Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa
File:                     323830343a326238343a3a2f33322d3438203d3e20323635313537.roa (raw, json)
Hash identifier:          aP5v7FSOLaVsXZMkxUm9DzrS7YObF9s/ydtPnoz4kWs=
Subject key identifier:   16:E5:51:73:92:3A:41:65:96:27:39:B9:9D:C6:30:06:D7:D3:21:3C
Certificate issuer:       /CN=C9F71779FCAA18544B4D3820D10E4E4416FDAF38
Certificate serial:       7759B88D82047B027CFB2B354345A39E667585EB
Authority key identifier: C9:F7:17:79:FC:AA:18:54:4B:4D:38:20:D1:0E:4E:44:16:FD:AF:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa
Signing time:             Fri 21 Mar 2025 15:53:55 +0000
ROA not before:           Fri 21 Mar 2025 15:48:55 +0000
ROA not after:            Fri 20 Mar 2026 15:53:55 +0000
asID:                     265157
IP address blocks:        2804:2b84::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:59:b8:8d:82:04:7b:02:7c:fb:2b:35:43:45:a3:9e:66:75:85:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F71779FCAA18544B4D3820D10E4E4416FDAF38
        Validity
            Not Before: Mar 21 15:48:55 2025 GMT
            Not After : Mar 20 15:53:55 2026 GMT
        Subject: CN=16E55173923A4165962739B99DC63006D7D3213C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b5:74:7b:b0:54:38:fa:ef:30:fb:83:c1:50:
                    a9:92:d9:51:fb:96:ce:76:62:93:88:eb:24:da:9c:
                    bc:ab:cf:69:3c:89:4e:da:72:ec:f9:cf:ce:22:90:
                    e2:50:00:78:fc:ea:be:7b:c6:cf:6b:64:e1:42:b0:
                    a8:75:9b:0a:0a:fc:8d:d1:59:61:20:53:41:b2:6b:
                    97:a3:76:ca:95:74:f6:46:90:2e:91:41:83:82:81:
                    f2:6f:90:98:df:51:38:b2:6f:3b:0c:5e:3d:80:83:
                    d9:6a:84:78:c0:2e:6d:81:50:e3:e1:7d:4b:4b:e0:
                    59:9f:f5:9c:68:f3:95:0d:bd:88:ff:be:e7:8b:92:
                    93:4b:d3:7f:5d:56:11:1e:0e:30:c2:ff:c4:b0:1e:
                    ef:6d:ea:8b:ac:30:cb:b7:60:f4:bc:06:dd:67:22:
                    a6:ee:bf:88:12:bb:74:83:21:8c:0c:4b:2d:f6:3d:
                    ab:be:26:59:64:74:14:06:a7:55:2f:4c:2e:76:7c:
                    9d:57:b7:b5:40:16:69:e9:c3:0d:c8:78:14:e7:f4:
                    5a:25:cd:b5:3a:a7:1c:4f:3e:4d:76:76:01:94:3d:
                    96:82:c7:fb:5f:ee:20:46:de:df:51:94:9e:13:f2:
                    66:7d:05:81:e3:67:f4:bd:5f:0a:04:b1:5b:e3:39:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E5:51:73:92:3A:41:65:96:27:39:B9:9D:C6:30:06:D7:D3:21:3C
            X509v3 Authority Key Identifier:
                keyid:C9:F7:17:79:FC:AA:18:54:4B:4D:38:20:D1:0E:4E:44:16:FD:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:9a:bc:f0:bd:9c:9d:73:5c:db:05:11:52:e4:ce:cc:25:04:
         2f:e1:7c:61:d4:74:0c:49:75:a0:82:6c:dd:8e:9a:39:76:24:
         72:1e:4d:95:2c:21:45:4a:f6:ed:d1:96:26:ca:05:54:45:3c:
         b7:b0:be:39:79:d1:20:93:66:6d:cf:e2:ca:64:d2:73:ef:f5:
         01:19:76:8f:78:5b:1d:1e:b8:74:41:f9:70:80:03:5b:48:15:
         c7:94:b8:59:46:f5:9f:9f:a3:20:9b:5b:54:37:b3:94:ce:39:
         57:b0:63:a4:46:7a:0b:09:70:fb:ed:95:6f:0a:35:ae:d7:a3:
         81:2a:4c:f8:7b:12:95:6b:4e:37:3b:60:e6:ec:fc:26:da:b3:
         29:72:c7:02:49:ce:2d:1a:c5:a1:36:18:3a:8a:7d:aa:08:f7:
         1c:60:b6:2a:d2:26:af:bb:f5:3e:a9:d7:7d:ab:38:68:8d:e6:
         f8:2e:a7:44:c6:c9:33:8a:e9:2b:85:4c:96:3e:10:59:01:7f:
         5d:22:08:f3:59:0d:c9:d0:69:89:15:b4:32:2c:b5:40:c7:6f:
         87:ca:8a:7a:7a:0d:4c:5f:bc:27:ab:40:e3:f3:70:cd:58:31:
         d5:91:1f:96:7c:ad:17:a2:28:8f:61:ad:95:31:d1:a1:6a:40:
         40:9a:f5:bc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUd1m4jYIEewJ8+ys1Q0WjnmZ1heswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlGNzE3NzlGQ0FBMTg1NDRCNEQzODIwRDEwRTRFNDQx
NkZEQUYzODAeFw0yNTAzMjExNTQ4NTVaFw0yNjAzMjAxNTUzNTVaMDMxMTAvBgNV
BAMTKDE2RTU1MTczOTIzQTQxNjU5NjI3MzlCOTlEQzYzMDA2RDdEMzIxM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtXR7sFQ4+u8w+4PBUKmS2VH7
ls52YpOI6yTanLyrz2k8iU7acuz5z84ikOJQAHj86r57xs9rZOFCsKh1mwoK/I3R
WWEgU0Gya5ejdsqVdPZGkC6RQYOCgfJvkJjfUTiybzsMXj2Ag9lqhHjALm2BUOPh
fUtL4Fmf9Zxo85UNvYj/vueLkpNL039dVhEeDjDC/8SwHu9t6ousMMu3YPS8Bt1n
Iqbuv4gSu3SDIYwMSy32Pau+JllkdBQGp1UvTC52fJ1Xt7VAFmnpww3IeBTn9Fol
zbU6pxxPPk12dgGUPZaCx/tf7iBG3t9RlJ4T8mZ9BYHjZ/S9XwoEsVvjOZ31AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFuVRc5I6QWWWJzm5ncYwBtfTITwwHwYDVR0j
BBgwFoAUyfcXefyqGFRLTTgg0Q5ORBb9rzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJKdGUxSGNoY0N2Z0pQcDg4d3FVM0hCZnF5Y0xNNTgzd3VSekhVTHE0
RGQvMC9DOUY3MTc3OUZDQUExODU0NEI0RDM4MjBEMTBFNEU0NDE2RkRBRjM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RjcxNzc5RkNBQTE4NTQ0
QjREMzgyMEQxMEU0RTQ0MTZGREFGMzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSSnRlMUhjaGNDdmdKUHA4OHdxVTNIQmZxeWNMTTU4M3d1UnpIVUxxNERkLzAv
MzIzODMwMzQzYTMyNjIzODM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzEzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQrhDANBgkqhkiG9w0BAQsFAAOCAQEAEZq88L2c
nXNc2wURUuTOzCUEL+F8YdR0DEl1oIJs3Y6aOXYkch5NlSwhRUr27dGWJsoFVEU8
t7C+OXnRIJNmbc/iymTSc+/1ARl2j3hbHR64dEH5cIADW0gVx5S4WUb1n5+jIJtb
VDezlM45V7BjpEZ6Cwlw++2Vbwo1rtejgSpM+HsSlWtONztg5uz8JtqzKXLHAknO
LRrFoTYYOop9qgj3HGC2KtImr7v1PqnXfas4aI3m+C6nRMbJM4rpK4VMlj4QWQF/
XSII81kNydBpiRW0Miy1QMdvh8qKenoNTF+8J6tA4/NwzVgx1ZEflnytF6Ioj2Gt
lTHRoWpAQJr1vA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:25:23 2025 by rpki-client