Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a3a2f33322d3332203d3e20323732363731.roa
File:                     323830343a383664633a3a2f33322d3332203d3e20323732363731.roa (raw, json)
Hash identifier:          R6rTyely7+Pjp6F2wAXcndEqcxrz/Xm1aW2AxIFUAhE=
Subject key identifier:   A4:E1:A5:68:96:77:D9:A5:6E:69:59:68:6E:5C:83:14:1F:5D:99:CC
Certificate issuer:       /CN=7ACFA602B537E683CB031FA3447049A7F776E6C5
Certificate serial:       0F9FE80638E835F5C01396290D106C709FB28C67
Authority key identifier: 7A:CF:A6:02:B5:37:E6:83:CB:03:1F:A3:44:70:49:A7:F7:76:E6:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a3a2f33322d3332203d3e20323732363731.roa
Signing time:             Thu 14 Mar 2024 19:32:43 +0000
ROA not before:           Thu 14 Mar 2024 19:27:43 +0000
ROA not after:            Thu 13 Mar 2025 19:32:43 +0000
asID:                     272671
IP address blocks:        2804:86dc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9f:e8:06:38:e8:35:f5:c0:13:96:29:0d:10:6c:70:9f:b2:8c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ACFA602B537E683CB031FA3447049A7F776E6C5
        Validity
            Not Before: Mar 14 19:27:43 2024 GMT
            Not After : Mar 13 19:32:43 2025 GMT
        Subject: CN=A4E1A5689677D9A56E6959686E5C83141F5D99CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:ba:8c:5d:99:6f:9d:90:9c:24:6f:52:10:
                    7a:00:50:90:85:71:9d:f4:ec:d6:64:ee:25:16:ad:
                    a6:59:d5:01:3d:ad:c0:d2:25:77:16:65:6d:60:cf:
                    fb:24:91:63:af:a0:d8:e5:01:50:79:a5:2b:08:27:
                    1e:46:5f:1f:7c:3f:c1:96:44:a0:4c:93:d2:4f:8d:
                    31:07:c6:31:5a:21:46:c6:9f:1a:11:21:d9:f6:71:
                    39:8f:04:44:64:d6:ae:e2:b3:1f:9a:99:54:d3:e9:
                    97:92:37:f0:f8:c2:cc:55:37:9d:01:28:c1:7e:e9:
                    b9:94:e5:08:d3:09:57:2d:ef:c0:73:1d:06:d7:8b:
                    7e:5a:bf:54:fd:a9:e9:91:f8:01:b0:5d:ea:80:bc:
                    0c:e6:fc:35:95:48:ff:cc:62:58:6b:aa:a5:d0:37:
                    65:1e:02:23:81:24:52:b3:31:63:7c:7b:6f:7e:12:
                    f2:32:f1:91:60:c4:38:55:e8:5c:b9:1e:2a:09:43:
                    b1:59:c3:6a:0a:30:fc:ca:c4:36:9e:69:c2:72:16:
                    3b:8a:8f:6b:fc:09:23:43:59:29:5e:c7:6e:94:eb:
                    4c:51:fd:0e:2a:7e:ec:ef:fe:bc:01:62:19:10:b8:
                    15:b9:67:63:ba:af:13:22:87:ef:4a:0d:f3:14:6d:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E1:A5:68:96:77:D9:A5:6E:69:59:68:6E:5C:83:14:1F:5D:99:CC
            X509v3 Authority Key Identifier:
                keyid:7A:CF:A6:02:B5:37:E6:83:CB:03:1F:A3:44:70:49:A7:F7:76:E6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a3a2f33322d3332203d3e20323732363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:d2:cc:51:95:cf:91:5d:c4:9c:09:6f:da:70:5a:97:5b:08:
         34:45:70:ef:bb:8e:eb:8d:c7:d5:dd:a8:fc:a0:c2:97:c9:35:
         0e:c0:ab:5c:03:d6:88:a2:51:68:58:3f:27:a2:c9:6b:cf:02:
         3c:d1:32:a4:30:37:c7:3e:4f:bb:f7:ee:6e:37:60:2a:f5:d2:
         ae:a5:99:b3:38:68:02:17:d7:e3:fc:28:6e:5a:4e:fd:33:5b:
         d1:dd:a5:10:35:12:c5:76:c8:f3:eb:d2:55:14:37:0f:80:a7:
         11:9c:64:16:af:ac:a7:ae:75:55:a8:8c:ba:6e:8b:db:f3:2c:
         15:c9:4e:0f:c6:5a:97:47:dd:20:51:76:73:af:95:ff:ee:80:
         88:42:54:5c:6b:5f:04:1d:68:72:c8:b6:5a:80:6c:d2:bd:51:
         f2:1b:03:0e:1f:26:8a:de:e2:0d:36:ff:97:5d:be:b1:6c:af:
         42:41:32:06:b6:2d:1c:52:78:ff:36:21:b5:7f:3f:41:10:c1:
         b8:8f:2a:01:6f:41:fe:f8:8f:73:f4:4b:47:b3:53:38:cd:ca:
         2b:c6:ae:16:3a:e3:2c:ba:04:dd:b5:d1:07:52:1d:ca:f0:39:
         9d:0c:fb:a9:55:f8:7c:92:98:11:7f:c6:9e:d5:95:b1:1a:09:
         ec:1c:65:f1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD5/oBjjoNfXAE5YpDRBscJ+yjGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FDRkE2MDJCNTM3RTY4M0NCMDMxRkEzNDQ3MDQ5QTdG
Nzc2RTZDNTAeFw0yNDAzMTQxOTI3NDNaFw0yNTAzMTMxOTMyNDNaMDMxMTAvBgNV
BAMTKEE0RTFBNTY4OTY3N0Q5QTU2RTY5NTk2ODZFNUM4MzE0MUY1RDk5Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAbqMXZlvnZCcJG9SEHoAUJCF
cZ307NZk7iUWraZZ1QE9rcDSJXcWZW1gz/skkWOvoNjlAVB5pSsIJx5GXx98P8GW
RKBMk9JPjTEHxjFaIUbGnxoRIdn2cTmPBERk1q7isx+amVTT6ZeSN/D4wsxVN50B
KMF+6bmU5QjTCVct78BzHQbXi35av1T9qemR+AGwXeqAvAzm/DWVSP/MYlhrqqXQ
N2UeAiOBJFKzMWN8e29+EvIy8ZFgxDhV6Fy5HioJQ7FZw2oKMPzKxDaeacJyFjuK
j2v8CSNDWSlex26U60xR/Q4qfuzv/rwBYhkQuBW5Z2O6rxMih+9KDfMUbVqHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUpOGlaJZ32aVuaVloblyDFB9dmcwwHwYDVR0j
BBgwFoAUes+mArU35oPLAx+jRHBJp/d25sUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlhTlFjUlFLN2tuN21CV1JDY2VUTnlqcE5KWDZTakt3Snhab1dneEFr
MU0vMC83QUNGQTYwMkI1MzdFNjgzQ0IwMzFGQTM0NDcwNDlBN0Y3NzZFNkM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBQ0ZBNjAyQjUzN0U2ODND
QjAzMUZBMzQ0NzA0OUE3Rjc3NkU2QzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpYU5RY1JRSzdrbjdtQldSQ2NlVE55anBOSlg2U2pLd0p4Wm9XZ3hBazFNLzAv
MzIzODMwMzQzYTM4MzY2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzYzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASG3DANBgkqhkiG9w0BAQsFAAOCAQEAUNLMUZXP
kV3EnAlv2nBal1sINEVw77uO643H1d2o/KDCl8k1DsCrXAPWiKJRaFg/J6LJa88C
PNEypDA3xz5Pu/fubjdgKvXSrqWZszhoAhfX4/woblpO/TNb0d2lEDUSxXbI8+vS
VRQ3D4CnEZxkFq+sp651VaiMum6L2/MsFclOD8Zal0fdIFF2c6+V/+6AiEJUXGtf
BB1ocsi2WoBs0r1R8hsDDh8mit7iDTb/l12+sWyvQkEyBrYtHFJ4/zYhtX8/QRDB
uI8qAW9B/viPc/RLR7NTOM3KK8auFjrjLLoE3bXRB1IdyvA5nQz7qVX4fJKYEX/G
ntWVsRoJ7Bxl8Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:41 2025 by rpki-client