Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a383030303a3a2f33332d3333203d3e20323636313532.roa
File:                     323830343a336237633a383030303a3a2f33332d3333203d3e20323636313532.roa (raw, json)
Hash identifier:          TNAE23iIPPEGaZFpn3QULFlri8X0wGTrgvEZjQ9xyx8=
Subject key identifier:   F1:FD:28:C2:80:62:01:7D:AC:46:BC:9E:4C:B9:AD:BB:E5:37:80:36
Certificate issuer:       /CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
Certificate serial:       1A956DB41BE775DE2C3C365EECAB64A552278EC3
Authority key identifier: BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a383030303a3a2f33332d3333203d3e20323636313532.roa
Signing time:             Wed 01 Mar 2023 18:25:33 +0000
ROA not before:           Wed 01 Mar 2023 18:20:33 +0000
ROA not after:            Wed 28 Feb 2024 18:25:33 +0000
asID:                     266152
IP address blocks:        2804:3b7c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:95:6d:b4:1b:e7:75:de:2c:3c:36:5e:ec:ab:64:a5:52:27:8e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Validity
            Not Before: Mar  1 18:20:33 2023 GMT
            Not After : Feb 28 18:25:33 2024 GMT
        Subject: CN=F1FD28C28062017DAC46BC9E4CB9ADBBE5378036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:42:3e:f1:16:f0:bb:74:40:be:ef:e3:53:
                    d5:28:d6:fd:0a:3a:75:6b:f2:18:af:f3:a6:33:56:
                    f6:de:f0:bc:95:e2:86:21:e0:fd:8e:6f:51:4c:cf:
                    29:02:a5:44:c0:a4:5c:2f:03:e1:71:e3:32:78:0e:
                    ff:32:d4:da:c6:6c:fd:dc:eb:3c:50:c3:a7:31:91:
                    cd:55:94:95:90:2b:50:ac:b8:2a:bb:3f:d2:3a:12:
                    46:1d:93:0f:05:63:55:a4:d3:a2:08:cf:6a:ce:49:
                    f1:40:75:4c:66:dc:3c:70:5a:b9:64:86:2f:32:c3:
                    1b:6e:42:18:21:37:a1:fd:74:3d:95:38:6c:31:3b:
                    83:ea:03:3d:74:f2:45:7e:9b:0b:32:50:11:6d:5a:
                    80:05:26:33:77:34:41:15:29:42:1a:4e:b7:1f:b8:
                    09:88:5b:fc:c6:4a:68:ed:15:53:ba:14:1e:2a:b7:
                    3c:e9:7d:5b:a1:2a:ad:27:ec:77:c1:c9:6f:5f:68:
                    7a:81:4b:74:c7:33:e7:a3:69:13:c4:60:6a:c9:48:
                    dd:5f:6b:c5:a2:90:56:cd:35:29:01:9d:44:b1:9d:
                    f1:39:c2:5f:52:45:1d:60:16:0c:9a:b6:72:bf:a2:
                    c1:2a:8f:bf:cd:6e:02:45:67:1e:a8:44:f7:58:2f:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:28:C2:80:62:01:7D:AC:46:BC:9E:4C:B9:AD:BB:E5:37:80:36
            X509v3 Authority Key Identifier:
                keyid:BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/323830343a336237633a383030303a3a2f33332d3333203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:80:90:64:ba:39:b9:b4:6b:c9:de:a4:20:4f:23:ad:c4:06:
         2d:b1:80:4b:16:08:75:99:7e:9d:91:c7:8f:62:87:1e:21:f1:
         f3:9e:63:35:0b:dc:20:5d:3a:a6:d2:dd:00:8c:d6:3d:29:7a:
         55:ec:84:2f:a9:80:a7:f3:d5:8d:88:2f:e2:db:a9:47:af:38:
         73:79:66:5f:9a:21:4b:8b:bd:21:b0:dd:1f:c0:1e:43:1e:1e:
         81:7f:95:c5:87:e5:6f:76:aa:8c:e9:7e:87:76:ca:14:bd:6a:
         d3:9d:33:14:ff:a1:0a:61:f3:54:d1:d3:42:d5:7c:23:1c:8f:
         d4:f6:8f:90:33:34:fd:be:a6:30:9d:95:aa:45:9e:8f:fe:da:
         37:1b:30:64:03:83:6a:d8:ce:16:a2:98:d0:54:00:a8:7c:f4:
         22:1d:df:c8:2c:93:26:02:8d:e9:13:0e:62:41:07:ad:fc:02:
         7a:72:53:e1:1b:c3:ca:5a:1c:b3:67:d0:f7:2a:04:68:e1:99:
         df:dc:e1:81:29:14:aa:a2:4d:47:b3:36:af:47:d5:4d:78:c0:
         1a:98:58:ad:10:11:4e:f9:ab:db:cc:18:4a:39:9c:53:be:e4:
         f2:9e:4d:53:2e:8a:07:e5:5d:f2:a3:27:be:12:25:31:d5:02:
         57:92:30:b8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGpVttBvndd4sPDZe7KtkpVInjsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY3NDE5NTFDRTcyODIwQzVDQUVCMjJDQTVCRUJGQkM0
N0Y0MTI3ODAeFw0yMzAzMDExODIwMzNaFw0yNDAyMjgxODI1MzNaMDMxMTAvBgNV
BAMTKEYxRkQyOEMyODA2MjAxN0RBQzQ2QkM5RTRDQjlBREJCRTUzNzgwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcJUI+8Rbwu3RAvu/jU9Uo1v0K
OnVr8hiv86YzVvbe8LyV4oYh4P2Ob1FMzykCpUTApFwvA+Fx4zJ4Dv8y1NrGbP3c
6zxQw6cxkc1VlJWQK1CsuCq7P9I6EkYdkw8FY1Wk06IIz2rOSfFAdUxm3DxwWrlk
hi8ywxtuQhghN6H9dD2VOGwxO4PqAz108kV+mwsyUBFtWoAFJjN3NEEVKUIaTrcf
uAmIW/zGSmjtFVO6FB4qtzzpfVuhKq0n7HfByW9faHqBS3THM+ejaRPEYGrJSN1f
a8WikFbNNSkBnUSxnfE5wl9SRR1gFgyatnK/osEqj7/NbgJFZx6oRPdYL81NAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU8f0owoBiAX2sRryeTLmtu+U3gDYwHwYDVR0j
BBgwFoAUv3QZUc5yggxcrrIspb6/vEf0EngwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhDc0htSkc0YXRhTkhYblMzWENYTWhqbnZHTEdBZ1pGaGlRdUd3QlZY
RmYvMS9CRjc0MTk1MUNFNzI4MjBDNUNBRUIyMkNBNUJFQkZCQzQ3RjQxMjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNzQxOTUxQ0U3MjgyMEM1
Q0FFQjIyQ0E1QkVCRkJDNDdGNDEyNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYQ3NIbUpHNGF0YU5IWG5TM1hDWE1oam52R0xHQWdaRmhpUXVHd0JWWEZmLzEv
MzIzODMwMzQzYTMzNjIzNzYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjMxMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEO3yAMA0GCSqGSIb3DQEBCwUA
A4IBAQAbgJBkujm5tGvJ3qQgTyOtxAYtsYBLFgh1mX6dkcePYoceIfHznmM1C9wg
XTqm0t0AjNY9KXpV7IQvqYCn89WNiC/i26lHrzhzeWZfmiFLi70hsN0fwB5DHh6B
f5XFh+VvdqqM6X6HdsoUvWrTnTMU/6EKYfNU0dNC1XwjHI/U9o+QMzT9vqYwnZWq
RZ6P/to3GzBkA4Nq2M4WopjQVACofPQiHd/ILJMmAo3pEw5iQQet/AJ6clPhG8PK
WhyzZ9D3KgRo4Znf3OGBKRSqok1HszavR9VNeMAamFitEBFO+avbzBhKOZxTvuTy
nk1TLooH5V3yoye+EiUx1QJXkjC4
-----END CERTIFICATE-----
Generated at Thu Mar 13 09:43:49 2025 by rpki-client