Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/1/323830343a343332383a633030303a3a2f33342d3334203d3e20323637353532.roa
File:                     323830343a343332383a633030303a3a2f33342d3334203d3e20323637353532.roa (raw, json)
Hash identifier:          zYgVCjN+aD1dFo1rPvJKjzJ6kctwfOW9g+Hj7gU5YqQ=
Subject key identifier:   D8:50:87:98:39:FC:65:59:F5:E9:F4:B8:EA:67:42:89:16:82:79:3D
Certificate issuer:       /CN=27DABE0AC95BB043E64ACC2A468F197A522FF6B2
Certificate serial:       0907E48638214CDDBD08261D6B85FF2E1E5E6349
Authority key identifier: 27:DA:BE:0A:C9:5B:B0:43:E6:4A:CC:2A:46:8F:19:7A:52:2F:F6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DABE0AC95BB043E64ACC2A468F197A522FF6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/1/323830343a343332383a633030303a3a2f33342d3334203d3e20323637353532.roa
Signing time:             Thu 23 Jan 2025 12:25:42 +0000
ROA not before:           Thu 23 Jan 2025 12:20:42 +0000
ROA not after:            Thu 22 Jan 2026 12:25:42 +0000
asID:                     267552
IP address blocks:        2804:4328:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:07:e4:86:38:21:4c:dd:bd:08:26:1d:6b:85:ff:2e:1e:5e:63:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27DABE0AC95BB043E64ACC2A468F197A522FF6B2
        Validity
            Not Before: Jan 23 12:20:42 2025 GMT
            Not After : Jan 22 12:25:42 2026 GMT
        Subject: CN=D850879839FC6559F5E9F4B8EA6742891682793D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c5:a8:37:ea:15:07:94:37:9f:98:30:b5:20:
                    9a:28:27:b5:49:f7:e3:6d:c1:3d:d7:0d:08:2d:dc:
                    de:cd:a8:46:08:1e:f1:19:a9:bd:bd:3d:80:14:c0:
                    0c:07:de:1d:6c:cb:88:f4:6b:0d:40:cf:4f:40:2b:
                    13:03:23:7b:5c:11:22:f7:f5:4a:06:dc:26:5c:6b:
                    59:12:f5:41:a8:1b:e4:45:e2:5f:60:4a:d3:2d:1b:
                    39:0d:a4:e4:4d:c0:cf:f5:85:86:29:c5:c5:73:e5:
                    65:4a:93:12:d4:10:33:b1:0f:b3:ef:d8:22:4b:85:
                    fc:b3:d6:eb:68:af:a9:a7:75:7b:14:09:e1:17:7d:
                    25:f4:dd:b9:1a:5d:b7:ec:91:16:58:78:5f:d3:86:
                    af:2f:5e:f5:bf:9d:1c:d8:89:b1:3d:c2:3f:c2:bb:
                    98:ae:84:0d:d2:50:04:3d:3a:d2:6e:8e:a7:12:1d:
                    9f:79:e5:bb:bc:4c:cc:b2:12:52:bd:a8:c9:48:ab:
                    47:1e:e2:23:80:c4:40:a5:32:ef:77:3e:64:7f:11:
                    46:29:1a:5e:d9:f6:d9:b4:bf:6a:57:d5:fa:17:99:
                    6e:d5:bb:45:71:2e:5c:72:90:16:40:57:08:91:74:
                    e5:a3:a7:0a:c5:93:30:45:82:26:cb:cd:47:9b:63:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:50:87:98:39:FC:65:59:F5:E9:F4:B8:EA:67:42:89:16:82:79:3D
            X509v3 Authority Key Identifier:
                keyid:27:DA:BE:0A:C9:5B:B0:43:E6:4A:CC:2A:46:8F:19:7A:52:2F:F6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/1/27DABE0AC95BB043E64ACC2A468F197A522FF6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DABE0AC95BB043E64ACC2A468F197A522FF6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/1/323830343a343332383a633030303a3a2f33342d3334203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4328:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b4:87:e8:e0:50:18:72:1c:f7:b6:fd:bc:e6:3a:43:07:2b:06:
         78:7a:60:f1:32:75:08:e6:07:be:e4:9c:9e:0c:20:13:21:d8:
         00:d7:68:e1:3e:39:06:56:46:78:c7:af:1e:7d:eb:15:bb:2b:
         be:19:86:58:92:61:14:e9:38:d5:be:72:87:81:81:e3:17:74:
         13:bc:0b:f0:d0:1c:c1:ca:f4:a2:5b:b4:66:c4:00:b8:ce:1f:
         96:b2:ee:37:45:e9:44:cc:a1:93:f9:ba:16:2c:bd:87:b2:57:
         91:08:5d:2e:ad:7b:d0:ce:72:f7:db:56:fb:40:98:9f:49:25:
         1d:aa:c4:c6:71:62:89:c6:c9:83:49:26:b5:f9:f2:f9:47:ae:
         6f:e2:ac:bf:13:65:7f:15:8f:8c:55:2f:1d:f2:40:4b:d7:25:
         36:40:04:02:3a:fc:21:19:b6:94:dc:a2:c6:7f:e7:ef:35:61:
         e0:3b:14:5c:84:44:27:e8:85:df:8e:52:b1:0f:7c:7b:4d:79:
         6f:29:9a:1e:d0:b2:2b:a3:09:ce:42:eb:09:e4:90:2d:ee:71:
         a6:65:22:55:7b:d1:2f:f0:71:9f:17:31:23:99:57:32:60:35:
         ac:64:c1:49:7b:61:6d:d5:b0:28:38:c4:de:9c:29:4e:39:89:
         42:1e:b9:c6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCQfkhjghTN29CCYda4X/Lh5eY0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdEQUJFMEFDOTVCQjA0M0U2NEFDQzJBNDY4RjE5N0E1
MjJGRjZCMjAeFw0yNTAxMjMxMjIwNDJaFw0yNjAxMjIxMjI1NDJaMDMxMTAvBgNV
BAMTKEQ4NTA4Nzk4MzlGQzY1NTlGNUU5RjRCOEVBNjc0Mjg5MTY4Mjc5M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqxag36hUHlDefmDC1IJooJ7VJ
9+NtwT3XDQgt3N7NqEYIHvEZqb29PYAUwAwH3h1sy4j0aw1Az09AKxMDI3tcESL3
9UoG3CZca1kS9UGoG+RF4l9gStMtGzkNpORNwM/1hYYpxcVz5WVKkxLUEDOxD7Pv
2CJLhfyz1utor6mndXsUCeEXfSX03bkaXbfskRZYeF/Thq8vXvW/nRzYibE9wj/C
u5iuhA3SUAQ9OtJujqcSHZ955bu8TMyyElK9qMlIq0ce4iOAxEClMu93PmR/EUYp
Gl7Z9tm0v2pX1foXmW7Vu0VxLlxykBZAVwiRdOWjpwrFkzBFgibLzUebY/rhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU2FCHmDn8ZVn16fS46mdCiRaCeT0wHwYDVR0j
BBgwFoAUJ9q+CslbsEPmSswqRo8ZelIv9rIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNzUnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5a
aHAvMS8yN0RBQkUwQUM5NUJCMDQzRTY0QUNDMkE0NjhGMTk3QTUyMkZGNkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3REFCRTBBQzk1QkIwNDNF
NjRBQ0MyQTQ2OEYxOTdBNTIyRkY2QjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jjc1J0Uzhrczk0VTJzZzFld0JwcUFSdmNtc0Q4Q2VIUXJ6M0NxZUVuWmhwLzEv
MzIzODMwMzQzYTM0MzMzMjM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQyjAMA0GCSqGSIb3DQEBCwUA
A4IBAQC0h+jgUBhyHPe2/bzmOkMHKwZ4emDxMnUI5ge+5JyeDCATIdgA12jhPjkG
VkZ4x68efesVuyu+GYZYkmEU6TjVvnKHgYHjF3QTvAvw0BzByvSiW7RmxAC4zh+W
su43RelEzKGT+boWLL2HsleRCF0urXvQznL321b7QJifSSUdqsTGcWKJxsmDSSa1
+fL5R65v4qy/E2V/FY+MVS8d8kBL1yU2QAQCOvwhGbaU3KLGf+fvNWHgOxRchEQn
6IXfjlKxD3x7TXlvKZoe0LIrownOQusJ5JAt7nGmZSJVe9Ev8HGfFzEjmVcyYDWs
ZMFJe2Ft1bAoOMTenClOOYlCHrnG
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:44 2025 by rpki-client