Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a343230303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a343230303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          DVlZNtkiDvWGE2im3Za2SqwuZKRC5OdvrvgbM9+iI/Y=
Subject key identifier:   21:19:C5:D8:37:A1:A2:47:83:6B:D2:D7:FA:92:18:B2:8A:D4:62:10
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       011773B8AEA0B832D2EFFEDF27E45414826FAD4B
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a343230303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:17 +0000
ROA not before:           Mon 17 Mar 2025 17:52:17 +0000
ROA not after:            Mon 16 Mar 2026 17:57:17 +0000
asID:                     263629
IP address blocks:        2804:104c:4200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:17:73:b8:ae:a0:b8:32:d2:ef:fe:df:27:e4:54:14:82:6f:ad:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:17 2025 GMT
            Not After : Mar 16 17:57:17 2026 GMT
        Subject: CN=2119C5D837A1A247836BD2D7FA9218B28AD46210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:28:85:ae:26:a6:d1:75:7d:72:cc:7d:a4:
                    a7:ba:b5:49:05:7c:86:2c:02:5c:ae:1d:5e:61:28:
                    75:ab:1d:96:70:07:c9:9d:a7:f7:5e:c7:95:60:b3:
                    f0:46:fe:09:f5:86:39:65:e0:96:28:37:23:a1:8d:
                    d3:1d:4d:66:a8:87:4d:78:96:7f:ea:de:ad:e6:06:
                    ca:3d:97:67:f0:4d:3f:9e:20:4f:b5:39:21:9d:68:
                    38:4a:d0:eb:f0:46:26:ff:ef:92:c0:f0:06:bf:00:
                    e7:22:88:60:ec:ad:87:8d:1d:da:e8:bc:80:00:65:
                    7c:b1:e4:1d:8d:18:2e:73:45:6e:41:0f:74:01:3f:
                    c7:e5:2c:13:05:42:07:29:f5:ed:84:08:3a:13:fb:
                    7d:70:37:ff:10:9d:cd:33:b6:ce:97:75:1c:a1:79:
                    52:6f:dc:e9:0d:39:c3:93:28:a9:20:c5:0a:13:a0:
                    c3:44:d6:f5:97:57:0e:20:59:c5:f3:ab:86:83:18:
                    f7:55:de:6d:3e:34:ca:83:0a:ad:43:3c:82:d4:aa:
                    b6:61:0e:a9:a9:04:8b:b4:55:6c:a6:bf:18:ae:98:
                    ad:b2:a6:d1:2f:47:20:8c:08:e2:9b:9e:a2:63:d6:
                    ba:89:20:56:c7:3c:cc:37:ff:01:03:67:c4:11:77:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:19:C5:D8:37:A1:A2:47:83:6B:D2:D7:FA:92:18:B2:8A:D4:62:10
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a343230303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:7b:b6:13:47:e3:f3:cc:26:74:5e:36:f5:14:ba:60:8a:
         15:b7:30:0e:15:91:8c:7b:cd:51:ea:e9:52:84:57:8f:04:8b:
         95:17:b9:0b:3b:43:9d:74:48:eb:ea:8d:5c:50:3d:55:6a:6f:
         83:08:53:4f:97:06:73:64:4b:f6:52:77:4d:e4:66:ed:2e:ab:
         8b:4b:80:e9:46:d3:2c:8c:e2:0b:77:94:a1:17:be:e3:0d:dd:
         b5:8e:59:9e:2c:9b:cf:8c:8f:87:8c:02:d3:0f:d1:2d:ae:46:
         14:f7:1f:ee:33:46:da:61:c9:a6:c4:6a:d7:09:31:8e:1b:c3:
         97:94:a8:8b:09:99:67:fd:83:91:00:c9:5a:f8:28:e6:bb:30:
         37:59:a7:f5:86:c6:09:03:f7:6f:52:87:8d:53:ba:1f:ed:46:
         5f:04:87:28:32:26:05:05:27:50:c9:3c:e7:7c:e3:fa:a9:c3:
         04:92:09:1e:0d:29:43:df:b1:0e:f4:81:ca:04:00:cd:94:bf:
         18:ea:84:f4:d7:10:48:e8:77:5c:62:79:28:46:f2:1a:b4:68:
         8c:5c:2f:19:5b:b2:f7:c6:9e:13:60:03:94:a1:93:bd:d0:38:
         de:1e:b2:34:32:af:22:63:49:dd:d1:6c:ea:6f:b5:58:2f:ca:
         25:2b:47:f2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUARdzuK6guDLS7/7fJ+RUFIJvrUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5MjVBNzhGOEJGQ0I2MjBDODBDQzhGQUQ0N0Y1RjMw
MkVGRkJDRDAeFw0yNTAzMTcxNzUyMTdaFw0yNjAzMTYxNzU3MTdaMDMxMTAvBgNV
BAMTKDIxMTlDNUQ4MzdBMUEyNDc4MzZCRDJEN0ZBOTIxOEIyOEFENDYyMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwyiFriam0XV9csx9pKe6tUkF
fIYsAlyuHV5hKHWrHZZwB8mdp/dex5Vgs/BG/gn1hjll4JYoNyOhjdMdTWaoh014
ln/q3q3mBso9l2fwTT+eIE+1OSGdaDhK0OvwRib/75LA8Aa/AOciiGDsrYeNHdro
vIAAZXyx5B2NGC5zRW5BD3QBP8flLBMFQgcp9e2ECDoT+31wN/8Qnc0zts6XdRyh
eVJv3OkNOcOTKKkgxQoToMNE1vWXVw4gWcXzq4aDGPdV3m0+NMqDCq1DPILUqrZh
DqmpBIu0VWymvxiumK2yptEvRyCMCOKbnqJj1rqJIFbHPMw3/wEDZ8QRd/BJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUIRnF2DehokeDa9LX+pIYsorUYhAwHwYDVR0j
BBgwFoAU7JJaePi/y2IMgMyPrUf18wLv+80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC9FQzkyNUE3OEY4QkZDQjYyMEM4MENDOEZBRDQ3RjVGMzAyRUZGQkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDOTI1QTc4RjhCRkNCNjIw
QzgwQ0M4RkFENDdGNUYzMDJFRkZCQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzIzODMwMzQzYTMxMzAzNDYzM2EzNDMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM2MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEExCMA0GCSqGSIb3DQEBCwUA
A4IBAQCWnHu2E0fj88wmdF429RS6YIoVtzAOFZGMe81R6ulShFePBIuVF7kLO0Od
dEjr6o1cUD1Vam+DCFNPlwZzZEv2UndN5GbtLquLS4DpRtMsjOILd5ShF77jDd21
jlmeLJvPjI+HjALTD9EtrkYU9x/uM0baYcmmxGrXCTGOG8OXlKiLCZln/YORAMla
+CjmuzA3Waf1hsYJA/dvUoeNU7of7UZfBIcoMiYFBSdQyTznfOP6qcMEkgkeDSlD
37EO9IHKBADNlL8Y6oT01xBI6HdcYnkoRvIatGiMXC8ZW7L3xp4TYAOUoZO90Dje
HrI0Mq8iY0nd0Wzqb7VYL8olK0fy
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:46 2025 by rpki-client