Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33342d3334203d3e20323637393432.roa
File:                     323830343a353539303a383030303a3a2f33342d3334203d3e20323637393432.roa (raw, json)
Hash identifier:          o0lcOgHxPb3mwYm5wdc704EYYPydsW6d6t0poN1wjfM=
Subject key identifier:   C9:49:C5:D5:FF:63:DE:8E:C1:02:6D:E9:69:34:C3:93:B4:C4:9D:45
Certificate issuer:       /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial:       771FA2FFFE2864CC662F18AFAD1DBB145B5824C9
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33342d3334203d3e20323637393432.roa
Signing time:             Wed 26 Mar 2025 16:50:16 +0000
ROA not before:           Wed 26 Mar 2025 16:45:16 +0000
ROA not after:            Wed 25 Mar 2026 16:50:16 +0000
asID:                     267942
IP address blocks:        2804:5590:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1f:a2:ff:fe:28:64:cc:66:2f:18:af:ad:1d:bb:14:5b:58:24:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Validity
            Not Before: Mar 26 16:45:16 2025 GMT
            Not After : Mar 25 16:50:16 2026 GMT
        Subject: CN=C949C5D5FF63DE8EC1026DE96934C393B4C49D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:75:27:41:48:17:87:83:54:5b:3c:37:08:
                    16:72:97:e8:c2:a2:9f:cf:5f:1c:5d:d7:c6:8f:70:
                    8c:cf:ec:99:fc:0b:40:7f:1f:12:3b:49:75:89:be:
                    86:c3:fa:c0:9d:7f:01:d1:84:71:cf:13:04:dc:50:
                    75:a0:e8:f2:92:7d:45:80:30:a8:fe:d0:7a:b8:0f:
                    81:48:14:64:f0:6e:ab:95:e9:31:c4:fc:60:f0:c3:
                    4c:d0:6e:65:44:22:48:eb:73:4b:5f:93:dd:6e:19:
                    91:1d:03:8e:dc:8b:db:f9:1d:0c:b1:9d:e0:b7:8e:
                    d3:1c:99:6d:ca:1f:11:47:0d:bf:7f:56:71:cd:9c:
                    b0:15:e1:43:36:49:68:c3:af:20:38:c3:cd:82:fe:
                    63:e0:e1:85:e6:2c:24:4d:51:58:82:f3:85:35:2b:
                    fb:b4:96:40:9f:9c:40:1e:fb:76:ba:65:4a:bd:a5:
                    bb:63:d8:f5:91:c7:0c:26:aa:e2:63:f0:81:aa:f7:
                    40:89:ad:a7:65:57:46:09:25:cf:72:18:cb:4d:0b:
                    65:36:ef:9a:02:cd:de:bf:3b:f8:88:b8:3e:b7:d1:
                    1f:d5:34:45:08:04:1d:f4:14:00:a9:3c:34:c0:51:
                    c6:19:de:56:6b:a9:44:ce:4c:7d:df:3c:99:70:d5:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:49:C5:D5:FF:63:DE:8E:C1:02:6D:E9:69:34:C3:93:B4:C4:9D:45
            X509v3 Authority Key Identifier:
                keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33342d3334203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:b8:de:be:e1:bf:22:c6:30:dc:69:32:e8:ea:61:93:4d:32:
         98:89:9c:94:c6:e3:73:56:f4:67:e8:b1:18:8f:20:88:1f:f4:
         b1:3c:bb:ce:6a:25:68:65:77:9a:54:fe:ff:0c:d2:8a:7b:b9:
         f7:8e:68:60:04:63:e3:f7:ce:15:c6:f5:bd:1a:4e:64:d0:f4:
         a7:af:48:d1:b5:c5:f7:79:65:e0:b2:7d:82:7f:f1:d3:f1:dc:
         80:df:6e:70:22:4e:28:23:7c:0b:a4:a5:54:33:e3:4f:9e:21:
         90:21:6b:f6:89:38:0c:8c:73:64:7c:81:c3:4e:92:05:21:78:
         15:f8:b3:5d:c0:c4:6a:79:0b:11:b4:08:6f:a3:f9:d9:e2:50:
         f6:f3:7d:25:8a:9a:d2:12:62:8e:34:9e:5e:25:a5:08:ad:c8:
         8c:48:9d:98:ae:7e:2b:75:d3:9d:97:43:fe:9d:4f:4b:aa:85:
         3e:28:a3:b8:7b:eb:7a:27:80:2e:dc:62:a0:6e:4a:7d:cd:57:
         82:ee:a3:2f:0f:2e:bc:40:71:20:aa:8f:68:37:fa:bb:3b:ec:
         5c:b9:57:0b:f5:e6:10:04:44:b4:38:a0:20:ae:20:e0:21:5c:
         45:14:ca:c7:05:0f:68:cf:25:53:6a:4e:aa:62:30:bb:42:41:
         ba:c8:70:bc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdx+i//4oZMxmLxivrR27FFtYJMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZENjUwMDRFN0M0MDg1RjJEMzNERjE3MzQ1MjYxRURE
OUIzQTgxMTAeFw0yNTAzMjYxNjQ1MTZaFw0yNjAzMjUxNjUwMTZaMDMxMTAvBgNV
BAMTKEM5NDlDNUQ1RkY2M0RFOEVDMTAyNkRFOTY5MzRDMzkzQjRDNDlENDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT1XUnQUgXh4NUWzw3CBZyl+jC
op/PXxxd18aPcIzP7Jn8C0B/HxI7SXWJvobD+sCdfwHRhHHPEwTcUHWg6PKSfUWA
MKj+0Hq4D4FIFGTwbquV6THE/GDww0zQbmVEIkjrc0tfk91uGZEdA47ci9v5HQyx
neC3jtMcmW3KHxFHDb9/VnHNnLAV4UM2SWjDryA4w82C/mPg4YXmLCRNUViC84U1
K/u0lkCfnEAe+3a6ZUq9pbtj2PWRxwwmquJj8IGq90CJradlV0YJJc9yGMtNC2U2
75oCzd6/O/iIuD630R/VNEUIBB30FACpPDTAUcYZ3lZrqUTOTH3fPJlw1dnTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUyUnF1f9j3o7BAm3paTTDk7TEnUUwHwYDVR0j
BBgwFoAUD9ZQBOfECF8tM98XNFJh7dmzqBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMC8wRkQ2NTAwNEU3QzQwODVGMkQzM0RGMTczNDUyNjFFREQ5QjNBODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRDY1MDA0RTdDNDA4NUYy
RDMzREYxNzM0NTI2MUVERDlCM0E4MTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzAv
MzIzODMwMzQzYTM1MzUzOTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVZCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAGuN6+4b8ixjDcaTLo6mGTTTKYiZyUxuNzVvRn6LEYjyCIH/SxPLvOaiVo
ZXeaVP7/DNKKe7n3jmhgBGPj984VxvW9Gk5k0PSnr0jRtcX3eWXgsn2Cf/HT8dyA
325wIk4oI3wLpKVUM+NPniGQIWv2iTgMjHNkfIHDTpIFIXgV+LNdwMRqeQsRtAhv
o/nZ4lD2830liprSEmKONJ5eJaUIrciMSJ2Yrn4rddOdl0P+nU9LqoU+KKO4e+t6
J4Au3GKgbkp9zVeC7qMvDy68QHEgqo9oN/q7O+xcuVcL9eYQBES0OKAgriDgIVxF
FMrHBQ9ozyVTak6qYjC7QkG6yHC8
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:17 2025 by rpki-client