Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          svb1OJpVVPbLoWQTrZIJmc0DeOM5lq1jxPCK0OfEWqY=
Subject key identifier:   66:5E:E2:8B:CA:77:F0:D5:EF:40:52:E8:C6:0B:2E:6C:F2:A0:87:0F
Certificate issuer:       /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial:       4C90A98B5C10D39CED0351E57850D0304D61EB9D
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Wed 26 Mar 2025 16:49:43 +0000
ROA not before:           Wed 26 Mar 2025 16:44:43 +0000
ROA not after:            Wed 25 Mar 2026 16:49:43 +0000
asID:                     267942
IP address blocks:        2804:5590:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:90:a9:8b:5c:10:d3:9c:ed:03:51:e5:78:50:d0:30:4d:61:eb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Validity
            Not Before: Mar 26 16:44:43 2025 GMT
            Not After : Mar 25 16:49:43 2026 GMT
        Subject: CN=665EE28BCA77F0D5EF4052E8C60B2E6CF2A0870F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:60:e6:b7:21:10:e9:85:22:52:86:9c:d8:
                    ce:81:2b:14:68:f0:e6:42:33:38:a1:6a:a0:d0:d8:
                    15:fe:53:0a:59:0d:f0:98:e4:22:75:a2:f9:c0:9d:
                    5c:64:b1:27:a5:32:07:14:d8:0d:d9:93:6b:ee:48:
                    e1:d0:2b:b0:ba:fa:46:9f:1a:5d:08:aa:41:10:96:
                    ab:01:5f:af:ec:45:1f:94:44:34:3f:e4:da:01:dc:
                    81:47:35:f5:51:0c:ad:c3:c9:ff:fd:85:c7:8b:b9:
                    40:81:5d:e2:e5:4c:fb:54:c5:57:e0:ab:7c:48:2c:
                    8f:23:e5:84:e5:98:62:34:5c:19:b4:e7:ba:ce:da:
                    bc:ee:c2:07:92:ed:45:47:27:3e:6f:4e:64:82:45:
                    2c:5a:57:ae:02:d3:c8:b4:74:a4:f8:32:e4:bd:81:
                    4a:85:06:57:e9:95:11:9e:ca:86:d7:79:fb:08:67:
                    69:af:13:df:6f:58:9c:ac:b4:be:c6:e2:81:c9:8c:
                    f0:66:20:0d:af:a2:ee:68:79:cb:82:f2:9f:71:2e:
                    85:24:af:f7:ba:21:99:93:99:ab:35:d7:33:f5:e8:
                    3a:81:b9:0c:43:d5:92:30:d7:fd:3b:1e:11:a1:e8:
                    ee:41:43:85:1a:e4:bb:23:d9:3c:37:1e:36:a9:3a:
                    2a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5E:E2:8B:CA:77:F0:D5:EF:40:52:E8:C6:0B:2E:6C:F2:A0:87:0F
            X509v3 Authority Key Identifier:
                keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:78:3e:b5:02:9b:68:e8:0d:ee:d2:f0:dd:1f:4c:15:c3:58:
         19:cb:f1:8c:fd:85:8f:9a:fe:0f:45:92:89:f0:d3:b9:9e:45:
         00:a7:80:e2:79:e6:2b:d9:d9:1b:13:a7:a4:f5:57:22:fd:3a:
         b3:fc:0b:bd:a0:40:8f:88:d8:43:fc:97:57:4e:6e:ce:02:0b:
         c8:bb:5d:32:54:8c:f8:70:59:bb:43:cc:f8:dc:0b:14:bd:b7:
         c8:58:f3:fd:b8:62:63:cc:d5:2c:e6:67:34:2c:f2:19:6f:b2:
         87:5a:12:21:4e:bd:0a:4b:56:9c:9d:89:b5:01:32:f6:c4:f4:
         c2:41:bb:ee:68:71:fa:c6:0c:69:52:2b:26:b6:02:05:dd:75:
         e0:65:e9:64:be:82:9a:d7:a6:cf:8d:5b:a4:9f:71:04:6f:1d:
         4f:8b:43:80:3f:f5:f9:ed:8b:ad:89:64:64:89:f8:1e:1e:fa:
         b7:29:50:47:21:75:54:93:02:7f:f0:b2:b1:74:1e:2b:9e:9a:
         a2:6f:5c:59:32:6b:e6:4e:f0:8f:93:65:aa:0d:dc:a7:af:e1:
         9f:58:af:6f:fb:98:48:d3:ad:03:5d:22:ea:d2:55:f4:3c:9a:
         6b:28:5a:a7:7f:45:60:7c:19:21:a4:94:5a:f9:09:b9:b2:4d:
         d1:b9:3e:cd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTJCpi1wQ05ztA1HleFDQME1h650wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZENjUwMDRFN0M0MDg1RjJEMzNERjE3MzQ1MjYxRURE
OUIzQTgxMTAeFw0yNTAzMjYxNjQ0NDNaFw0yNjAzMjUxNjQ5NDNaMDMxMTAvBgNV
BAMTKDY2NUVFMjhCQ0E3N0YwRDVFRjQwNTJFOEM2MEIyRTZDRjJBMDg3MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmHmDmtyEQ6YUiUoac2M6BKxRo
8OZCMzihaqDQ2BX+UwpZDfCY5CJ1ovnAnVxksSelMgcU2A3Zk2vuSOHQK7C6+kaf
Gl0IqkEQlqsBX6/sRR+URDQ/5NoB3IFHNfVRDK3Dyf/9hceLuUCBXeLlTPtUxVfg
q3xILI8j5YTlmGI0XBm057rO2rzuwgeS7UVHJz5vTmSCRSxaV64C08i0dKT4MuS9
gUqFBlfplRGeyobXefsIZ2mvE99vWJystL7G4oHJjPBmIA2vou5oecuC8p9xLoUk
r/e6IZmTmas11zP16DqBuQxD1ZIw1/07HhGh6O5BQ4Ua5Lsj2Tw3HjapOipbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZl7ii8p38NXvQFLoxgsubPKghw8wHwYDVR0j
BBgwFoAUD9ZQBOfECF8tM98XNFJh7dmzqBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMC8wRkQ2NTAwNEU3QzQwODVGMkQzM0RGMTczNDUyNjFFREQ5QjNBODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRDY1MDA0RTdDNDA4NUYy
RDMzREYxNzM0NTI2MUVERDlCM0E4MTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzAv
MzIzODMwMzQzYTM1MzUzOTMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVZAQMA0GCSqGSIb3DQEBCwUA
A4IBAQAkeD61Apto6A3u0vDdH0wVw1gZy/GM/YWPmv4PRZKJ8NO5nkUAp4DieeYr
2dkbE6ek9Vci/Tqz/Au9oECPiNhD/JdXTm7OAgvIu10yVIz4cFm7Q8z43AsUvbfI
WPP9uGJjzNUs5mc0LPIZb7KHWhIhTr0KS1acnYm1ATL2xPTCQbvuaHH6xgxpUism
tgIF3XXgZelkvoKa16bPjVukn3EEbx1Pi0OAP/X57YutiWRkifgeHvq3KVBHIXVU
kwJ/8LKxdB4rnpqib1xZMmvmTvCPk2WqDdynr+GfWK9v+5hI060DXSLq0lX0PJpr
KFqnf0VgfBkhpJRa+Qm5sk3RuT7N
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:16 2025 by rpki-client