Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33342d3334203d3e20323633393637.roa
File:                     323830343a323838383a383030303a3a2f33342d3334203d3e20323633393637.roa (raw, json)
Hash identifier:          9awUASwD9mDm23k8nBVPh6CO2oEr6omVfxZbl9p+rPE=
Subject key identifier:   43:6B:72:AF:F0:B7:C2:62:D5:E3:6D:59:06:ED:31:F7:AC:C0:26:F7
Certificate issuer:       /CN=B224D943E8065A18929A784B51D1633209C1CC91
Certificate serial:       5569F106C1D16480342969694B28AB165973676B
Authority key identifier: B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33342d3334203d3e20323633393637.roa
Signing time:             Thu 06 Mar 2025 05:13:45 +0000
ROA not before:           Thu 06 Mar 2025 05:08:45 +0000
ROA not after:            Thu 05 Mar 2026 05:13:45 +0000
asID:                     263967
IP address blocks:        2804:2888:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:69:f1:06:c1:d1:64:80:34:29:69:69:4b:28:ab:16:59:73:67:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224D943E8065A18929A784B51D1633209C1CC91
        Validity
            Not Before: Mar  6 05:08:45 2025 GMT
            Not After : Mar  5 05:13:45 2026 GMT
        Subject: CN=436B72AFF0B7C262D5E36D5906ED31F7ACC026F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:cd:27:89:12:70:1b:52:70:c4:c0:94:b2:
                    96:71:2b:72:f1:b1:80:8a:7a:0e:a4:61:0c:57:f8:
                    6f:3e:fd:29:f3:a4:53:c4:8e:28:79:2c:7c:91:83:
                    a7:c9:b8:c6:f7:ac:5a:df:d5:c9:9d:b3:f3:5e:1f:
                    16:42:f9:41:09:34:a5:d4:a4:a9:cc:1f:88:6b:68:
                    59:13:1d:16:53:a3:16:00:15:b1:72:19:f0:fe:b9:
                    85:c2:88:52:27:16:ac:e5:0c:f6:d9:b2:08:8d:d5:
                    78:e7:60:ff:34:f2:dc:77:e4:dd:fd:01:a7:3b:75:
                    a4:f8:e4:31:3f:89:51:50:7f:3b:49:54:b0:4d:71:
                    28:d2:a1:87:4c:e1:37:cc:3c:5c:ab:46:43:db:15:
                    2e:bf:26:c4:9d:3d:f9:8c:d4:99:7a:6c:73:90:6c:
                    49:7c:92:6f:b2:ce:8f:17:a3:d8:75:02:97:88:28:
                    79:2d:f0:51:8d:db:61:35:ab:9a:69:b1:fc:66:0b:
                    ac:78:fc:e4:9a:2e:a9:eb:d1:d0:5e:51:2b:ee:e7:
                    f9:e5:42:2d:9b:90:09:a0:3b:ff:8e:3b:67:26:86:
                    b9:a8:fd:74:ac:66:38:64:c1:d7:e1:6d:b9:7b:4c:
                    ab:21:69:14:e4:13:1a:58:34:c9:4e:29:10:ef:de:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6B:72:AF:F0:B7:C2:62:D5:E3:6D:59:06:ED:31:F7:AC:C0:26:F7
            X509v3 Authority Key Identifier:
                keyid:B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33342d3334203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2888:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:38:10:9b:ee:57:2b:f4:a7:b8:cc:bb:08:e7:1f:f3:c1:87:
         db:2b:68:b3:bd:b8:20:3d:54:d5:57:b8:70:0d:83:bd:a7:c9:
         c7:a5:f8:a0:c1:e4:1f:36:5a:f6:b4:e7:c4:77:d8:67:d9:5a:
         4e:94:90:c9:9c:e1:39:0b:4d:d3:4c:d4:e1:cc:ab:56:23:ae:
         27:bb:b9:54:17:08:87:b8:70:3a:33:bd:82:6c:8f:12:1e:c6:
         dd:f0:00:b9:c7:b7:e7:b8:4e:52:34:0e:86:5d:f8:85:12:61:
         47:d5:d3:ce:dc:26:1c:b7:7b:fb:fd:27:9d:ca:a1:04:8c:db:
         95:bf:24:eb:f9:d2:24:d3:c9:02:bd:7a:7e:ab:70:81:0c:c6:
         f4:f0:bf:68:b4:41:0e:4f:ca:38:45:0d:5e:de:19:a0:ab:2d:
         f2:3d:c9:ab:3f:71:0e:dc:5a:f6:54:9d:b4:40:cf:12:da:4e:
         b3:00:99:a3:e1:99:ca:7f:68:c6:75:49:b1:3c:7d:aa:1a:de:
         07:fc:f2:03:92:26:45:bc:0d:e9:18:88:40:08:c3:ee:60:70:
         b2:52:16:c1:36:08:e3:e6:09:de:d5:8e:61:0e:4e:c7:6b:08:
         e4:06:9d:fc:72:3e:30:d0:a4:de:b5:ab:95:af:53:ad:a2:0b:
         96:c9:72:41
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVWnxBsHRZIA0KWlpSyirFllzZ2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIyNEQ5NDNFODA2NUExODkyOUE3ODRCNTFEMTYzMzIw
OUMxQ0M5MTAeFw0yNTAzMDYwNTA4NDVaFw0yNjAzMDUwNTEzNDVaMDMxMTAvBgNV
BAMTKDQzNkI3MkFGRjBCN0MyNjJENUUzNkQ1OTA2RUQzMUY3QUNDMDI2RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQs0niRJwG1JwxMCUspZxK3Lx
sYCKeg6kYQxX+G8+/SnzpFPEjih5LHyRg6fJuMb3rFrf1cmds/NeHxZC+UEJNKXU
pKnMH4hraFkTHRZToxYAFbFyGfD+uYXCiFInFqzlDPbZsgiN1XjnYP808tx35N39
Aac7daT45DE/iVFQfztJVLBNcSjSoYdM4TfMPFyrRkPbFS6/JsSdPfmM1Jl6bHOQ
bEl8km+yzo8Xo9h1ApeIKHkt8FGN22E1q5ppsfxmC6x4/OSaLqnr0dBeUSvu5/nl
Qi2bkAmgO/+OO2cmhrmo/XSsZjhkwdfhbbl7TKshaRTkExpYNMlOKRDv3gIvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ2tyr/C3wmLV421ZBu0x96zAJvcwHwYDVR0j
BBgwFoAUsiTZQ+gGWhiSmnhLUdFjMgnBzJEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpVYUtoa0xKSkphMkY4dnM0akZ0emZUV2tzb2VuRWpEYkp3Q2ZoYVhm
aTgvMS9CMjI0RDk0M0U4MDY1QTE4OTI5QTc4NEI1MUQxNjMzMjA5QzFDQzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyMjREOTQzRTgwNjVBMTg5
MjlBNzg0QjUxRDE2MzMyMDlDMUNDOTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKVWFLaGtMSkpKYTJGOHZzNGpGdHpmVFdrc29lbkVqRGJKd0NmaGFYZmk4LzEv
MzIzODMwMzQzYTMyMzgzODM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEKIiAMA0GCSqGSIb3DQEBCwUA
A4IBAQALOBCb7lcr9Ke4zLsI5x/zwYfbK2izvbggPVTVV7hwDYO9p8nHpfigweQf
Nlr2tOfEd9hn2VpOlJDJnOE5C03TTNThzKtWI64nu7lUFwiHuHA6M72CbI8SHsbd
8AC5x7fnuE5SNA6GXfiFEmFH1dPO3CYct3v7/SedyqEEjNuVvyTr+dIk08kCvXp+
q3CBDMb08L9otEEOT8o4RQ1e3hmgqy3yPcmrP3EO3Fr2VJ20QM8S2k6zAJmj4ZnK
f2jGdUmxPH2qGt4H/PIDkiZFvA3pGIhACMPuYHCyUhbBNgjj5gne1Y5hDk7Hawjk
Bp38cj4w0KTetauVr1OtoguWyXJB
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:43:47 2025 by rpki-client