Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a333030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a333030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          O66kM4qgeVi6rkS2n4AqeOOme4i4ixzYI/4e7+soO+0=
Subject key identifier:   E7:1B:F0:D5:AB:91:AA:D6:03:21:88:98:16:D9:B3:98:B6:19:F1:37
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       5A4799C56DFAACA70FB13C741A1D1A419817FF34
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a333030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:21 +0000
ROA not before:           Fri 14 Mar 2025 17:19:21 +0000
ROA not after:            Fri 13 Mar 2026 17:24:21 +0000
asID:                     274726
IP address blocks:        2804:92a8:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:47:99:c5:6d:fa:ac:a7:0f:b1:3c:74:1a:1d:1a:41:98:17:ff:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:21 2025 GMT
            Not After : Mar 13 17:24:21 2026 GMT
        Subject: CN=E71BF0D5AB91AAD60321889816D9B398B619F137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:45:05:b3:c3:27:19:ac:07:53:a7:5e:ee:
                    60:c1:55:97:51:26:41:19:a6:92:42:df:e0:0d:f8:
                    1a:f8:2e:29:34:e2:76:9b:d9:93:40:24:82:08:32:
                    65:26:a3:05:f9:4c:1b:2b:69:a1:7d:b7:66:ff:16:
                    21:23:7a:ff:88:51:f3:4e:63:d9:b9:09:af:d6:e9:
                    99:88:e2:b7:dc:5d:70:f5:26:8d:a4:50:98:d6:f9:
                    b9:ab:49:b7:1e:27:fa:93:45:2a:d0:20:c0:63:8e:
                    ac:a6:7c:29:e2:fa:34:7d:e5:b3:5e:33:dd:ca:61:
                    d2:a0:24:2a:3e:14:25:89:a4:b9:59:07:2c:12:90:
                    f8:7c:97:b5:f6:5b:1a:a9:62:8c:7a:91:d9:7b:3a:
                    60:69:aa:b0:f2:94:f6:9d:08:1c:d9:a4:b5:9a:14:
                    8d:ee:c1:c4:db:d2:b2:2d:85:47:59:a1:a4:1f:04:
                    33:51:88:7b:56:d2:9a:db:a2:b7:47:6b:43:2c:80:
                    0d:5e:c6:46:ff:a3:96:a5:22:59:7f:aa:dd:88:bf:
                    25:9a:34:fc:0e:90:c7:ba:73:22:23:b6:02:b8:0d:
                    e7:a5:6f:0a:52:78:07:03:d7:1f:66:12:32:a3:31:
                    80:fe:31:0f:fc:a2:75:1e:6f:08:18:95:cb:52:36:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:F0:D5:AB:91:AA:D6:03:21:88:98:16:D9:B3:98:B6:19:F1:37
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a333030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:6d:a9:04:92:9b:49:71:3e:b1:fe:2b:e5:d0:be:07:a9:
         59:49:7c:d5:d1:6c:3c:89:6f:9d:6e:48:79:86:67:b0:38:c6:
         1e:6a:f2:8a:d2:a0:4d:ad:4b:5b:1b:07:ac:cd:58:37:57:f0:
         7b:f2:b2:95:ca:ba:81:42:60:9e:33:fc:13:d9:38:5c:8f:7b:
         8a:6f:e0:fc:ce:2c:39:43:2e:70:e7:61:38:0d:89:a9:27:e0:
         c9:45:3a:75:ca:82:52:d9:ca:1a:7e:9a:03:aa:96:d5:08:0b:
         e7:99:19:c5:3c:f0:0f:85:12:08:f0:d5:e9:4a:cb:09:53:1a:
         c4:9a:85:1b:dd:8d:34:c8:63:83:85:5c:7d:d4:65:8f:c4:e0:
         82:7d:93:90:3b:cf:b6:76:d9:ad:dc:e9:52:62:30:15:63:9f:
         3d:a7:21:9d:94:a1:e9:40:6f:bc:3c:cc:7c:8d:a2:68:6a:13:
         15:5c:e2:b6:5c:be:63:f6:8e:1b:fb:bb:42:5d:b9:8e:71:be:
         60:50:63:22:85:30:02:40:e6:cf:73:07:cb:af:4b:20:54:9c:
         67:f1:99:40:60:96:62:d7:92:6b:9e:49:4b:2f:6c:40:19:44:
         13:5d:62:17:2e:67:fa:e6:26:da:11:09:fd:cc:82:7a:1e:ac:
         cd:e7:3e:74
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWkeZxW36rKcPsTx0Gh0aQZgX/zQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzNUQ5RDEwNjA1MTZEOTU4QkIyODk1MkJBQUMyQjc2
RTRGRkNCMTAeFw0yNTAzMTQxNzE5MjFaFw0yNjAzMTMxNzI0MjFaMDMxMTAvBgNV
BAMTKEU3MUJGMEQ1QUI5MUFBRDYwMzIxODg5ODE2RDlCMzk4QjYxOUYxMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHkUUFs8MnGawHU6de7mDBVZdR
JkEZppJC3+AN+Br4Lik04nab2ZNAJIIIMmUmowX5TBsraaF9t2b/FiEjev+IUfNO
Y9m5Ca/W6ZmI4rfcXXD1Jo2kUJjW+bmrSbceJ/qTRSrQIMBjjqymfCni+jR95bNe
M93KYdKgJCo+FCWJpLlZBywSkPh8l7X2WxqpYox6kdl7OmBpqrDylPadCBzZpLWa
FI3uwcTb0rIthUdZoaQfBDNRiHtW0prbordHa0MsgA1exkb/o5alIll/qt2IvyWa
NPwOkMe6cyIjtgK4DeelbwpSeAcD1x9mEjKjMYD+MQ/8onUebwgYlctSNr25AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5xvw1auRqtYDIYiYFtmzmLYZ8TcwHwYDVR0j
BBgwFoAU4jXZ0QYFFtlYuyiVK6rCt25P/LEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC9FMjM1RDlEMTA2MDUxNkQ5NThCQjI4OTUyQkFBQzJCNzZFNEZGQ0IxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyMzVEOUQxMDYwNTE2RDk1
OEJCMjg5NTJCQUFDMkI3NkU0RkZDQjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEkqgwMA0GCSqGSIb3DQEBCwUA
A4IBAQBerW2pBJKbSXE+sf4r5dC+B6lZSXzV0Ww8iW+dbkh5hmewOMYeavKK0qBN
rUtbGweszVg3V/B78rKVyrqBQmCeM/wT2Thcj3uKb+D8ziw5Qy5w52E4DYmpJ+DJ
RTp1yoJS2coafpoDqpbVCAvnmRnFPPAPhRII8NXpSssJUxrEmoUb3Y00yGODhVx9
1GWPxOCCfZOQO8+2dtmt3OlSYjAVY589pyGdlKHpQG+8PMx8jaJoahMVXOK2XL5j
9o4b+7tCXbmOcb5gUGMihTACQObPcwfLr0sgVJxn8ZlAYJZi15JrnklLL2xAGUQT
XWIXLmf65ibaEQn9zIJ6HqzN5z50
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:39:12 2025 by rpki-client