Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346630303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a346630303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          H8PQrfzJvlKt/2SulMfMnIgOXTPPTOu+gO/IOGCZ9Xw=
Subject key identifier:   29:26:29:DF:26:B9:17:B1:9E:3E:06:54:2B:52:D8:29:F0:44:DE:B8
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       613FD41CC1A7CEA81F7544C9E5A6C79BEDEB1C6C
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346630303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:25 +0000
ROA not before:           Wed 05 Mar 2025 20:51:25 +0000
ROA not after:            Wed 04 Mar 2026 20:56:25 +0000
asID:                     264344
IP address blocks:        2804:2674:4f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3f:d4:1c:c1:a7:ce:a8:1f:75:44:c9:e5:a6:c7:9b:ed:eb:1c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:25 2025 GMT
            Not After : Mar  4 20:56:25 2026 GMT
        Subject: CN=292629DF26B917B19E3E06542B52D829F044DEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:98:15:6b:c4:ea:94:6d:2d:d1:b4:f2:29:
                    c0:03:9a:df:27:48:14:eb:8c:ec:d6:8d:0b:4d:9c:
                    31:db:a9:cf:43:35:33:3a:58:54:91:cd:fd:aa:18:
                    67:61:cb:86:3a:8b:45:24:4e:7b:53:26:0b:0e:cc:
                    ff:8d:83:2b:9b:14:48:75:89:ef:31:76:93:e0:06:
                    a6:b8:63:80:0e:55:3e:46:54:20:d1:1a:2f:fc:51:
                    37:94:5e:17:e0:76:e8:95:94:b5:5e:14:5b:37:82:
                    06:83:27:c2:f2:59:aa:1a:e9:9d:5c:6e:9e:de:20:
                    f4:4b:11:00:79:59:86:7d:3c:73:12:0e:fd:44:8c:
                    c6:76:3c:0d:04:ff:d4:aa:66:0d:63:80:01:cd:ae:
                    e1:54:a6:08:e7:60:ea:86:22:33:63:56:e7:4f:6a:
                    27:ac:aa:82:69:14:5c:e2:54:de:8b:fc:19:0d:01:
                    1d:3b:4b:75:eb:4a:59:be:2e:69:15:79:c7:1e:e3:
                    ea:07:32:16:63:7e:c5:c5:7e:31:21:6d:d0:fb:69:
                    dc:f2:38:ed:5f:ab:a5:53:63:aa:54:ed:38:95:2a:
                    2a:38:a8:56:73:b7:d2:bb:91:eb:ee:f0:e7:b9:aa:
                    27:b4:9a:8c:3b:68:70:ba:d8:24:05:80:62:46:b2:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:26:29:DF:26:B9:17:B1:9E:3E:06:54:2B:52:D8:29:F0:44:DE:B8
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346630303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:8d:1c:32:48:f2:76:60:0c:8b:43:61:6f:f9:7d:02:0b:a2:
         fd:5c:70:b4:f2:14:bf:94:f3:54:a1:10:b9:9f:7c:83:06:d5:
         2d:54:72:8a:99:9c:48:78:3a:55:2f:c1:a3:cd:a9:30:b4:a7:
         59:3c:d3:84:ba:d6:79:ae:c8:9c:84:44:53:5b:66:c1:8e:bb:
         54:c6:b6:77:4b:d7:00:79:a7:42:93:a5:7b:2b:11:0e:2c:98:
         6b:4f:2f:34:d4:54:3e:d6:c5:49:fe:2d:a9:b6:cc:7c:5e:48:
         4b:79:40:6b:e2:cc:33:3b:0c:40:d9:07:7c:d9:88:4a:06:30:
         28:20:68:21:ce:48:c7:ff:ab:53:fd:6c:90:69:d1:7e:63:1e:
         82:01:b1:8c:bc:f0:a3:fa:f1:49:bc:3a:10:41:49:c9:fc:b9:
         e6:3d:54:b4:15:69:1c:4f:94:a0:e3:96:43:0d:cf:85:e4:e7:
         79:2a:5e:94:fe:6b:e5:50:4f:9d:1a:81:28:84:54:a3:6c:22:
         fb:71:1b:9f:6c:ee:7f:c8:0f:67:9f:49:cc:33:21:88:d7:b5:
         c2:46:49:83:23:50:fd:2c:81:19:53:e5:68:49:9a:86:55:a9:
         88:33:c3:17:79:ac:c8:52:83:5d:b1:08:1b:7d:6e:d0:c7:05:
         79:3d:6d:2f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYT/UHMGnzqgfdUTJ5abHm+3rHGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY0MTRGOTIxMEExMEU1NzIwRTc1MDMwNjM1NDc4MDUw
RDRDN0M5NzAeFw0yNTAzMDUyMDUxMjVaFw0yNjAzMDQyMDU2MjVaMDMxMTAvBgNV
BAMTKDI5MjYyOURGMjZCOTE3QjE5RTNFMDY1NDJCNTJEODI5RjA0NERFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AJgVa8TqlG0t0bTyKcADmt8n
SBTrjOzWjQtNnDHbqc9DNTM6WFSRzf2qGGdhy4Y6i0UkTntTJgsOzP+NgyubFEh1
ie8xdpPgBqa4Y4AOVT5GVCDRGi/8UTeUXhfgduiVlLVeFFs3ggaDJ8LyWaoa6Z1c
bp7eIPRLEQB5WYZ9PHMSDv1EjMZ2PA0E/9SqZg1jgAHNruFUpgjnYOqGIjNjVudP
aiesqoJpFFziVN6L/BkNAR07S3XrSlm+LmkVecce4+oHMhZjfsXFfjEhbdD7adzy
OO1fq6VTY6pU7TiVKio4qFZzt9K7kevu8Oe5qie0mow7aHC62CQFgGJGsm5xAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUKSYp3ya5F7GePgZUK1LYKfBE3rgwHwYDVR0j
BBgwFoAUb0FPkhChDlcg51AwY1R4BQ1MfJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC82RjQxNEY5MjEwQTEwRTU3MjBFNzUwMzA2MzU0NzgwNTBENEM3Qzk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNDE0RjkyMTBBMTBFNTcy
MEU3NTAzMDYzNTQ3ODA1MEQ0QzdDOTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2EzNDY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJnRPMA0GCSqGSIb3DQEBCwUA
A4IBAQAMjRwySPJ2YAyLQ2Fv+X0CC6L9XHC08hS/lPNUoRC5n3yDBtUtVHKKmZxI
eDpVL8GjzakwtKdZPNOEutZ5rsichERTW2bBjrtUxrZ3S9cAeadCk6V7KxEOLJhr
Ty801FQ+1sVJ/i2ptsx8XkhLeUBr4swzOwxA2Qd82YhKBjAoIGghzkjH/6tT/WyQ
adF+Yx6CAbGMvPCj+vFJvDoQQUnJ/LnmPVS0FWkcT5Sg45ZDDc+F5Od5Kl6U/mvl
UE+dGoEohFSjbCL7cRufbO5/yA9nn0nMMyGI17XCRkmDI1D9LIEZU+VoSZqGVamI
M8MXeazIUoNdsQgbfW7QxwV5PW0v
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:19 2025 by rpki-client