Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa
File:                     323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa (raw, json)
Hash identifier:          zOqfEDUinGvj5I8qsg8YzfXtVWIv95al9sVdatoonjo=
Subject key identifier:   2B:3B:07:A8:43:2E:AF:79:66:06:10:AC:B2:A7:D7:C3:76:71:A7:95
Certificate issuer:       /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial:       453D159E7421DB5CF1D9A148EF27532C61F4DB04
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa
Signing time:             Thu 06 Mar 2025 03:46:56 +0000
ROA not before:           Thu 06 Mar 2025 03:41:56 +0000
ROA not after:            Thu 05 Mar 2026 03:46:56 +0000
asID:                     262496
IP address blocks:        2804:520:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:15:9e:74:21:db:5c:f1:d9:a1:48:ef:27:53:2c:61:f4:db:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
        Validity
            Not Before: Mar  6 03:41:56 2025 GMT
            Not After : Mar  5 03:46:56 2026 GMT
        Subject: CN=2B3B07A8432EAF79660610ACB2A7D7C37671A795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:bf:1b:8c:70:8e:d5:d6:07:6b:36:0f:e1:
                    ed:7c:9b:28:81:7c:7f:18:d0:c1:9f:2b:92:b7:66:
                    14:e5:d4:9d:59:f1:4e:62:b1:57:90:52:5f:2c:db:
                    0b:ce:3d:40:a5:7a:fb:64:57:6b:bb:96:dc:f7:10:
                    78:21:01:72:3b:09:4a:71:9e:9d:93:f9:3a:59:c8:
                    6a:f7:24:df:0c:71:73:9e:a1:5d:23:38:62:c2:be:
                    af:57:bf:77:0c:3d:f4:6b:cb:80:88:dc:c4:30:56:
                    bf:a3:0a:25:37:ce:f3:c4:c3:6e:d2:46:63:72:65:
                    39:34:48:3e:ee:57:8f:5c:ec:13:a4:7e:1a:be:57:
                    68:a4:69:94:f8:22:9f:f5:e7:0c:67:03:f8:1e:6e:
                    23:bf:32:77:ce:28:ff:d3:2b:cb:81:d3:30:67:91:
                    e4:f8:e8:b0:31:ab:72:27:b8:4b:47:5a:74:8d:74:
                    e5:5a:fb:77:1e:f1:54:f0:4c:50:2b:08:54:94:72:
                    2d:18:70:f1:9f:cb:56:44:db:66:18:40:ed:88:12:
                    da:d0:07:33:4a:b4:5f:91:21:4c:55:90:b8:ae:8d:
                    68:6c:9b:06:d3:3d:a2:82:8f:7a:ad:60:df:2f:bd:
                    34:b2:3f:6f:a8:9b:a9:08:64:82:e5:76:50:4b:6a:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3B:07:A8:43:2E:AF:79:66:06:10:AC:B2:A7:D7:C3:76:71:A7:95
            X509v3 Authority Key Identifier:
                keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:520:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:b1:de:7d:cb:af:ff:c8:4a:c8:b9:a6:15:56:26:63:2f:71:
         e6:a0:83:fb:de:07:5c:f1:29:8d:a9:90:5f:f1:a2:8b:1f:fa:
         4d:0e:a5:cb:82:86:a9:c3:69:0b:01:d0:d7:f0:64:67:c4:5d:
         9e:3d:77:03:17:b8:74:f0:2f:08:1f:83:88:93:b7:79:26:ee:
         0b:59:bd:77:0f:7a:3e:87:76:c2:7a:37:94:c2:94:c3:69:8c:
         2f:94:4a:ad:65:d2:c7:78:d4:f3:b1:05:c7:6b:f9:81:a5:e1:
         0c:68:86:25:90:b7:72:45:3f:79:02:61:cc:0d:a5:34:0c:30:
         a0:64:a2:a6:ec:ce:b2:ce:4e:52:4d:aa:ea:aa:fe:74:63:4a:
         68:5d:03:3c:68:e4:e3:36:8e:00:d3:9f:ab:72:8a:6a:ab:0b:
         1f:19:1e:a0:b1:44:78:89:85:75:d6:93:ba:88:c1:65:25:c9:
         36:93:82:73:16:f6:0d:55:6b:12:c0:19:3f:a1:47:73:77:aa:
         82:2e:8d:7c:48:0f:1d:c4:59:67:66:ec:75:29:7e:e8:6f:33:
         3c:dc:7d:3c:d6:83:e3:f3:fe:18:a1:49:a2:44:26:b7:c4:69:
         ca:18:47:c5:3f:e8:cf:b5:87:1d:1b:f6:46:87:12:f2:52:f5:
         a4:fa:ca:cb
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIURT0VnnQh21zx2aFI7ydTLGH02wQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU0QzJDNENGQTEzNzg1NUVBMjVBNEZFQzQzOTFCNzBD
MjFBNUJCRDAeFw0yNTAzMDYwMzQxNTZaFw0yNjAzMDUwMzQ2NTZaMDMxMTAvBgNV
BAMTKDJCM0IwN0E4NDMyRUFGNzk2NjA2MTBBQ0IyQTdEN0MzNzY3MUE3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26b8bjHCO1dYHazYP4e18myiB
fH8Y0MGfK5K3ZhTl1J1Z8U5isVeQUl8s2wvOPUClevtkV2u7ltz3EHghAXI7CUpx
np2T+TpZyGr3JN8McXOeoV0jOGLCvq9Xv3cMPfRry4CI3MQwVr+jCiU3zvPEw27S
RmNyZTk0SD7uV49c7BOkfhq+V2ikaZT4Ip/15wxnA/gebiO/MnfOKP/TK8uB0zBn
keT46LAxq3InuEtHWnSNdOVa+3ce8VTwTFArCFSUci0YcPGfy1ZE22YYQO2IEtrQ
BzNKtF+RIUxVkLiujWhsmwbTPaKCj3qtYN8vvTSyP2+om6kIZILldlBLat3xAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUKzsHqEMur3lmBhCssqfXw3Zxp5UwHwYDVR0j
BBgwFoAUTkwsTPoTeFXqJaT+xDkbcMIaW70wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTVidnA3bVZrcDRwYW1vSjhkZ05mQlhvTVREa2FBTGI2OVRLenFKWUQz
WTgvMS80RTRDMkM0Q0ZBMTM3ODU1RUEyNUE0RkVDNDM5MUI3MEMyMUE1QkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFNEMyQzRDRkExMzc4NTVF
QTI1QTRGRUM0MzkxQjcwQzIxQTVCQkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E1YnZwN21Wa3A0cGFtb0o4ZGdOZkJYb01URGthQUxiNjlUS3pxSllEM1k4LzEv
MzIzODMwMzQzYTM1MzIzMDNhMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2
MzIzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBAUgAAEwDQYJKoZIhvcNAQELBQADggEBAKWx
3n3Lr//ISsi5phVWJmMvceagg/veB1zxKY2pkF/xoosf+k0OpcuChqnDaQsB0Nfw
ZGfEXZ49dwMXuHTwLwgfg4iTt3km7gtZvXcPej6HdsJ6N5TClMNpjC+USq1l0sd4
1POxBcdr+YGl4QxohiWQt3JFP3kCYcwNpTQMMKBkoqbszrLOTlJNquqq/nRjSmhd
Azxo5OM2jgDTn6tyimqrCx8ZHqCxRHiJhXXWk7qIwWUlyTaTgnMW9g1VaxLAGT+h
R3N3qoIujXxIDx3EWWdm7HUpfuhvMzzcfTzWg+Pz/hihSaJEJrfEacoYR8U/6M+1
hx0b9kaHEvJS9aT6yss=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:40:02 2025 by rpki-client