Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa
File:                     323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa (raw, json)
Hash identifier:          8s5e127dU7/EznWjKEQqBfCMfHXWL9OO9dUHUkrLvUs=
Subject key identifier:   DF:06:3F:AB:1A:2F:09:0C:F1:09:0B:D8:39:38:2E:B9:F9:61:B7:D7
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       4EA806E1B995AFFC502BCF11A2F7277362A120EC
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa
Signing time:             Fri 07 Mar 2025 04:00:38 +0000
ROA not before:           Fri 07 Mar 2025 03:55:38 +0000
ROA not after:            Fri 06 Mar 2026 04:00:38 +0000
asID:                     269417
IP address blocks:        2804:6444:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a8:06:e1:b9:95:af:fc:50:2b:cf:11:a2:f7:27:73:62:a1:20:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Mar  7 03:55:38 2025 GMT
            Not After : Mar  6 04:00:38 2026 GMT
        Subject: CN=DF063FAB1A2F090CF1090BD839382EB9F961B7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:2e:3f:ec:fb:6a:5a:87:3e:96:ee:78:86:
                    33:c8:e5:27:6a:4a:1d:6c:fd:9a:fe:6c:7d:f2:e5:
                    f3:e4:b0:cd:b5:86:10:79:08:93:fc:45:0b:1c:1c:
                    b2:8d:24:63:8f:73:fe:bb:1f:40:ca:15:45:50:5d:
                    44:5a:de:66:0f:55:a1:3a:f1:c6:4a:cd:c3:16:8b:
                    cc:a1:78:d4:c0:95:4b:3e:ce:eb:26:47:75:96:af:
                    0b:c0:fc:41:ff:61:5f:03:03:ab:e9:0d:89:88:e6:
                    39:81:bb:5c:22:cd:82:fe:40:41:7e:fa:12:7f:48:
                    6a:9f:34:80:c2:2e:03:f4:9d:e0:28:7b:7b:f2:dc:
                    16:91:db:f5:2e:70:54:86:d4:9e:ba:c0:5b:88:82:
                    0d:bc:54:73:1b:94:07:ec:2e:64:d9:15:e9:b9:c2:
                    bb:0a:1e:d1:9e:66:d2:5c:9b:57:8b:eb:80:1d:9e:
                    6b:d1:cd:31:b1:70:97:d0:ca:44:83:8c:ff:83:5c:
                    63:ab:db:62:dc:43:fe:74:f5:4e:eb:56:e7:4d:68:
                    65:ec:b7:48:11:24:62:89:01:d4:be:9d:0f:b5:0a:
                    32:50:0d:7d:88:2f:00:fb:b0:52:e6:8e:12:23:a7:
                    7f:ee:8a:af:ec:1d:40:48:f3:a6:e9:08:8b:b9:c6:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:3F:AB:1A:2F:09:0C:F1:09:0B:D8:39:38:2E:B9:F9:61:B7:D7
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:64:5a:89:0f:7f:71:e0:b3:dd:f7:8e:41:99:bc:c4:0b:c1:
         70:a1:82:3f:33:96:84:c3:9b:6f:88:6c:6e:1b:08:8f:c5:81:
         28:3e:d0:5e:f4:72:00:fc:57:50:b4:65:fb:13:70:06:63:a2:
         05:b4:2c:d3:e0:ac:a7:57:02:84:83:71:6c:63:f1:dd:62:0a:
         f8:bc:0c:93:db:ad:a1:89:6e:75:25:bd:2f:6c:b9:f4:ff:e3:
         89:d4:84:68:e8:4a:c0:9e:1f:f1:ff:f4:f9:af:ff:9c:d2:84:
         be:92:7e:66:4e:10:61:db:42:c4:89:91:e9:46:43:13:ef:96:
         21:a3:02:1e:e2:04:58:72:ef:3e:01:66:74:33:b1:c3:76:13:
         9b:75:eb:97:86:f4:9f:9c:76:ff:72:55:86:09:cf:22:eb:f8:
         21:b6:5a:c8:11:f7:78:a5:17:d1:d9:99:3e:c7:61:a4:4e:e1:
         32:07:47:0a:89:f9:5a:28:f2:c8:04:2b:17:2d:8a:75:18:65:
         91:c1:2c:10:51:39:8a:97:80:e1:63:7c:5c:37:68:0f:06:47:
         68:60:c2:12:34:75:fc:e8:25:76:0c:3f:f8:fd:4e:0f:9d:be:
         3c:0e:b1:c8:4b:92:1c:a3:39:57:67:e1:6c:77:51:77:d1:d2:
         a9:d0:4a:f9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTqgG4bmVr/xQK88Rovcnc2KhIOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgyNTE3QjkxMDU5NTVCN0I4MzlGQjYwREM1OUFFNjc3
QzZCNERFRDAeFw0yNTAzMDcwMzU1MzhaFw0yNjAzMDYwNDAwMzhaMDMxMTAvBgNV
BAMTKERGMDYzRkFCMUEyRjA5MENGMTA5MEJEODM5MzgyRUI5Rjk2MUI3RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mi4/7PtqWoc+lu54hjPI5Sdq
Sh1s/Zr+bH3y5fPksM21hhB5CJP8RQscHLKNJGOPc/67H0DKFUVQXURa3mYPVaE6
8cZKzcMWi8yheNTAlUs+zusmR3WWrwvA/EH/YV8DA6vpDYmI5jmBu1wizYL+QEF+
+hJ/SGqfNIDCLgP0neAoe3vy3BaR2/UucFSG1J66wFuIgg28VHMblAfsLmTZFem5
wrsKHtGeZtJcm1eL64AdnmvRzTGxcJfQykSDjP+DXGOr22LcQ/509U7rVudNaGXs
t0gRJGKJAdS+nQ+1CjJQDX2ILwD7sFLmjhIjp3/uiq/sHUBI86bpCIu5xhlLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3wY/qxovCQzxCQvYOTguuflht9cwHwYDVR0j
BBgwFoAUWCUXuRBZVbe4Oftg3FmuZ3xrTe0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJQNUdXR0pTNWhGUUs3ZjV2UVNIVmRRWmJOYWlKNFdrV3BBeG1iYmVx
NUQvMS81ODI1MTdCOTEwNTk1NUI3QjgzOUZCNjBEQzU5QUU2NzdDNkI0REVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4MjUxN0I5MTA1OTU1QjdC
ODM5RkI2MERDNTlBRTY3N0M2QjRERUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyUDVHV0dKUzVoRlFLN2Y1dlFTSFZkUVpiTmFpSjRXa1dwQXhtYmJlcTVELzEv
MzIzODMwMzQzYTM2MzQzNDM0M2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzOTM0MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEZEQQMA0GCSqGSIb3DQEBCwUA
A4IBAQBNZFqJD39x4LPd945BmbzEC8FwoYI/M5aEw5tviGxuGwiPxYEoPtBe9HIA
/FdQtGX7E3AGY6IFtCzT4KynVwKEg3FsY/HdYgr4vAyT262hiW51Jb0vbLn0/+OJ
1IRo6ErAnh/x//T5r/+c0oS+kn5mThBh20LEiZHpRkMT75YhowIe4gRYcu8+AWZ0
M7HDdhObdeuXhvSfnHb/clWGCc8i6/ghtlrIEfd4pRfR2Zk+x2GkTuEyB0cKifla
KPLIBCsXLYp1GGWRwSwQUTmKl4DhY3xcN2gPBkdoYMISNHX86CV2DD/4/U4Pnb48
DrHIS5IcozlXZ+Fsd1F30dKp0Er5
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:08:04 2025 by rpki-client