Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a3a2f33322d3335203d3e20323636393638.roa
File:                     323830343a343631383a3a2f33322d3335203d3e20323636393638.roa (raw, json)
Hash identifier:          cMcCcNv//lvjX94wmJ9+A7npbYAsJeqUG1XkqYaUEtw=
Subject key identifier:   30:81:3F:61:98:61:17:FE:A1:B0:52:8D:90:1F:48:A8:54:A8:75:51
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       3988EF31AAF1C4BE9E491095BA3AD3CD9496EC11
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a3a2f33322d3335203d3e20323636393638.roa
Signing time:             Thu 06 Mar 2025 04:33:07 +0000
ROA not before:           Thu 06 Mar 2025 04:28:07 +0000
ROA not after:            Thu 05 Mar 2026 04:33:07 +0000
asID:                     266968
IP address blocks:        2804:4618::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:88:ef:31:aa:f1:c4:be:9e:49:10:95:ba:3a:d3:cd:94:96:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Mar  6 04:28:07 2025 GMT
            Not After : Mar  5 04:33:07 2026 GMT
        Subject: CN=30813F61986117FEA1B0528D901F48A854A87551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:3a:51:25:85:a5:ca:f0:d8:d4:32:ee:ed:
                    bf:d3:50:64:d0:c6:e1:35:fd:37:01:8c:f0:73:d8:
                    d6:2b:0c:88:9a:15:82:ee:6b:05:0d:65:6b:1d:90:
                    3c:10:ac:bf:3a:5d:b2:62:08:59:47:f8:e7:ac:24:
                    8f:11:03:09:a2:40:55:3b:ce:05:89:7c:32:cb:80:
                    8c:8e:c1:ba:25:f7:00:5e:6a:7b:ed:1e:9a:75:82:
                    d8:28:e3:62:3e:7e:cc:17:84:3c:aa:c1:8a:fd:77:
                    7f:3d:f1:66:6d:9e:1e:39:ce:e9:67:6b:ed:5f:8c:
                    0d:58:3c:6e:51:e0:c7:26:d8:0a:e8:1a:ec:1c:0e:
                    31:71:80:09:23:62:ca:48:c6:15:9d:72:98:a3:6d:
                    38:6c:71:a5:21:2f:69:69:25:f4:f3:97:98:2c:34:
                    20:32:e8:f0:49:b3:94:be:fc:a2:0c:b0:6f:76:ec:
                    2c:54:42:c8:ad:48:4e:65:e0:fd:94:f9:75:d4:d2:
                    d6:e4:eb:09:64:8c:de:97:b3:80:b6:c4:f5:27:e6:
                    aa:3f:6a:f9:6b:b2:1f:43:8e:27:ce:78:99:38:f4:
                    96:41:f9:c8:a5:ef:67:6c:5f:c7:7c:08:1a:0d:5b:
                    e0:9b:54:10:64:3b:49:f8:55:b0:fe:ea:c0:c1:05:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:81:3F:61:98:61:17:FE:A1:B0:52:8D:90:1F:48:A8:54:A8:75:51
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a3a2f33322d3335203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:04:8a:c0:fb:ba:bb:ca:45:bf:70:57:fd:e4:65:42:02:a7:
         bf:0b:f2:2e:1f:da:dd:d5:d5:f3:f8:02:56:95:88:1c:41:9b:
         cf:49:f9:63:91:0a:1e:d8:2e:70:ad:99:62:5c:6e:13:6a:bd:
         38:b3:06:58:ff:e4:c3:3c:53:3f:1c:6e:cd:94:ab:2f:24:9b:
         d2:5b:d6:2f:d4:11:5d:6b:02:82:61:15:32:55:f2:39:57:f0:
         74:c5:ab:d6:e0:cd:28:c4:ce:5a:bd:fb:8e:b9:d0:88:5b:13:
         06:e0:c9:9c:48:fd:4e:8c:8b:99:02:b1:e6:55:16:a3:7a:b8:
         8e:0b:c5:71:3a:bc:5e:79:0e:c5:54:b9:15:fd:2f:9e:87:92:
         46:a8:e8:4f:aa:6c:b9:25:54:87:f2:be:d4:a6:63:16:82:e6:
         0c:43:bc:58:12:a5:e4:c1:38:63:ff:07:2f:21:eb:f2:0b:51:
         bd:e3:df:9e:af:7f:24:7c:23:ca:77:ee:a0:b5:2e:2e:41:47:
         3a:d3:3e:eb:3b:63:8b:dc:7b:35:cc:28:a9:83:05:46:3d:ef:
         37:b3:09:c3:6d:2a:5c:f5:16:dd:15:cf:40:da:6d:4e:ab:06:
         cf:06:bb:e4:42:9f:e3:8c:06:6f:9c:cb:88:84:8a:ca:78:1d:
         8b:29:cf:a5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOYjvMarxxL6eSRCVujrTzZSW7BEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY1MzEyREZFOTNERjJFOUExMTA5QTE3Q0RFOEE3QzA3
RjcxRjJCNDAeFw0yNTAzMDYwNDI4MDdaFw0yNjAzMDUwNDMzMDdaMDMxMTAvBgNV
BAMTKDMwODEzRjYxOTg2MTE3RkVBMUIwNTI4RDkwMUY0OEE4NTRBODc1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2zpRJYWlyvDY1DLu7b/TUGTQ
xuE1/TcBjPBz2NYrDIiaFYLuawUNZWsdkDwQrL86XbJiCFlH+OesJI8RAwmiQFU7
zgWJfDLLgIyOwbol9wBeanvtHpp1gtgo42I+fswXhDyqwYr9d3898WZtnh45zuln
a+1fjA1YPG5R4Mcm2AroGuwcDjFxgAkjYspIxhWdcpijbThscaUhL2lpJfTzl5gs
NCAy6PBJs5S+/KIMsG927CxUQsitSE5l4P2U+XXU0tbk6wlkjN6Xs4C2xPUn5qo/
avlrsh9DjifOeJk49JZB+cil72dsX8d8CBoNW+CbVBBkO0n4VbD+6sDBBU3XAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMIE/YZhhF/6hsFKNkB9IqFSodVEwHwYDVR0j
BBgwFoAUplMS3+k98umhEJoXzeinwH9x8rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRXUzh6NTZTb2R5TlZyQlI1WHFWQ0dINFdXaEdod3ZZR2dUQjlFZkRp
NXIvMS9BNjUzMTJERkU5M0RGMkU5QTExMDlBMTdDREU4QTdDMDdGNzFGMkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTMxMkRGRTkzREYyRTlB
MTEwOUExN0NERThBN0MwN0Y3MUYyQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0V1M4ejU2U29keU5WckJSNVhxVkNHSDRXV2hHaHd2WUdnVEI5RWZEaTVyLzEv
MzIzODMwMzQzYTM0MzYzMTM4M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM2
MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARGGDANBgkqhkiG9w0BAQsFAAOCAQEAlQSKwPu6
u8pFv3BX/eRlQgKnvwvyLh/a3dXV8/gCVpWIHEGbz0n5Y5EKHtgucK2ZYlxuE2q9
OLMGWP/kwzxTPxxuzZSrLySb0lvWL9QRXWsCgmEVMlXyOVfwdMWr1uDNKMTOWr37
jrnQiFsTBuDJnEj9ToyLmQKx5lUWo3q4jgvFcTq8XnkOxVS5Ff0vnoeSRqjoT6ps
uSVUh/K+1KZjFoLmDEO8WBKl5ME4Y/8HLyHr8gtRvePfnq9/JHwjynfuoLUuLkFH
OtM+6ztji9x7NcwoqYMFRj3vN7MJw20qXPUW3RXPQNptTqsGzwa75EKf44wGb5zL
iISKyngdiynPpQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:58 2025 by rpki-client