Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          J/5rHU8yvmkQuwQDoHU2AveSxPxt9IPtaVCNO2dN0AY=
Subject key identifier:   E9:F6:EB:17:21:5D:8C:8A:12:A9:63:EF:80:0E:5E:9A:6B:87:31:29
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       7552D5A4E4252479B0C933DB7FFC7B0D8B6B47CB
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:34 +0000
ROA not before:           Fri 14 Feb 2025 17:42:34 +0000
ROA not after:            Fri 13 Feb 2026 17:47:34 +0000
asID:                     52772
IP address blocks:        2804:259c:aa00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:52:d5:a4:e4:25:24:79:b0:c9:33:db:7f:fc:7b:0d:8b:6b:47:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:34 2025 GMT
            Not After : Feb 13 17:47:34 2026 GMT
        Subject: CN=E9F6EB17215D8C8A12A963EF800E5E9A6B873129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:e2:48:48:cf:b9:8a:dd:55:03:61:47:40:
                    d8:1b:a5:d6:f7:f8:88:81:c8:e4:10:eb:8b:90:4c:
                    29:96:66:85:3c:b5:37:f2:2d:0b:7c:5f:a3:f4:d9:
                    ee:5b:94:96:50:4c:6f:84:5a:c5:35:cc:11:e4:fb:
                    9c:3e:72:96:fb:93:37:9b:4e:67:25:bd:39:65:9f:
                    4f:d3:e7:f6:fe:98:0d:d8:36:26:1b:94:3c:77:83:
                    04:00:67:2d:67:8e:25:3e:5b:d5:f5:f8:b7:87:ec:
                    8a:1e:da:9b:0c:00:e6:90:55:21:48:70:c4:67:ed:
                    c0:be:6d:82:3c:6b:40:a7:9b:ed:d9:b1:46:df:df:
                    a6:00:56:b4:67:9d:29:58:09:83:c2:a3:5c:79:e8:
                    7c:d1:95:67:65:ad:ac:d1:d6:a1:9a:d5:51:c6:87:
                    3f:ad:ec:68:52:1c:55:14:e8:b0:ad:ba:99:36:34:
                    46:77:fa:b5:cc:08:dc:02:f2:18:de:05:e0:7c:2a:
                    7d:f3:5e:a9:ba:ea:66:7d:52:f5:bf:e5:13:f3:47:
                    da:8d:50:22:fe:2a:23:08:9a:27:b3:03:63:39:65:
                    b6:28:a7:56:a3:06:26:47:6f:bc:26:24:a1:cb:3e:
                    8c:f0:84:84:64:b2:9c:e5:27:aa:bb:0c:cc:08:0e:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:EB:17:21:5D:8C:8A:12:A9:63:EF:80:0E:5E:9A:6B:87:31:29
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:37:dc:94:6a:97:a1:fa:30:e3:a8:e1:25:b3:41:91:50:62:
         08:5c:66:7d:47:cd:91:16:1a:7b:f0:90:79:51:b2:c0:a5:37:
         86:55:5f:13:ef:8e:ee:7b:6e:9a:7c:50:08:cb:90:7d:ee:82:
         9b:77:eb:7f:6f:8c:99:19:b9:eb:68:82:aa:46:df:b0:83:d3:
         50:3b:57:d5:e1:86:bb:95:af:f9:16:5f:8e:d0:9b:dd:42:81:
         61:ed:29:b4:6d:2a:51:89:8e:37:20:6f:4a:24:4b:99:5c:b0:
         53:f2:f0:b5:c4:cd:03:ba:2f:e0:9b:ab:14:08:b6:54:3a:dd:
         83:6e:fc:5e:50:7d:64:ed:9f:d4:65:b4:b7:1c:d0:b9:f0:d7:
         00:79:48:51:93:a3:08:b1:92:a1:e3:0b:90:58:8a:93:44:69:
         d9:a9:60:ba:a1:7d:36:26:f8:e5:97:6d:09:ce:b6:e9:6a:81:
         ca:f0:6b:a8:3a:41:e8:97:70:02:7e:cd:67:f3:0e:74:a2:b5:
         e0:b1:80:ae:33:df:57:70:ba:26:69:e9:21:f7:a4:f6:3c:91:
         58:6f:39:26:4b:b7:ab:22:97:92:9d:f5:fc:20:da:6d:3d:64:
         85:d1:2d:38:4e:e7:a5:7a:d0:e3:1c:da:a4:30:31:23:a8:47:
         9f:64:bb:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdVLVpOQlJHmwyTPbf/x7DYtrR8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGNkFDM0Q4RjUwNkJEQ0VDODEyQkRGRDJDRkIzMzFB
MjUxRUFDOTAeFw0yNTAyMTQxNzQyMzRaFw0yNjAyMTMxNzQ3MzRaMDMxMTAvBgNV
BAMTKEU5RjZFQjE3MjE1RDhDOEExMkE5NjNFRjgwMEU1RTlBNkI4NzMxMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwOJISM+5it1VA2FHQNgbpdb3
+IiByOQQ64uQTCmWZoU8tTfyLQt8X6P02e5blJZQTG+EWsU1zBHk+5w+cpb7kzeb
TmclvTlln0/T5/b+mA3YNiYblDx3gwQAZy1njiU+W9X1+LeH7Ioe2psMAOaQVSFI
cMRn7cC+bYI8a0Cnm+3ZsUbf36YAVrRnnSlYCYPCo1x56HzRlWdlrazR1qGa1VHG
hz+t7GhSHFUU6LCtupk2NEZ3+rXMCNwC8hjeBeB8Kn3zXqm66mZ9UvW/5RPzR9qN
UCL+KiMImiezA2M5ZbYop1ajBiZHb7wmJKHLPozwhIRkspzlJ6q7DMwIDvgJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6fbrFyFdjIoSqWPvgA5emmuHMSkwHwYDVR0j
BBgwFoAUMvasPY9Qa9zsgSvf0s+zMaJR6skwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC8zMkY2QUMzRDhGNTA2QkRDRUM4MTJCREZEMkNGQjMzMUEyNTFFQUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRjZBQzNEOEY1MDZCRENF
QzgxMkJERkQyQ0ZCMzMxQTI1MUVBQzkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv
MzIzODMwMzQzYTMyMzUzOTYzM2E2MTYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM1MzIzNzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCWcqjANBgkqhkiG9w0BAQsFAAOC
AQEAXzfclGqXofow46jhJbNBkVBiCFxmfUfNkRYae/CQeVGywKU3hlVfE++O7ntu
mnxQCMuQfe6Cm3frf2+MmRm562iCqkbfsIPTUDtX1eGGu5Wv+RZfjtCb3UKBYe0p
tG0qUYmONyBvSiRLmVywU/LwtcTNA7ov4JurFAi2VDrdg278XlB9ZO2f1GW0txzQ
ufDXAHlIUZOjCLGSoeMLkFiKk0Rp2alguqF9Nib45ZdtCc626WqByvBrqDpB6Jdw
An7NZ/MOdKK14LGArjPfV3C6JmnpIfek9jyRWG85Jku3qyKXkp31/CDabT1khdEt
OE7npXrQ4xzapDAxI6hHn2S73w==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:38:47 2025 by rpki-client