Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/323830343a383631303a3a2f33322d3438203d3e20323732363138.roa
File:                     323830343a383631303a3a2f33322d3438203d3e20323732363138.roa (raw, json)
Hash identifier:          +gbqMv2+kfPN5ejj6dFG0507kTZkIDsMdyJQvehZTWg=
Subject key identifier:   79:B2:67:C5:1F:F7:C9:05:3D:81:F2:03:FC:1A:2B:14:BE:0B:CF:4A
Certificate issuer:       /CN=B192E36D3AFFBFF2FFDCCD24F351215930336F1E
Certificate serial:       615821C0DDAEDF889640C15AD7B0D0DB9CC8D0E3
Authority key identifier: B1:92:E3:6D:3A:FF:BF:F2:FF:DC:CD:24:F3:51:21:59:30:33:6F:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/323830343a383631303a3a2f33322d3438203d3e20323732363138.roa
Signing time:             Thu 06 Mar 2025 19:01:01 +0000
ROA not before:           Thu 06 Mar 2025 18:56:01 +0000
ROA not after:            Thu 05 Mar 2026 19:01:01 +0000
asID:                     272618
IP address blocks:        2804:8610::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:58:21:c0:dd:ae:df:88:96:40:c1:5a:d7:b0:d0:db:9c:c8:d0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B192E36D3AFFBFF2FFDCCD24F351215930336F1E
        Validity
            Not Before: Mar  6 18:56:01 2025 GMT
            Not After : Mar  5 19:01:01 2026 GMT
        Subject: CN=79B267C51FF7C9053D81F203FC1A2B14BE0BCF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:0e:38:7b:58:7a:70:53:24:07:a1:41:90:
                    95:ec:d3:f0:c0:0e:7d:b2:c2:40:32:91:be:c0:1a:
                    66:3c:18:89:97:43:74:76:b7:e2:13:27:c9:43:70:
                    0b:cb:4e:47:dc:61:fa:8c:05:55:4f:41:02:80:5e:
                    98:0f:3a:cf:31:62:d9:6a:17:47:a6:9d:78:78:67:
                    6e:06:3a:b6:fa:81:c8:7e:55:e6:f0:35:80:a6:ec:
                    60:57:40:1d:36:aa:44:2f:99:92:f7:ff:59:f7:00:
                    5b:eb:05:83:a4:75:14:37:7d:e1:a1:48:f7:8d:69:
                    5d:4f:70:b5:be:59:66:bb:8f:da:b6:b8:43:b0:6c:
                    cc:b4:c9:4f:85:7b:9e:d2:a8:98:81:8d:68:02:b0:
                    64:5e:cf:c6:7e:38:91:a1:a0:11:dd:f3:31:53:3a:
                    ee:91:1c:c1:d8:20:e5:9e:4a:72:3b:17:dd:d8:67:
                    c5:05:7f:44:48:9f:b3:ea:90:73:1d:5e:69:7d:88:
                    76:13:3f:59:1a:fa:1f:86:96:20:44:ad:92:b5:34:
                    f2:c4:a4:5a:11:76:71:9a:21:df:1a:af:3f:c8:e5:
                    95:f8:14:cc:32:a8:2f:75:74:bc:93:92:95:c0:97:
                    6d:19:c6:0b:3d:42:d2:6e:f6:78:98:39:9a:70:9d:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B2:67:C5:1F:F7:C9:05:3D:81:F2:03:FC:1A:2B:14:BE:0B:CF:4A
            X509v3 Authority Key Identifier:
                keyid:B1:92:E3:6D:3A:FF:BF:F2:FF:DC:CD:24:F3:51:21:59:30:33:6F:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/323830343a383631303a3a2f33322d3438203d3e20323732363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8610::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:fe:f0:7f:a4:9f:91:d1:98:d3:32:5b:3c:f9:2b:55:91:78:
         27:c2:cb:98:bd:fa:97:8a:61:3d:61:d1:20:ec:98:ad:c3:fc:
         7a:ef:f3:70:0c:72:c6:ce:16:fe:87:22:77:f2:d5:0c:c9:ed:
         50:7d:1e:71:b3:c5:7d:c7:fd:c3:56:88:94:e0:e4:71:6d:bd:
         a8:e1:ea:c4:14:ad:1a:68:3f:81:6a:97:78:58:32:33:36:07:
         97:89:fe:2d:13:8a:c0:d9:92:ce:02:0e:a5:09:b3:df:41:c2:
         09:a6:d2:17:50:8a:d5:d5:95:21:d5:d2:1a:aa:9d:0c:d4:d2:
         48:c5:20:90:4e:07:cd:29:10:28:e2:02:94:64:1f:72:5d:de:
         38:eb:db:18:72:d3:69:ed:83:64:06:53:d1:00:ff:6f:ff:30:
         85:1a:07:f8:a6:c9:e0:4c:5c:38:73:7e:19:e5:e8:da:85:c9:
         b9:18:94:76:5a:02:dc:94:8b:a6:33:37:3f:66:01:7a:10:50:
         ba:97:33:e4:45:ab:1f:45:68:ea:4d:88:25:1f:70:6a:bb:97:
         24:26:9a:75:60:95:65:7f:88:7d:a1:55:69:83:b0:32:ca:15:
         13:75:37:8e:bf:7c:19:a4:cf:48:09:4c:c5:7d:cf:41:70:68:
         2d:cb:10:b7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYVghwN2u34iWQMFa17DQ25zI0OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5MkUzNkQzQUZGQkZGMkZGRENDRDI0RjM1MTIxNTkz
MDMzNkYxRTAeFw0yNTAzMDYxODU2MDFaFw0yNjAzMDUxOTAxMDFaMDMxMTAvBgNV
BAMTKDc5QjI2N0M1MUZGN0M5MDUzRDgxRjIwM0ZDMUEyQjE0QkUwQkNGNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jw44e1h6cFMkB6FBkJXs0/DA
Dn2ywkAykb7AGmY8GImXQ3R2t+ITJ8lDcAvLTkfcYfqMBVVPQQKAXpgPOs8xYtlq
F0emnXh4Z24GOrb6gch+VebwNYCm7GBXQB02qkQvmZL3/1n3AFvrBYOkdRQ3feGh
SPeNaV1PcLW+WWa7j9q2uEOwbMy0yU+Fe57SqJiBjWgCsGRez8Z+OJGhoBHd8zFT
Ou6RHMHYIOWeSnI7F93YZ8UFf0RIn7PqkHMdXml9iHYTP1ka+h+GliBErZK1NPLE
pFoRdnGaId8arz/I5ZX4FMwyqC91dLyTkpXAl20Zxgs9QtJu9niYOZpwna3TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUebJnxR/3yQU9gfID/BorFL4Lz0owHwYDVR0j
BBgwFoAUsZLjbTr/v/L/3M0k81EhWTAzbx4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRWM0NMejVHQkpXc1dKOVcxRU1pRWdvUXo0TjdIek5STFVFcHVubnQ3
dWkvMS9CMTkyRTM2RDNBRkZCRkYyRkZEQ0NEMjRGMzUxMjE1OTMwMzM2RjFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxOTJFMzZEM0FGRkJGRjJG
RkRDQ0QyNEYzNTEyMTU5MzAzMzZGMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0VjNDTHo1R0JKV3NXSjlXMUVNaUVnb1F6NE43SHpOUkxVRXB1bm50N3VpLzEv
MzIzODMwMzQzYTM4MzYzMTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASGEDANBgkqhkiG9w0BAQsFAAOCAQEA2f7wf6Sf
kdGY0zJbPPkrVZF4J8LLmL36l4phPWHRIOyYrcP8eu/zcAxyxs4W/ocid/LVDMnt
UH0ecbPFfcf9w1aIlODkcW29qOHqxBStGmg/gWqXeFgyMzYHl4n+LROKwNmSzgIO
pQmz30HCCabSF1CK1dWVIdXSGqqdDNTSSMUgkE4HzSkQKOIClGQfcl3eOOvbGHLT
ae2DZAZT0QD/b/8whRoH+KbJ4ExcOHN+GeXo2oXJuRiUdloC3JSLpjM3P2YBehBQ
upcz5EWrH0Vo6k2IJR9waruXJCaadWCVZX+IfaFVaYOwMsoVE3U3jr98GaTPSAlM
xX3PQXBoLcsQtw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:01 2025 by rpki-client