Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33342d3334203d3e20323638373933.roa
File:                     323830343a356163303a343030303a3a2f33342d3334203d3e20323638373933.roa (raw, json)
Hash identifier:          5foGw1oARRshcUalysmaHmQlEwE2KDFi8NOJbJTYFo4=
Subject key identifier:   EB:9C:82:C4:8B:EE:A3:6C:AB:21:AB:59:E2:7D:F0:A2:6F:99:83:88
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       57E6725F1A0A15B906B0B0399A20116739BE80AD
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33342d3334203d3e20323638373933.roa
Signing time:             Mon 13 Jan 2025 18:14:37 +0000
ROA not before:           Mon 13 Jan 2025 18:09:37 +0000
ROA not after:            Mon 12 Jan 2026 18:14:37 +0000
asID:                     268793
IP address blocks:        2804:5ac0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e6:72:5f:1a:0a:15:b9:06:b0:b0:39:9a:20:11:67:39:be:80:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Jan 13 18:09:37 2025 GMT
            Not After : Jan 12 18:14:37 2026 GMT
        Subject: CN=EB9C82C48BEEA36CAB21AB59E27DF0A26F998388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:c6:de:34:69:c3:11:b0:7b:3e:1a:2f:92:
                    c7:3e:fd:50:cf:61:e1:4a:2a:bb:b3:82:91:53:49:
                    a7:5e:73:a4:26:e3:a5:fb:1a:b7:39:bd:7e:79:62:
                    e1:db:b8:6d:68:cf:12:64:d4:c9:55:29:6f:c5:13:
                    ad:97:61:e6:74:e0:11:ca:f7:e3:9f:a6:23:e2:c7:
                    40:65:fe:25:95:ce:54:47:b8:4c:e3:a7:20:28:d0:
                    a3:5e:03:05:c6:bf:fd:9a:b0:c8:d5:8f:da:9e:bc:
                    35:3e:52:7d:3d:cb:f9:c1:87:69:b5:51:8a:84:0f:
                    d5:53:08:b9:0b:2d:7d:f5:a4:83:52:cc:ba:2d:b6:
                    73:21:39:a0:c2:08:c8:8a:ab:e8:8e:05:c3:dd:a2:
                    ab:6a:8e:c4:d5:0f:e9:6b:53:03:46:46:67:09:f6:
                    9e:13:3a:91:8a:f7:fa:d9:e0:68:89:2b:5a:77:16:
                    88:4d:0c:c8:fa:f6:51:d8:69:fd:db:c3:1d:1a:83:
                    4f:74:09:ec:ae:c8:c7:71:ae:c2:e0:cd:2e:09:37:
                    02:4a:7a:94:b8:fd:e9:b3:c7:e2:58:8d:d6:de:0e:
                    5e:93:da:43:6a:d7:59:10:d5:35:ce:1e:76:96:cf:
                    e0:10:57:d5:96:5a:1d:af:53:e5:6c:26:c5:fd:5b:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9C:82:C4:8B:EE:A3:6C:AB:21:AB:59:E2:7D:F0:A2:6F:99:83:88
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33342d3334203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         18:43:7a:99:09:03:4f:3c:eb:90:c0:f0:a6:d7:fb:a7:81:f8:
         bf:02:dc:7f:e6:0b:90:eb:5c:5f:6b:57:3c:86:36:ff:4f:85:
         6b:aa:04:20:0d:9d:7e:76:7f:58:61:10:f8:42:73:53:06:74:
         61:85:31:da:5a:29:e5:e9:05:96:eb:f3:06:96:f1:99:fe:ca:
         8e:7e:0a:7c:8c:4a:ee:8b:82:8c:85:6e:83:59:db:da:46:5c:
         02:19:d6:48:99:fa:2e:e6:36:48:50:dc:9f:38:b9:5f:48:5f:
         cb:30:c2:cb:91:b5:0e:03:8c:22:04:1d:10:30:91:43:b9:ac:
         1b:c4:ae:b0:71:29:dd:c3:a8:35:24:ab:f8:72:c9:00:5b:f8:
         a3:06:47:b0:25:96:e2:90:00:e3:36:5b:20:02:50:4d:33:b6:
         2e:05:6e:65:3b:bd:75:55:f0:5d:e1:ef:5f:8b:ac:63:4b:87:
         34:fd:52:33:27:f7:18:bb:30:af:51:2e:3b:ce:4b:e1:e0:63:
         86:9f:58:f2:54:a5:88:a3:b7:d9:99:2d:b6:1d:50:27:f4:97:
         a4:53:e8:76:4d:05:8f:25:56:ef:f6:78:ef:a9:f8:fe:02:28:
         3e:da:a1:79:d5:69:5e:3b:23:6c:5f:fd:1e:3e:4b:ff:5c:f2:
         be:84:aa:29
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUV+ZyXxoKFbkGsLA5miARZzm+gK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI1NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYx
ODI0RDQ3ODAeFw0yNTAxMTMxODA5MzdaFw0yNjAxMTIxODE0MzdaMDMxMTAvBgNV
BAMTKEVCOUM4MkM0OEJFRUEzNkNBQjIxQUI1OUUyN0RGMEEyNkY5OTgzODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/sbeNGnDEbB7Phovksc+/VDP
YeFKKruzgpFTSadec6Qm46X7Grc5vX55YuHbuG1ozxJk1MlVKW/FE62XYeZ04BHK
9+OfpiPix0Bl/iWVzlRHuEzjpyAo0KNeAwXGv/2asMjVj9qevDU+Un09y/nBh2m1
UYqED9VTCLkLLX31pINSzLottnMhOaDCCMiKq+iOBcPdoqtqjsTVD+lrUwNGRmcJ
9p4TOpGK9/rZ4GiJK1p3FohNDMj69lHYaf3bwx0ag090CeyuyMdxrsLgzS4JNwJK
epS4/emzx+JYjdbeDl6T2kNq11kQ1TXOHnaWz+AQV9WWWh2vU+VsJsX9W9cvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU65yCxIvuo2yrIatZ4n3wom+Zg4gwHwYDVR0j
BBgwFoAUYlQtBNewhmicbj/n138nBhgk1HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0
OWMvMS82MjU0MkQwNEQ3QjA4NjY4OUM2RTNGRTdENzdGMjcwNjE4MjRENDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNTQyRDA0RDdCMDg2Njg5
QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEv
MzIzODMwMzQzYTM1NjE2MzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWsBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAYQ3qZCQNPPOuQwPCm1/ungfi/Atx/5guQ61xfa1c8hjb/T4VrqgQgDZ1+
dn9YYRD4QnNTBnRhhTHaWinl6QWW6/MGlvGZ/sqOfgp8jErui4KMhW6DWdvaRlwC
GdZImfou5jZIUNyfOLlfSF/LMMLLkbUOA4wiBB0QMJFDuawbxK6wcSndw6g1JKv4
cskAW/ijBkewJZbikADjNlsgAlBNM7YuBW5lO711VfBd4e9fi6xjS4c0/VIzJ/cY
uzCvUS47zkvh4GOGn1jyVKWIo7fZmS22HVAn9JekU+h2TQWPJVbv9njvqfj+Aig+
2qF51WleOyNsX/0ePkv/XPK+hKop
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:18:06 2025 by rpki-client