Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a633030303a3a2f33342d3334203d3e20323639303234.roa
File:                     323830343a356534633a633030303a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier:          9+uweoiIh6JmpckDmb4SRZEosgtmDeDzxMKfADjciPA=
Subject key identifier:   DB:44:C3:81:18:68:B8:4C:82:6A:76:8E:00:AA:D6:DF:F4:05:6D:3A
Certificate issuer:       /CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Certificate serial:       5659D1EF0918E60647725300971E4D4893F9EFB2
Authority key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a633030303a3a2f33342d3334203d3e20323639303234.roa
Signing time:             Mon 10 Feb 2025 18:03:52 +0000
ROA not before:           Mon 10 Feb 2025 17:58:52 +0000
ROA not after:            Mon 09 Feb 2026 18:03:52 +0000
asID:                     269024
IP address blocks:        2804:5e4c:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:59:d1:ef:09:18:e6:06:47:72:53:00:97:1e:4d:48:93:f9:ef:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
        Validity
            Not Before: Feb 10 17:58:52 2025 GMT
            Not After : Feb  9 18:03:52 2026 GMT
        Subject: CN=DB44C3811868B84C826A768E00AAD6DFF4056D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:1e:ce:2d:97:69:cc:e8:7a:3e:d1:b8:5c:
                    4a:17:22:d5:92:7d:7b:34:ac:df:ce:fc:31:ae:23:
                    3d:9b:69:89:f1:23:c5:b9:ce:b9:a5:66:57:4a:9f:
                    97:ce:17:cc:1e:8e:b6:bb:cf:d3:73:24:1c:26:62:
                    16:ed:9c:3e:40:ec:43:4a:10:f9:9a:b4:9f:7c:b0:
                    0d:f6:9c:33:0b:f5:e8:6c:f0:05:8d:3a:86:2e:60:
                    bd:19:99:4a:49:d6:f3:a2:97:a9:9a:e9:dc:bf:6c:
                    ef:04:d2:df:3f:8e:07:92:c8:c2:c6:fc:e8:14:5c:
                    0a:50:ac:eb:aa:24:45:fb:7d:3b:3b:f4:1c:ae:2f:
                    e0:b5:ca:4f:21:d6:f3:60:75:da:a3:de:ba:e0:d1:
                    2b:ff:2b:bf:8e:43:b5:97:67:aa:07:c8:be:fe:92:
                    65:83:9f:fb:f0:28:9a:11:db:fd:f4:ac:8d:7d:d2:
                    cb:d1:0f:0a:ea:2d:86:71:51:9a:b5:2c:79:56:ec:
                    f6:5c:cc:51:91:43:48:12:70:85:77:17:e6:f3:db:
                    42:b0:e5:a8:db:77:1e:64:d8:3f:d2:54:01:dc:b5:
                    6c:d2:7b:a7:86:4e:fd:13:c2:3c:3d:51:72:59:35:
                    ba:5e:00:a6:53:38:a6:f3:99:63:ce:c1:b8:f8:7f:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:C3:81:18:68:B8:4C:82:6A:76:8E:00:AA:D6:DF:F4:05:6D:3A
            X509v3 Authority Key Identifier:
                keyid:DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a633030303a3a2f33342d3334203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:e9:79:40:08:91:0b:55:ab:d2:e5:35:95:b3:52:e3:95:3a:
         79:63:e1:31:31:b2:ed:6d:42:6d:65:7f:3b:f9:16:83:94:c1:
         b5:e5:47:60:8e:b7:ca:b1:09:bd:00:6a:ff:0b:93:24:cc:28:
         83:5d:78:90:7f:92:9c:91:f3:0e:f1:9d:21:db:2e:c9:53:fb:
         d1:b0:6c:f9:ec:4f:4b:67:35:46:03:1f:6b:ae:1d:d9:68:fa:
         ae:f4:29:d5:31:0e:7f:26:e0:05:17:f4:e1:43:2b:bd:3d:f8:
         94:35:e2:5a:92:0a:5d:20:22:e9:c5:03:c2:c1:2c:f8:ef:23:
         4e:8c:2c:42:a7:6c:d5:e7:b7:8f:61:a9:3c:e4:a0:86:e4:62:
         bb:f2:4f:38:50:a1:17:a3:eb:33:81:2f:50:5f:1d:f1:18:67:
         14:af:78:85:dc:a7:e1:48:fa:5d:32:7a:9b:e9:62:95:ca:b0:
         68:5e:d9:7d:ad:71:81:c9:a6:6c:2c:48:e8:bc:f1:ee:64:36:
         12:7d:76:1a:51:fe:fd:2b:58:eb:e2:73:8b:cf:f7:ba:13:8d:
         32:7e:62:a7:0a:a0:5f:a0:1b:ac:27:db:43:24:25:30:f7:1f:
         c5:8e:0b:dc:04:c6:bf:95:b6:68:e6:86:b7:00:94:b7:09:68:
         a7:25:14:f3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVlnR7wkY5gZHclMAlx5NSJP577IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBMjJENkQ3NTU0NEJFQ0M2RTUzNDg2RkVENjYxREYw
MkJBRkM2OTAeFw0yNTAyMTAxNzU4NTJaFw0yNjAyMDkxODAzNTJaMDMxMTAvBgNV
BAMTKERCNDRDMzgxMTg2OEI4NEM4MjZBNzY4RTAwQUFENkRGRjQwNTZEM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+B7OLZdpzOh6PtG4XEoXItWS
fXs0rN/O/DGuIz2baYnxI8W5zrmlZldKn5fOF8wejra7z9NzJBwmYhbtnD5A7ENK
EPmatJ98sA32nDML9ehs8AWNOoYuYL0ZmUpJ1vOil6ma6dy/bO8E0t8/jgeSyMLG
/OgUXApQrOuqJEX7fTs79ByuL+C1yk8h1vNgddqj3rrg0Sv/K7+OQ7WXZ6oHyL7+
kmWDn/vwKJoR2/30rI190svRDwrqLYZxUZq1LHlW7PZczFGRQ0gScIV3F+bz20Kw
5ajbdx5k2D/SVAHctWzSe6eGTv0Twjw9UXJZNbpeAKZTOKbzmWPOwbj4f9RTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU20TDgRhouEyCanaOAKrW3/QFbTowHwYDVR0j
BBgwFoAU3aItbXVUS+zG5TSG/tZh3wK6/GkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENjSHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lE
ZFovMC9EREEyMkQ2RDc1NTQ0QkVDQzZFNTM0ODZGRUQ2NjFERjAyQkFGQzY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTIyRDZENzU1NDRCRUND
NkU1MzQ4NkZFRDY2MURGMDJCQUZDNjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDY0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAv
MzIzODMwMzQzYTM1NjUzNDYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMwMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEXkzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAl6XlACJELVavS5TWVs1LjlTp5Y+ExMbLtbUJtZX87+RaDlMG15UdgjrfK
sQm9AGr/C5MkzCiDXXiQf5KckfMO8Z0h2y7JU/vRsGz57E9LZzVGAx9rrh3ZaPqu
9CnVMQ5/JuAFF/ThQyu9PfiUNeJakgpdICLpxQPCwSz47yNOjCxCp2zV57ePYak8
5KCG5GK78k84UKEXo+szgS9QXx3xGGcUr3iF3KfhSPpdMnqb6WKVyrBoXtl9rXGB
yaZsLEjovPHuZDYSfXYaUf79K1jr4nOLz/e6E40yfmKnCqBfoBusJ9tDJCUw9x/F
jgvcBMa/lbZo5oa3AJS3CWinJRTz
-----END CERTIFICATE-----
Generated at Sat Feb 22 07:59:38 2025 by rpki-client