Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
File:                     323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa (raw, json)
Hash identifier:          5vnqGIXRUWDSBrK4sqArRJogthXj7OQof6VAA1etnBo=
Subject key identifier:   AF:26:BC:E4:DD:C1:EE:E5:63:30:B9:F2:1B:6C:04:A6:B9:FA:69:6D
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       520AD52F790B63D69237F2FA508E4A0E104C396A
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
Signing time:             Thu 06 Mar 2025 13:54:55 +0000
ROA not before:           Thu 06 Mar 2025 13:49:55 +0000
ROA not after:            Thu 05 Mar 2026 13:54:55 +0000
asID:                     267363
IP address blocks:        2804:4c50:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0a:d5:2f:79:0b:63:d6:92:37:f2:fa:50:8e:4a:0e:10:4c:39:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Mar  6 13:49:55 2025 GMT
            Not After : Mar  5 13:54:55 2026 GMT
        Subject: CN=AF26BCE4DDC1EEE56330B9F21B6C04A6B9FA696D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:16:f3:2f:ec:7d:e0:e8:88:d6:fd:70:16:
                    4c:6b:94:a9:4b:3a:b5:00:33:dc:f1:d9:66:2e:43:
                    dc:b2:cc:06:d1:19:16:d0:97:36:3a:fe:06:ed:57:
                    dd:86:8f:4e:b1:e2:65:97:34:44:dd:7d:3d:d2:12:
                    70:c3:ad:7e:b7:97:ba:b1:8e:44:cf:de:b6:69:fd:
                    17:e9:85:ae:1f:8e:b2:cb:f7:16:f6:f6:d7:f9:18:
                    6b:c8:d2:38:59:0f:b2:37:90:49:28:80:28:4c:47:
                    d5:70:5d:ed:08:81:cf:77:ea:c3:1b:09:93:64:35:
                    05:c6:5f:69:32:7b:8e:0c:1c:5d:87:c2:7a:25:56:
                    55:b3:35:ae:d8:0d:95:75:66:72:97:7f:8f:eb:5d:
                    6f:d3:52:0a:fb:a9:7a:55:b1:48:3a:b0:3a:88:7f:
                    db:08:af:ff:21:56:36:2c:e9:6e:85:56:cb:d3:e1:
                    f9:8f:8d:30:65:75:da:a7:ba:32:b5:a9:8d:de:74:
                    79:26:a6:f7:32:b9:1c:ff:a5:4e:24:06:56:7d:24:
                    68:04:d6:9f:36:4d:74:03:26:8a:4b:b5:98:d6:24:
                    05:48:3b:ea:af:03:c8:36:08:83:de:f2:14:a7:26:
                    58:ee:25:2a:68:92:0d:3d:d0:e7:52:75:4c:5e:21:
                    d8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:BC:E4:DD:C1:EE:E5:63:30:B9:F2:1B:6C:04:A6:B9:FA:69:6D
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:2d:11:b9:3e:bb:a1:a8:3e:73:d2:6c:1b:bc:ee:be:88:58:
         f5:58:5d:f8:94:d2:60:c1:e4:28:ef:5c:e0:24:ad:73:c8:0f:
         9e:47:a2:ac:77:e8:fa:ca:39:1c:c6:86:2a:8b:60:22:96:b0:
         68:12:81:a0:f6:26:4a:40:7b:6f:7c:ba:34:77:a1:83:2d:88:
         f7:c2:a8:be:be:67:43:35:d8:15:dc:0c:cb:64:40:c7:d3:c4:
         da:91:96:ee:3e:fd:42:3e:c0:53:03:d0:2d:00:e6:ee:5f:27:
         d8:cb:3c:2d:53:94:b8:57:30:9c:18:74:16:ba:a8:52:40:70:
         87:67:c0:a8:5c:e1:16:a1:34:01:01:6e:a7:f0:02:0d:34:7a:
         ce:cb:f1:74:c8:b6:ea:ee:7b:57:65:72:b6:8c:73:07:28:9c:
         af:72:af:6e:ee:d9:e1:1b:9e:4a:ff:f7:45:21:b7:0a:8f:20:
         72:97:76:e7:0d:ec:75:9b:15:38:c4:29:52:ce:82:f6:13:e3:
         ed:54:3f:9d:c9:93:e1:b6:80:95:54:da:84:f6:36:d5:50:fd:
         1a:29:02:60:69:4f:e3:28:b1:de:90:00:7b:ce:05:f3:ed:4c:
         49:3d:20:0d:02:3c:59:bd:b0:68:d4:93:ef:ec:df:12:43:2e:
         e4:34:78:dc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUgrVL3kLY9aSN/L6UI5KDhBMOWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDNjVCOTE3NUE4QzU1REQxQkU4QjVENkY1MTE1MkQ3
MkM1MDVBQTAeFw0yNTAzMDYxMzQ5NTVaFw0yNjAzMDUxMzU0NTVaMDMxMTAvBgNV
BAMTKEFGMjZCQ0U0RERDMUVFRTU2MzMwQjlGMjFCNkMwNEE2QjlGQTY5NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTBbzL+x94OiI1v1wFkxrlKlL
OrUAM9zx2WYuQ9yyzAbRGRbQlzY6/gbtV92Gj06x4mWXNETdfT3SEnDDrX63l7qx
jkTP3rZp/Rfpha4fjrLL9xb29tf5GGvI0jhZD7I3kEkogChMR9VwXe0Igc936sMb
CZNkNQXGX2kye44MHF2HwnolVlWzNa7YDZV1ZnKXf4/rXW/TUgr7qXpVsUg6sDqI
f9sIr/8hVjYs6W6FVsvT4fmPjTBlddqnujK1qY3edHkmpvcyuRz/pU4kBlZ9JGgE
1p82TXQDJopLtZjWJAVIO+qvA8g2CIPe8hSnJljuJSpokg090OdSdUxeIdhvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUrya85N3B7uVjMLnyG2wEprn6aW0wHwYDVR0j
BBgwFoAU18ZbkXWoxV3Rvotdb1EVLXLFBaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZFM1lqSHA0bXEzdGhvaGdhOWVaajJGallFQUIxYnR6dVVWbzFDZXBk
YXcvMS9EN0M2NUI5MTc1QThDNTVERDFCRThCNUQ2RjUxMTUyRDcyQzUwNUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3QzY1QjkxNzVBOEM1NURE
MUJFOEI1RDZGNTExNTJENzJDNTA1QUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RTNZakhwNG1xM3Rob2hnYTllWmoyRmpZRUFCMWJ0enVVVm8xQ2VwZGF3LzEv
MzIzODMwMzQzYTM0NjMzNTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETFCAMA0GCSqGSIb3DQEBCwUA
A4IBAQChLRG5PruhqD5z0mwbvO6+iFj1WF34lNJgweQo71zgJK1zyA+eR6Ksd+j6
yjkcxoYqi2AilrBoEoGg9iZKQHtvfLo0d6GDLYj3wqi+vmdDNdgV3AzLZEDH08Ta
kZbuPv1CPsBTA9AtAObuXyfYyzwtU5S4VzCcGHQWuqhSQHCHZ8CoXOEWoTQBAW6n
8AINNHrOy/F0yLbq7ntXZXK2jHMHKJyvcq9u7tnhG55K//dFIbcKjyByl3bnDex1
mxU4xClSzoL2E+PtVD+dyZPhtoCVVNqE9jbVUP0aKQJgaU/jKLHekAB7zgXz7UxJ
PSANAjxZvbBo1JPv7N8SQy7kNHjc
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:03:00 2025 by rpki-client