Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38343a3a2f33322d3438203d3e20323633333030.roa
File:                     323830313a38343a3a2f33322d3438203d3e20323633333030.roa (raw, json)
Hash identifier:          PGBNB3RGqs4xSfX5FC768tYMiLCZ2IANYFpCYOYTDbg=
Subject key identifier:   65:AE:41:9D:80:1A:2B:DE:AF:1D:50:31:91:0B:3D:36:CD:15:09:36
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       26F06BFB09805F71E5D226281F51E62626A9A22C
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38343a3a2f33322d3438203d3e20323633333030.roa
Signing time:             Wed 05 Mar 2025 20:25:51 +0000
ROA not before:           Wed 05 Mar 2025 20:20:51 +0000
ROA not after:            Wed 04 Mar 2026 20:25:51 +0000
asID:                     263300
IP address blocks:        2801:84::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f0:6b:fb:09:80:5f:71:e5:d2:26:28:1f:51:e6:26:26:a9:a2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Mar  5 20:20:51 2025 GMT
            Not After : Mar  4 20:25:51 2026 GMT
        Subject: CN=65AE419D801A2BDEAF1D5031910B3D36CD150936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:60:1e:d6:f6:b0:29:7b:20:30:77:0f:2a:34:
                    06:91:70:16:d9:cc:a0:51:47:8b:60:ba:bd:8d:85:
                    5f:be:13:e7:2d:ef:2e:42:9e:2c:c4:fe:bb:6e:b7:
                    3c:40:5f:01:32:58:3b:aa:a5:1f:ef:18:95:13:77:
                    e9:20:35:1d:a3:b0:14:bc:ec:f3:d9:e7:d6:98:09:
                    2b:e7:df:07:53:6b:ff:4e:36:77:04:aa:d6:37:95:
                    5c:05:a2:0e:f2:87:79:f7:3e:d5:3e:b4:b4:9a:34:
                    aa:a5:63:a2:fa:85:83:ea:a2:15:15:db:49:38:7a:
                    e7:1e:cf:a8:5f:04:9e:e9:13:cc:85:05:e6:3b:af:
                    a9:2c:2a:60:24:b6:ae:1a:14:0c:63:81:cc:ee:31:
                    96:f5:92:4e:3d:ac:0f:10:62:27:6a:9e:ef:17:dd:
                    8a:f9:e1:49:50:a3:39:a3:f3:de:30:0e:2c:5d:48:
                    98:ab:92:0d:7c:23:eb:f9:c0:65:1f:0d:7a:1d:24:
                    ca:53:63:a3:7e:5f:d7:7b:8c:2e:82:a3:7c:ef:72:
                    da:f4:fd:08:7b:48:8d:94:0a:b2:aa:c1:4d:86:a9:
                    95:c1:ea:fe:b3:c7:69:fa:3c:fe:fd:7f:66:ba:1a:
                    d1:d8:e7:b6:ad:65:db:69:f2:28:1a:f5:a7:f0:cb:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AE:41:9D:80:1A:2B:DE:AF:1D:50:31:91:0B:3D:36:CD:15:09:36
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38343a3a2f33322d3438203d3e20323633333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:84::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:4f:fa:61:3f:0c:95:2d:48:c6:20:bb:37:2c:02:59:1b:c1:
         6d:a0:bb:b8:9b:a7:70:64:8c:59:7f:c7:55:93:c9:ea:27:02:
         1b:c6:e0:58:f2:06:02:d6:b1:9a:69:30:4e:99:2a:7e:28:49:
         26:88:fb:d5:cb:a3:0c:60:0f:32:57:d0:b0:c4:d8:9d:15:54:
         07:cd:c4:14:72:ae:af:c3:e4:b6:e3:f0:29:45:6d:48:e5:d7:
         0c:94:64:ea:6b:f6:8e:39:40:68:46:74:4a:fb:5c:0e:bd:22:
         99:07:72:bc:89:95:73:68:d8:61:e1:7a:0c:25:91:a5:e2:b8:
         73:6c:7b:2e:5b:e6:0d:d0:51:cb:08:81:fe:b7:f8:db:83:8d:
         27:ea:ff:c9:e9:34:e5:7d:ea:b4:a2:06:4e:2d:64:45:e3:fa:
         b3:1f:7c:45:8a:42:2c:ba:aa:b7:43:6e:a9:35:a1:fa:02:aa:
         47:b8:56:a0:8a:4f:55:6a:a4:e5:9f:ae:78:0c:1d:ba:7f:51:
         5a:a6:41:be:9c:41:cc:7f:21:c3:de:d2:f7:a2:be:92:33:75:
         cf:c1:37:09:8a:14:8c:bb:a3:f2:6c:4e:d4:06:84:75:97:d2:
         c9:9c:03:38:36:21:f6:12:26:83:75:ee:61:c6:cf:cb:da:22:
         6f:be:8f:64
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJvBr+wmAX3Hl0iYoH1HmJiapoiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU2NkFCMTNERjE5RjJFODkzNUNBRkIxMTlFNDAzMDhE
MEEwODE0NjAeFw0yNTAzMDUyMDIwNTFaFw0yNjAzMDQyMDI1NTFaMDMxMTAvBgNV
BAMTKDY1QUU0MTlEODAxQTJCREVBRjFENTAzMTkxMEIzRDM2Q0QxNTA5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtYB7W9rApeyAwdw8qNAaRcBbZ
zKBRR4tgur2NhV++E+ct7y5CnizE/rtutzxAXwEyWDuqpR/vGJUTd+kgNR2jsBS8
7PPZ59aYCSvn3wdTa/9ONncEqtY3lVwFog7yh3n3PtU+tLSaNKqlY6L6hYPqohUV
20k4eucez6hfBJ7pE8yFBeY7r6ksKmAktq4aFAxjgczuMZb1kk49rA8QYidqnu8X
3Yr54UlQozmj894wDixdSJirkg18I+v5wGUfDXodJMpTY6N+X9d7jC6Co3zvctr0
/Qh7SI2UCrKqwU2GqZXB6v6zx2n6PP79f2a6GtHY57atZdtp8iga9afwy4RBAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUZa5BnYAaK96vHVAxkQs9Ns0VCTYwHwYDVR0j
BBgwFoAU5WarE98Z8uiTXK+xGeQDCNCggUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlF2blVuRVhlNUpUZjdWaFFIblVGUndkemVFcGJGNHJ0M2I1UExydmRl
eXkvMS9FNTY2QUIxM0RGMTlGMkU4OTM1Q0FGQjExOUU0MDMwOEQwQTA4MTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NjZBQjEzREYxOUYyRTg5
MzVDQUZCMTE5RTQwMzA4RDBBMDgxNDYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRdm5VbkVYZTVKVGY3VmhRSG5VRlJ3ZHplRXBiRjRydDNiNVBMcnZkZXl5LzEv
MzIzODMwMzEzYTM4MzQzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM2MzMzMzMw
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoAQCEMA0GCSqGSIb3DQEBCwUAA4IBAQAkT/phPwyVLUjG
ILs3LAJZG8FtoLu4m6dwZIxZf8dVk8nqJwIbxuBY8gYC1rGaaTBOmSp+KEkmiPvV
y6MMYA8yV9CwxNidFVQHzcQUcq6vw+S24/ApRW1I5dcMlGTqa/aOOUBoRnRK+1wO
vSKZB3K8iZVzaNhh4XoMJZGl4rhzbHsuW+YN0FHLCIH+t/jbg40n6v/J6TTlfeq0
ogZOLWRF4/qzH3xFikIsuqq3Q26pNaH6AqpHuFagik9VaqTln654DB26f1FapkG+
nEHMfyHD3tL3or6SM3XPwTcJihSMu6PybE7UBoR1l9LJnAM4NiH2EiaDde5hxs/L
2iJvvo9k
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:06 2025 by rpki-client