Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3332203d3e20323634303235.roa
File:                     323830343a323939633a3a2f33322d3332203d3e20323634303235.roa (raw, json)
Hash identifier:          PiaIsGqQXhNDmhsAb1L7bLY2nd85ERH2R5pdSwko1qA=
Subject key identifier:   60:A5:01:3A:3B:E7:12:97:5F:F0:96:48:7F:68:F9:70:A6:88:D8:DD
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       777782492E69C439C69F2C01455BB5A3E259B024
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3332203d3e20323634303235.roa
Signing time:             Fri 08 Mar 2024 20:55:37 +0000
ROA not before:           Fri 08 Mar 2024 20:50:37 +0000
ROA not after:            Fri 07 Mar 2025 20:55:37 +0000
asID:                     264025
IP address blocks:        2804:299c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:77:82:49:2e:69:c4:39:c6:9f:2c:01:45:5b:b5:a3:e2:59:b0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar  8 20:50:37 2024 GMT
            Not After : Mar  7 20:55:37 2025 GMT
        Subject: CN=60A5013A3BE712975FF096487F68F970A688D8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:e8:85:f3:95:f9:53:14:a7:ef:8a:7b:49:
                    26:fb:26:a5:68:5e:8e:42:98:8d:96:35:03:86:2c:
                    51:b4:b0:38:de:f3:79:a7:cd:13:d4:ae:d4:6a:0f:
                    31:28:5f:24:95:ee:91:ab:d2:87:da:2c:a7:20:12:
                    8a:ef:a8:54:c4:88:69:8c:78:1d:07:b5:c0:9c:4e:
                    b9:c3:bf:47:12:d2:b1:cb:67:b7:2e:85:0b:0f:9c:
                    ca:1d:43:13:41:a5:09:37:4f:37:09:1b:9d:78:99:
                    a3:69:21:5f:8b:24:ff:bb:a5:1f:61:7e:c5:a8:15:
                    ee:4f:10:32:58:e6:e1:81:0d:40:0e:5e:ec:4e:42:
                    75:06:e7:92:e2:3a:c8:41:0f:ce:05:c0:84:27:cb:
                    af:3c:85:26:95:93:4a:cc:2b:ec:d6:6d:f6:bd:b2:
                    a0:17:cf:e1:71:5a:aa:70:7d:25:9b:db:38:6b:08:
                    a8:18:c1:ee:1d:ab:02:2c:35:db:30:50:a0:a0:5a:
                    2d:7c:0c:b0:07:fa:1a:c6:d1:9c:9a:f4:06:ae:db:
                    83:7f:d8:4c:28:e7:1c:8a:42:7e:c2:3c:a1:84:58:
                    7a:7a:77:8d:65:e1:74:da:3d:93:18:36:a2:4e:1f:
                    26:7a:7a:5c:9e:f1:a1:03:c6:26:ff:ca:ae:86:7e:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A5:01:3A:3B:E7:12:97:5F:F0:96:48:7F:68:F9:70:A6:88:D8:DD
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3332203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:4d:52:b7:d9:c8:aa:99:21:5e:c8:b3:be:78:fa:cc:9f:
         0f:df:e9:fb:1c:35:03:00:10:fa:5d:69:13:a0:e3:b3:e6:ee:
         43:b6:11:48:37:63:3d:be:a1:7d:ca:ab:7f:d1:e0:a9:e7:67:
         9c:71:02:37:13:1d:8c:12:40:fe:8c:f2:fb:c6:53:7d:4b:4f:
         87:5e:35:7c:4a:bf:dc:2e:33:96:c2:9e:7d:50:1a:47:f2:59:
         65:18:11:e5:f2:3a:ae:83:5f:54:56:cf:66:ef:9e:36:66:b1:
         1d:e6:0d:df:e5:14:5e:8a:05:22:8d:0e:e7:d6:a8:aa:f5:c2:
         d6:3c:56:40:0b:33:82:5e:93:64:d7:a9:f8:cf:72:73:2c:de:
         a6:35:50:dc:24:6c:e8:da:4f:be:74:98:d3:6c:46:06:90:4a:
         99:63:c3:f0:d7:78:e1:a6:a9:c0:ad:61:33:53:b8:04:5d:57:
         69:c0:0d:f0:ef:12:19:71:b0:04:cf:3e:5b:9c:94:67:0f:84:
         94:31:4d:a1:e1:4d:16:2f:c8:d7:00:aa:65:38:38:6b:0f:1d:
         34:e6:7b:5e:56:49:6c:a6:fe:13:6d:ff:24:4d:8c:fc:e5:37:
         00:f9:21:73:ef:41:85:b5:21:5e:7c:7d:0d:16:5c:a4:41:41:
         4d:c4:c3:30
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUd3eCSS5pxDnGnywBRVu1o+JZsCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI3Q0EyRUE0RjczOEYwMTM3RTUwQjIyQkFEOTU3QzVF
NkY1QUEwNDAeFw0yNDAzMDgyMDUwMzdaFw0yNTAzMDcyMDU1MzdaMDMxMTAvBgNV
BAMTKDYwQTUwMTNBM0JFNzEyOTc1RkYwOTY0ODdGNjhGOTcwQTY4OEQ4REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQreiF85X5UxSn74p7SSb7JqVo
Xo5CmI2WNQOGLFG0sDje83mnzRPUrtRqDzEoXySV7pGr0ofaLKcgEorvqFTEiGmM
eB0HtcCcTrnDv0cS0rHLZ7cuhQsPnModQxNBpQk3TzcJG514maNpIV+LJP+7pR9h
fsWoFe5PEDJY5uGBDUAOXuxOQnUG55LiOshBD84FwIQny688hSaVk0rMK+zWbfa9
sqAXz+FxWqpwfSWb2zhrCKgYwe4dqwIsNdswUKCgWi18DLAH+hrG0Zya9Aau24N/
2Ewo5xyKQn7CPKGEWHp6d41l4XTaPZMYNqJOHyZ6elye8aEDxib/yq6GfmH3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYKUBOjvnEpdf8JZIf2j5cKaI2N0wHwYDVR0j
BBgwFoAUEnyi6k9zjwE35QsiutlXxeb1qgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC8xMjdDQTJFQTRGNzM4RjAxMzdFNTBCMjJCQUQ5NTdDNUU2RjVBQTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyN0NBMkVBNEY3MzhGMDEz
N0U1MEIyMkJBRDk1N0M1RTZGNUFBMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzIzODMwMzQzYTMyMzkzOTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQpnDANBgkqhkiG9w0BAQsFAAOCAQEAmxRNUrfZ
yKqZIV7Is754+syfD9/p+xw1AwAQ+l1pE6Djs+buQ7YRSDdjPb6hfcqrf9Hgqedn
nHECNxMdjBJA/ozy+8ZTfUtPh141fEq/3C4zlsKefVAaR/JZZRgR5fI6roNfVFbP
Zu+eNmaxHeYN3+UUXooFIo0O59aoqvXC1jxWQAszgl6TZNep+M9ycyzepjVQ3CRs
6NpPvnSY02xGBpBKmWPD8Nd44aapwK1hM1O4BF1XacAN8O8SGXGwBM8+W5yUZw+E
lDFNoeFNFi/I1wCqZTg4aw8dNOZ7XlZJbKb+E23/JE2M/OU3APkhc+9BhbUhXnx9
DRZcpEFBTcTDMA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:02 2025 by rpki-client