Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/323830343a3261383a3a2f33322d3332203d3e20323632383330.roa
File:                     323830343a3261383a3a2f33322d3332203d3e20323632383330.roa (raw, json)
Hash identifier:          fXzUQ+VFRDi4jlGsAs+2CGNISGlK0dNAuRNFhSBuUQc=
Subject key identifier:   D5:90:7D:26:E1:4B:BC:AA:42:F1:4B:20:D3:C1:DF:51:6A:CB:8E:56
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       7F3F3EADF920AD262FF0EFE502A2EE2C74E4B1F3
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/323830343a3261383a3a2f33322d3332203d3e20323632383330.roa
Signing time:             Thu 01 Feb 2024 11:12:58 +0000
ROA not before:           Thu 01 Feb 2024 11:07:58 +0000
ROA not after:            Thu 30 Jan 2025 11:12:58 +0000
asID:                     262830
IP address blocks:        2804:2a8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3f:3e:ad:f9:20:ad:26:2f:f0:ef:e5:02:a2:ee:2c:74:e4:b1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb  1 11:07:58 2024 GMT
            Not After : Jan 30 11:12:58 2025 GMT
        Subject: CN=D5907D26E14BBCAA42F14B20D3C1DF516ACB8E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:b3:73:4f:17:b2:35:7e:67:8b:46:cf:45:
                    ff:e6:f2:88:e0:d6:3e:3f:9f:95:09:95:bc:8b:7e:
                    4c:54:09:24:d2:fd:fd:99:75:f4:12:cd:c2:11:ec:
                    22:12:c3:e0:f4:21:0c:78:fe:87:6d:6d:51:4a:e4:
                    ca:c1:0d:26:c8:80:fd:14:c7:e9:fe:3e:a1:e9:e4:
                    45:47:9e:3c:57:25:dc:81:93:b4:f7:ec:e8:bf:37:
                    d5:ee:a5:19:71:ee:ff:c6:4f:5d:af:4d:ac:3e:7f:
                    d8:32:fd:72:ae:1e:a4:6c:e2:2b:b8:84:8e:7d:ff:
                    4f:7c:2a:b4:cd:9d:f8:c1:47:6c:c6:dd:eb:4d:37:
                    2e:0b:57:23:96:87:eb:b6:6b:40:a4:6d:7b:b5:24:
                    ed:8b:1f:8c:3a:8a:8c:22:66:2a:40:3e:be:98:5a:
                    9a:52:94:67:cb:63:10:bb:9c:5a:a0:78:5c:aa:68:
                    e5:22:20:53:dd:2e:49:cd:3a:57:2c:74:56:ac:e4:
                    4e:6a:b8:52:42:6e:ee:2b:b9:e0:44:e6:c6:99:5a:
                    d3:ce:c4:bb:b9:74:89:8b:f3:4d:e5:8f:39:10:be:
                    31:14:7a:de:b3:e9:5e:6d:c9:8f:ec:d6:1d:b2:66:
                    8c:b5:02:dc:33:68:20:a7:78:9d:4d:2a:89:ad:73:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:7D:26:E1:4B:BC:AA:42:F1:4B:20:D3:C1:DF:51:6A:CB:8E:56
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/323830343a3261383a3a2f33322d3332203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:5b:6a:55:5c:47:65:13:02:c6:64:67:6b:f4:15:eb:5c:fe:
         8a:0e:50:6e:4b:d9:55:a3:f5:cd:ad:67:6a:e1:75:03:61:25:
         cd:f5:58:ba:a3:5f:f6:fb:af:83:aa:83:03:d3:c0:5c:8f:3d:
         2a:02:4c:eb:c4:e4:6e:bf:7f:8b:99:19:79:ae:f9:c2:5a:15:
         6b:6a:ec:d8:3b:2e:df:ac:f1:b4:99:bb:ef:79:3f:72:b2:fd:
         72:eb:60:ea:92:7e:0b:2f:16:74:2d:bb:48:8c:22:42:4b:2b:
         38:48:03:57:98:f2:66:2f:1e:58:c2:45:71:6f:74:3d:c4:5e:
         ab:2b:56:4f:ad:a4:cd:42:df:dc:89:6c:1b:11:c2:d2:e6:17:
         dd:3d:00:e4:bb:de:3a:97:76:86:39:74:a8:1b:3c:74:d3:c3:
         3b:42:38:bc:1e:a3:af:46:fa:7f:2b:d4:80:70:6e:19:75:f3:
         db:ac:d9:0a:4b:7b:46:b1:2a:c3:da:de:a2:81:3a:de:5f:dc:
         35:c7:9a:6b:24:0f:b7:b4:37:61:ca:1b:f1:ae:91:9d:17:b0:
         8a:b5:f5:c8:06:27:85:9c:91:8c:73:81:da:21:88:44:b5:bf:
         7b:e2:b1:85:00:94:e9:83:94:f7:e5:0e:4d:35:49:a4:32:4b:
         e6:e5:48:18
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfz8+rfkgrSYv8O/lAqLuLHTksfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCQTNEMkFBMUM2QTQwN0FENjZEQkIxQTc2OTQ2OEMy
RTVCNEU1RjAeFw0yNDAyMDExMTA3NThaFw0yNTAxMzAxMTEyNThaMDMxMTAvBgNV
BAMTKEQ1OTA3RDI2RTE0QkJDQUE0MkYxNEIyMEQzQzFERjUxNkFDQjhFNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCONbNzTxeyNX5ni0bPRf/m8ojg
1j4/n5UJlbyLfkxUCSTS/f2ZdfQSzcIR7CISw+D0IQx4/odtbVFK5MrBDSbIgP0U
x+n+PqHp5EVHnjxXJdyBk7T37Oi/N9XupRlx7v/GT12vTaw+f9gy/XKuHqRs4iu4
hI59/098KrTNnfjBR2zG3etNNy4LVyOWh+u2a0CkbXu1JO2LH4w6iowiZipAPr6Y
WppSlGfLYxC7nFqgeFyqaOUiIFPdLknNOlcsdFas5E5quFJCbu4rueBE5saZWtPO
xLu5dImL803ljzkQvjEUet6z6V5tyY/s1h2yZoy1AtwzaCCneJ1NKomtcwUtAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU1ZB9JuFLvKpC8Usg08HfUWrLjlYwHwYDVR0j
BBgwFoAUMLo9KqHGpAetZtuxp2lGjC5bTl8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVZuOGpQdHk5clppR2ZOanc2WmlmR041ZXBHYTRlQlk0dTZaZXM3akpk
enQvMC8zMEJBM0QyQUExQzZBNDA3QUQ2NkRCQjFBNzY5NDY4QzJFNUI0RTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwQkEzRDJBQTFDNkE0MDdB
RDY2REJCMUE3Njk0NjhDMkU1QjRFNUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VWbjhqUHR5OXJaaUdmTmp3NlppZkdONWVwR2E0ZUJZNHU2WmVzN2pKZHp0LzAv
MzIzODMwMzQzYTMyNjEzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM4
MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAqgwDQYJKoZIhvcNAQELBQADggEBALlbalVcR2UT
AsZkZ2v0Fetc/ooOUG5L2VWj9c2tZ2rhdQNhJc31WLqjX/b7r4OqgwPTwFyPPSoC
TOvE5G6/f4uZGXmu+cJaFWtq7Ng7Lt+s8bSZu+95P3Ky/XLrYOqSfgsvFnQtu0iM
IkJLKzhIA1eY8mYvHljCRXFvdD3EXqsrVk+tpM1C39yJbBsRwtLmF909AOS73jqX
doY5dKgbPHTTwztCOLweo69G+n8r1IBwbhl189us2QpLe0axKsPa3qKBOt5f3DXH
mmskD7e0N2HKG/GukZ0XsIq19cgGJ4WckYxzgdohiES1v3visYUAlOmDlPflDk01
SaQyS+blSBg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:50 2025 by rpki-client