Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a633030303a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a633030303a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          1fJXTNbutb3Sevv5vl9dn56p9kCHdSPXpNKAC0wJb1g=
Subject key identifier:   9C:92:D3:1D:BE:88:4E:87:1C:4D:2D:A3:D0:CC:41:24:48:44:D2:24
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       11681CC23B1E14CE64960C08B123F6184870E5C9
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a633030303a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:20 +0000
ROA not before:           Fri 14 Mar 2025 17:19:20 +0000
ROA not after:            Fri 13 Mar 2026 17:24:20 +0000
asID:                     274726
IP address blocks:        2804:92a8:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:68:1c:c2:3b:1e:14:ce:64:96:0c:08:b1:23:f6:18:48:70:e5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:20 2025 GMT
            Not After : Mar 13 17:24:20 2026 GMT
        Subject: CN=9C92D31DBE884E871C4D2DA3D0CC41244844D224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:20:e2:42:01:51:d7:46:af:08:9e:c4:3c:
                    0b:f4:55:e5:2c:6a:f7:76:c8:bc:78:8c:6e:69:f2:
                    e9:f5:a4:ba:13:da:31:f8:fe:5a:06:8f:d4:79:2d:
                    b0:9e:9f:e0:ab:fe:dc:08:60:b0:df:f5:2d:29:23:
                    b7:7f:4a:64:f0:1a:52:5e:08:83:95:6f:92:d4:93:
                    68:84:b8:16:5a:20:f5:3d:b1:4c:9f:c3:32:43:22:
                    a7:f2:52:72:d7:d0:97:50:37:0b:54:65:0d:02:b8:
                    70:fb:9d:0d:45:c0:8d:fc:7d:dd:49:d2:d6:17:73:
                    20:5a:88:c0:37:9a:9d:be:b7:ae:9a:ce:c1:a3:85:
                    46:9f:5e:22:ab:e7:31:73:e8:55:de:73:46:e5:81:
                    8d:c4:eb:04:87:96:66:60:3d:b0:30:7c:02:62:a4:
                    1d:2b:b1:23:58:3f:be:f6:d6:83:d7:49:f8:2b:a0:
                    7a:58:01:6f:15:96:ee:13:56:44:ca:7b:49:75:45:
                    71:8d:0e:d2:89:4f:5a:dd:47:02:0c:87:74:a3:bc:
                    8e:d5:98:47:34:45:b8:86:f3:8b:dc:84:0e:45:b5:
                    80:59:20:a8:95:48:ef:2e:ea:41:3d:32:55:ce:9b:
                    88:67:c4:c6:18:fe:a6:4c:fe:a1:17:58:cf:9a:83:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:92:D3:1D:BE:88:4E:87:1C:4D:2D:A3:D0:CC:41:24:48:44:D2:24
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a633030303a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bd:b7:11:ad:43:9c:06:f4:83:d7:b1:96:9f:e0:35:4f:f2:d6:
         db:49:8d:38:8d:b3:a6:15:aa:76:82:e0:51:40:2b:d3:46:a5:
         85:a2:8b:1c:56:3e:80:11:82:23:6e:4f:a5:5c:30:cc:40:6a:
         02:e7:4d:8a:02:6f:ac:13:b5:09:49:71:a8:56:e9:72:e8:79:
         c5:9c:84:d0:f8:ed:3a:33:78:e5:26:c3:9f:eb:fd:62:bd:fc:
         6c:b0:89:36:2a:9a:04:8a:2e:d2:f2:be:96:4b:a4:93:3c:94:
         2c:40:5b:59:c2:e1:41:50:a8:59:3e:a9:83:1d:b6:3f:61:4f:
         07:b5:4a:05:4e:2b:73:42:27:93:c0:fd:03:89:33:82:a3:40:
         d4:44:4d:d7:b9:6f:9f:1f:37:ea:2c:bc:cd:77:a7:6a:2f:c0:
         38:ff:21:34:87:37:c9:1f:64:a0:48:ab:50:c0:a6:9f:f0:c1:
         46:f5:5c:3c:38:bd:5e:4d:c7:92:4d:07:df:07:56:69:10:b4:
         1b:cb:78:97:c7:bc:bc:61:bf:7c:43:09:88:12:6d:9a:de:96:
         89:2b:37:66:28:73:42:86:85:d6:d6:e7:fb:7c:bf:09:e6:e8:
         fb:4f:55:5e:b8:4d:f1:b3:63:38:09:b5:02:88:ca:b9:ec:74:
         16:5d:31:73
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEWgcwjseFM5klgwIsSP2GEhw5ckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzNUQ5RDEwNjA1MTZEOTU4QkIyODk1MkJBQUMyQjc2
RTRGRkNCMTAeFw0yNTAzMTQxNzE5MjBaFw0yNjAzMTMxNzI0MjBaMDMxMTAvBgNV
BAMTKDlDOTJEMzFEQkU4ODRFODcxQzREMkRBM0QwQ0M0MTI0NDg0NEQyMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLISDiQgFR10avCJ7EPAv0VeUs
avd2yLx4jG5p8un1pLoT2jH4/loGj9R5LbCen+Cr/twIYLDf9S0pI7d/SmTwGlJe
CIOVb5LUk2iEuBZaIPU9sUyfwzJDIqfyUnLX0JdQNwtUZQ0CuHD7nQ1FwI38fd1J
0tYXcyBaiMA3mp2+t66azsGjhUafXiKr5zFz6FXec0blgY3E6wSHlmZgPbAwfAJi
pB0rsSNYP7721oPXSfgroHpYAW8Vlu4TVkTKe0l1RXGNDtKJT1rdRwIMh3SjvI7V
mEc0RbiG84vchA5FtYBZIKiVSO8u6kE9MlXOm4hnxMYY/qZM/qEXWM+ag5TjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnJLTHb6IToccTS2j0MxBJEhE0iQwHwYDVR0j
BBgwFoAU4jXZ0QYFFtlYuyiVK6rCt25P/LEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC9FMjM1RDlEMTA2MDUxNkQ5NThCQjI4OTUyQkFBQzJCNzZFNEZGQ0IxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyMzVEOUQxMDYwNTE2RDk1
OEJCMjg5NTJCQUFDMkI3NkU0RkZDQjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEkqjAMA0GCSqGSIb3DQEBCwUA
A4IBAQC9txGtQ5wG9IPXsZaf4DVP8tbbSY04jbOmFap2guBRQCvTRqWFooscVj6A
EYIjbk+lXDDMQGoC502KAm+sE7UJSXGoVuly6HnFnITQ+O06M3jlJsOf6/1ivfxs
sIk2KpoEii7S8r6WS6STPJQsQFtZwuFBUKhZPqmDHbY/YU8HtUoFTitzQieTwP0D
iTOCo0DURE3XuW+fHzfqLLzNd6dqL8A4/yE0hzfJH2SgSKtQwKaf8MFG9Vw8OL1e
TceSTQffB1ZpELQby3iXx7y8Yb98QwmIEm2a3paJKzdmKHNChoXW1uf7fL8J5uj7
T1VeuE3xs2M4CbUCiMq57HQWXTFz
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:40:48 2025 by rpki-client