Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a3a2f33322d3332203d3e20323632353930.roa
File:                     323830343a3638343a3a2f33322d3332203d3e20323632353930.roa (raw, json)
Hash identifier:          1u4vaZJCQO9ptPXl1CAmtTqiQ5RzTxvvx7sa3yS14TM=
Subject key identifier:   DF:5A:38:D6:4C:A1:EC:29:74:BB:DE:BB:60:0D:58:F1:4F:26:93:8A
Certificate issuer:       /CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
Certificate serial:       128D0D7BF375F082A4BD2F22D8311EE017BEBBB8
Authority key identifier: AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a3a2f33322d3332203d3e20323632353930.roa
Signing time:             Tue 04 Mar 2025 13:33:49 +0000
ROA not before:           Tue 04 Mar 2025 13:28:49 +0000
ROA not after:            Tue 03 Mar 2026 13:33:49 +0000
asID:                     262590
IP address blocks:        2804:684::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8d:0d:7b:f3:75:f0:82:a4:bd:2f:22:d8:31:1e:e0:17:be:bb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
        Validity
            Not Before: Mar  4 13:28:49 2025 GMT
            Not After : Mar  3 13:33:49 2026 GMT
        Subject: CN=DF5A38D64CA1EC2974BBDEBB600D58F14F26938A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:a2:da:67:94:9a:ee:1d:71:9f:38:35:98:
                    0d:da:58:46:7a:e3:bd:1b:0b:1d:e5:d4:d4:93:86:
                    70:c6:07:97:21:04:5d:c0:0a:a4:c1:23:3b:03:03:
                    f7:f1:49:7c:4d:dd:25:f6:1f:ea:81:fd:00:4f:a6:
                    fc:ad:75:46:e6:e4:f2:6e:7a:99:97:41:02:d4:7b:
                    72:1b:f4:c8:1c:dc:89:0b:1e:6a:c5:78:2a:ec:ee:
                    b5:0a:e3:91:e8:cd:01:00:47:c6:f1:eb:a8:92:1e:
                    05:65:ad:9f:28:5a:3c:ec:ad:10:1f:97:96:a9:f7:
                    1e:41:f0:b5:32:bb:28:ec:94:fc:1a:e5:89:6d:db:
                    c9:51:0b:d1:db:d4:3a:3b:26:9d:b9:a5:47:66:ad:
                    81:4b:e9:62:a5:6f:37:37:c9:c1:30:08:bb:ce:19:
                    36:0a:7b:01:50:6c:79:af:86:5b:67:d3:ed:2f:e1:
                    f3:bd:38:79:fb:90:e8:31:02:a4:8d:88:bb:e6:19:
                    c1:ae:24:35:4f:d7:42:4b:d5:dc:96:aa:3b:8b:5b:
                    3a:98:87:b6:89:d1:6b:fa:11:cb:06:b7:96:3c:31:
                    0d:65:ea:71:49:98:a4:1b:a4:1d:53:79:5b:04:b3:
                    fb:2f:af:75:78:d9:da:68:d1:41:10:61:4f:e6:0b:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5A:38:D6:4C:A1:EC:29:74:BB:DE:BB:60:0D:58:F1:4F:26:93:8A
            X509v3 Authority Key Identifier:
                keyid:AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/AC7596BD33B9167E922BE54B9B004B12EAD19D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/323830343a3638343a3a2f33322d3332203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:684::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:15:e1:53:4e:00:76:78:88:63:43:16:f8:48:51:85:91:
         54:e4:98:58:12:43:73:98:5a:c9:41:b0:29:56:52:c6:d2:00:
         b5:69:f6:d9:59:80:54:d7:1b:1b:2c:57:90:a5:2c:f0:02:fc:
         b1:2d:67:81:ea:a0:be:6d:7a:2a:b0:1b:7a:54:da:4a:bc:bf:
         04:0a:ed:03:e7:1c:a1:52:71:d7:71:9e:40:00:19:f9:06:e2:
         25:0a:7e:f4:67:1b:78:84:c7:6c:13:9a:d7:5f:a2:24:ce:7a:
         3b:9e:01:68:3c:4a:9a:5c:e7:88:87:ea:63:9a:2c:5a:b5:56:
         48:d8:7e:af:42:45:92:66:0a:49:3e:86:9a:08:9a:7b:d8:fc:
         5b:5c:51:22:77:a7:15:fb:ef:1b:fe:d6:c3:b8:ae:04:f9:17:
         57:cf:f3:e6:df:31:21:d3:aa:90:51:a9:c6:b7:ac:fa:af:3f:
         ed:49:a4:1c:a7:bc:8b:5b:c2:d9:16:89:46:ee:7d:ee:79:f5:
         75:43:74:17:27:24:bf:76:32:30:51:91:ee:b5:5a:af:f9:cb:
         21:60:d9:6d:21:07:f2:85:2e:e3:03:38:aa:9c:dd:56:d1:17:
         62:b9:1d:d8:00:c9:80:33:22:9c:ef:42:d3:57:27:e7:24:2d:
         26:d1:53:62
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUEo0Ne/N18IKkvS8i2DEe4Be+u7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM3NTk2QkQzM0I5MTY3RTkyMkJFNTRCOUIwMDRCMTJF
QUQxOUQyOTAeFw0yNTAzMDQxMzI4NDlaFw0yNjAzMDMxMzMzNDlaMDMxMTAvBgNV
BAMTKERGNUEzOEQ2NENBMUVDMjk3NEJCREVCQjYwMEQ1OEYxNEYyNjkzOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DKLaZ5Sa7h1xnzg1mA3aWEZ6
470bCx3l1NSThnDGB5chBF3ACqTBIzsDA/fxSXxN3SX2H+qB/QBPpvytdUbm5PJu
epmXQQLUe3Ib9Mgc3IkLHmrFeCrs7rUK45HozQEAR8bx66iSHgVlrZ8oWjzsrRAf
l5ap9x5B8LUyuyjslPwa5Ylt28lRC9Hb1Do7Jp25pUdmrYFL6WKlbzc3ycEwCLvO
GTYKewFQbHmvhltn0+0v4fO9OHn7kOgxAqSNiLvmGcGuJDVP10JL1dyWqjuLWzqY
h7aJ0Wv6EcsGt5Y8MQ1l6nFJmKQbpB1TeVsEs/svr3V42dpo0UEQYU/mC6SXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU31o41kyh7Cl0u967YA1Y8U8mk4owHwYDVR0j
BBgwFoAUrHWWvTO5Fn6SK+VLmwBLEurRnSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB
MUcvMC9BQzc1OTZCRDMzQjkxNjdFOTIyQkU1NEI5QjAwNEIxMkVBRDE5RDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNzU5NkJEMzNCOTE2N0U5
MjJCRTU0QjlCMDA0QjEyRUFEMTlEMjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzAv
MzIzODMwMzQzYTM2MzgzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM1
MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBoQwDQYJKoZIhvcNAQELBQADggEBABbRFeFTTgB2
eIhjQxb4SFGFkVTkmFgSQ3OYWslBsClWUsbSALVp9tlZgFTXGxssV5ClLPAC/LEt
Z4HqoL5teiqwG3pU2kq8vwQK7QPnHKFScddxnkAAGfkG4iUKfvRnG3iEx2wTmtdf
oiTOejueAWg8Sppc54iH6mOaLFq1VkjYfq9CRZJmCkk+hpoImnvY/FtcUSJ3pxX7
7xv+1sO4rgT5F1fP8+bfMSHTqpBRqca3rPqvP+1JpBynvItbwtkWiUbufe559XVD
dBcnJL92MjBRke61Wq/5yyFg2W0hB/KFLuMDOKqc3VbRF2K5HdgAyYAzIpzvQtNX
J+ckLSbRU2I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:25:48 2025 by rpki-client