Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa
File:                     323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa (raw, json)
Hash identifier:          ANz6QhUmugf8DGZFcvqxaYHp93NcNNsOCgXI8oknHNI=
Subject key identifier:   01:0E:A0:7B:F6:66:4A:E8:E8:95:03:2F:55:C6:96:B9:D0:E7:2D:BC
Certificate issuer:       /CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
Certificate serial:       111033E2CBBA3440B3B0E97189D2B8ACD7663DD3
Authority key identifier: 99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa
Signing time:             Fri 31 Jan 2025 18:37:52 +0000
ROA not before:           Fri 31 Jan 2025 18:32:52 +0000
ROA not after:            Fri 30 Jan 2026 18:37:52 +0000
asID:                     272164
IP address blocks:        2804:82e8:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:10:33:e2:cb:ba:34:40:b3:b0:e9:71:89:d2:b8:ac:d7:66:3d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
        Validity
            Not Before: Jan 31 18:32:52 2025 GMT
            Not After : Jan 30 18:37:52 2026 GMT
        Subject: CN=010EA07BF6664AE8E895032F55C696B9D0E72DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:f2:54:52:05:d8:cc:b7:be:0e:02:83:af:
                    93:7e:f5:38:6d:46:a6:98:51:fb:9d:5e:c0:c8:b8:
                    0b:c9:cc:79:fa:77:94:d7:30:0b:f9:aa:37:6d:1b:
                    6e:2d:39:a8:4d:1f:b8:3e:97:2d:59:c6:0f:ff:ea:
                    16:49:78:7b:f0:88:d9:42:d9:70:53:b7:01:94:ee:
                    6c:bf:fc:72:89:08:39:da:d2:e2:d9:30:9f:cf:93:
                    c2:00:7d:0e:96:8f:2f:79:27:03:1e:ce:23:6b:7d:
                    bd:d7:5a:9d:b1:8d:e2:d4:bb:97:d0:39:6d:85:4d:
                    24:c0:3c:3c:32:6f:a6:66:70:9c:08:38:0f:f7:ff:
                    8c:4f:2a:b0:50:24:8e:33:63:ff:eb:a5:c5:dc:92:
                    c1:c6:55:44:00:ca:67:d0:72:23:e2:41:eb:d8:5a:
                    59:13:cf:66:c9:5f:7b:cf:b5:2d:29:60:e0:fb:93:
                    c1:ab:8e:9b:58:3b:b8:44:20:9f:c9:be:24:bc:c0:
                    a0:38:f9:b4:b5:d8:28:61:b9:a2:ff:20:22:30:03:
                    06:b6:e5:92:07:1d:15:69:44:d0:65:74:b7:30:bb:
                    70:c4:1f:1c:c9:7d:f9:f4:31:39:4d:06:c5:19:f4:
                    0a:76:3a:4d:39:75:3b:53:cb:80:88:29:8e:cf:b2:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0E:A0:7B:F6:66:4A:E8:E8:95:03:2F:55:C6:96:B9:D0:E7:2D:BC
            X509v3 Authority Key Identifier:
                keyid:99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:03:9a:71:b9:f3:04:93:2d:9a:6b:8b:95:bb:90:8f:b7:
         7e:3a:d9:17:15:9a:a7:0f:5c:05:b5:d6:f9:b3:36:f3:88:65:
         20:41:7e:ae:48:8a:fb:e0:22:3c:ef:06:fc:a2:b9:81:9d:0d:
         31:92:4e:c9:be:13:70:fd:95:35:fc:8c:a9:19:20:e2:57:09:
         8d:bf:44:11:82:1b:e5:69:14:a5:f2:51:e8:7b:e1:1b:f6:6d:
         56:44:ad:52:98:8f:1f:55:e8:07:5f:58:ff:13:e9:37:7b:9c:
         3c:0f:d1:52:aa:9a:86:71:56:15:4b:5a:30:c8:08:47:49:05:
         2c:a4:c7:ad:15:9c:2e:ce:5f:b5:5c:50:18:cd:d0:4e:1e:c1:
         bb:c8:ae:28:08:97:d0:e0:94:66:e3:55:f9:73:bd:47:33:55:
         dc:77:3d:17:00:8a:45:be:81:ce:79:6b:6e:1c:a9:d8:ba:8a:
         e8:75:01:3d:0e:dd:f5:d0:4f:4d:4b:df:28:bf:e6:4b:6d:3c:
         20:db:f1:dd:56:c6:61:d4:dc:7c:a0:40:b7:98:bf:87:d5:90:
         93:21:c7:78:c9:84:a9:e0:a7:9c:3c:3b:10:5e:26:f5:28:cd:
         5e:f9:f2:ad:57:45:14:bb:65:47:54:91:8d:67:a1:01:d7:44:
         9f:bf:ae:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUERAz4su6NECzsOlxidK4rNdmPdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk5QkFCNDMzMUFEOTFERDdCMDg2NDNCRjlDQUI3NTBD
OUMzN0U3NjAeFw0yNTAxMzExODMyNTJaFw0yNjAxMzAxODM3NTJaMDMxMTAvBgNV
BAMTKDAxMEVBMDdCRjY2NjRBRThFODk1MDMyRjU1QzY5NkI5RDBFNzJEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9/JUUgXYzLe+DgKDr5N+9Tht
RqaYUfudXsDIuAvJzHn6d5TXMAv5qjdtG24tOahNH7g+ly1Zxg//6hZJeHvwiNlC
2XBTtwGU7my//HKJCDna0uLZMJ/Pk8IAfQ6Wjy95JwMeziNrfb3XWp2xjeLUu5fQ
OW2FTSTAPDwyb6ZmcJwIOA/3/4xPKrBQJI4zY//rpcXcksHGVUQAymfQciPiQevY
WlkTz2bJX3vPtS0pYOD7k8GrjptYO7hEIJ/JviS8wKA4+bS12ChhuaL/ICIwAwa2
5ZIHHRVpRNBldLcwu3DEHxzJffn0MTlNBsUZ9Ap2Ok05dTtTy4CIKY7PsgpRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUAQ6ge/ZmSujolQMvVcaWudDnLbwwHwYDVR0j
BBgwFoAUmZurQzGtkd17CGQ7+cq3UMnDfnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5Bc0FlQnZxc3NMdmdYa005anIzelRUQ1R5c2E1dm9OWXo0YnU0VnRt
YmovMC85OTlCQUI0MzMxQUQ5MUREN0IwODY0M0JGOUNBQjc1MEM5QzM3RTc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5OUJBQjQzMzFBRDkxREQ3
QjA4NjQzQkY5Q0FCNzUwQzlDMzdFNzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VOQXNBZUJ2cXNzTHZnWGtNOWpyM3pUVENUeXNhNXZvTll6NGJ1NFZ0bWJqLzAv
MzIzODMwMzQzYTM4MzI2NTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMxMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEguhAMA0GCSqGSIb3DQEBCwUA
A4IBAQBwswOacbnzBJMtmmuLlbuQj7d+OtkXFZqnD1wFtdb5szbziGUgQX6uSIr7
4CI87wb8ormBnQ0xkk7JvhNw/ZU1/IypGSDiVwmNv0QRghvlaRSl8lHoe+Eb9m1W
RK1SmI8fVegHX1j/E+k3e5w8D9FSqpqGcVYVS1owyAhHSQUspMetFZwuzl+1XFAY
zdBOHsG7yK4oCJfQ4JRm41X5c71HM1Xcdz0XAIpFvoHOeWtuHKnYuorodQE9Dt31
0E9NS98ov+ZLbTwg2/HdVsZh1Nx8oEC3mL+H1ZCTIcd4yYSp4KecPDsQXib1KM1e
+fKtV0UUu2VHVJGNZ6EB10Sfv64/
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:29:28 2025 by rpki-client