Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/323830343a353664633a3a2f33322d313238203d3e20323638303238.roa
File:                     323830343a353664633a3a2f33322d313238203d3e20323638303238.roa (raw, json)
Hash identifier:          HwW2bH1mtaPYsbFcoSM+BlLLxm8C26hrKdvfcPheMvo=
Subject key identifier:   BD:B1:51:10:BF:93:06:B3:6A:30:EE:51:FB:0C:40:06:1E:B3:35:C9
Certificate issuer:       /CN=6A7229281936FDF6807C956949B8906409365025
Certificate serial:       13D7DCE87E5200C2027610744941981EFC404456
Authority key identifier: 6A:72:29:28:19:36:FD:F6:80:7C:95:69:49:B8:90:64:09:36:50:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/323830343a353664633a3a2f33322d313238203d3e20323638303238.roa
Signing time:             Mon 06 Jan 2025 19:40:41 +0000
ROA not before:           Mon 06 Jan 2025 19:35:41 +0000
ROA not after:            Mon 05 Jan 2026 19:40:41 +0000
asID:                     268028
IP address blocks:        2804:56dc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d7:dc:e8:7e:52:00:c2:02:76:10:74:49:41:98:1e:fc:40:44:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7229281936FDF6807C956949B8906409365025
        Validity
            Not Before: Jan  6 19:35:41 2025 GMT
            Not After : Jan  5 19:40:41 2026 GMT
        Subject: CN=BDB15110BF9306B36A30EE51FB0C40061EB335C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:4f:6e:11:59:9b:26:e0:1a:7f:3e:88:1f:
                    8e:2d:ef:c6:5c:72:a6:50:64:8d:d0:85:12:e6:b0:
                    2c:5f:93:3f:86:52:db:ef:a0:15:e9:29:a6:61:3c:
                    75:f7:34:13:6a:5f:ab:3f:e7:5e:99:23:b3:fc:ae:
                    74:27:4d:7f:9c:f9:85:8e:60:52:15:d3:c6:a9:87:
                    36:f1:b8:4b:28:27:9a:a9:52:28:21:45:99:a4:6d:
                    a2:f9:24:ff:b7:c4:cb:e6:a6:70:59:ca:cb:3c:80:
                    d1:d8:76:b1:09:fb:ee:b5:49:33:2c:3e:df:9c:91:
                    18:cc:32:a9:5e:b3:d4:95:c3:c2:73:8a:ff:0e:64:
                    91:19:1e:a0:b3:ce:fa:48:d8:96:f8:cf:48:5a:f0:
                    50:53:37:bf:5c:73:21:cd:a4:66:09:29:25:c0:4a:
                    1a:c6:f5:1e:79:d1:5d:8c:f5:54:ef:8a:a0:7e:b9:
                    7a:dd:02:95:59:74:3c:4d:e6:f4:e4:b2:87:69:d2:
                    e9:0a:16:0f:a3:ef:02:bb:79:aa:91:95:cb:64:70:
                    70:c9:72:a8:22:bb:17:53:c2:58:0f:87:57:66:fc:
                    db:da:5e:f6:cf:27:89:bb:9e:18:92:ff:a7:1e:13:
                    4f:ff:2c:9c:99:66:45:23:a4:eb:22:52:0e:e0:78:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B1:51:10:BF:93:06:B3:6A:30:EE:51:FB:0C:40:06:1E:B3:35:C9
            X509v3 Authority Key Identifier:
                keyid:6A:72:29:28:19:36:FD:F6:80:7C:95:69:49:B8:90:64:09:36:50:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/323830343a353664633a3a2f33322d313238203d3e20323638303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:cb:54:48:8c:21:40:6f:9d:de:27:44:9a:cb:02:ed:c1:
         99:af:a5:31:e5:06:84:ef:12:54:9d:45:9c:af:d4:d7:c2:75:
         30:f8:d3:26:9a:0b:d2:2f:87:3a:d7:be:b8:48:2e:8c:25:38:
         e7:17:7e:30:29:22:71:ae:4c:29:88:71:c7:9a:60:78:7d:9a:
         bc:88:3a:a2:e0:be:fc:90:c5:14:3a:df:53:1e:df:98:e0:f3:
         f2:be:46:5e:73:d9:d1:be:f0:16:de:03:fe:a0:57:4f:8c:90:
         11:57:3c:6f:3d:ad:ae:b9:be:35:95:2e:02:47:a8:e5:da:f6:
         b0:dd:10:73:aa:40:57:35:eb:ab:72:9c:90:6e:bd:8d:c1:3c:
         37:2d:ba:17:e4:df:94:d1:4b:39:0a:2d:4e:51:9c:78:bd:ef:
         73:cf:42:7f:81:9e:5f:e7:6f:9d:2c:eb:2e:db:a7:79:d5:58:
         ce:6d:ae:1e:40:e8:86:76:72:48:52:32:11:a1:8a:e3:38:52:
         ab:d5:01:95:65:d0:ed:e6:42:2a:90:9a:26:ee:b2:64:11:ae:
         79:46:88:da:72:50:df:60:9a:0a:70:5f:3d:b8:43:64:63:6b:
         2a:f0:46:ee:fb:ed:8e:6d:23:da:5c:1e:d9:c4:44:fb:8b:70:
         a0:b6:87:df
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUE9fc6H5SAMICdhB0SUGYHvxARFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE3MjI5MjgxOTM2RkRGNjgwN0M5NTY5NDlCODkwNjQw
OTM2NTAyNTAeFw0yNTAxMDYxOTM1NDFaFw0yNjAxMDUxOTQwNDFaMDMxMTAvBgNV
BAMTKEJEQjE1MTEwQkY5MzA2QjM2QTMwRUU1MUZCMEM0MDA2MUVCMzM1QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IU9uEVmbJuAafz6IH44t78Zc
cqZQZI3QhRLmsCxfkz+GUtvvoBXpKaZhPHX3NBNqX6s/516ZI7P8rnQnTX+c+YWO
YFIV08aphzbxuEsoJ5qpUighRZmkbaL5JP+3xMvmpnBZyss8gNHYdrEJ++61STMs
Pt+ckRjMMqles9SVw8Jziv8OZJEZHqCzzvpI2Jb4z0ha8FBTN79ccyHNpGYJKSXA
ShrG9R550V2M9VTviqB+uXrdApVZdDxN5vTksodp0ukKFg+j7wK7eaqRlctkcHDJ
cqgiuxdTwlgPh1dm/NvaXvbPJ4m7nhiS/6ceE0//LJyZZkUjpOsiUg7geAPzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUvbFREL+TBrNqMO5R+wxABh6zNckwHwYDVR0j
BBgwFoAUanIpKBk2/faAfJVpSbiQZAk2UCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3BScEZwSkpWa3lmdWtFRTZIV2M0SGJRa0RxdlhCSFRWdUpBSkxXWnhZ
ZFUvMC82QTcyMjkyODE5MzZGREY2ODA3Qzk1Njk0OUI4OTA2NDA5MzY1MDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBNzIyOTI4MTkzNkZERjY4
MDdDOTU2OTQ5Qjg5MDY0MDkzNjUwMjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdwUnBGcEpKVmt5ZnVrRUU2SFdjNEhiUWtEcXZYQkhUVnVKQUpMV1p4WWRVLzAv
MzIzODMwMzQzYTM1MzY2NDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMDMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFbcMA0GCSqGSIb3DQEBCwUAA4IBAQCICstU
SIwhQG+d3idEmssC7cGZr6Ux5QaE7xJUnUWcr9TXwnUw+NMmmgvSL4c61764SC6M
JTjnF34wKSJxrkwpiHHHmmB4fZq8iDqi4L78kMUUOt9THt+Y4PPyvkZec9nRvvAW
3gP+oFdPjJARVzxvPa2uub41lS4CR6jl2vaw3RBzqkBXNeurcpyQbr2NwTw3LboX
5N+U0Us5Ci1OUZx4ve9zz0J/gZ5f52+dLOsu26d51VjOba4eQOiGdnJIUjIRoYrj
OFKr1QGVZdDt5kIqkJom7rJkEa55RojaclDfYJoKcF89uENkY2sq8Ebu++2ObSPa
XB7ZxET7i3Cgtoff
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:37 2025 by rpki-client