Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/323830343a333436383a3a2f33322d3438203d3e20323635343535.roa
File:                     323830343a333436383a3a2f33322d3438203d3e20323635343535.roa (raw, json)
Hash identifier:          pKsR4yCXyOO1eCp4pCQwn0e9niY15SEaRgDnTDk2DWo=
Subject key identifier:   08:19:08:26:70:A5:47:CD:0A:ED:D6:44:5E:1F:49:3E:2D:93:64:5B
Certificate issuer:       /CN=59B49535D97161F361B9B3FAA9E46A49BA2387C0
Certificate serial:       4696058206498CFD7B3903BE2A519AED3800479D
Authority key identifier: 59:B4:95:35:D9:71:61:F3:61:B9:B3:FA:A9:E4:6A:49:BA:23:87:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/323830343a333436383a3a2f33322d3438203d3e20323635343535.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265455
IP address blocks:        2804:3468::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:96:05:82:06:49:8c:fd:7b:39:03:be:2a:51:9a:ed:38:00:47:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B49535D97161F361B9B3FAA9E46A49BA2387C0
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=0819082670A547CD0AEDD6445E1F493E2D93645B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:82:74:97:98:a3:78:50:2e:40:2e:37:2f:
                    7b:26:d3:b0:37:0c:0a:f2:d5:0f:44:9a:fc:10:45:
                    5d:dc:e5:8c:02:ca:5f:55:73:ad:1f:5b:95:5b:19:
                    ec:b3:de:cc:72:d6:23:83:33:ae:5f:b0:77:60:60:
                    77:cf:e0:3d:0e:1b:85:41:99:45:0f:58:a6:f0:b2:
                    fa:4a:75:e8:3d:61:c5:39:84:9f:49:b9:96:22:9f:
                    ab:ad:5d:1e:8b:42:30:41:c9:90:2f:6c:bf:37:7f:
                    a6:e2:32:21:19:b5:2d:b3:a3:cf:0f:a7:0c:c0:53:
                    d8:ae:0e:a7:08:7f:b5:2b:82:b0:3d:4c:27:d5:e6:
                    eb:a1:6f:36:0b:8f:47:b7:46:16:12:a4:03:ff:f6:
                    94:f6:2f:b0:65:90:7b:a8:93:db:df:d9:14:95:fc:
                    85:1d:df:4e:6a:0d:43:2e:fc:c2:cb:47:de:55:be:
                    71:aa:d3:10:23:34:21:19:c4:fd:a7:86:35:dc:33:
                    a2:6a:5f:2b:ee:dc:54:82:34:5d:c3:4c:1f:57:38:
                    da:d0:d8:73:63:24:17:e6:73:57:85:42:c1:ce:f2:
                    f5:a3:60:d6:4b:f1:cf:8b:93:78:63:68:5b:07:12:
                    4d:a8:55:29:5f:fe:e7:a3:bd:f2:fb:41:a9:4a:1f:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:19:08:26:70:A5:47:CD:0A:ED:D6:44:5E:1F:49:3E:2D:93:64:5B
            X509v3 Authority Key Identifier:
                keyid:59:B4:95:35:D9:71:61:F3:61:B9:B3:FA:A9:E4:6A:49:BA:23:87:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/323830343a333436383a3a2f33322d3438203d3e20323635343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3468::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:9f:cf:1d:d9:b8:04:d6:2a:d1:c7:89:c9:bd:d3:f1:67:
         31:d5:cb:27:a6:59:78:f7:e4:7b:5c:e1:78:b5:80:9b:36:de:
         ec:58:d9:34:f8:54:e7:ab:51:03:47:5f:13:a3:ac:34:dd:40:
         d9:1c:d2:81:d4:41:b0:cf:bf:95:da:cf:85:3e:88:3d:cf:45:
         35:59:1b:fb:b0:9b:bf:06:0e:e6:f9:aa:25:5a:ea:4c:1f:ec:
         e8:8f:55:95:20:53:37:d6:ea:ef:e5:c6:cc:c9:e8:0c:b5:a8:
         9c:bc:82:04:4d:b1:c9:27:33:24:3d:21:d4:be:ee:bd:08:28:
         a3:04:8c:61:f9:2b:04:6f:37:52:4b:4e:00:c9:11:4a:db:6e:
         1d:eb:90:7f:78:f8:84:47:74:6a:6d:58:ce:a3:4c:e5:25:1d:
         e1:41:cc:f4:3a:30:f8:79:49:cf:10:3c:06:84:e5:c0:1b:ca:
         cd:70:53:d1:57:ec:e1:79:fb:80:a7:d2:22:0c:2a:bf:55:00:
         23:a4:9a:65:9f:0c:84:fc:e3:b0:0f:99:e1:c6:82:72:93:43:
         91:a0:38:fa:f4:68:3b:4b:4a:06:be:30:c9:fa:f3:4b:5e:a5:
         c2:30:03:23:be:41:6f:07:56:8f:1c:9d:56:2b:67:26:1e:b0:
         74:10:84:d8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURpYFggZJjP17OQO+KlGa7TgAR50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNDk1MzVEOTcxNjFGMzYxQjlCM0ZBQTlFNDZBNDlC
QTIzODdDMDAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDA4MTkwODI2NzBBNTQ3Q0QwQUVERDY0NDVFMUY0OTNFMkQ5MzY0NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/IJ0l5ijeFAuQC43L3sm07A3
DAry1Q9EmvwQRV3c5YwCyl9Vc60fW5VbGeyz3sxy1iODM65fsHdgYHfP4D0OG4VB
mUUPWKbwsvpKdeg9YcU5hJ9JuZYin6utXR6LQjBByZAvbL83f6biMiEZtS2zo88P
pwzAU9iuDqcIf7UrgrA9TCfV5uuhbzYLj0e3RhYSpAP/9pT2L7BlkHuok9vf2RSV
/IUd305qDUMu/MLLR95VvnGq0xAjNCEZxP2nhjXcM6JqXyvu3FSCNF3DTB9XONrQ
2HNjJBfmc1eFQsHO8vWjYNZL8c+Lk3hjaFsHEk2oVSlf/uejvfL7QalKH/mDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUCBkIJnClR80K7dZEXh9JPi2TZFswHwYDVR0j
BBgwFoAUWbSVNdlxYfNhubP6qeRqSbojh8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNhTGRibnE4aTNiZnFCbUpoNTNSWUVDTEY0TW9MYW5GN0x1SzhwemdY
VTEvMS81OUI0OTUzNUQ5NzE2MUYzNjFCOUIzRkFBOUU0NkE0OUJBMjM4N0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5QjQ5NTM1RDk3MTYxRjM2
MUI5QjNGQUE5RTQ2QTQ5QkEyMzg3QzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzYUxkYm5xOGkzYmZxQm1KaDUzUllFQ0xGNE1vTGFuRjdMdUs4cHpnWFUxLzEv
MzIzODMwMzQzYTMzMzQzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0aDANBgkqhkiG9w0BAQsFAAOCAQEAMuyfzx3Z
uATWKtHHicm90/FnMdXLJ6ZZePfke1zheLWAmzbe7FjZNPhU56tRA0dfE6OsNN1A
2RzSgdRBsM+/ldrPhT6IPc9FNVkb+7CbvwYO5vmqJVrqTB/s6I9VlSBTN9bq7+XG
zMnoDLWonLyCBE2xySczJD0h1L7uvQgoowSMYfkrBG83UktOAMkRSttuHeuQf3j4
hEd0am1YzqNM5SUd4UHM9Dow+HlJzxA8BoTlwBvKzXBT0Vfs4Xn7gKfSIgwqv1UA
I6SaZZ8MhPzjsA+Z4caCcpNDkaA4+vRoO0tKBr4wyfrzS16lwjADI75BbwdWjxyd
VitnJh6wdBCE2A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:32:33 2025 by rpki-client