Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
File:                     323830343a376562303a3a2f33322d313238203d3e20323731363431.roa (raw, json)
Hash identifier:          3SQQvzD6o4UQPapLKN88SP5VJs4r0fp0uZl0eCj7z3g=
Subject key identifier:   F1:FB:3F:DF:F4:BF:C6:BB:0F:BD:71:D8:D3:B5:E8:7B:2D:1F:6F:CD
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       5085FB46E4587FA3BA85AE3FF3CBDDBC45E896B3
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
Signing time:             Thu 06 Mar 2025 00:22:11 +0000
ROA not before:           Thu 06 Mar 2025 00:17:11 +0000
ROA not after:            Thu 05 Mar 2026 00:22:11 +0000
asID:                     271641
IP address blocks:        2804:7eb0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:85:fb:46:e4:58:7f:a3:ba:85:ae:3f:f3:cb:dd:bc:45:e8:96:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: Mar  6 00:17:11 2025 GMT
            Not After : Mar  5 00:22:11 2026 GMT
        Subject: CN=F1FB3FDFF4BFC6BB0FBD71D8D3B5E87B2D1F6FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:0a:7d:b9:98:37:36:58:12:51:5c:69:66:
                    b5:1f:d3:aa:1f:be:46:3d:3b:1e:10:8c:4b:cd:46:
                    cb:b7:25:cd:9d:dc:2f:d0:0e:09:4c:91:96:83:d4:
                    62:90:22:22:6b:bd:5d:70:08:57:7f:00:20:28:d3:
                    62:7b:47:af:1c:1b:10:46:02:82:d7:16:dd:47:30:
                    6d:e7:3f:8a:41:16:03:2d:0c:89:b2:7e:a2:ea:70:
                    32:0d:de:e4:ad:d5:72:0d:36:fa:ce:87:3a:86:7f:
                    d7:07:38:63:3a:74:8a:ce:86:d9:09:1d:2d:55:a6:
                    41:90:37:7d:b0:b9:a2:58:df:3f:93:b8:aa:6e:a0:
                    a1:7c:d3:92:55:26:4f:19:05:b6:f9:10:05:6e:d5:
                    f3:1d:b1:a7:d7:10:da:df:a6:6e:13:2a:87:dd:50:
                    ab:30:83:49:2d:5f:8c:8d:73:66:86:da:c7:26:e6:
                    a2:cc:c6:7b:7b:3e:cf:a9:55:27:75:6d:36:7d:8a:
                    dc:2e:20:f4:f7:a7:ac:43:36:2f:db:22:04:25:2b:
                    44:f5:54:27:b3:80:68:24:e8:0b:f5:f5:b2:e5:8b:
                    d4:33:ec:8f:9a:e7:c2:67:d4:2a:4c:e7:4a:e0:90:
                    29:07:cc:b7:73:2f:c5:9f:0c:11:ee:c2:d9:51:f6:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:3F:DF:F4:BF:C6:BB:0F:BD:71:D8:D3:B5:E8:7B:2D:1F:6F:CD
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:58:27:32:d1:f3:66:31:9c:51:64:ec:74:4c:1f:9d:65:
         24:67:9b:97:6b:b5:6e:82:08:8c:a0:12:c4:87:16:d7:a0:b3:
         67:e0:c1:a7:0e:35:bb:d9:70:24:1d:07:00:34:58:f7:63:16:
         7d:7d:69:78:cb:b7:fc:98:10:1d:21:7c:3a:9a:59:9c:70:dc:
         70:dd:7c:d9:21:bd:88:69:39:06:9b:7d:5f:5f:56:03:96:7d:
         2e:91:81:99:9c:5a:2b:95:3c:e4:67:b3:72:b7:cd:0c:73:14:
         95:36:94:dd:7e:e1:4b:dc:aa:90:45:12:8f:30:89:ed:fd:a8:
         10:7f:14:67:8c:3f:8f:55:4b:21:0f:99:ed:a0:35:38:78:92:
         0a:27:9f:05:5f:b2:66:63:35:8f:b3:2c:b3:21:2f:cc:02:0e:
         1e:5a:f3:4a:73:26:30:8c:2c:31:eb:70:7a:fe:16:c3:57:d5:
         00:76:72:b6:bc:aa:eb:89:c4:04:2e:47:23:2d:c5:ce:ac:ac:
         5e:ef:c8:6c:67:74:04:ef:cd:3a:30:8b:31:60:18:57:f4:a1:
         b0:21:79:34:a3:19:a2:14:e8:e5:18:2e:7f:4c:b0:cd:54:ee:
         e0:e6:67:ef:81:3b:17:e1:e6:f6:d9:3f:8b:46:6e:84:37:96:
         22:44:83:db
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUIX7RuRYf6O6ha4/88vdvEXolrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5REFGRUZFNUIzQzg3MEY5RTFBOEJEQUU5MjRFMjlF
RjFBOTkxRDAeFw0yNTAzMDYwMDE3MTFaFw0yNjAzMDUwMDIyMTFaMDMxMTAvBgNV
BAMTKEYxRkIzRkRGRjRCRkM2QkIwRkJENzFEOEQzQjVFODdCMkQxRjZGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYyAp9uZg3NlgSUVxpZrUf06of
vkY9Ox4QjEvNRsu3Jc2d3C/QDglMkZaD1GKQIiJrvV1wCFd/ACAo02J7R68cGxBG
AoLXFt1HMG3nP4pBFgMtDImyfqLqcDIN3uSt1XINNvrOhzqGf9cHOGM6dIrOhtkJ
HS1VpkGQN32wuaJY3z+TuKpuoKF805JVJk8ZBbb5EAVu1fMdsafXENrfpm4TKofd
UKswg0ktX4yNc2aG2scm5qLMxnt7Ps+pVSd1bTZ9itwuIPT3p6xDNi/bIgQlK0T1
VCezgGgk6Av19bLli9Qz7I+a58Jn1CpM50rgkCkHzLdzL8WfDBHuwtlR9pEVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU8fs/3/S/xrsPvXHY07Xoey0fb80wHwYDVR0j
BBgwFoAU052v7+WzyHD54ai9rpJOKe8amR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1J0aHlNTkNGd29yY0hXQ3ZFd3o1QUZ1aUVqd1J6YnJEOURqbVNmZWZa
NVMvMS9EMzlEQUZFRkU1QjNDODcwRjlFMUE4QkRBRTkyNEUyOUVGMUE5OTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzOURBRkVGRTVCM0M4NzBG
OUUxQThCREFFOTI0RTI5RUYxQTk5MUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdSdGh5TU5DRndvcmNIV0N2RXd6NUFGdWlFandSemJyRDlEam1TZmVmWjVTLzEv
MzIzODMwMzQzYTM3NjU2MjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBH6wMA0GCSqGSIb3DQEBCwUAA4IBAQArpFgn
MtHzZjGcUWTsdEwfnWUkZ5uXa7VuggiMoBLEhxbXoLNn4MGnDjW72XAkHQcANFj3
YxZ9fWl4y7f8mBAdIXw6mlmccNxw3XzZIb2IaTkGm31fX1YDln0ukYGZnForlTzk
Z7Nyt80McxSVNpTdfuFL3KqQRRKPMInt/agQfxRnjD+PVUshD5ntoDU4eJIKJ58F
X7JmYzWPsyyzIS/MAg4eWvNKcyYwjCwx63B6/hbDV9UAdnK2vKrricQELkcjLcXO
rKxe78hsZ3QE7806MIsxYBhX9KGwIXk0oxmiFOjlGC5/TLDNVO7g5mfvgTsX4eb2
2T+LRm6EN5YiRIPb
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:01 2025 by rpki-client