Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a666666643a3a2f34382d3438203d3e20323634313431.roa
File:                     323830343a316530633a666666643a3a2f34382d3438203d3e20323634313431.roa (raw, json)
Hash identifier:          EWHjOTw8SzT+vneCh63H33JreDnGryEa0KRWIqfQvCs=
Subject key identifier:   CF:7C:0A:73:55:F3:D2:BD:53:99:88:3C:A9:4A:40:A8:46:3D:05:75
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       5AAC20C7AFC46C68C723299338188EC2BBBCF3A5
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a666666643a3a2f34382d3438203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:27:08 +0000
ROA not before:           Thu 02 Jan 2025 19:22:08 +0000
ROA not after:            Thu 01 Jan 2026 19:27:08 +0000
asID:                     264141
IP address blocks:        2804:1e0c:fffd::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ac:20:c7:af:c4:6c:68:c7:23:29:93:38:18:8e:c2:bb:bc:f3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:22:08 2025 GMT
            Not After : Jan  1 19:27:08 2026 GMT
        Subject: CN=CF7C0A7355F3D2BD5399883CA94A40A8463D0575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:7d:32:61:3e:cc:90:e0:dc:ba:d9:1e:cc:
                    88:bb:98:fa:42:1e:2c:0d:d6:05:26:a7:56:96:09:
                    42:8b:92:74:5f:12:34:6d:a6:4e:53:2b:3d:58:3e:
                    43:2a:03:ca:a0:1f:80:c1:0d:28:d4:72:ed:76:cb:
                    ca:ae:99:ad:d3:36:ae:83:fe:bd:78:1e:92:b8:9f:
                    a0:a6:60:66:85:a8:99:6a:59:a7:0d:0e:a4:c8:02:
                    f4:79:32:43:12:1a:52:d5:c9:a7:79:90:20:a6:73:
                    96:6e:f9:b1:70:c6:7c:ff:f5:64:f7:a8:fa:ff:44:
                    52:2a:77:9c:03:4c:27:72:de:7b:39:e6:92:88:9c:
                    4f:9c:ee:4c:a7:12:28:c3:3f:a5:96:8d:ea:d1:27:
                    ce:61:92:3a:bf:46:2a:f0:24:6c:6a:5b:d7:7b:ca:
                    d1:49:b9:4d:51:4e:0a:d3:f1:eb:ff:b8:6f:51:6c:
                    dc:61:63:b7:47:85:77:97:c2:43:14:93:a4:91:9e:
                    a0:90:7f:dc:70:a3:55:80:51:b7:0b:df:63:ee:3e:
                    85:2a:01:22:1b:ec:83:9f:98:30:98:e0:98:7f:24:
                    b2:30:9b:e2:8a:7c:80:80:e9:33:8c:e5:90:b1:f5:
                    22:81:0d:4b:e6:38:f0:bc:ed:6c:cb:64:2c:3e:fa:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7C:0A:73:55:F3:D2:BD:53:99:88:3C:A9:4A:40:A8:46:3D:05:75
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a666666643a3a2f34382d3438203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:e7:63:e7:9f:a4:34:75:95:9a:59:b0:e8:ba:d5:39:0f:86:
         8c:de:6b:f2:2d:ed:a0:c1:de:7f:58:9f:58:11:f5:2e:45:75:
         59:38:7a:a6:db:f5:14:9f:16:1d:55:29:85:30:4d:32:9c:c9:
         76:84:c4:05:d3:e1:db:ba:85:9b:da:0f:b5:c4:93:ab:95:9b:
         84:20:85:43:3a:32:b2:b4:f7:ce:eb:f9:15:f1:1a:b1:e2:bc:
         c1:da:54:ce:28:74:2e:59:f9:9a:4e:d5:45:55:e8:ae:10:ec:
         47:31:5a:c0:e4:65:75:6d:4b:85:f9:4d:4c:85:87:20:ba:86:
         a3:6c:97:4a:43:38:fc:d6:4d:16:13:6d:ad:89:69:e5:54:7e:
         13:40:f1:95:a6:ad:e9:92:c7:02:70:51:32:cb:4e:81:8f:1e:
         51:d0:9e:fa:4c:c7:7a:94:7b:50:76:27:f2:7b:38:0b:19:d1:
         f2:65:e8:6e:77:dd:cf:43:7a:e0:53:bf:9c:3f:81:68:a5:f7:
         9b:1e:7c:5d:21:f7:1d:ec:5f:fe:ec:6f:f1:c4:d4:bd:66:e6:
         f9:a5:c4:e0:ee:82:aa:f2:57:62:e3:ad:0c:4a:09:6d:92:4b:
         ce:59:e0:01:75:85:00:d1:6d:bd:d6:3c:66:4b:f2:46:3f:5e:
         9c:f2:31:8f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUWqwgx6/EbGjHIymTOBiOwru886UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJCOTZGOEI1M0IwNkVFNDQ4QTUxNzA5QjhEMjMwQUU0
OURCRjMwRDAeFw0yNTAxMDIxOTIyMDhaFw0yNjAxMDExOTI3MDhaMDMxMTAvBgNV
BAMTKENGN0MwQTczNTVGM0QyQkQ1Mzk5ODgzQ0E5NEE0MEE4NDYzRDA1NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCysH0yYT7MkODcutkezIi7mPpC
HiwN1gUmp1aWCUKLknRfEjRtpk5TKz1YPkMqA8qgH4DBDSjUcu12y8quma3TNq6D
/r14HpK4n6CmYGaFqJlqWacNDqTIAvR5MkMSGlLVyad5kCCmc5Zu+bFwxnz/9WT3
qPr/RFIqd5wDTCdy3ns55pKInE+c7kynEijDP6WWjerRJ85hkjq/RirwJGxqW9d7
ytFJuU1RTgrT8ev/uG9RbNxhY7dHhXeXwkMUk6SRnqCQf9xwo1WAUbcL32PuPoUq
ASIb7IOfmDCY4Jh/JLIwm+KKfICA6TOM5ZCx9SKBDUvmOPC87WzLZCw++pW7AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUz3wKc1Xz0r1TmYg8qUpAqEY9BXUwHwYDVR0j
BBgwFoAUorlvi1OwbuRIpRcJuNIwrknb8w0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVrQVVZanBwS2ppOWNWY01kTlR4d052ZGtZbzEzejJqRnV5Wm81OHVY
ZmkvMC9BMkI5NkY4QjUzQjA2RUU0NDhBNTE3MDlCOEQyMzBBRTQ5REJGMzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQjk2RjhCNTNCMDZFRTQ0
OEE1MTcwOUI4RDIzMEFFNDlEQkYzMEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I1a0FVWWpwcEtqaTljVmNNZE5UeHdOdmRrWW8xM3oyakZ1eVpvNTh1WGZpLzAv
MzIzODMwMzQzYTMxNjUzMDYzM2E2NjY2NjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDMxMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHgz//TANBgkqhkiG9w0BAQsF
AAOCAQEAjudj55+kNHWVmlmw6LrVOQ+GjN5r8i3toMHef1ifWBH1LkV1WTh6ptv1
FJ8WHVUphTBNMpzJdoTEBdPh27qFm9oPtcSTq5WbhCCFQzoysrT3zuv5FfEaseK8
wdpUzih0Lln5mk7VRVXorhDsRzFawORldW1LhflNTIWHILqGo2yXSkM4/NZNFhNt
rYlp5VR+E0Dxlaat6ZLHAnBRMstOgY8eUdCe+kzHepR7UHYn8ns4CxnR8mXobnfd
z0N64FO/nD+BaKX3mx58XSH3Hexf/uxv8cTUvWbm+aXE4O6CqvJXYuOtDEoJbZJL
zlngAXWFANFtvdY8ZkvyRj9enPIxjw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:02 2025 by rpki-client