Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/323830343a343535303a383030303a3a2f33332d3333203d3e20323636393138.roa
File:                     323830343a343535303a383030303a3a2f33332d3333203d3e20323636393138.roa (raw, json)
Hash identifier:          DPPUSUAmceo7GL2u0xyWUbZkHo6wWX8TZTl69vS6/eA=
Subject key identifier:   E7:15:0C:78:22:D3:04:EE:14:84:D3:F7:A2:9E:35:AD:70:9E:21:D4
Certificate issuer:       /CN=82E3B68F2552FF0BEDFAD52934CA85138EA04042
Certificate serial:       3A7BDEECA1541570D7D854845166B6AC923AF3C7
Authority key identifier: 82:E3:B6:8F:25:52:FF:0B:ED:FA:D5:29:34:CA:85:13:8E:A0:40:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82E3B68F2552FF0BEDFAD52934CA85138EA04042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/323830343a343535303a383030303a3a2f33332d3333203d3e20323636393138.roa
Signing time:             Mon 16 Dec 2024 15:44:29 +0000
ROA not before:           Mon 16 Dec 2024 15:39:29 +0000
ROA not after:            Mon 15 Dec 2025 15:44:29 +0000
asID:                     266918
IP address blocks:        2804:4550:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7b:de:ec:a1:54:15:70:d7:d8:54:84:51:66:b6:ac:92:3a:f3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E3B68F2552FF0BEDFAD52934CA85138EA04042
        Validity
            Not Before: Dec 16 15:39:29 2024 GMT
            Not After : Dec 15 15:44:29 2025 GMT
        Subject: CN=E7150C7822D304EE1484D3F7A29E35AD709E21D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:81:33:bb:85:d4:24:6f:4d:17:bc:5b:c5:
                    54:08:1d:bf:4c:62:32:00:e1:69:0f:90:a0:a1:59:
                    5c:e5:96:e4:91:79:09:0c:e4:52:60:aa:24:03:b7:
                    d3:fb:fc:01:f8:7f:3a:d2:7a:80:e2:08:95:b1:bf:
                    20:22:86:88:77:8a:6c:5b:c2:6a:d2:c7:34:1c:be:
                    9c:9c:b9:aa:f5:e1:db:c0:78:b5:c4:9d:29:15:5d:
                    65:b8:da:a6:67:0e:00:fe:a3:7e:1b:34:39:72:78:
                    77:f3:49:12:4e:28:05:ff:70:6d:36:9a:8e:df:4d:
                    53:70:f6:8e:34:ab:fb:14:a3:37:16:42:41:9c:10:
                    cd:66:2d:96:7a:27:d7:0e:37:4a:ea:ce:c5:e2:8f:
                    e1:75:81:d4:e0:6c:84:2c:e7:ad:c7:f0:b1:f5:ba:
                    de:c2:69:bd:0d:2b:0d:9f:e8:46:63:24:4e:08:62:
                    d7:1a:bc:34:7e:16:31:cf:a3:4a:a3:35:06:ea:96:
                    4d:ab:19:53:ab:f9:af:34:19:65:a8:b2:43:8d:bb:
                    d2:d9:5f:24:c6:b2:0b:e2:5f:c9:23:fd:1c:cd:0f:
                    78:84:15:80:04:ae:c7:9b:dc:d1:46:94:9e:f9:75:
                    c2:60:bb:dd:29:86:dd:11:85:bb:1d:9c:ca:9e:b9:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:0C:78:22:D3:04:EE:14:84:D3:F7:A2:9E:35:AD:70:9E:21:D4
            X509v3 Authority Key Identifier:
                keyid:82:E3:B6:8F:25:52:FF:0B:ED:FA:D5:29:34:CA:85:13:8E:A0:40:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/82E3B68F2552FF0BEDFAD52934CA85138EA04042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82E3B68F2552FF0BEDFAD52934CA85138EA04042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/323830343a343535303a383030303a3a2f33332d3333203d3e20323636393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4550:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:5e:fc:9f:94:a6:85:41:dd:ec:14:7f:9f:26:ab:39:59:
         f2:2d:98:18:89:6f:a1:ec:fb:ee:88:2a:a0:59:0c:ef:fb:0e:
         b5:30:75:46:19:bc:60:27:16:0d:d6:25:5b:4c:74:99:ac:71:
         d3:25:a8:e8:44:9e:7b:30:8a:1a:22:80:23:c0:65:e4:ee:1b:
         bb:2a:c8:1d:4b:73:80:9c:8e:f2:a9:68:88:91:e7:ae:d1:64:
         f0:33:40:71:05:c1:ef:32:87:e2:b0:90:7b:5a:e9:3b:45:76:
         54:9d:a7:e1:a6:69:68:1c:6f:43:1a:a9:f9:6d:36:9d:bf:b6:
         55:cf:98:e0:46:ba:2f:59:9f:cd:ea:50:2e:0e:e9:bb:52:14:
         c4:08:c8:15:fb:17:d9:c7:1c:92:98:41:71:81:0c:d1:5e:ee:
         13:89:0c:04:4f:d5:73:8e:14:72:84:f0:6a:59:1a:03:57:89:
         8b:50:fa:93:43:81:da:05:62:25:98:3c:ba:fd:04:c3:77:5d:
         6e:64:f1:e7:f3:dd:03:68:d9:e8:57:3e:02:0d:1c:73:6c:ae:
         37:62:8d:ee:e5:2a:4f:14:ad:16:3c:4e:2a:f9:84:27:6f:64:
         e9:bf:ef:0d:c4:0b:b0:11:66:6a:29:b7:da:20:2a:5f:06:b4:
         de:f8:cd:6c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOnve7KFUFXDX2FSEUWa2rJI688cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJFM0I2OEYyNTUyRkYwQkVERkFENTI5MzRDQTg1MTM4
RUEwNDA0MjAeFw0yNDEyMTYxNTM5MjlaFw0yNTEyMTUxNTQ0MjlaMDMxMTAvBgNV
BAMTKEU3MTUwQzc4MjJEMzA0RUUxNDg0RDNGN0EyOUUzNUFENzA5RTIxRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FoEzu4XUJG9NF7xbxVQIHb9M
YjIA4WkPkKChWVzlluSReQkM5FJgqiQDt9P7/AH4fzrSeoDiCJWxvyAihoh3imxb
wmrSxzQcvpycuar14dvAeLXEnSkVXWW42qZnDgD+o34bNDlyeHfzSRJOKAX/cG02
mo7fTVNw9o40q/sUozcWQkGcEM1mLZZ6J9cON0rqzsXij+F1gdTgbIQs563H8LH1
ut7Cab0NKw2f6EZjJE4IYtcavDR+FjHPo0qjNQbqlk2rGVOr+a80GWWoskONu9LZ
XyTGsgviX8kj/RzND3iEFYAErseb3NFGlJ75dcJgu90pht0RhbsdnMqeuWDnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5xUMeCLTBO4UhNP3op41rXCeIdQwHwYDVR0j
BBgwFoAUguO2jyVS/wvt+tUpNMqFE46gQEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREd6S2tZQk43UHlwdVE5bkg4RUtOeGNBTjhkcFhCMlZOM0U4SFQ3dXNE
WEIvMC84MkUzQjY4RjI1NTJGRjBCRURGQUQ1MjkzNENBODUxMzhFQTA0MDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyRTNCNjhGMjU1MkZGMEJF
REZBRDUyOTM0Q0E4NTEzOEVBMDQwNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RHektrWUJON1B5cHVROW5IOEVLTnhjQU44ZHBYQjJWTjNFOEhUN3VzRFhCLzAv
MzIzODMwMzQzYTM0MzUzNTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygERVCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAUfV78n5SmhUHd7BR/nyarOVnyLZgYiW+h7PvuiCqgWQzv+w61MHVGGbxg
JxYN1iVbTHSZrHHTJajoRJ57MIoaIoAjwGXk7hu7KsgdS3OAnI7yqWiIkeeu0WTw
M0BxBcHvMofisJB7Wuk7RXZUnafhpmloHG9DGqn5bTadv7ZVz5jgRrovWZ/N6lAu
Dum7UhTECMgV+xfZxxySmEFxgQzRXu4TiQwET9VzjhRyhPBqWRoDV4mLUPqTQ4Ha
BWIlmDy6/QTDd11uZPHn890DaNnoVz4CDRxzbK43Yo3u5SpPFK0WPE4q+YQnb2Tp
v+8NxAuwEWZqKbfaICpfBrTe+M1s
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:39:34 2025 by rpki-client