Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a313030303a3a2f33362d3336203d3e20323638313139.roa
File:                     323830343a353834383a313030303a3a2f33362d3336203d3e20323638313139.roa (raw, json)
Hash identifier:          x2gdBq7EuFpF7y6zMVFL64fdqB5ddP6ykW8+LhsSt8w=
Subject key identifier:   A9:31:2F:71:43:3B:3F:10:A1:E5:FA:FD:F0:AD:C8:20:9F:38:C4:41
Certificate issuer:       /CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
Certificate serial:       60EA1E5BE6696F78947698CB3878A7F61FE06701
Authority key identifier: 05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a313030303a3a2f33362d3336203d3e20323638313139.roa
Signing time:             Wed 29 May 2024 14:37:56 +0000
ROA not before:           Wed 29 May 2024 14:32:56 +0000
ROA not after:            Wed 28 May 2025 14:37:56 +0000
asID:                     268119
IP address blocks:        2804:5848:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ea:1e:5b:e6:69:6f:78:94:76:98:cb:38:78:a7:f6:1f:e0:67:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
        Validity
            Not Before: May 29 14:32:56 2024 GMT
            Not After : May 28 14:37:56 2025 GMT
        Subject: CN=A9312F71433B3F10A1E5FAFDF0ADC8209F38C441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:ed:3d:04:db:f9:37:17:89:9a:21:35:a5:
                    32:7b:a8:ad:10:3f:8f:67:8e:40:76:da:cc:61:31:
                    41:6a:7f:b6:03:b7:f1:24:75:38:94:2a:3a:cf:a3:
                    e0:f0:34:97:02:e8:9b:a1:50:64:7e:c4:28:a8:92:
                    86:6f:3e:02:f8:e2:d9:45:8c:f7:7d:2d:40:7f:c3:
                    8a:fe:e0:98:45:0b:a4:c9:5e:fb:e4:7b:2c:44:68:
                    8b:c0:e3:33:66:49:58:fd:c5:c6:32:a2:97:71:9f:
                    6f:f7:f3:b1:ec:9c:f9:f9:e9:01:7a:b7:7f:cc:ef:
                    ee:c3:fd:8e:99:79:e5:3f:b8:9e:f1:1b:01:9f:7c:
                    11:e1:12:45:48:06:58:03:0a:7e:7f:b6:94:71:8f:
                    10:4d:57:94:06:de:a0:8f:fe:eb:08:05:67:23:d7:
                    58:e5:b2:23:04:02:f3:71:cd:9e:b5:75:95:1e:ee:
                    56:68:ea:af:47:90:1e:03:16:ee:41:d2:60:70:c0:
                    2a:59:9f:83:ed:93:22:24:35:1b:f1:93:6d:ed:db:
                    f0:7f:d6:63:26:b2:e3:33:4a:69:28:a7:34:80:61:
                    bc:04:e8:1a:f2:78:16:1e:a1:dc:42:67:41:68:35:
                    53:66:09:f3:c2:38:26:e1:d4:9c:13:88:a0:ac:28:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:31:2F:71:43:3B:3F:10:A1:E5:FA:FD:F0:AD:C8:20:9F:38:C4:41
            X509v3 Authority Key Identifier:
                keyid:05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/05F9FA82E6DC844616C6E65830AA93270618DA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a313030303a3a2f33362d3336203d3e20323638313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5848:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bd:3a:5f:2b:ff:1b:39:71:ea:2f:68:09:4c:54:4a:49:f3:2f:
         03:81:c9:5b:87:25:da:ed:a7:09:8c:29:36:87:e2:20:98:c0:
         e9:e0:86:76:46:3e:48:2a:8d:77:66:f5:66:a4:b7:1c:7a:aa:
         ca:b2:9c:03:56:ed:85:00:2d:fd:96:9b:6d:d0:40:df:c4:4f:
         e4:16:78:e8:73:a0:ff:be:93:bf:82:9c:95:db:b4:ac:f2:fc:
         05:38:e1:d4:2f:f5:62:a5:9b:ce:07:e6:56:fc:2b:5f:16:a7:
         5c:b1:7d:5a:66:a1:b0:2c:47:2d:9a:24:3f:dd:95:f1:f5:34:
         b8:7f:0d:4b:e1:a5:dc:28:13:0b:ac:2d:6a:51:f9:74:08:da:
         3d:42:cc:6b:b1:72:63:2c:dd:1a:e4:57:82:fb:ab:8b:fa:c2:
         12:ca:5f:d3:d1:82:d1:94:2d:93:29:43:c6:91:95:c6:c3:24:
         d2:a8:a3:60:4b:df:b0:7d:71:fb:fe:7d:ca:47:13:aa:35:d6:
         a7:27:bf:34:40:44:fc:73:2d:67:15:ec:cc:6f:2e:10:25:af:
         e0:00:57:7e:95:8c:6b:0b:04:24:20:df:6d:3a:7a:d7:a0:bc:
         46:1d:ed:02:58:69:c7:8e:cc:5a:d3:d7:59:b1:a2:b2:3e:28:
         2e:ce:69:22
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYOoeW+Zpb3iUdpjLOHin9h/gZwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVGOUZBODJFNkRDODQ0NjE2QzZFNjU4MzBBQTkzMjcw
NjE4REEzQTAeFw0yNDA1MjkxNDMyNTZaFw0yNTA1MjgxNDM3NTZaMDMxMTAvBgNV
BAMTKEE5MzEyRjcxNDMzQjNGMTBBMUU1RkFGREYwQURDODIwOUYzOEM0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNu09BNv5NxeJmiE1pTJ7qK0Q
P49njkB22sxhMUFqf7YDt/EkdTiUKjrPo+DwNJcC6JuhUGR+xCiokoZvPgL44tlF
jPd9LUB/w4r+4JhFC6TJXvvkeyxEaIvA4zNmSVj9xcYyopdxn2/387HsnPn56QF6
t3/M7+7D/Y6ZeeU/uJ7xGwGffBHhEkVIBlgDCn5/tpRxjxBNV5QG3qCP/usIBWcj
11jlsiMEAvNxzZ61dZUe7lZo6q9HkB4DFu5B0mBwwCpZn4PtkyIkNRvxk23t2/B/
1mMmsuMzSmkopzSAYbwE6BryeBYeodxCZ0FoNVNmCfPCOCbh1JwTiKCsKCUJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqTEvcUM7PxCh5fr98K3IIJ84xEEwHwYDVR0j
BBgwFoAUBfn6gubchEYWxuZYMKqTJwYY2jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWlMcWY2NGRBTTF3UTZ0RUVjUHJvUG5QS3BLODZaU3IxaWNkcUF3dVpK
YVMvMC8wNUY5RkE4MkU2REM4NDQ2MTZDNkU2NTgzMEFBOTMyNzA2MThEQTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1RjlGQTgyRTZEQzg0NDYx
NkM2RTY1ODMwQUE5MzI3MDYxOERBM0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpTHFmNjRkQU0xd1E2dEVFY1Byb1BuUEtwSzg2WlNyMWljZHFBd3VaSmFTLzAv
MzIzODMwMzQzYTM1MzgzNDM4M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMxMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWEgQMA0GCSqGSIb3DQEBCwUA
A4IBAQC9Ol8r/xs5ceovaAlMVEpJ8y8DgclbhyXa7acJjCk2h+IgmMDp4IZ2Rj5I
Ko13ZvVmpLcceqrKspwDVu2FAC39lptt0EDfxE/kFnjoc6D/vpO/gpyV27Ss8vwF
OOHUL/VipZvOB+ZW/CtfFqdcsX1aZqGwLEctmiQ/3ZXx9TS4fw1L4aXcKBMLrC1q
Ufl0CNo9QsxrsXJjLN0a5FeC+6uL+sISyl/T0YLRlC2TKUPGkZXGwyTSqKNgS9+w
fXH7/n3KRxOqNdanJ780QET8cy1nFezMby4QJa/gAFd+lYxrCwQkIN9tOnrXoLxG
He0CWGnHjsxa09dZsaKyPiguzmki
-----END CERTIFICATE-----
Generated at Fri Mar 14 06:06:26 2025 by rpki-client