Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa
File:                     323830343a383265383a3a2f33332d3333203d3e20323732313634.roa (raw, json)
Hash identifier:          8mwFDzVLmWNEdX+uqVI4q1jzQZj1yxhwkwvpzN9donQ=
Subject key identifier:   93:D4:99:D0:43:BB:A1:18:9B:F4:8F:E9:3F:0F:CE:FD:99:EA:A2:93
Certificate issuer:       /CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
Certificate serial:       23115CB539DB606E5A3E07B55226B622BBC44D8C
Authority key identifier: 99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa
Signing time:             Fri 31 Jan 2025 18:37:51 +0000
ROA not before:           Fri 31 Jan 2025 18:32:51 +0000
ROA not after:            Fri 30 Jan 2026 18:37:51 +0000
asID:                     272164
IP address blocks:        2804:82e8::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:11:5c:b5:39:db:60:6e:5a:3e:07:b5:52:26:b6:22:bb:c4:4d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
        Validity
            Not Before: Jan 31 18:32:51 2025 GMT
            Not After : Jan 30 18:37:51 2026 GMT
        Subject: CN=93D499D043BBA1189BF48FE93F0FCEFD99EAA293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:84:96:0b:82:e1:85:d1:87:3a:ef:96:b7:
                    d9:f8:1f:db:1e:36:73:25:6b:d4:84:f9:17:f6:bb:
                    9d:e2:dc:0d:cb:65:74:5d:23:34:e0:8d:71:47:81:
                    53:c3:df:4e:c8:8f:2c:24:e7:61:d0:1c:bc:b1:92:
                    18:46:8b:f2:f2:ca:c8:9d:30:a5:45:5b:20:91:86:
                    9c:c7:4c:16:7d:bf:e0:1d:61:4e:b7:ca:8f:fb:f8:
                    b5:43:b3:22:7e:1a:20:9e:8c:48:bd:60:6e:f8:7b:
                    93:b0:ec:f1:d3:ef:d2:d3:85:ea:73:6b:2d:80:94:
                    86:b1:98:1e:35:ae:2c:ce:87:b1:aa:bb:6a:dd:ef:
                    af:84:d9:f9:bf:0b:56:4c:31:c6:3a:34:1c:df:12:
                    e4:f4:7c:aa:51:b8:fd:2c:7c:c4:49:0c:05:a2:0b:
                    7e:df:7e:45:4a:ea:42:72:84:06:d4:b2:18:63:c1:
                    0e:7d:c2:1e:21:fb:4d:67:87:8e:02:24:a2:9b:82:
                    a7:e5:b6:36:c1:93:0a:fb:40:0d:6b:ad:1c:e0:e2:
                    44:e4:14:4d:cb:ea:3d:b4:fd:36:89:32:d3:1b:52:
                    14:8d:5d:ca:38:17:ad:f7:90:86:3f:0e:28:72:af:
                    bf:c2:23:ff:9d:58:ff:ee:77:cc:a0:9c:bb:79:3b:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D4:99:D0:43:BB:A1:18:9B:F4:8F:E9:3F:0F:CE:FD:99:EA:A2:93
            X509v3 Authority Key Identifier:
                keyid:99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8::/33

    Signature Algorithm: sha256WithRSAEncryption
         31:84:12:08:5a:7a:68:bb:ba:e3:fb:a6:94:71:c7:90:be:f0:
         5e:63:17:3f:52:b6:81:82:64:1f:58:1b:db:f5:12:ca:39:9d:
         5e:01:e1:99:2f:b3:af:64:9e:f7:a1:d0:38:61:bb:a6:0c:0e:
         1a:42:23:fa:c2:dd:b9:33:77:eb:80:a0:10:a0:50:11:99:7f:
         8a:de:a7:95:83:0c:df:13:0a:9f:c7:ad:4d:f9:15:ce:79:68:
         f7:7b:31:c3:c5:db:d6:05:3f:f0:b1:54:fb:fe:f2:b5:fc:08:
         03:68:cb:66:a4:d8:b1:dd:7d:1c:40:19:d9:7b:3b:16:33:45:
         57:a8:f7:06:d0:b6:f8:98:be:28:cc:eb:b4:93:a3:44:e5:4b:
         60:7e:d0:e9:dc:10:e9:c2:8d:06:ef:94:fa:6e:9a:b7:89:82:
         ab:76:83:8b:92:18:26:03:1c:c2:27:fc:d9:87:d8:98:31:55:
         0b:6e:70:46:9d:d3:d4:18:76:ee:02:f8:a4:6a:48:e8:57:b2:
         41:a5:11:d1:27:0a:da:ec:27:1f:11:94:5a:69:a1:6b:21:56:
         21:c8:97:76:96:c0:23:90:15:6e:72:d0:03:ae:86:d2:27:d9:
         bc:4e:95:8c:45:ab:95:e7:24:c1:6a:a4:34:e8:0f:e0:89:c5:
         d6:97:7b:84
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIxFctTnbYG5aPge1Uia2IrvETYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk5QkFCNDMzMUFEOTFERDdCMDg2NDNCRjlDQUI3NTBD
OUMzN0U3NjAeFw0yNTAxMzExODMyNTFaFw0yNjAxMzAxODM3NTFaMDMxMTAvBgNV
BAMTKDkzRDQ5OUQwNDNCQkExMTg5QkY0OEZFOTNGMEZDRUZEOTlFQUEyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8ISWC4LhhdGHOu+Wt9n4H9se
NnMla9SE+Rf2u53i3A3LZXRdIzTgjXFHgVPD307Ijywk52HQHLyxkhhGi/Lyysid
MKVFWyCRhpzHTBZ9v+AdYU63yo/7+LVDsyJ+GiCejEi9YG74e5Ow7PHT79LThepz
ay2AlIaxmB41rizOh7Gqu2rd76+E2fm/C1ZMMcY6NBzfEuT0fKpRuP0sfMRJDAWi
C37ffkVK6kJyhAbUshhjwQ59wh4h+01nh44CJKKbgqfltjbBkwr7QA1rrRzg4kTk
FE3L6j20/TaJMtMbUhSNXco4F633kIY/Dihyr7/CI/+dWP/ud8ygnLt5O1ENAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk9SZ0EO7oRib9I/pPw/O/ZnqopMwHwYDVR0j
BBgwFoAUmZurQzGtkd17CGQ7+cq3UMnDfnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5Bc0FlQnZxc3NMdmdYa005anIzelRUQ1R5c2E1dm9OWXo0YnU0VnRt
YmovMC85OTlCQUI0MzMxQUQ5MUREN0IwODY0M0JGOUNBQjc1MEM5QzM3RTc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5OUJBQjQzMzFBRDkxREQ3
QjA4NjQzQkY5Q0FCNzUwQzlDMzdFNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VOQXNBZUJ2cXNzTHZnWGtNOWpyM3pUVENUeXNhNXZvTll6NGJ1NFZ0bWJqLzAv
MzIzODMwMzQzYTM4MzI2NTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMy
MzEzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASC6AAwDQYJKoZIhvcNAQELBQADggEBADGEEgha
emi7uuP7ppRxx5C+8F5jFz9StoGCZB9YG9v1Eso5nV4B4Zkvs69knveh0Dhhu6YM
DhpCI/rC3bkzd+uAoBCgUBGZf4rep5WDDN8TCp/HrU35Fc55aPd7McPF29YFP/Cx
VPv+8rX8CANoy2ak2LHdfRxAGdl7OxYzRVeo9wbQtviYvijM67STo0TlS2B+0Onc
EOnCjQbvlPpumreJgqt2g4uSGCYDHMIn/NmH2JgxVQtucEad09QYdu4C+KRqSOhX
skGlEdEnCtrsJx8RlFppoWshViHIl3aWwCOQFW5y0AOuhtIn2bxOlYxFq5XnJMFq
pDToD+CJxdaXe4Q=
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:28:53 2025 by rpki-client