Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
File:                     323830343a323539633a3a2f33322d3332203d3e203532373732.roa (raw, json)
Hash identifier:          zgIKwvmFcDouZ6FxubKaOEy8d2Hzdny46G2AIKweDpk=
Subject key identifier:   5C:D7:FC:D1:D2:87:B3:C7:0E:B5:AB:C6:5B:B1:6A:0A:76:CA:74:20
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       2CF0D9B27E610E7473BF585A75350CE3D74C0DCD
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:26 +0000
ROA not before:           Fri 14 Feb 2025 17:42:26 +0000
ROA not after:            Fri 13 Feb 2026 17:47:26 +0000
asID:                     52772
IP address blocks:        2804:259c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f0:d9:b2:7e:61:0e:74:73:bf:58:5a:75:35:0c:e3:d7:4c:0d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:26 2025 GMT
            Not After : Feb 13 17:47:26 2026 GMT
        Subject: CN=5CD7FCD1D287B3C70EB5ABC65BB16A0A76CA7420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:3a:68:1c:45:62:55:ea:37:98:75:a4:2f:
                    16:be:72:17:aa:73:c8:f2:62:cb:72:0c:a4:b3:dd:
                    c2:fa:8c:75:1d:c8:7c:31:7e:49:a6:84:eb:f7:3c:
                    25:c2:92:92:f1:80:30:63:d0:8e:8b:a1:a4:f7:93:
                    5e:ab:b2:af:8a:88:30:df:86:a1:57:31:fb:ae:38:
                    3d:c5:58:61:2b:55:04:d3:34:11:7a:37:31:7a:57:
                    1a:95:c8:66:63:17:40:c7:d1:3d:56:53:bb:a5:24:
                    f2:69:f2:a4:54:eb:23:d8:79:b9:80:ee:ab:e0:e4:
                    cd:16:85:9f:c4:6c:17:dc:8b:bf:b5:ec:b3:0f:a3:
                    c6:b5:54:5f:7b:8b:d2:f3:cb:f5:41:0e:6f:e3:97:
                    3b:87:01:ab:01:b7:ac:a3:4f:2e:df:94:d7:25:4a:
                    97:3d:af:51:2e:3f:18:23:23:85:40:e1:b4:d7:81:
                    36:f9:6f:0c:48:dc:8f:4b:78:e4:f7:9f:95:55:76:
                    51:c3:07:ee:44:1d:fa:81:e1:b0:58:8c:40:cb:f2:
                    c0:89:f5:1f:54:53:88:d6:aa:82:cd:af:e8:a1:a6:
                    25:99:69:df:f4:c6:d8:93:c0:65:41:57:44:45:69:
                    4e:d1:7e:29:65:85:36:7d:75:ec:ff:69:1b:72:db:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D7:FC:D1:D2:87:B3:C7:0E:B5:AB:C6:5B:B1:6A:0A:76:CA:74:20
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:b2:e9:a5:39:70:79:dd:27:a9:9a:5e:32:b3:11:66:3a:a3:
         41:16:cc:e8:2e:88:af:0e:86:40:5c:3f:ad:14:46:84:25:72:
         25:89:c7:3d:04:1c:f3:dc:f5:a6:7a:a8:d4:5b:1d:c6:08:71:
         f6:8e:cf:30:82:d9:c3:9e:6b:d0:1f:f4:49:90:26:57:7c:d4:
         8a:dd:78:c6:ff:f6:01:89:a9:ae:59:86:c6:17:c5:e6:77:20:
         38:bc:12:54:21:c6:23:b4:b6:cf:f1:db:ff:33:a2:5f:31:06:
         0b:82:1b:fd:d6:aa:3e:87:3c:2c:c9:fa:63:5f:25:e9:59:36:
         b9:9f:3a:b5:40:ed:65:d2:a0:73:dd:0a:8c:0f:53:ec:f5:d7:
         02:0b:77:df:cd:7a:49:1d:79:f4:b4:15:15:ad:bc:35:43:7a:
         54:55:25:2c:3b:d6:f2:a7:47:0e:3f:34:66:c0:ad:f3:1e:f7:
         2b:46:89:88:37:62:90:de:09:15:b7:60:b4:68:a7:1d:75:11:
         b8:7c:13:1c:b1:96:d9:19:83:f1:2f:f8:11:02:54:8e:40:24:
         b8:4d:7e:37:e5:72:51:3d:63:50:13:eb:d0:fa:7d:f6:d1:72:
         0d:ca:58:4e:b6:51:38:e2:ad:23:b5:de:86:20:62:7f:17:0b:
         48:fc:88:bc
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULPDZsn5hDnRzv1hadTUM49dMDc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGNkFDM0Q4RjUwNkJEQ0VDODEyQkRGRDJDRkIzMzFB
MjUxRUFDOTAeFw0yNTAyMTQxNzQyMjZaFw0yNjAyMTMxNzQ3MjZaMDMxMTAvBgNV
BAMTKDVDRDdGQ0QxRDI4N0IzQzcwRUI1QUJDNjVCQjE2QTBBNzZDQTc0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCleDpoHEViVeo3mHWkLxa+cheq
c8jyYstyDKSz3cL6jHUdyHwxfkmmhOv3PCXCkpLxgDBj0I6LoaT3k16rsq+KiDDf
hqFXMfuuOD3FWGErVQTTNBF6NzF6VxqVyGZjF0DH0T1WU7ulJPJp8qRU6yPYebmA
7qvg5M0WhZ/EbBfci7+17LMPo8a1VF97i9Lzy/VBDm/jlzuHAasBt6yjTy7flNcl
Spc9r1EuPxgjI4VA4bTXgTb5bwxI3I9LeOT3n5VVdlHDB+5EHfqB4bBYjEDL8sCJ
9R9UU4jWqoLNr+ihpiWZad/0xtiTwGVBV0RFaU7RfillhTZ9dez/aRty27oHAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUXNf80dKHs8cOtavGW7FqCnbKdCAwHwYDVR0j
BBgwFoAUMvasPY9Qa9zsgSvf0s+zMaJR6skwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC8zMkY2QUMzRDhGNTA2QkRDRUM4MTJCREZEMkNGQjMzMUEyNTFFQUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRjZBQzNEOEY1MDZCRENF
QzgxMkJERkQyQ0ZCMzMxQTI1MUVBQzkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv
MzIzODMwMzQzYTMyMzUzOTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM3
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEJZwwDQYJKoZIhvcNAQELBQADggEBADyy6aU5cHnd
J6maXjKzEWY6o0EWzOguiK8OhkBcP60URoQlciWJxz0EHPPc9aZ6qNRbHcYIcfaO
zzCC2cOea9Af9EmQJld81IrdeMb/9gGJqa5ZhsYXxeZ3IDi8ElQhxiO0ts/x2/8z
ol8xBguCG/3Wqj6HPCzJ+mNfJelZNrmfOrVA7WXSoHPdCowPU+z11wILd9/Nekkd
efS0FRWtvDVDelRVJSw71vKnRw4/NGbArfMe9ytGiYg3YpDeCRW3YLRopx11Ebh8
ExyxltkZg/Ev+BECVI5AJLhNfjflclE9Y1AT69D6ffbRcg3KWE62UTjirSO13oYg
Yn8XC0j8iLw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:29:31 2025 by rpki-client