Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/323830343a6432383a3a2f33322d3430203d3e203532363034.roa
File:                     323830343a6432383a3a2f33322d3430203d3e203532363034.roa (raw, json)
Hash identifier:          kJjwIHnZZ2V959/qFZXoTKiDtanW1Nmeghj39L8sSQ4=
Subject key identifier:   73:FB:0D:78:60:4A:87:90:2D:86:08:D1:D0:3B:7F:4D:CD:F5:CB:A8
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       69EDE6EDD2EB78B941F63FC9CC195A36224E81FC
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/323830343a6432383a3a2f33322d3430203d3e203532363034.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     52604
IP address blocks:        2804:d28::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ed:e6:ed:d2:eb:78:b9:41:f6:3f:c9:cc:19:5a:36:22:4e:81:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=73FB0D78604A87902D8608D1D03B7F4DCDF5CBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d1:2b:0d:ac:29:e3:c6:c9:f9:1a:3d:16:d5:
                    af:99:51:89:be:a3:f9:23:2d:f5:05:93:71:ec:8e:
                    74:f3:1d:22:58:48:f8:b9:15:77:aa:c6:fb:92:fb:
                    d5:ae:76:be:bf:7e:6e:6b:b5:60:a4:c3:06:7a:b6:
                    a0:65:98:85:dd:53:de:ed:9d:98:2e:52:09:c7:18:
                    8b:3c:00:92:4b:89:ca:bc:27:37:a0:5d:84:ca:6b:
                    d0:07:f1:fb:c1:c3:2d:b1:73:f4:92:5a:8c:5d:56:
                    25:1a:6a:9a:fd:1e:f6:ca:6a:60:49:41:e4:57:bc:
                    cd:11:85:61:05:cb:fd:4a:f2:63:e7:06:74:a3:68:
                    a5:24:c1:1b:96:88:9d:38:72:4d:5e:d0:52:f0:ed:
                    d9:15:57:45:de:a1:57:9c:74:8e:c1:79:56:f1:53:
                    64:d4:1d:85:3c:e5:91:06:c8:e0:ac:ca:ed:a3:47:
                    fe:d0:a3:d3:80:20:7f:37:bf:99:e1:f6:42:d9:cf:
                    6d:81:25:2a:b0:0b:da:89:4b:92:e7:4c:de:0f:07:
                    ed:ed:a3:c6:4c:9b:b4:3b:03:14:74:0a:3e:a4:08:
                    df:15:77:03:ec:c9:06:75:c3:7c:5a:eb:b7:f4:2e:
                    4b:a1:b2:c3:12:bc:7d:e6:0a:bf:17:2c:96:3f:cb:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:0D:78:60:4A:87:90:2D:86:08:D1:D0:3B:7F:4D:CD:F5:CB:A8
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/323830343a6432383a3a2f33322d3430203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:30:b9:e9:11:0e:2d:15:e6:3c:18:de:a5:a4:f8:fe:d2:80:
         08:2d:f9:71:87:d5:30:bc:95:bc:90:77:78:98:08:3a:15:03:
         95:5b:c2:71:cb:a2:e3:42:a4:8c:2b:c6:51:30:34:46:2e:c8:
         fe:1b:85:b0:67:f5:66:0f:81:44:ae:0c:12:0c:15:09:07:5c:
         64:70:95:fe:31:85:bc:66:0d:48:de:f8:43:5d:94:57:64:5a:
         5f:22:07:32:29:0a:71:85:94:fd:e5:bb:ae:b7:cb:4d:3a:d3:
         c1:3d:de:b6:8f:51:46:81:e7:c3:61:79:27:36:6f:e7:b7:a5:
         83:bf:c7:a3:b2:ca:21:fc:e0:2f:f4:83:67:6a:48:54:11:a8:
         69:39:90:f4:b0:f2:55:16:4f:4c:de:d3:eb:27:ab:e4:20:bc:
         9d:87:e8:05:a1:cf:02:12:35:20:51:f8:ac:62:e7:cc:e7:10:
         97:6e:70:ef:5e:ac:16:0e:59:76:d3:77:5d:2d:74:ba:fd:05:
         c6:fc:9b:df:0e:dd:10:1c:83:87:50:73:55:de:e3:b0:04:a6:
         c3:43:74:61:ce:bd:08:7d:97:b7:af:cb:55:0e:dc:08:c6:f5:
         da:c6:66:ab:00:f8:56:07:e3:f3:63:96:79:51:a6:5b:d4:88:
         7c:64:2a:59
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUae3m7dLreLlB9j/JzBlaNiJOgfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M4MUIxRjYwQjEwNERERTIxQzUzQURCNEVFREIxQ0Yz
N0Q5RTNFNTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDczRkIwRDc4NjA0QTg3OTAyRDg2MDhEMUQwM0I3RjREQ0RGNUNCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc0SsNrCnjxsn5Gj0W1a+ZUYm+
o/kjLfUFk3HsjnTzHSJYSPi5FXeqxvuS+9Wudr6/fm5rtWCkwwZ6tqBlmIXdU97t
nZguUgnHGIs8AJJLicq8JzegXYTKa9AH8fvBwy2xc/SSWoxdViUaapr9HvbKamBJ
QeRXvM0RhWEFy/1K8mPnBnSjaKUkwRuWiJ04ck1e0FLw7dkVV0XeoVecdI7BeVbx
U2TUHYU85ZEGyOCsyu2jR/7Qo9OAIH83v5nh9kLZz22BJSqwC9qJS5LnTN4PB+3t
o8ZMm7Q7AxR0Cj6kCN8VdwPsyQZ1w3xa67f0LkuhssMSvH3mCr8XLJY/yzrPAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUc/sNeGBKh5AthgjR0Dt/Tc31y6gwHwYDVR0j
BBgwFoAUfIGx9gsQTd4hxTrbTu2xzzfZ4+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtEWVRFNk5UWnFKVFhFWGVkaXZMc0ZmZnVRa2g4M1luNWR0Ynh5bUto
SjgvMS83QzgxQjFGNjBCMTA0RERFMjFDNTNBREI0RUVEQjFDRjM3RDlFM0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDODFCMUY2MEIxMDREREUy
MUM1M0FEQjRFRURCMUNGMzdEOUUzRTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VLRFlURTZOVFpxSlRYRVhlZGl2THNGZmZ1UWtoODNZbjVkdGJ4eW1LaEo4LzEv
MzIzODMwMzQzYTY0MzIzODNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDM1MzIzNjMw
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA0oMA0GCSqGSIb3DQEBCwUAA4IBAQAgMLnpEQ4tFeY8
GN6lpPj+0oAILflxh9UwvJW8kHd4mAg6FQOVW8Jxy6LjQqSMK8ZRMDRGLsj+G4Ww
Z/VmD4FErgwSDBUJB1xkcJX+MYW8Zg1I3vhDXZRXZFpfIgcyKQpxhZT95buut8tN
OtPBPd62j1FGgefDYXknNm/nt6WDv8ejssoh/OAv9INnakhUEahpOZD0sPJVFk9M
3tPrJ6vkILydh+gFoc8CEjUgUfisYufM5xCXbnDvXqwWDll203ddLXS6/QXG/Jvf
Dt0QHIOHUHNV3uOwBKbDQ3Rhzr0IfZe3r8tVDtwIxvXaxmarAPhWB+PzY5Z5UaZb
1Ih8ZCpZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:56 2025 by rpki-client