Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a383830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a383830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          4AUbJdR9Nyolvkb4mWi3/g8tPW9NRTePlh2DASMOXKY=
Subject key identifier:   6A:AD:0B:A9:AC:C2:7D:30:C6:66:90:9A:5B:27:39:C3:26:3C:26:3A
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       174789D36ABAF004F28D35E325A579328D448A4A
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a383830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:13 +0000
ROA not before:           Mon 17 Mar 2025 17:52:13 +0000
ROA not after:            Mon 16 Mar 2026 17:57:13 +0000
asID:                     263629
IP address blocks:        2804:104c:8800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:47:89:d3:6a:ba:f0:04:f2:8d:35:e3:25:a5:79:32:8d:44:8a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:13 2025 GMT
            Not After : Mar 16 17:57:13 2026 GMT
        Subject: CN=6AAD0BA9ACC27D30C666909A5B2739C3263C263A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:a0:89:b9:7e:ee:2c:d4:25:28:db:f0:2e:
                    c7:c3:03:f0:aa:c0:d4:de:c1:ba:1c:5a:11:12:29:
                    9b:f5:87:0b:06:0c:7a:8f:f3:01:16:28:e7:6f:8a:
                    0e:89:af:b5:67:83:92:37:fe:95:2a:c1:05:8f:69:
                    14:0c:24:85:fc:d0:4a:ab:ea:30:28:5b:1e:7e:e6:
                    59:b6:b1:30:9e:7e:9d:88:c2:c5:88:19:44:07:ed:
                    a1:4d:ea:36:45:fb:ce:d1:a8:b3:c0:84:c3:f8:4a:
                    2e:75:95:32:e8:ce:c3:30:20:93:5b:d5:95:8f:ae:
                    80:2f:65:8b:46:17:63:92:7f:51:51:09:5b:4b:15:
                    43:a6:c0:14:76:1c:6a:47:2a:94:ca:88:4b:cd:35:
                    1c:01:7b:55:74:f1:9e:15:a1:76:f3:92:ed:8d:35:
                    d4:cc:9d:99:15:df:52:ba:04:f1:fb:0c:e8:3f:0a:
                    fb:d8:92:25:ca:7a:31:ac:19:9a:ee:54:ad:0e:24:
                    c2:22:b0:2a:80:de:19:01:ae:2a:95:17:a9:f4:73:
                    f7:87:f0:a6:a5:27:fb:af:3b:34:09:4e:51:ee:c9:
                    fc:d5:f2:b4:b7:8a:5c:fe:30:de:7f:02:f5:9a:70:
                    bf:a8:32:88:15:d8:e3:22:2d:d0:7c:37:e7:77:a2:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AD:0B:A9:AC:C2:7D:30:C6:66:90:9A:5B:27:39:C3:26:3C:26:3A
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a383830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:e9:ed:53:33:71:31:d4:5b:da:46:4d:2c:fd:6d:b2:36:8e:
         b4:e5:68:ae:42:fe:4e:cd:03:02:70:24:a2:b3:59:40:6c:bb:
         2c:07:e0:d5:d3:7e:54:ff:2d:76:25:52:bb:47:14:25:de:80:
         84:f9:f2:3b:fb:b7:b7:8a:8d:9d:5e:01:00:e4:8f:b4:bf:3e:
         dd:5a:63:c2:fc:cc:d7:23:cc:a8:53:0c:56:b1:8e:13:01:c3:
         c5:dd:0d:fc:94:17:ed:a7:67:10:08:03:eb:33:3e:5b:e4:2d:
         9a:a5:95:5b:b7:90:3e:a8:35:c7:f1:a9:8f:4b:c9:59:54:77:
         a5:9b:60:2f:2f:bd:da:31:24:4c:8e:02:6a:00:65:f6:31:45:
         22:7f:2f:0a:4d:bf:60:3f:fc:72:9f:9a:fb:4f:5a:05:fa:8d:
         bc:96:2d:8b:8d:48:f4:8d:0f:08:60:7b:a3:6f:a0:d8:ef:d2:
         b0:12:f0:6c:57:a9:80:08:ba:cb:4a:97:5d:d8:3b:a8:04:30:
         06:49:ea:a0:56:e2:66:81:65:d5:a6:f7:35:f5:d2:0a:48:3b:
         e1:3e:08:37:92:c8:46:04:65:14:c8:09:aa:0e:e2:88:76:28:
         aa:f1:2c:aa:b4:68:16:1b:ac:6a:6b:36:7c:a9:f0:42:9c:9d:
         39:0f:d8:ae
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUF0eJ02q68ATyjTXjJaV5Mo1EikowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5MjVBNzhGOEJGQ0I2MjBDODBDQzhGQUQ0N0Y1RjMw
MkVGRkJDRDAeFw0yNTAzMTcxNzUyMTNaFw0yNjAzMTYxNzU3MTNaMDMxMTAvBgNV
BAMTKDZBQUQwQkE5QUNDMjdEMzBDNjY2OTA5QTVCMjczOUMzMjYzQzI2M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH+KCJuX7uLNQlKNvwLsfDA/Cq
wNTewbocWhESKZv1hwsGDHqP8wEWKOdvig6Jr7Vng5I3/pUqwQWPaRQMJIX80Eqr
6jAoWx5+5lm2sTCefp2IwsWIGUQH7aFN6jZF+87RqLPAhMP4Si51lTLozsMwIJNb
1ZWProAvZYtGF2OSf1FRCVtLFUOmwBR2HGpHKpTKiEvNNRwBe1V08Z4VoXbzku2N
NdTMnZkV31K6BPH7DOg/CvvYkiXKejGsGZruVK0OJMIisCqA3hkBriqVF6n0c/eH
8KalJ/uvOzQJTlHuyfzV8rS3ilz+MN5/AvWacL+oMogV2OMiLdB8N+d3ook9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUaq0LqazCfTDGZpCaWyc5wyY8JjowHwYDVR0j
BBgwFoAU7JJaePi/y2IMgMyPrUf18wLv+80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC9FQzkyNUE3OEY4QkZDQjYyMEM4MENDOEZBRDQ3RjVGMzAyRUZGQkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDOTI1QTc4RjhCRkNCNjIw
QzgwQ0M4RkFENDdGNUYzMDJFRkZCQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzIzODMwMzQzYTMxMzAzNDYzM2EzODM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM2MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEEyIMA0GCSqGSIb3DQEBCwUA
A4IBAQCY6e1TM3Ex1FvaRk0s/W2yNo605WiuQv5OzQMCcCSis1lAbLssB+DV035U
/y12JVK7RxQl3oCE+fI7+7e3io2dXgEA5I+0vz7dWmPC/MzXI8yoUwxWsY4TAcPF
3Q38lBftp2cQCAPrMz5b5C2apZVbt5A+qDXH8amPS8lZVHelm2AvL73aMSRMjgJq
AGX2MUUify8KTb9gP/xyn5r7T1oF+o28li2LjUj0jQ8IYHujb6DY79KwEvBsV6mA
CLrLSpdd2DuoBDAGSeqgVuJmgWXVpvc19dIKSDvhPgg3kshGBGUUyAmqDuKIdiiq
8SyqtGgWG6xqazZ8qfBCnJ05D9iu
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:42:45 2025 by rpki-client