Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/323830343a326164343a3a2f33322d313238203d3e20323635313231.roa
File:                     323830343a326164343a3a2f33322d313238203d3e20323635313231.roa (raw, json)
Hash identifier:          6FtEEZo2DRM9CMAsnC4TCBKhnDMFKQzZ+/qgaHavP9Q=
Subject key identifier:   4E:59:E7:0A:16:C9:CB:E7:A9:DA:A2:BD:5E:93:CB:19:E9:22:81:D8
Certificate issuer:       /CN=7B8E1235434FD5859B1AF0FE61E3D03E968369A1
Certificate serial:       2FC794FF303BC5CB2D10EDD0D9E9B13C42B5915F
Authority key identifier: 7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/323830343a326164343a3a2f33322d313238203d3e20323635313231.roa
Signing time:             Tue 14 Jan 2025 02:24:54 +0000
ROA not before:           Tue 14 Jan 2025 02:19:54 +0000
ROA not after:            Tue 13 Jan 2026 02:24:54 +0000
asID:                     265121
IP address blocks:        2804:2ad4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c7:94:ff:30:3b:c5:cb:2d:10:ed:d0:d9:e9:b1:3c:42:b5:91:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8E1235434FD5859B1AF0FE61E3D03E968369A1
        Validity
            Not Before: Jan 14 02:19:54 2025 GMT
            Not After : Jan 13 02:24:54 2026 GMT
        Subject: CN=4E59E70A16C9CBE7A9DAA2BD5E93CB19E92281D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:b2:43:2b:3e:64:cf:9d:9f:ac:4c:62:ef:
                    16:36:c6:74:86:7e:6d:05:e4:90:de:95:7c:84:ec:
                    00:84:85:04:30:f9:0b:b3:5e:98:59:73:ee:6f:c1:
                    ff:1f:ea:09:9c:b2:d1:26:00:d3:b9:f9:3d:51:67:
                    cf:b5:3a:57:ba:fe:98:76:56:31:e0:d5:12:50:bf:
                    af:26:84:28:ac:6a:cc:0f:43:97:6a:fc:2e:bd:9b:
                    d5:fa:05:33:20:ca:7a:7e:dd:4a:d4:db:77:7f:a1:
                    19:87:97:2c:93:3e:62:0f:6c:74:f8:43:fe:d0:b8:
                    f0:44:82:c9:58:00:fd:73:6b:d3:38:9f:d0:cf:33:
                    27:fa:36:73:7c:f3:12:5d:96:26:66:b2:c2:d0:03:
                    5c:a4:f4:cb:0e:5b:14:62:1b:c9:49:7c:3f:eb:aa:
                    e6:fb:9d:f6:cc:0c:27:b8:76:96:d4:fd:b5:78:55:
                    2c:12:4f:43:b6:68:d7:ab:80:f3:4b:4c:6f:0a:e0:
                    d1:e0:2d:dd:cf:ac:de:84:58:73:90:73:d0:b8:96:
                    b6:c7:b3:75:93:1a:23:22:63:ba:b1:f1:a4:2c:03:
                    75:23:2a:18:0e:36:3d:96:14:3d:3a:f4:f4:f4:bd:
                    31:57:b3:15:f5:34:a0:35:4c:e9:76:79:53:2b:85:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:59:E7:0A:16:C9:CB:E7:A9:DA:A2:BD:5E:93:CB:19:E9:22:81:D8
            X509v3 Authority Key Identifier:
                keyid:7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/323830343a326164343a3a2f33322d313238203d3e20323635313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ad4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:05:81:b7:7e:f8:77:ac:96:7e:ba:53:53:47:73:a9:7c:
         2d:04:14:b6:e5:4b:7d:43:c8:ab:0a:00:85:8f:55:ec:a3:89:
         84:f9:88:1d:4d:0b:12:bd:e1:4f:86:11:24:91:e4:d0:9e:bb:
         ad:8b:b5:3f:9f:a2:60:39:7c:70:4c:bc:04:cd:49:6a:85:be:
         b3:a1:48:42:46:9d:35:c1:bf:41:40:58:4d:11:4e:5e:e3:3f:
         09:dc:42:ee:5d:82:31:e4:05:45:2a:cd:11:37:9c:5d:d4:2e:
         fd:d5:49:d7:54:e2:76:f3:d5:9a:d5:41:8b:61:8f:5b:04:99:
         de:2a:4b:e1:2b:02:9a:e9:76:f5:6c:00:71:ac:82:a6:62:b3:
         60:85:49:9d:b9:07:c9:eb:95:fd:5c:a6:53:d2:76:e5:9f:c9:
         0f:41:06:ff:c1:6a:7c:f2:4b:3d:4b:5b:71:bf:5c:7a:a0:b6:
         74:da:b7:b0:81:72:ba:b2:ec:7b:ce:7d:1a:de:3b:36:6a:f1:
         29:a3:fc:c3:d6:6f:4a:db:6b:e3:dd:ca:41:46:bb:cb:c0:f0:
         02:7d:46:79:92:5e:c8:ee:6f:09:fa:7d:7f:12:59:ed:c4:c0:
         31:cd:24:ae:b2:58:ca:d9:d7:c5:28:7d:fd:d0:3a:01:a2:91:
         54:a7:1c:c2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUL8eU/zA7xcstEO3Q2emxPEK1kV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I4RTEyMzU0MzRGRDU4NTlCMUFGMEZFNjFFM0QwM0U5
NjgzNjlBMTAeFw0yNTAxMTQwMjE5NTRaFw0yNjAxMTMwMjI0NTRaMDMxMTAvBgNV
BAMTKDRFNTlFNzBBMTZDOUNCRTdBOURBQTJCRDVFOTNDQjE5RTkyMjgxRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0krJDKz5kz52frExi7xY2xnSG
fm0F5JDelXyE7ACEhQQw+QuzXphZc+5vwf8f6gmcstEmANO5+T1RZ8+1Ole6/ph2
VjHg1RJQv68mhCisaswPQ5dq/C69m9X6BTMgynp+3UrU23d/oRmHlyyTPmIPbHT4
Q/7QuPBEgslYAP1za9M4n9DPMyf6NnN88xJdliZmssLQA1yk9MsOWxRiG8lJfD/r
qub7nfbMDCe4dpbU/bV4VSwST0O2aNergPNLTG8K4NHgLd3PrN6EWHOQc9C4lrbH
s3WTGiMiY7qx8aQsA3UjKhgONj2WFD069PT0vTFXsxX1NKA1TOl2eVMrhe/NAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUTlnnChbJy+ep2qK9XpPLGekigdgwHwYDVR0j
BBgwFoAUe44SNUNP1YWbGvD+YePQPpaDaaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHNDN2ZnajNuUERSMWJHSlZTMUE2b0JMSm9aRGczVXR4UXZZcGl0TTZI
U1gvMC83QjhFMTIzNTQzNEZENTg1OUIxQUYwRkU2MUUzRDAzRTk2ODM2OUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCOEUxMjM1NDM0RkQ1ODU5
QjFBRjBGRTYxRTNEMDNFOTY4MzY5QTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhzQzdmZ2ozblBEUjFiR0pWUzFBNm9CTEpvWkRnM1V0eFF2WXBpdE02SFNYLzAv
MzIzODMwMzQzYTMyNjE2NDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCrUMA0GCSqGSIb3DQEBCwUAA4IBAQCKmwWB
t374d6yWfrpTU0dzqXwtBBS25Ut9Q8irCgCFj1Xso4mE+YgdTQsSveFPhhEkkeTQ
nruti7U/n6JgOXxwTLwEzUlqhb6zoUhCRp01wb9BQFhNEU5e4z8J3ELuXYIx5AVF
Ks0RN5xd1C791UnXVOJ289Wa1UGLYY9bBJneKkvhKwKa6Xb1bABxrIKmYrNghUmd
uQfJ65X9XKZT0nbln8kPQQb/wWp88ks9S1txv1x6oLZ02rewgXK6sux7zn0a3js2
avEpo/zD1m9K22vj3cpBRrvLwPACfUZ5kl7I7m8J+n1/ElntxMAxzSSusljK2dfF
KH390DoBopFUpxzC
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:58:57 2025 by rpki-client