Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323030303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a323030303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          Lk9RtvNziD/hUE0lTB5B/B4SvHcJV0W77m6o9ObYpLU=
Subject key identifier:   AC:53:13:AF:E6:FB:10:22:11:92:CA:38:86:12:57:FC:E3:27:46:3D
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       0D083FD0D15D13FB70544E2018B959975B772D57
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323030303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:27 +0000
ROA not before:           Mon 17 Mar 2025 17:52:27 +0000
ROA not after:            Mon 16 Mar 2026 17:57:27 +0000
asID:                     263629
IP address blocks:        2804:104c:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:08:3f:d0:d1:5d:13:fb:70:54:4e:20:18:b9:59:97:5b:77:2d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:27 2025 GMT
            Not After : Mar 16 17:57:27 2026 GMT
        Subject: CN=AC5313AFE6FB10221192CA38861257FCE327463D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:00:57:34:42:47:de:cd:96:9d:1f:0e:89:
                    94:a1:4f:98:05:6b:f9:fb:66:e5:00:d3:34:d9:69:
                    7b:2a:91:03:0e:28:fd:e8:88:2a:54:43:7c:4a:b5:
                    16:01:81:50:bc:a0:29:e1:cf:d3:e8:bd:33:46:88:
                    c1:64:fb:a3:bd:e2:a4:6c:13:45:0a:03:e4:4e:c5:
                    7b:4c:00:02:bb:fe:93:6c:b6:00:f1:af:a5:a7:ef:
                    01:99:f2:af:ec:5a:3c:2d:84:54:cc:46:33:17:04:
                    72:d4:bd:55:d9:56:27:5f:f6:58:bb:9f:a3:35:5a:
                    16:e3:ce:eb:97:03:a0:c1:02:07:64:ee:d9:6a:73:
                    ac:05:eb:3f:f6:3f:bd:b1:8e:a4:35:8a:69:4a:49:
                    dd:1b:19:97:1c:59:24:44:81:04:2c:b6:84:42:1e:
                    d8:db:ab:01:24:6f:5e:0b:8c:d6:53:49:88:71:7b:
                    a0:94:67:35:b4:08:fc:d7:61:4a:d9:53:a0:77:44:
                    0e:16:6a:dd:07:74:9f:8c:24:5d:90:b7:e4:2f:47:
                    dc:ff:43:ab:7f:da:25:c0:e2:8a:9b:41:ce:b4:54:
                    fd:a0:e0:ab:c4:4f:42:fb:07:8c:ba:8c:fb:d7:ac:
                    ba:20:00:45:28:a0:20:2d:ac:59:97:f9:90:06:17:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:53:13:AF:E6:FB:10:22:11:92:CA:38:86:12:57:FC:E3:27:46:3D
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323030303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:1d:18:cf:ac:82:79:88:9e:40:0c:ec:f4:1d:fd:6b:9e:0d:
         0b:0e:10:7b:dc:2d:ca:c2:f6:8f:54:dc:33:0f:5c:cd:1c:95:
         27:dc:c5:ce:08:0e:d1:85:e5:40:b2:51:ef:0d:70:cf:6d:01:
         d4:25:e9:3a:fc:36:2f:9d:0f:67:04:4b:be:d0:b9:f7:03:f0:
         83:8c:60:b2:da:a7:13:dd:29:c2:f0:ad:d2:ba:df:16:f0:99:
         ff:cd:1e:29:4e:c0:ea:67:35:69:29:19:7c:8e:69:29:f3:94:
         1e:f7:02:3d:87:a4:8e:6b:c4:45:00:6a:42:7f:60:3e:8e:14:
         17:06:3f:0c:e5:94:27:de:5d:79:66:a1:56:37:b9:62:b7:62:
         0e:8d:01:28:8b:66:b2:81:b0:b2:84:5a:c9:68:21:60:ba:c0:
         32:5a:04:c5:68:68:88:c3:71:f6:95:b7:04:02:23:7e:28:d8:
         4a:ee:7b:be:10:50:20:eb:4f:22:2b:0b:57:45:08:f5:10:f5:
         c3:57:b6:ef:15:bd:41:7c:7a:5e:8a:fc:d0:6e:11:f9:b1:78:
         4b:ef:40:20:42:67:e7:7a:f3:6c:5c:f3:9e:34:16:ec:23:b0:
         f4:3d:7f:7a:a6:10:e8:e1:43:7d:2b:6a:e4:0e:76:d6:ad:d5:
         2b:0c:d7:37
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDQg/0NFdE/twVE4gGLlZl1t3LVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5MjVBNzhGOEJGQ0I2MjBDODBDQzhGQUQ0N0Y1RjMw
MkVGRkJDRDAeFw0yNTAzMTcxNzUyMjdaFw0yNjAzMTYxNzU3MjdaMDMxMTAvBgNV
BAMTKEFDNTMxM0FGRTZGQjEwMjIxMTkyQ0EzODg2MTI1N0ZDRTMyNzQ2M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4wBXNEJH3s2WnR8OiZShT5gF
a/n7ZuUA0zTZaXsqkQMOKP3oiCpUQ3xKtRYBgVC8oCnhz9PovTNGiMFk+6O94qRs
E0UKA+ROxXtMAAK7/pNstgDxr6Wn7wGZ8q/sWjwthFTMRjMXBHLUvVXZVidf9li7
n6M1WhbjzuuXA6DBAgdk7tlqc6wF6z/2P72xjqQ1imlKSd0bGZccWSREgQQstoRC
HtjbqwEkb14LjNZTSYhxe6CUZzW0CPzXYUrZU6B3RA4Wat0HdJ+MJF2Qt+QvR9z/
Q6t/2iXA4oqbQc60VP2g4KvET0L7B4y6jPvXrLogAEUooCAtrFmX+ZAGF7wjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUrFMTr+b7ECIRkso4hhJX/OMnRj0wHwYDVR0j
BBgwFoAU7JJaePi/y2IMgMyPrUf18wLv+80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC9FQzkyNUE3OEY4QkZDQjYyMEM4MENDOEZBRDQ3RjVGMzAyRUZGQkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDOTI1QTc4RjhCRkNCNjIw
QzgwQ0M4RkFENDdGNUYzMDJFRkZCQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzIzODMwMzQzYTMxMzAzNDYzM2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM2MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEEwgMA0GCSqGSIb3DQEBCwUA
A4IBAQAjHRjPrIJ5iJ5ADOz0Hf1rng0LDhB73C3KwvaPVNwzD1zNHJUn3MXOCA7R
heVAslHvDXDPbQHUJek6/DYvnQ9nBEu+0Ln3A/CDjGCy2qcT3SnC8K3Sut8W8Jn/
zR4pTsDqZzVpKRl8jmkp85Qe9wI9h6SOa8RFAGpCf2A+jhQXBj8M5ZQn3l15ZqFW
N7lit2IOjQEoi2aygbCyhFrJaCFgusAyWgTFaGiIw3H2lbcEAiN+KNhK7nu+EFAg
608iKwtXRQj1EPXDV7bvFb1BfHpeivzQbhH5sXhL70AgQmfnevNsXPOeNBbsI7D0
PX96phDo4UN9K2rkDnbWrdUrDNc3
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:46 2025 by rpki-client