Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSk764qjpjwarRihPbYWVnW4FZZGDszWkaPiLSHVYLmp/0/323830343a353966303a3a2f33322d313238203d3e20323638373335.roa
File:                     323830343a353966303a3a2f33322d313238203d3e20323638373335.roa (raw, json)
Hash identifier:          Z7wLAWHO6BZTc5PY0nq6LfnFUXaWEhtTKoKijsXOjzk=
Subject key identifier:   3E:EE:E5:F4:D1:50:9B:BC:87:9E:9E:4A:1F:B7:16:46:15:52:14:0C
Certificate issuer:       /CN=A1AA4E590EAFF9767A6595FA4598F78D01BC1104
Certificate serial:       05F311321AE627B6270672E999578A2F8CE8AF62
Authority key identifier: A1:AA:4E:59:0E:AF:F9:76:7A:65:95:FA:45:98:F7:8D:01:BC:11:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1AA4E590EAFF9767A6595FA4598F78D01BC1104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSk764qjpjwarRihPbYWVnW4FZZGDszWkaPiLSHVYLmp/0/323830343a353966303a3a2f33322d313238203d3e20323638373335.roa
Signing time:             Mon 10 Feb 2025 14:02:56 +0000
ROA not before:           Mon 10 Feb 2025 13:57:56 +0000
ROA not after:            Mon 09 Feb 2026 14:02:56 +0000
asID:                     268735
IP address blocks:        2804:59f0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f3:11:32:1a:e6:27:b6:27:06:72:e9:99:57:8a:2f:8c:e8:af:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1AA4E590EAFF9767A6595FA4598F78D01BC1104
        Validity
            Not Before: Feb 10 13:57:56 2025 GMT
            Not After : Feb  9 14:02:56 2026 GMT
        Subject: CN=3EEEE5F4D1509BBC879E9E4A1FB716461552140C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:59:07:e6:e7:b6:98:19:ea:80:17:58:ae:
                    61:ee:50:b3:40:75:40:9e:39:fd:48:00:f2:0e:2a:
                    17:79:30:18:f8:15:0f:96:51:d8:27:15:08:76:8e:
                    c9:a0:dd:ad:7e:f6:0e:9e:8c:67:c6:bf:90:da:c4:
                    71:78:d3:8c:6c:36:be:4d:bb:67:89:d1:9f:e6:dc:
                    18:ec:b7:ce:86:20:e3:ae:1e:33:f4:7d:e6:c6:9e:
                    6a:e0:61:7b:e5:20:37:91:93:08:aa:f6:64:b1:51:
                    b7:f9:f4:a3:8b:57:4e:e1:b8:b5:bf:4b:e3:e4:2b:
                    e5:3c:34:c9:4f:f8:a9:e8:3a:9b:52:71:66:f3:87:
                    4e:a0:c4:5e:ee:ae:b8:2f:3f:1c:8b:84:0f:1f:41:
                    45:4a:68:6b:af:d9:28:38:60:d5:3c:60:84:63:09:
                    ac:ac:70:ac:fe:95:5e:68:37:4e:52:75:6d:f4:50:
                    2d:b9:b7:b1:64:7b:33:64:aa:34:93:f1:bf:64:d8:
                    a3:8f:42:f3:6c:26:8c:1a:e0:43:7e:b6:0f:d1:f1:
                    61:cc:04:8e:2d:d4:db:fa:a7:ec:88:61:8d:f1:5f:
                    0f:f5:df:92:a9:82:77:c6:d0:f7:8c:e6:8b:c9:20:
                    42:26:56:7b:21:70:03:e3:c3:a5:d6:92:b1:fb:bd:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EE:E5:F4:D1:50:9B:BC:87:9E:9E:4A:1F:B7:16:46:15:52:14:0C
            X509v3 Authority Key Identifier:
                keyid:A1:AA:4E:59:0E:AF:F9:76:7A:65:95:FA:45:98:F7:8D:01:BC:11:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSk764qjpjwarRihPbYWVnW4FZZGDszWkaPiLSHVYLmp/0/A1AA4E590EAFF9767A6595FA4598F78D01BC1104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1AA4E590EAFF9767A6595FA4598F78D01BC1104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSk764qjpjwarRihPbYWVnW4FZZGDszWkaPiLSHVYLmp/0/323830343a353966303a3a2f33322d313238203d3e20323638373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:b9:c1:d4:a9:42:9b:6c:87:79:22:90:47:05:a1:d4:1b:
         bd:22:47:83:7b:e4:51:ea:9b:11:a7:19:23:f7:a6:3d:69:b5:
         31:6d:ed:66:6d:45:46:5d:c1:bd:9a:1a:2b:0a:29:51:11:ba:
         38:47:09:c4:44:a7:f1:dc:49:34:81:11:11:17:2c:f9:53:46:
         8a:b6:e9:99:04:9b:d9:9e:d0:5f:ce:1a:aa:17:bb:73:c3:12:
         07:c2:48:d9:05:d4:14:28:93:f9:d9:46:2a:84:fa:fa:da:72:
         1f:fd:0b:4d:8f:8a:a9:7c:33:b2:77:0c:e0:9c:19:35:f9:bb:
         6b:41:8f:31:18:1f:c3:f8:2e:e3:9e:a7:36:0c:c0:0e:6f:fb:
         f1:d4:00:0c:bb:88:78:49:78:3e:64:dc:98:02:e8:04:0b:e8:
         30:92:0b:16:88:4e:17:0d:5f:c8:68:22:e0:cf:22:a6:81:ae:
         d7:ba:a5:d3:b5:e4:51:b2:3a:e1:57:a5:df:6e:55:5e:94:c4:
         91:25:89:ad:33:87:20:74:4b:b9:4a:18:18:60:f3:d2:df:9a:
         e8:50:73:b2:e6:1f:51:97:c5:0d:d9:dd:e1:9a:93:6f:92:d3:
         39:0a:7f:c7:a8:1c:09:61:e5:bd:0b:94:de:b3:ee:90:ae:2c:
         49:d0:69:1b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBfMRMhrmJ7YnBnLpmVeKL4zor2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFBQTRFNTkwRUFGRjk3NjdBNjU5NUZBNDU5OEY3OEQw
MUJDMTEwNDAeFw0yNTAyMTAxMzU3NTZaFw0yNjAyMDkxNDAyNTZaMDMxMTAvBgNV
BAMTKDNFRUVFNUY0RDE1MDlCQkM4NzlFOUU0QTFGQjcxNjQ2MTU1MjE0MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUVkH5ue2mBnqgBdYrmHuULNA
dUCeOf1IAPIOKhd5MBj4FQ+WUdgnFQh2jsmg3a1+9g6ejGfGv5DaxHF404xsNr5N
u2eJ0Z/m3Bjst86GIOOuHjP0febGnmrgYXvlIDeRkwiq9mSxUbf59KOLV07huLW/
S+PkK+U8NMlP+KnoOptScWbzh06gxF7urrgvPxyLhA8fQUVKaGuv2Sg4YNU8YIRj
CayscKz+lV5oN05SdW30UC25t7FkezNkqjST8b9k2KOPQvNsJowa4EN+tg/R8WHM
BI4t1Nv6p+yIYY3xXw/135KpgnfG0PeM5ovJIEImVnshcAPjw6XWkrH7vXT3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUPu7l9NFQm7yHnp5KH7cWRhVSFAwwHwYDVR0j
BBgwFoAUoapOWQ6v+XZ6ZZX6RZj3jQG8EQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNrNzY0cWpwandhclJpaFBiWVdWblc0RlpaR0RzeldrYVBpTFNIVllM
bXAvMC9BMUFBNEU1OTBFQUZGOTc2N0E2NTk1RkE0NTk4Rjc4RDAxQkMxMTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQUE0RTU5MEVBRkY5NzY3
QTY1OTVGQTQ1OThGNzhEMDFCQzExMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTazc2NHFqcGp3YXJSaWhQYllXVm5XNEZaWkdEc3pXa2FQaUxTSFZZTG1wLzAv
MzIzODMwMzQzYTM1Mzk2NjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFnwMA0GCSqGSIb3DQEBCwUAA4IBAQAOobnB
1KlCm2yHeSKQRwWh1Bu9IkeDe+RR6psRpxkj96Y9abUxbe1mbUVGXcG9mhorCilR
Ebo4RwnERKfx3Ek0gRERFyz5U0aKtumZBJvZntBfzhqqF7tzwxIHwkjZBdQUKJP5
2UYqhPr62nIf/QtNj4qpfDOydwzgnBk1+btrQY8xGB/D+C7jnqc2DMAOb/vx1AAM
u4h4SXg+ZNyYAugEC+gwkgsWiE4XDV/IaCLgzyKmga7XuqXTteRRsjrhV6XfblVe
lMSRJYmtM4cgdEu5ShgYYPPS35roUHOy5h9Rl8UN2d3hmpNvktM5Cn/HqBwJYeW9
C5Tes+6QrixJ0Gkb
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:09:11 2025 by rpki-client