Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33332d3333203d3e20323639313833.roa
File:                     323830343a363061633a383030303a3a2f33332d3333203d3e20323639313833.roa (raw, json)
Hash identifier:          HKyHdXv7bZXJaz6Qv0tYPXqwlzh4afu3ZGCIBugzwy4=
Subject key identifier:   93:DE:11:12:5D:C0:BD:A3:DB:8D:6A:1E:D7:82:B0:B7:5F:47:B3:93
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       4CF10D1D0D2C6C0D0EA1BEC3150166EF404FA81A
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33332d3333203d3e20323639313833.roa
Signing time:             Wed 19 Mar 2025 18:27:13 +0000
ROA not before:           Wed 19 Mar 2025 18:22:13 +0000
ROA not after:            Wed 18 Mar 2026 18:27:13 +0000
asID:                     269183
IP address blocks:        2804:60ac:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f1:0d:1d:0d:2c:6c:0d:0e:a1:be:c3:15:01:66:ef:40:4f:a8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Mar 19 18:22:13 2025 GMT
            Not After : Mar 18 18:27:13 2026 GMT
        Subject: CN=93DE11125DC0BDA3DB8D6A1ED782B0B75F47B393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:e6:9a:12:a8:15:b0:00:5a:74:26:e8:bc:
                    c7:56:2d:52:8e:0c:86:d9:8d:87:8f:00:94:72:1b:
                    99:4f:95:cf:ab:19:c8:c7:3e:96:ab:fc:0a:9c:f5:
                    c9:0c:fd:22:a7:99:23:32:f4:d7:98:8f:42:7c:24:
                    80:06:a8:c8:10:a4:7a:ce:fb:9d:b3:36:30:56:84:
                    c2:0b:57:0e:8f:91:c2:99:dd:e8:bb:5f:00:e8:eb:
                    69:51:52:98:30:60:32:78:b3:44:40:01:e8:d3:05:
                    b6:cc:ff:fc:e0:c8:6e:6f:46:5c:cf:55:71:6d:8b:
                    bb:b1:69:6f:0f:32:5d:9f:48:37:41:b9:39:71:ff:
                    d4:9f:76:9b:0a:de:0e:0f:17:d9:d9:1f:f1:c9:29:
                    93:ea:fd:d8:10:22:13:c7:5b:93:ff:da:81:6f:e2:
                    2c:1e:56:a5:3b:7a:15:b3:da:6f:41:f6:68:9f:bc:
                    9c:91:60:e6:2b:5d:57:0e:28:03:a5:8b:e5:d1:62:
                    2b:2a:4c:0d:44:a2:b2:72:c9:7d:c3:0d:34:d1:14:
                    af:d1:40:8a:3c:40:c1:8e:d6:f4:87:18:fb:2e:4a:
                    c3:7f:40:91:8a:02:a7:bf:a0:50:a6:51:e6:e5:c0:
                    82:07:12:6b:a6:77:8f:ea:ff:40:02:ab:d1:90:94:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:11:12:5D:C0:BD:A3:DB:8D:6A:1E:D7:82:B0:B7:5F:47:B3:93
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33332d3333203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60ac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:9d:88:5b:0a:70:fe:ed:2a:19:0f:ba:79:ce:4a:d5:58:c8:
         47:1d:b9:2d:16:d1:f2:7d:f5:84:e6:af:08:af:4f:73:4f:b3:
         ec:11:4c:d0:b7:90:19:95:6c:6b:9e:22:01:05:8d:6c:59:08:
         76:32:cf:43:50:2b:85:63:cc:11:c2:71:7c:22:9e:61:ed:09:
         0a:ec:5e:fb:7b:52:54:cc:31:52:50:03:a8:5c:d3:4f:40:a0:
         a4:0a:29:0b:2e:01:95:ef:b5:7d:46:03:66:c3:05:85:9b:e4:
         9e:d4:5e:6e:41:22:f4:ef:70:98:b6:29:2f:3f:93:00:60:7e:
         76:22:5e:9b:ed:c1:d2:70:3b:2d:7e:53:19:1f:95:dd:c2:d2:
         ed:bc:a0:e9:5b:59:ba:4e:98:c2:b3:0b:1e:00:78:b0:9f:e8:
         8c:55:a1:04:40:98:bc:e8:53:0c:ea:c1:09:94:d7:1d:b9:3a:
         be:31:3c:46:7a:b3:24:70:c0:58:3c:41:97:f4:34:32:74:e2:
         1f:b5:8e:c7:a5:a6:82:0a:67:b4:98:68:ed:f4:6d:c0:87:02:
         ea:a9:cb:6b:2b:4b:1c:d5:d0:93:6a:7e:59:21:5e:ca:73:1d:
         7e:49:a4:e7:3a:a5:ad:81:d9:88:38:26:75:9f:26:ee:84:1a:
         45:3a:e5:b1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTPENHQ0sbA0Oob7DFQFm70BPqBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVENTEwN0MzRjk3NURDMjc5QjJFRTc3NDhCMDJBQjAx
MDQ3MEU2RDAeFw0yNTAzMTkxODIyMTNaFw0yNjAzMTgxODI3MTNaMDMxMTAvBgNV
BAMTKDkzREUxMTEyNURDMEJEQTNEQjhENkExRUQ3ODJCMEI3NUY0N0IzOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJeaaEqgVsABadCbovMdWLVKO
DIbZjYePAJRyG5lPlc+rGcjHPpar/Aqc9ckM/SKnmSMy9NeYj0J8JIAGqMgQpHrO
+52zNjBWhMILVw6PkcKZ3ei7XwDo62lRUpgwYDJ4s0RAAejTBbbM//zgyG5vRlzP
VXFti7uxaW8PMl2fSDdBuTlx/9SfdpsK3g4PF9nZH/HJKZPq/dgQIhPHW5P/2oFv
4iweVqU7ehWz2m9B9mifvJyRYOYrXVcOKAOli+XRYisqTA1EorJyyX3DDTTRFK/R
QIo8QMGO1vSHGPsuSsN/QJGKAqe/oFCmUeblwIIHEmumd4/q/0ACq9GQlB1NAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUk94REl3AvaPbjWoe14Kwt19Hs5MwHwYDVR0j
BBgwFoAUldUQfD+XXcJ5su53SLAqsBBHDm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3NKUDZxMUtUTFZZdG0zNFVHY3J4RlNSd1Z6a3lxVzdFZXNOdmVZSEVi
RGIvMC85NUQ1MTA3QzNGOTc1REMyNzlCMkVFNzc0OEIwMkFCMDEwNDcwRTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RDUxMDdDM0Y5NzVEQzI3
OUIyRUU3NzQ4QjAyQUIwMTA0NzBFNkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdzSlA2cTFLVExWWXRtMzRVR2NyeEZTUndWemt5cVc3RWVzTnZlWUhFYkRiLzAv
MzIzODMwMzQzYTM2MzA2MTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTMxMzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEYKyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBinYhbCnD+7SoZD7p5zkrVWMhHHbktFtHyffWE5q8Ir09zT7PsEUzQt5AZ
lWxrniIBBY1sWQh2Ms9DUCuFY8wRwnF8Ip5h7QkK7F77e1JUzDFSUAOoXNNPQKCk
CikLLgGV77V9RgNmwwWFm+Se1F5uQSL073CYtikvP5MAYH52Il6b7cHScDstflMZ
H5XdwtLtvKDpW1m6TpjCswseAHiwn+iMVaEEQJi86FMM6sEJlNcduTq+MTxGerMk
cMBYPEGX9DQydOIftY7HpaaCCme0mGjt9G3AhwLqqctrK0sc1dCTan5ZIV7Kcx1+
SaTnOqWtgdmIOCZ1nybuhBpFOuWx
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:25:16 2025 by rpki-client