Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/323830343a343538303a3a2f33322d313238203d3e20323636393331.roa
File:                     323830343a343538303a3a2f33322d313238203d3e20323636393331.roa (raw, json)
Hash identifier:          ytvTBSqdA6ESqEjSleQU0wx8l2QZVZpAu4HEtplaryo=
Subject key identifier:   5C:E5:27:99:73:DE:8C:83:53:95:E3:1F:7B:35:C7:26:90:8C:BC:DF
Certificate issuer:       /CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE
Certificate serial:       76059C9B8789324D46A9B7DD7BBC561429751BDC
Authority key identifier: A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/323830343a343538303a3a2f33322d313238203d3e20323636393331.roa
Signing time:             Sun 02 Mar 2025 14:06:21 +0000
ROA not before:           Sun 02 Mar 2025 14:01:21 +0000
ROA not after:            Sun 01 Mar 2026 14:06:21 +0000
asID:                     266931
IP address blocks:        2804:4580::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:05:9c:9b:87:89:32:4d:46:a9:b7:dd:7b:bc:56:14:29:75:1b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE
        Validity
            Not Before: Mar  2 14:01:21 2025 GMT
            Not After : Mar  1 14:06:21 2026 GMT
        Subject: CN=5CE5279973DE8C835395E31F7B35C726908CBCDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:b3:2e:da:ce:cd:c6:0c:c6:53:84:0a:0e:
                    d4:e6:e7:9e:c4:fa:32:04:7a:2f:64:da:86:ff:f4:
                    77:00:ff:f4:8a:3b:01:bd:81:25:a5:57:71:9b:96:
                    58:7c:64:a5:2d:d6:84:fc:0f:5c:58:92:9c:c1:4e:
                    ef:99:cd:90:84:aa:48:6d:52:5e:3b:96:11:6a:50:
                    1e:24:b5:82:24:5d:b1:ec:ee:1a:67:74:e8:94:50:
                    38:91:39:d5:68:44:7d:0b:b6:7d:3d:2c:0f:70:07:
                    e8:3f:59:e3:79:2e:5f:54:32:bc:db:72:62:f7:7f:
                    6e:cd:4d:9c:2b:eb:d0:73:07:47:a8:25:63:6d:d3:
                    0e:59:e4:07:bb:62:00:6d:6e:29:50:c0:8e:38:4f:
                    ba:d8:c5:dd:3c:de:af:4f:13:24:30:d6:2c:f6:f2:
                    5e:52:c7:79:9a:c1:ad:58:c8:2b:e8:35:c9:8a:de:
                    91:b4:0b:91:23:e0:cd:af:c4:97:de:13:84:40:1a:
                    cc:73:ff:ab:c3:ac:61:32:68:3a:31:eb:54:42:5a:
                    e5:82:85:d8:53:9a:2c:01:f6:1a:18:b1:a9:ef:9e:
                    9c:84:22:1d:10:75:5d:5c:11:3d:90:b6:af:a9:c2:
                    85:30:9d:d5:ed:b4:ae:64:a3:5a:da:ee:49:6a:c4:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E5:27:99:73:DE:8C:83:53:95:E3:1F:7B:35:C7:26:90:8C:BC:DF
            X509v3 Authority Key Identifier:
                keyid:A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/323830343a343538303a3a2f33322d313238203d3e20323636393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4580::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:19:d4:8f:59:b6:0a:70:1a:39:ea:ba:36:33:ad:59:6d:49:
         43:ac:33:2d:34:68:04:f6:1c:e4:eb:4e:c3:bd:97:35:79:b0:
         f5:a5:b4:9b:d2:5f:aa:cd:f0:a1:21:a3:ff:bc:42:f4:09:2e:
         97:f0:3f:00:2d:c4:f9:da:06:92:c3:c6:6c:9d:8e:d7:c5:33:
         f3:ae:b4:e5:ab:dd:90:41:2d:50:8d:35:71:d6:68:f2:b8:13:
         ed:76:81:be:c4:5d:92:46:c6:22:65:82:16:9c:6d:9e:05:b8:
         36:9d:a3:2a:7a:7b:48:a8:a5:5a:7e:61:00:3a:7c:e2:05:3f:
         26:6e:bb:85:7d:39:c8:9c:49:ba:58:91:ec:3e:63:f6:fc:ed:
         05:1d:2e:c3:ec:9f:2c:20:2b:31:bf:ad:52:5d:06:e6:3e:f8:
         23:17:19:a4:9f:d3:42:bd:e2:93:40:19:37:92:d4:b1:1e:0b:
         47:4a:05:55:34:1e:7e:ea:b6:34:9a:5e:a8:e9:7e:c6:a4:8e:
         e4:88:2e:9e:aa:b7:db:64:88:fa:d2:c2:46:be:ff:5a:48:79:
         65:ba:5a:74:bf:78:e3:96:f2:a0:7e:fc:d0:3b:41:38:6c:b3:
         5a:b9:51:1a:57:5f:5f:df:c5:a3:b2:60:45:c7:2e:ca:f4:de:
         3f:dd:c2:b2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdgWcm4eJMk1Gqbfde7xWFCl1G9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3MERCMEQ5MUI2NTY3RjEwNkI0MTRGNkVCQ0NBQkFF
QjU1OENDRTAeFw0yNTAzMDIxNDAxMjFaFw0yNjAzMDExNDA2MjFaMDMxMTAvBgNV
BAMTKDVDRTUyNzk5NzNERThDODM1Mzk1RTMxRjdCMzVDNzI2OTA4Q0JDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChoLMu2s7NxgzGU4QKDtTm557E
+jIEei9k2ob/9HcA//SKOwG9gSWlV3Gbllh8ZKUt1oT8D1xYkpzBTu+ZzZCEqkht
Ul47lhFqUB4ktYIkXbHs7hpndOiUUDiROdVoRH0Ltn09LA9wB+g/WeN5Ll9UMrzb
cmL3f27NTZwr69BzB0eoJWNt0w5Z5Ae7YgBtbilQwI44T7rYxd083q9PEyQw1iz2
8l5Sx3mawa1YyCvoNcmK3pG0C5Ej4M2vxJfeE4RAGsxz/6vDrGEyaDox61RCWuWC
hdhTmiwB9hoYsanvnpyEIh0QdV1cET2Qtq+pwoUwndXttK5ko1ra7klqxHW1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUXOUnmXPejINTleMfezXHJpCMvN8wHwYDVR0j
BBgwFoAUpXDbDZG2Vn8Qa0FPbrzKuutVjM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNt
SzUvMC9BNTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NzBEQjBEOTFCNjU2N0Yx
MDZCNDE0RjZFQkNDQUJBRUI1NThDQ0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBdExlR0VqTUczaUFRYVBDWHJTNlRtdW9Ed0RFazVNQTEzR2M5bnVzbUs1LzAv
MzIzODMwMzQzYTM0MzUzODMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzOTMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEWAMA0GCSqGSIb3DQEBCwUAA4IBAQBkGdSP
WbYKcBo56ro2M61ZbUlDrDMtNGgE9hzk607DvZc1ebD1pbSb0l+qzfChIaP/vEL0
CS6X8D8ALcT52gaSw8ZsnY7XxTPzrrTlq92QQS1QjTVx1mjyuBPtdoG+xF2SRsYi
ZYIWnG2eBbg2naMqentIqKVafmEAOnziBT8mbruFfTnInEm6WJHsPmP2/O0FHS7D
7J8sICsxv61SXQbmPvgjFxmkn9NCveKTQBk3ktSxHgtHSgVVNB5+6rY0ml6o6X7G
pI7kiC6eqrfbZIj60sJGvv9aSHllulp0v3jjlvKgfvzQO0E4bLNauVEaV19f38Wj
smBFxy7K9N4/3cKy
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:10 2025 by rpki-client