Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/323830343a333063303a3a2f33322d3438203d3e20323634393732.roa
File:                     323830343a333063303a3a2f33322d3438203d3e20323634393732.roa (raw, json)
Hash identifier:          vT4gGhgTm1UlHv8Ax7kWfKAM16KnXY++kBC5Kxzo8UY=
Subject key identifier:   DB:5C:CC:D9:80:FE:C2:ED:75:CC:60:0E:2C:7D:6F:62:02:F3:8B:73
Certificate issuer:       /CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
Certificate serial:       4C4D263A826476643F9876B6EDFFD0831D2B7C30
Authority key identifier: 66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/323830343a333063303a3a2f33322d3438203d3e20323634393732.roa
Signing time:             Thu 06 Mar 2025 10:32:09 +0000
ROA not before:           Thu 06 Mar 2025 10:27:09 +0000
ROA not after:            Thu 05 Mar 2026 10:32:09 +0000
asID:                     264972
IP address blocks:        2804:30c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4d:26:3a:82:64:76:64:3f:98:76:b6:ed:ff:d0:83:1d:2b:7c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
        Validity
            Not Before: Mar  6 10:27:09 2025 GMT
            Not After : Mar  5 10:32:09 2026 GMT
        Subject: CN=DB5CCCD980FEC2ED75CC600E2C7D6F6202F38B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:b2:c0:a0:ac:5d:70:21:ae:5d:15:5c:e1:
                    ab:84:cf:77:73:f1:ed:fb:89:b1:e5:72:3a:50:9c:
                    ae:81:d8:98:0c:f8:c0:0c:a9:d6:81:f9:03:9b:31:
                    80:82:9a:c3:e4:69:41:7d:f6:1a:7d:e7:73:0a:b6:
                    85:2c:a0:b3:81:6f:f4:8a:d2:52:26:a3:1e:83:50:
                    da:9f:f0:1b:1a:3c:28:33:58:6a:c6:72:97:9e:9b:
                    22:e0:05:99:d9:c5:0a:05:aa:6b:bd:9f:4b:d7:3c:
                    fd:72:b2:7b:e0:fc:c6:eb:d6:4f:57:96:47:b4:58:
                    7c:63:ea:d7:b4:8c:8a:a7:a9:25:6d:ba:61:7d:53:
                    9a:d6:5d:3e:7b:cf:fe:64:3e:78:d3:6f:8e:5a:e7:
                    a4:9f:a1:32:c0:e0:ed:0f:3c:1d:ea:2c:c4:85:84:
                    5c:0e:75:c3:3e:c9:4f:ad:0d:f0:d5:82:f1:a8:ed:
                    00:b0:73:34:74:0e:09:64:6a:a3:c4:73:ea:95:06:
                    17:9a:2e:1f:77:1a:96:8d:c3:a1:e6:41:2d:67:7a:
                    e4:1d:85:d5:c7:5c:b0:fc:21:a5:18:89:c2:09:7a:
                    52:35:3b:1a:db:ea:11:bb:7d:6d:c3:46:c4:b9:2a:
                    7e:5e:a7:0f:cd:1b:8f:64:12:52:63:02:a7:6c:73:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5C:CC:D9:80:FE:C2:ED:75:CC:60:0E:2C:7D:6F:62:02:F3:8B:73
            X509v3 Authority Key Identifier:
                keyid:66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/323830343a333063303a3a2f33322d3438203d3e20323634393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:0a:ad:ed:67:f3:5b:68:f3:22:6a:96:9b:76:d8:74:54:ea:
         e3:1c:94:86:ac:7c:1e:99:29:a4:8f:f3:05:ec:33:37:5f:91:
         e7:03:a2:ce:77:a9:d8:19:20:4c:de:f4:f4:56:d1:40:b8:c9:
         8b:09:1d:84:4c:0a:2e:38:f1:a9:32:c3:f0:6f:05:fe:9c:eb:
         e5:5f:aa:99:77:19:37:fb:ae:25:02:05:9a:e5:de:d5:0b:e6:
         b8:12:0e:a0:9d:f3:04:92:6c:e8:35:2b:31:06:4a:25:8d:43:
         b1:79:02:74:39:0d:e5:22:4e:0f:cd:18:e8:8f:21:e4:ed:f2:
         d6:62:c1:3f:13:a3:1a:99:9d:30:e2:18:77:7c:12:39:bb:6f:
         40:8c:ec:24:51:1e:30:02:aa:f5:a0:1a:fc:38:c9:85:e1:19:
         55:be:38:6f:ad:02:2c:53:79:4f:01:21:93:d9:dd:56:ae:44:
         a5:50:fa:38:28:28:bf:61:d6:cf:b1:14:80:85:d9:cc:b9:ed:
         0f:46:e3:b2:2c:ba:5b:58:74:a5:9b:cb:f5:c7:e3:3a:18:0f:
         29:1c:10:58:e0:50:32:06:e4:0e:d0:28:93:be:12:7b:97:f3:
         23:0b:2a:af:aa:9b:09:fe:04:4c:05:c6:61:fb:a5:26:ee:2d:
         73:82:1f:cf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTE0mOoJkdmQ/mHa27f/Qgx0rfDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYzNjQ0QUQ1MENCODM0MTg2MzYxOUREQjk1NDNGNEI5
RTZBQUExQzAeFw0yNTAzMDYxMDI3MDlaFw0yNjAzMDUxMDMyMDlaMDMxMTAvBgNV
BAMTKERCNUNDQ0Q5ODBGRUMyRUQ3NUNDNjAwRTJDN0Q2RjYyMDJGMzhCNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wrLAoKxdcCGuXRVc4auEz3dz
8e37ibHlcjpQnK6B2JgM+MAMqdaB+QObMYCCmsPkaUF99hp953MKtoUsoLOBb/SK
0lImox6DUNqf8BsaPCgzWGrGcpeemyLgBZnZxQoFqmu9n0vXPP1ysnvg/Mbr1k9X
lke0WHxj6te0jIqnqSVtumF9U5rWXT57z/5kPnjTb45a56SfoTLA4O0PPB3qLMSF
hFwOdcM+yU+tDfDVgvGo7QCwczR0DglkaqPEc+qVBheaLh93GpaNw6HmQS1neuQd
hdXHXLD8IaUYicIJelI1Oxrb6hG7fW3DRsS5Kn5epw/NG49kElJjAqdsc+FDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU21zM2YD+wu11zGAOLH1vYgLzi3MwHwYDVR0j
BBgwFoAUZjZErVDLg0GGNhnduVQ/S55qqhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlYyOWpZZnJZM0hpYTFhVWtvUUVmNWhacGNlTEhDN1J0SnpmMm9VZjlx
ZTIvMS82NjM2NDRBRDUwQ0I4MzQxODYzNjE5RERCOTU0M0Y0QjlFNkFBQTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2MzY0NEFENTBDQjgzNDE4
NjM2MTlEREI5NTQzRjRCOUU2QUFBMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWMjlqWWZyWTNIaWExYVVrb1FFZjVoWnBjZUxIQzdSdEp6ZjJvVWY5cWUyLzEv
MzIzODMwMzQzYTMzMzA2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwwDANBgkqhkiG9w0BAQsFAAOCAQEABgqt7Wfz
W2jzImqWm3bYdFTq4xyUhqx8HpkppI/zBewzN1+R5wOiznep2BkgTN709FbRQLjJ
iwkdhEwKLjjxqTLD8G8F/pzr5V+qmXcZN/uuJQIFmuXe1QvmuBIOoJ3zBJJs6DUr
MQZKJY1DsXkCdDkN5SJOD80Y6I8h5O3y1mLBPxOjGpmdMOIYd3wSObtvQIzsJFEe
MAKq9aAa/DjJheEZVb44b60CLFN5TwEhk9ndVq5EpVD6OCgov2HWz7EUgIXZzLnt
D0bjsiy6W1h0pZvL9cfjOhgPKRwQWOBQMgbkDtAok74Se5fzIwsqr6qbCf4ETAXG
YfulJu4tc4Ifzw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:37:00 2025 by rpki-client