Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/323830343a356263303a343030303a3a2f33362d313238203d3e20323638383637.roa
File:                     323830343a356263303a343030303a3a2f33362d313238203d3e20323638383637.roa (raw, json)
Hash identifier:          hI4D0VLMQP46M7SctvcXUy6QaF7xtnPp8lTcEgVR5s0=
Subject key identifier:   0A:CC:D0:98:2F:EE:54:59:21:3A:58:9D:AE:D5:B3:67:6C:A4:68:02
Certificate issuer:       /CN=A65E24713246C08915D514F09D9BE439ABDB1DE7
Certificate serial:       6AC8DAF12398FB42876EA34102A1870EF5E60959
Authority key identifier: A6:5E:24:71:32:46:C0:89:15:D5:14:F0:9D:9B:E4:39:AB:DB:1D:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/323830343a356263303a343030303a3a2f33362d313238203d3e20323638383637.roa
Signing time:             Wed 28 Feb 2024 17:05:29 +0000
ROA not before:           Wed 28 Feb 2024 17:00:29 +0000
ROA not after:            Wed 26 Feb 2025 17:05:29 +0000
asID:                     268867
IP address blocks:        2804:5bc0:4000::/36 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c8:da:f1:23:98:fb:42:87:6e:a3:41:02:a1:87:0e:f5:e6:09:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65E24713246C08915D514F09D9BE439ABDB1DE7
        Validity
            Not Before: Feb 28 17:00:29 2024 GMT
            Not After : Feb 26 17:05:29 2025 GMT
        Subject: CN=0ACCD0982FEE5459213A589DAED5B3676CA46802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:e6:8b:b0:36:ab:9a:59:2b:d5:90:4c:50:
                    9b:a6:74:98:42:d2:57:7f:df:85:24:f5:2f:22:42:
                    f8:42:08:9b:ad:34:2e:55:98:b2:e6:ea:49:b4:6b:
                    d8:f9:f0:f2:d8:87:c2:20:08:f7:41:a8:fa:dd:5b:
                    15:5e:68:f0:37:aa:12:69:fe:f0:dd:95:07:df:15:
                    68:a0:6e:2e:6a:00:8d:71:21:0a:2e:38:44:75:ac:
                    7d:b0:a9:33:6b:e3:f5:47:ed:eb:c5:63:20:97:b0:
                    74:a1:7f:05:e5:e2:5d:bd:e6:7f:3a:29:ba:89:b3:
                    6d:e1:2a:dd:28:3e:9b:1d:e1:42:fa:db:d5:05:fd:
                    c9:f3:05:0b:8d:23:80:32:18:3f:38:c8:c0:5a:a0:
                    55:d4:bd:04:60:e1:29:3a:20:65:9a:2a:7c:16:10:
                    bc:eb:a6:da:a2:01:26:71:99:20:bd:e1:cc:e8:74:
                    17:97:5a:77:59:94:90:cc:56:72:07:a4:72:e3:3e:
                    9a:16:66:f9:4f:2b:62:32:15:7c:1d:9e:9f:f8:f3:
                    9a:6a:7e:c2:4c:c1:3f:12:6e:ae:1a:8b:f0:d7:d4:
                    7f:1a:b3:46:71:70:1e:7a:ef:4a:5e:41:ef:04:a0:
                    7d:76:e6:43:3f:63:16:f6:38:ab:eb:7a:b8:a3:ae:
                    30:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CC:D0:98:2F:EE:54:59:21:3A:58:9D:AE:D5:B3:67:6C:A4:68:02
            X509v3 Authority Key Identifier:
                keyid:A6:5E:24:71:32:46:C0:89:15:D5:14:F0:9D:9B:E4:39:AB:DB:1D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/323830343a356263303a343030303a3a2f33362d313238203d3e20323638383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bc0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:06:09:15:b1:24:e9:16:27:88:88:31:d0:94:10:fb:e2:8c:
         4a:15:99:e5:93:44:d0:be:c3:b6:7e:dd:fa:e7:8b:da:89:25:
         71:28:ad:df:35:b1:ec:20:20:ce:31:a7:f8:53:a5:7e:5a:65:
         d8:77:fd:5f:36:e0:10:6b:68:93:77:b9:37:32:87:37:00:3a:
         3b:30:be:7e:b4:96:12:21:e9:aa:27:db:30:6c:93:26:6a:5b:
         b9:93:ca:10:29:13:fa:9b:f5:74:3a:5d:00:da:a2:1f:92:0f:
         ed:c3:19:c2:d9:78:8f:cf:a0:e9:a8:48:c1:65:a3:ae:4f:ec:
         0f:dd:74:27:9f:d2:d2:ec:44:71:bf:e8:4f:4c:17:2c:29:28:
         d2:1c:61:a9:00:95:f4:33:5a:41:8d:7a:7a:1c:d6:5c:3d:7a:
         07:57:be:76:e4:89:18:ac:96:b4:52:2c:06:e6:d0:77:5d:4a:
         cb:4b:27:a1:30:ed:68:98:02:0c:f8:34:c7:30:93:b8:7f:c0:
         d3:ff:ed:31:ad:ef:e2:8f:87:cb:60:b9:b7:23:70:30:16:fb:
         fb:5c:23:e0:06:23:3c:cc:dc:8f:5e:2d:0c:c6:c0:e9:c8:70:
         18:0d:f4:16:63:c9:94:4a:01:bd:40:9c:e1:09:28:5f:ee:84:
         ab:6c:34:19
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUasja8SOY+0KHbqNBAqGHDvXmCVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY1RTI0NzEzMjQ2QzA4OTE1RDUxNEYwOUQ5QkU0MzlB
QkRCMURFNzAeFw0yNDAyMjgxNzAwMjlaFw0yNTAyMjYxNzA1MjlaMDMxMTAvBgNV
BAMTKDBBQ0NEMDk4MkZFRTU0NTkyMTNBNTg5REFFRDVCMzY3NkNBNDY4MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpeaLsDarmlkr1ZBMUJumdJhC
0ld/34Uk9S8iQvhCCJutNC5VmLLm6km0a9j58PLYh8IgCPdBqPrdWxVeaPA3qhJp
/vDdlQffFWigbi5qAI1xIQouOER1rH2wqTNr4/VH7evFYyCXsHShfwXl4l295n86
KbqJs23hKt0oPpsd4UL629UF/cnzBQuNI4AyGD84yMBaoFXUvQRg4Sk6IGWaKnwW
ELzrptqiASZxmSC94czodBeXWndZlJDMVnIHpHLjPpoWZvlPK2IyFXwdnp/485pq
fsJMwT8Sbq4ai/DX1H8as0ZxcB5670peQe8EoH125kM/Yxb2OKvrerijrjCNAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUCszQmC/uVFkhOlidrtWzZ2ykaAIwHwYDVR0j
BBgwFoAUpl4kcTJGwIkV1RTwnZvkOavbHecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjFoODVtYnRpU21qQ1ZUOGY4aDR1dzZ4ZHBrYUo3U3BtNFpDdUtrVW5p
U3AvMC9BNjVFMjQ3MTMyNDZDMDg5MTVENTE0RjA5RDlCRTQzOUFCREIxREU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E2NUUyNDcxMzI0NkMwODkx
NUQ1MTRGMDlEOUJFNDM5QUJEQjFERTcuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB
pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YxaDg1bWJ0aVNtakNWVDhmOGg0dXc2eGRwa2FKN1NwbTRaQ3VLa1VuaVNwLzAv
MzIzODMwMzQzYTM1NjI2MzMwM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMxMzIzODIw
M2QzZTIwMzIzNjM4MzgzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKARbwEAwDQYJKoZIhvcNAQEL
BQADggEBACwGCRWxJOkWJ4iIMdCUEPvijEoVmeWTRNC+w7Z+3frni9qJJXEord81
sewgIM4xp/hTpX5aZdh3/V824BBraJN3uTcyhzcAOjswvn60lhIh6aon2zBskyZq
W7mTyhApE/qb9XQ6XQDaoh+SD+3DGcLZeI/PoOmoSMFlo65P7A/ddCef0tLsRHG/
6E9MFywpKNIcYakAlfQzWkGNenoc1lw9egdXvnbkiRislrRSLAbm0HddSstLJ6Ew
7WiYAgz4NMcwk7h/wNP/7TGt7+KPh8tgubcjcDAW+/tcI+AGIzzM3I9eLQzGwOnI
cBgN9BZjyZRKAb1AnOEJKF/uhKtsNBk=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:10 2025 by rpki-client