Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/323830343a373432383a3a2f33322d313238203d3e20323730393632.roa
File:                     323830343a373432383a3a2f33322d313238203d3e20323730393632.roa (raw, json)
Hash identifier:          H24AFhfIBgVmEPJgYHtztuLgYOYcqzajc3PJcLD2ck8=
Subject key identifier:   1C:CF:05:8F:13:CD:5C:FE:5C:C2:9F:6F:79:12:59:27:A1:53:B2:5E
Certificate issuer:       /CN=18F5B289B6D58680303617EDD2B4A305F800BC37
Certificate serial:       2E994A338CE21A8F981B83D4E7160854888012C3
Authority key identifier: 18:F5:B2:89:B6:D5:86:80:30:36:17:ED:D2:B4:A3:05:F8:00:BC:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18F5B289B6D58680303617EDD2B4A305F800BC37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/323830343a373432383a3a2f33322d313238203d3e20323730393632.roa
Signing time:             Fri 07 Feb 2025 16:22:17 +0000
ROA not before:           Fri 07 Feb 2025 16:17:17 +0000
ROA not after:            Fri 06 Feb 2026 16:22:17 +0000
asID:                     270962
IP address blocks:        2804:7428::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:99:4a:33:8c:e2:1a:8f:98:1b:83:d4:e7:16:08:54:88:80:12:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F5B289B6D58680303617EDD2B4A305F800BC37
        Validity
            Not Before: Feb  7 16:17:17 2025 GMT
            Not After : Feb  6 16:22:17 2026 GMT
        Subject: CN=1CCF058F13CD5CFE5CC29F6F79125927A153B25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:03:ec:fe:3c:ce:22:08:66:de:62:5d:00:
                    25:10:91:f1:21:66:cc:9c:83:b7:2d:44:4d:69:1a:
                    2d:2b:7d:38:5a:80:6e:fe:99:f5:fa:83:84:82:8e:
                    ce:bc:8a:8e:98:f1:3c:7a:45:22:1f:c0:1f:5d:56:
                    f1:c4:c7:99:40:66:86:b0:7b:74:bd:be:b6:20:e3:
                    1f:0d:6f:9a:b0:70:ee:ba:5e:48:7f:ff:a5:37:3b:
                    fb:01:d6:48:8b:41:c4:a6:b0:63:4e:d1:43:23:40:
                    a0:29:99:d6:d2:0a:7a:7a:00:e1:3e:b4:57:28:4a:
                    75:66:0b:11:88:65:08:05:85:95:6e:03:82:de:f1:
                    e3:90:b1:10:36:ca:be:a3:ab:a6:d3:fe:2e:59:db:
                    c4:ce:93:f8:df:e3:a0:39:34:ae:2b:d5:f2:78:67:
                    e7:75:b5:42:c2:d4:b0:e7:fc:a1:40:bd:3e:0a:77:
                    34:22:04:ea:a3:7e:64:fb:38:4c:00:c2:41:6a:f0:
                    81:0c:aa:c6:fd:9b:c8:6b:44:0d:47:7a:5a:31:74:
                    5b:83:80:24:23:fa:4c:0f:76:55:e2:f5:83:e0:2e:
                    9b:87:dc:d4:ba:fa:6e:cf:30:48:e1:fe:87:02:79:
                    bd:cf:31:30:9d:66:ec:35:14:06:8f:ee:ef:e8:cc:
                    c1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:05:8F:13:CD:5C:FE:5C:C2:9F:6F:79:12:59:27:A1:53:B2:5E
            X509v3 Authority Key Identifier:
                keyid:18:F5:B2:89:B6:D5:86:80:30:36:17:ED:D2:B4:A3:05:F8:00:BC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/18F5B289B6D58680303617EDD2B4A305F800BC37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18F5B289B6D58680303617EDD2B4A305F800BC37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/323830343a373432383a3a2f33322d313238203d3e20323730393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7428::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:e8:27:26:e6:d1:c5:16:36:91:40:35:d8:f0:59:0f:d2:
         e2:89:a1:bf:f3:52:db:10:6b:a6:a4:f5:eb:40:26:8e:3e:08:
         23:d8:d3:17:8d:0e:f1:74:d7:24:3d:c1:ba:df:e6:4b:8d:90:
         83:a6:08:04:a2:71:43:d7:83:35:33:eb:a3:46:29:53:bc:e7:
         af:1b:ae:ee:70:a3:89:92:5c:83:42:e8:23:37:a9:77:5a:ca:
         2e:bd:ec:d4:34:75:33:46:d0:bd:d1:fd:d9:fd:1f:f7:77:c3:
         a1:41:f7:76:c2:dc:95:4f:ed:b5:69:60:50:c4:f0:5b:5d:d8:
         33:d4:87:b7:6e:3c:4d:34:0c:12:45:1d:67:97:d9:17:be:78:
         83:90:5a:09:6d:da:42:11:3d:fc:0e:04:4b:78:c2:c5:5a:e3:
         80:8f:6b:8a:7b:1d:58:8c:21:ad:c0:ce:77:4d:79:2e:19:53:
         8c:e6:62:bf:c1:94:d1:6a:5c:dc:ea:00:4d:f6:3c:08:2f:8a:
         4f:e5:2a:e9:b1:c2:d3:a5:64:23:a3:0c:6a:96:fe:3d:66:6d:
         d0:94:d1:51:5c:df:6d:a7:ae:20:0a:da:d7:fe:6e:b8:5c:73:
         d2:33:5e:fc:aa:ce:ad:2b:9a:ba:39:a2:fc:4e:18:b6:a2:99:
         a5:4f:4c:71
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULplKM4ziGo+YG4PU5xYIVIiAEsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThGNUIyODlCNkQ1ODY4MDMwMzYxN0VERDJCNEEzMDVG
ODAwQkMzNzAeFw0yNTAyMDcxNjE3MTdaFw0yNjAyMDYxNjIyMTdaMDMxMTAvBgNV
BAMTKDFDQ0YwNThGMTNDRDVDRkU1Q0MyOUY2Rjc5MTI1OTI3QTE1M0IyNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZgPs/jzOIghm3mJdACUQkfEh
Zsycg7ctRE1pGi0rfThagG7+mfX6g4SCjs68io6Y8Tx6RSIfwB9dVvHEx5lAZoaw
e3S9vrYg4x8Nb5qwcO66Xkh//6U3O/sB1kiLQcSmsGNO0UMjQKApmdbSCnp6AOE+
tFcoSnVmCxGIZQgFhZVuA4Le8eOQsRA2yr6jq6bT/i5Z28TOk/jf46A5NK4r1fJ4
Z+d1tULC1LDn/KFAvT4KdzQiBOqjfmT7OEwAwkFq8IEMqsb9m8hrRA1HeloxdFuD
gCQj+kwPdlXi9YPgLpuH3NS6+m7PMEjh/ocCeb3PMTCdZuw1FAaP7u/ozMGnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUHM8FjxPNXP5cwp9veRJZJ6FTsl4wHwYDVR0j
BBgwFoAUGPWyibbVhoAwNhft0rSjBfgAvDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW5pdDNORFBLSGpINzFxTnlhZ1RWN3htR2M3ZUpXZEZFQ0Q3WTdXTHk3
MTUvMC8xOEY1QjI4OUI2RDU4NjgwMzAzNjE3RUREMkI0QTMwNUY4MDBCQzM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4RjVCMjg5QjZENTg2ODAz
MDM2MTdFREQyQjRBMzA1RjgwMEJDMzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVuaXQzTkRQS0hqSDcxcU55YWdUVjd4bUdjN2VKV2RGRUNEN1k3V0x5NzE1LzAv
MzIzODMwMzQzYTM3MzQzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzOTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHQoMA0GCSqGSIb3DQEBCwUAA4IBAQBILOgn
JubRxRY2kUA12PBZD9LiiaG/81LbEGumpPXrQCaOPggj2NMXjQ7xdNckPcG63+ZL
jZCDpggEonFD14M1M+ujRilTvOevG67ucKOJklyDQugjN6l3WsouvezUNHUzRtC9
0f3Z/R/3d8OhQfd2wtyVT+21aWBQxPBbXdgz1Ie3bjxNNAwSRR1nl9kXvniDkFoJ
bdpCET38DgRLeMLFWuOAj2uKex1YjCGtwM53TXkuGVOM5mK/wZTRalzc6gBN9jwI
L4pP5SrpscLTpWQjowxqlv49Zm3QlNFRXN9tp64gCtrX/m64XHPSM178qs6tK5q6
OaL8Thi2opmlT0xx
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:29 2025 by rpki-client