Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/323830343a343162633a3a2f33362d3336203d3e20323637343533.roa
File:                     323830343a343162633a3a2f33362d3336203d3e20323637343533.roa (raw, json)
Hash identifier:          IV6lpiFYSPKAhu0TDaVspsSvWudcY6dB0CeErQPFrdI=
Subject key identifier:   59:38:96:52:DC:31:5F:A9:9B:47:3F:D3:C1:6F:02:2D:80:FE:59:A5
Certificate issuer:       /CN=FE2FB4044730F5FD718399AEBDC9295665F44072
Certificate serial:       3FD486D0CCDE6B3E3D3D11B7A6297C544195BD6D
Authority key identifier: FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/323830343a343162633a3a2f33362d3336203d3e20323637343533.roa
Signing time:             Tue 18 Mar 2025 17:04:17 +0000
ROA not before:           Tue 18 Mar 2025 16:59:17 +0000
ROA not after:            Tue 17 Mar 2026 17:04:17 +0000
asID:                     267453
IP address blocks:        2804:41bc::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d4:86:d0:cc:de:6b:3e:3d:3d:11:b7:a6:29:7c:54:41:95:bd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2FB4044730F5FD718399AEBDC9295665F44072
        Validity
            Not Before: Mar 18 16:59:17 2025 GMT
            Not After : Mar 17 17:04:17 2026 GMT
        Subject: CN=59389652DC315FA99B473FD3C16F022D80FE59A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:5c:6f:7c:e4:c5:aa:69:76:e1:44:a8:5a:
                    aa:c5:3d:d5:c6:10:0e:09:4a:f7:c5:a3:ad:98:1f:
                    12:08:13:39:0a:f7:f0:ef:a0:31:42:73:1d:60:5f:
                    5c:f5:32:96:c6:5f:a8:34:05:f5:6b:a2:5a:90:a8:
                    0b:8f:43:80:5d:4e:5d:12:02:da:ea:74:52:e1:b2:
                    62:97:c6:10:02:0b:25:c9:9c:df:28:eb:17:d2:c8:
                    dc:c3:e4:f2:bf:c3:57:f6:87:52:b2:d0:cd:96:34:
                    ca:20:dc:c8:c9:cf:be:a8:45:5d:77:29:58:b0:e5:
                    9d:95:7d:1b:fc:3a:b4:0c:4b:6a:4e:7e:0e:a7:52:
                    50:0b:0e:8d:74:d1:8b:ce:56:c6:64:cc:33:a9:55:
                    38:10:45:84:6c:1f:34:cf:3c:88:5a:29:73:47:7c:
                    bd:b7:7c:c5:f3:ec:b7:d7:aa:85:a7:63:18:72:ef:
                    f6:b9:82:14:52:81:a2:44:86:1b:6d:32:43:bf:32:
                    88:17:8e:0e:f9:13:7f:ac:8d:b3:02:b7:58:29:08:
                    e9:f5:29:c1:ec:30:37:3f:19:6b:d6:b2:19:4b:e4:
                    0b:8c:d7:24:f4:61:24:0e:a6:ba:9c:7d:4d:90:91:
                    ea:2f:e8:1c:36:91:10:d2:ec:e3:51:aa:52:2f:c9:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:38:96:52:DC:31:5F:A9:9B:47:3F:D3:C1:6F:02:2D:80:FE:59:A5
            X509v3 Authority Key Identifier:
                keyid:FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/323830343a343162633a3a2f33362d3336203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41bc::/36

    Signature Algorithm: sha256WithRSAEncryption
         ad:97:7e:e5:f7:12:63:ec:e1:91:c2:fc:9b:c1:9d:15:02:a1:
         05:52:42:91:b4:1a:36:e6:23:9b:03:cf:ec:fb:36:f1:58:74:
         7d:d3:5c:45:bb:1d:08:9d:a9:95:df:8f:8f:3c:54:b2:75:0c:
         b7:e7:f0:8c:1d:c3:4b:2f:aa:da:82:46:d9:99:67:cd:94:6c:
         18:69:8b:b4:32:49:a8:ea:84:2e:82:44:d9:cd:5d:c2:7e:8e:
         8a:1c:3c:19:d5:08:9b:21:f7:31:e1:ee:e4:2b:50:10:32:97:
         8c:14:ea:22:b1:2a:37:85:98:49:0b:48:fb:b7:a6:1b:5f:aa:
         83:01:ce:ed:e0:df:74:cf:8e:6d:6d:cf:d8:2a:a2:6b:23:8a:
         b3:73:73:de:27:ee:0d:6c:e6:4e:0f:20:62:88:ac:08:46:d9:
         3c:11:b8:bf:f4:6e:d0:e1:46:93:e8:7a:34:c3:68:fe:41:5f:
         4b:93:22:5b:ad:6f:a9:dc:66:5a:0e:fb:f0:aa:4b:45:f3:20:
         99:79:44:38:41:29:cd:7c:30:b0:24:cd:cb:20:38:91:de:67:
         91:8d:1a:cd:50:b0:7b:e4:85:97:21:51:d1:60:c3:f1:82:94:
         8f:25:ee:09:e6:43:1c:ba:ac:28:4a:63:26:a4:ab:c8:38:c5:
         e0:77:a0:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP9SG0Mzeaz49PRG3pil8VEGVvW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyRkI0MDQ0NzMwRjVGRDcxODM5OUFFQkRDOTI5NTY2
NUY0NDA3MjAeFw0yNTAzMTgxNjU5MTdaFw0yNjAzMTcxNzA0MTdaMDMxMTAvBgNV
BAMTKDU5Mzg5NjUyREMzMTVGQTk5QjQ3M0ZEM0MxNkYwMjJEODBGRTU5QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZ1xvfOTFqml24USoWqrFPdXG
EA4JSvfFo62YHxIIEzkK9/DvoDFCcx1gX1z1MpbGX6g0BfVrolqQqAuPQ4BdTl0S
AtrqdFLhsmKXxhACCyXJnN8o6xfSyNzD5PK/w1f2h1Ky0M2WNMog3MjJz76oRV13
KViw5Z2VfRv8OrQMS2pOfg6nUlALDo100YvOVsZkzDOpVTgQRYRsHzTPPIhaKXNH
fL23fMXz7LfXqoWnYxhy7/a5ghRSgaJEhhttMkO/MogXjg75E3+sjbMCt1gpCOn1
KcHsMDc/GWvWshlL5AuM1yT0YSQOprqcfU2Qkeov6Bw2kRDS7ONRqlIvyUsNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWTiWUtwxX6mbRz/TwW8CLYD+WaUwHwYDVR0j
BBgwFoAU/i+0BEcw9f1xg5muvckpVmX0QHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZGdlp0RHN5ZGZFV2E0dkNqNWt2d2cxcldMbW1aeFhRVTdGWVJ4ODZw
bmovMC9GRTJGQjQwNDQ3MzBGNUZENzE4Mzk5QUVCREM5Mjk1NjY1RjQ0MDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMkZCNDA0NDczMEY1RkQ3
MTgzOTlBRUJEQzkyOTU2NjVGNDQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RnZadERzeWRmRVdhNHZDajVrdndnMXJXTG1tWnhYUVU3RllSeDg2cG5qLzAv
MzIzODMwMzQzYTM0MzE2MjYzM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM3
MzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARBvAAwDQYJKoZIhvcNAQELBQADggEBAK2XfuX3
EmPs4ZHC/JvBnRUCoQVSQpG0GjbmI5sDz+z7NvFYdH3TXEW7HQidqZXfj488VLJ1
DLfn8Iwdw0svqtqCRtmZZ82UbBhpi7QySajqhC6CRNnNXcJ+joocPBnVCJsh9zHh
7uQrUBAyl4wU6iKxKjeFmEkLSPu3phtfqoMBzu3g33TPjm1tz9gqomsjirNzc94n
7g1s5k4PIGKIrAhG2TwRuL/0btDhRpPoejTDaP5BX0uTIlutb6ncZloO+/CqS0Xz
IJl5RDhBKc18MLAkzcsgOJHeZ5GNGs1QsHvkhZchUdFgw/GClI8l7gnmQxy6rChK
Yyakq8g4xeB3oCw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:54:46 2025 by rpki-client