Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          yM2CFU2xfDgLegFQeUN7EOYCkhbFMybUi/bdO1GWx60=
Subject key identifier:   E0:39:60:4A:70:6E:E8:39:DB:91:61:80:E5:40:D5:51:B6:88:90:9D
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       1C5B3D871CA871EE52206A3D141A516B8BC7273B
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:21 +0000
ROA not before:           Fri 14 Mar 2025 17:19:21 +0000
ROA not after:            Fri 13 Mar 2026 17:24:21 +0000
asID:                     274726
IP address blocks:        2804:92a8:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5b:3d:87:1c:a8:71:ee:52:20:6a:3d:14:1a:51:6b:8b:c7:27:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:21 2025 GMT
            Not After : Mar 13 17:24:21 2026 GMT
        Subject: CN=E039604A706EE839DB916180E540D551B688909D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:1c:2f:9c:8f:d0:c4:97:22:88:e5:3a:61:
                    33:fe:0c:7b:f5:01:e3:00:79:20:db:43:e9:c5:f2:
                    84:85:8b:ea:3c:67:ae:a1:64:a0:49:c0:00:0b:bf:
                    82:da:5f:47:c9:09:15:4c:fd:d2:6e:79:9a:c3:c9:
                    44:f8:f9:1d:4f:d9:84:d6:7f:19:f3:8a:0f:15:27:
                    87:dc:ea:e9:01:c8:45:a1:e7:b8:a1:ee:e7:59:7a:
                    5a:fb:52:1b:53:ca:61:c6:69:42:43:60:2f:dd:9f:
                    c5:d7:9b:5c:60:a8:50:03:70:44:d9:f4:90:7a:13:
                    73:7e:f2:51:75:6a:c3:c0:e8:4e:1a:2b:fe:21:4c:
                    fe:2c:fc:bf:d9:95:a0:24:29:dd:95:1a:92:c6:03:
                    f2:4a:1b:a1:38:68:e6:c1:fc:b6:47:a2:9a:90:1b:
                    1e:83:76:af:a5:cb:04:9e:d8:cd:5d:71:aa:d2:8f:
                    1c:d7:5c:e5:94:7d:0c:1c:4f:00:88:cc:0a:b9:1f:
                    ea:fc:61:23:69:a3:4a:04:f9:dd:47:3a:65:be:16:
                    3c:39:02:81:6e:c5:0b:f0:de:af:03:65:e8:db:bf:
                    37:a0:d8:fe:8a:38:1d:e5:2f:f8:87:65:c7:6a:32:
                    4f:08:12:b9:34:ec:6c:59:ba:19:ff:70:5c:39:d5:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:60:4A:70:6E:E8:39:DB:91:61:80:E5:40:D5:51:B6:88:90:9D
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:95:00:d5:88:f3:df:3a:c4:a5:93:9c:82:c3:56:ea:a1:a4:
         c9:e3:9b:52:d2:8d:61:ee:b7:a6:9e:11:25:41:14:ee:bd:30:
         c5:5c:cc:c1:2b:ad:84:d6:03:50:75:4f:58:71:97:2c:a8:65:
         14:4b:04:b3:5a:e2:fe:19:52:6b:58:65:0e:e7:4d:26:41:19:
         fa:19:0a:49:a5:6c:64:f8:59:8f:16:77:e7:c6:01:43:3e:6f:
         4b:9e:95:a2:0a:e3:ae:03:ba:58:b5:03:b1:cc:8f:b0:2d:72:
         69:0c:57:05:cb:cb:7d:0c:6b:83:5d:48:26:1d:fc:73:3e:f2:
         cc:2d:e6:5a:09:9d:2a:02:51:19:ce:0d:c4:66:4e:46:84:78:
         10:11:00:2c:ea:6a:ed:5c:1e:9f:63:8e:34:30:1c:c4:c3:6b:
         57:7b:80:ea:2e:ea:99:d4:35:d2:da:4c:25:49:33:e6:75:f6:
         d7:14:e4:0e:62:f5:65:c7:3e:3a:5f:28:b9:91:32:e5:73:87:
         ba:a3:b8:80:90:30:05:b1:64:c4:1c:dc:6b:18:a6:91:ae:7d:
         fa:ad:c5:83:61:4f:c7:2c:1a:21:34:5a:0a:fe:6b:00:c2:1c:
         49:aa:17:e9:c3:80:e4:7b:69:96:a7:2f:95:97:ce:a6:66:68:
         82:33:b3:60
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHFs9hxyoce5SIGo9FBpRa4vHJzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzNUQ5RDEwNjA1MTZEOTU4QkIyODk1MkJBQUMyQjc2
RTRGRkNCMTAeFw0yNTAzMTQxNzE5MjFaFw0yNjAzMTMxNzI0MjFaMDMxMTAvBgNV
BAMTKEUwMzk2MDRBNzA2RUU4MzlEQjkxNjE4MEU1NDBENTUxQjY4ODkwOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiBwvnI/QxJciiOU6YTP+DHv1
AeMAeSDbQ+nF8oSFi+o8Z66hZKBJwAALv4LaX0fJCRVM/dJueZrDyUT4+R1P2YTW
fxnzig8VJ4fc6ukByEWh57ih7udZelr7UhtTymHGaUJDYC/dn8XXm1xgqFADcETZ
9JB6E3N+8lF1asPA6E4aK/4hTP4s/L/ZlaAkKd2VGpLGA/JKG6E4aObB/LZHopqQ
Gx6Ddq+lywSe2M1dcarSjxzXXOWUfQwcTwCIzAq5H+r8YSNpo0oE+d1HOmW+Fjw5
AoFuxQvw3q8DZejbvzeg2P6KOB3lL/iHZcdqMk8IErk07GxZuhn/cFw51aIrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU4DlgSnBu6DnbkWGA5UDVUbaIkJ0wHwYDVR0j
BBgwFoAU4jXZ0QYFFtlYuyiVK6rCt25P/LEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC9FMjM1RDlEMTA2MDUxNkQ5NThCQjI4OTUyQkFBQzJCNzZFNEZGQ0IxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyMzVEOUQxMDYwNTE2RDk1
OEJCMjg5NTJCQUFDMkI3NkU0RkZDQjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEkqgQMA0GCSqGSIb3DQEBCwUA
A4IBAQAjlQDViPPfOsSlk5yCw1bqoaTJ45tS0o1h7remnhElQRTuvTDFXMzBK62E
1gNQdU9YcZcsqGUUSwSzWuL+GVJrWGUO500mQRn6GQpJpWxk+FmPFnfnxgFDPm9L
npWiCuOuA7pYtQOxzI+wLXJpDFcFy8t9DGuDXUgmHfxzPvLMLeZaCZ0qAlEZzg3E
Zk5GhHgQEQAs6mrtXB6fY440MBzEw2tXe4DqLuqZ1DXS2kwlSTPmdfbXFOQOYvVl
xz46Xyi5kTLlc4e6o7iAkDAFsWTEHNxrGKaRrn36rcWDYU/HLBohNFoK/msAwhxJ
qhfpw4Dke2mWpy+Vl86mZmiCM7Ng
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:40:47 2025 by rpki-client