROA not after:            Thu 19 Mar 2026 12:32:26 +0000
asID:                     272252
IP address blocks:        2804:844c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f0:a0:01:31:ef:d3:5e:09:cc:73:43:e6:22:ba:d0:bb:2f:b1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A24962CC4C921C7064CF78BB8DF4A9C8638402C7
        Validity
            Not Before: Mar 20 12:27:26 2025 GMT
            Not After : Mar 19 12:32:26 2026 GMT
        Subject: CN=F9FFB5D19A10F001465065CFF417DB850DDE6D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:8f:f2:f1:32:d5:a9:4e:ec:b7:5c:dd:5b:
                    3a:a6:56:88:21:df:d9:b9:82:b8:fd:61:60:cc:44:
                    73:35:53:70:7d:b3:5f:fc:8c:24:31:e6:f8:0e:ca:
                    8b:7a:cb:bb:7d:98:d2:64:e3:93:b3:a3:83:31:a4:
                    59:60:00:65:60:53:57:e2:58:f1:fb:5e:5c:2b:4a:
                    e6:75:ef:96:ac:2c:11:0b:bb:ea:5f:a6:92:28:86:
                    4f:8c:15:32:24:80:c2:39:b4:f3:e7:aa:61:6d:b0:
                    3f:be:11:86:58:9a:87:dc:a3:f0:fb:a5:0b:03:12:
                    12:30:0f:bb:d3:a5:7e:57:81:71:93:f0:0d:7c:2b:
                    ff:28:c0:02:e4:4b:c9:0b:3f:b0:69:15:db:9c:0b:
                    f8:9e:43:e5:89:24:0a:bc:2b:8c:7d:ef:0b:9f:52:
                    a3:8a:f8:d1:e9:3e:da:a5:e4:9a:94:5e:b0:10:73:
                    6d:92:5e:c8:48:f8:d6:46:ee:b7:d5:c4:18:4d:e7:
                    35:9a:a6:3c:7d:a2:41:70:1f:ae:0f:05:b6:b2:f5:
                    d5:89:8a:ab:04:35:0f:e3:d5:21:ae:ec:ce:49:79:
                    ea:f0:77:06:5f:3b:e4:72:03:46:11:a5:02:cd:f5:
                    32:66:23:83:e6:9e:4f:7f:03:5f:3a:4d:6e:72:06:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:B5:D1:9A:10:F0:01:46:50:65:CF:F4:17:DB:85:0D:DE:6D:26
            X509v3 Authority Key Identifier:
                keyid:A2:49:62:CC:4C:92:1C:70:64:CF:78:BB:8D:F4:A9:C8:63:84:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:59:d6:e5:be:f5:ec:ee:db:4d:27:84:11:7f:47:2e:e4:9f:
         e7:c9:3f:b5:c0:d3:3f:5e:02:f4:ec:e6:ae:8a:f7:65:dc:ad:
         ec:aa:29:a9:ab:76:7a:90:30:50:4e:a9:18:61:e6:78:a9:43:
         07:25:2e:b2:32:1d:82:82:fe:12:38:5d:c5:35:47:3d:79:c2:
         8d:7d:0b:d1:37:cf:d6:d2:54:5c:3b:3c:9d:ee:d5:f4:f1:63:
         3b:9c:93:7d:32:61:c6:95:ca:46:72:17:44:dd:dc:68:de:00:
         47:bd:84:3b:5c:77:5d:5b:c8:11:22:27:72:02:6d:0d:dd:70:
         8f:6f:23:2b:e1:f6:4b:8d:04:eb:5b:d6:c8:68:e1:c3:10:b0:
         7a:2f:84:8b:72:37:6e:ed:f6:9e:f0:d1:28:83:0b:0e:69:32:
         38:eb:8b:84:22:af:76:b8:01:9c:4c:12:35:f8:7d:1d:9c:3a:
         ab:44:f4:4f:aa:0a:5f:08:87:49:c0:da:88:c1:63:59:94:5b:
         38:e1:48:ad:a8:6f:1e:f7:f1:8d:b0:e6:83:ad:93:14:2e:40:
         da:ed:aa:b7:53:db:f9:f3:e6:bc:e8:c5:ee:b8:b5:94:7f:8e:
         12:0c:60:e2:18:3e:e9:05:fb:e6:4c:7f:3d:ad:67:8d:56:94:
         ec:61:2b:cf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOvCgATHv014JzHND5iK60LsvsdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI0OTYyQ0M0QzkyMUM3MDY0Q0Y3OEJCOERGNEE5Qzg2
Mzg0MDJDNzAeFw0yNTAzMjAxMjI3MjZaFw0yNjAzMTkxMjMyMjZaMDMxMTAvBgNV
BAMTKEY5RkZCNUQxOUExMEYwMDE0NjUwNjVDRkY0MTdEQjg1MERERTZEMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJN4/y8TLVqU7st1zdWzqmVogh
39m5grj9YWDMRHM1U3B9s1/8jCQx5vgOyot6y7t9mNJk45Ozo4MxpFlgAGVgU1fi
WPH7XlwrSuZ175asLBELu+pfppIohk+MFTIkgMI5tPPnqmFtsD++EYZYmofco/D7
pQsDEhIwD7vTpX5XgXGT8A18K/8owALkS8kLP7BpFducC/ieQ+WJJAq8K4x97wuf
UqOK+NHpPtql5JqUXrAQc22SXshI+NZG7rfVxBhN5zWapjx9okFwH64PBbay9dWJ
iqsENQ/j1SGu7M5JeerwdwZfO+RyA0YRpQLN9TJmI4Pmnk9/A186TW5yBlLPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+f+10ZoQ8AFGUGXP9BfbhQ3ebSYwHwYDVR0j
BBgwFoAUoklizEySHHBkz3i7jfSpyGOEAscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFNWkZKTXM3U3Q4Q1pqM2JKa1c2NmdZcWZ0eFJKM1ZrRkdzMWM3ZVM3
NkMvMC9BMjQ5NjJDQzRDOTIxQzcwNjRDRjc4QkI4REY0QTlDODYzODQwMkM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyNDk2MkNDNEM5MjFDNzA2
NENGNzhCQjhERjRBOUM4NjM4NDAyQzcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxTVpGSk1zN1N0OENaajNiSmtXNjZnWXFmdHhSSjNWa0ZHczFjN2VTNzZDLzAv
MzIzODMwMzQzYTM4MzQzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMyMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhEyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBCWdblvvXs7ttNJ4QRf0cu5J/nyT+1wNM/XgL07Oauivdl3K3sqimpq3Z6
kDBQTqkYYeZ4qUMHJS6yMh2Cgv4SOF3FNUc9ecKNfQvRN8/W0lRcOzyd7tX08WM7
nJN9MmHGlcpGchdE3dxo3gBHvYQ7XHddW8gRIidyAm0N3XCPbyMr4fZLjQTrW9bI
aOHDELB6L4SLcjdu7fae8NEogwsOaTI464uEIq92uAGcTBI1+H0dnDqrRPRPqgpf
CIdJwNqIwWNZlFs44UitqG8e9/GNsOaDrZMULkDa7aq3U9v58+a86MXuuLWUf44S
DGDiGD7pBfvmTH89rWeNVpTsYSvP
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:28 2025 by rpki-client