Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3438203d3e20323637393932.roa
File:                     323830343a353635383a3a2f33322d3438203d3e20323637393932.roa (raw, json)
Hash identifier:          WizAb1mdKH1MLb3wgSn/eU+W4iqWsglrClMjfBre2kM=
Subject key identifier:   0F:F8:C2:76:26:11:68:CC:B3:70:61:A4:89:AC:0D:AD:38:63:AA:F4
Certificate issuer:       /CN=1410B18CCA337433B73CA0533F1F503FDBB64BA7
Certificate serial:       3C65E31241FA927BC749A71E7E27355A444F6BA1
Authority key identifier: 14:10:B1:8C:CA:33:74:33:B7:3C:A0:53:3F:1F:50:3F:DB:B6:4B:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1410B18CCA337433B73CA0533F1F503FDBB64BA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3438203d3e20323637393932.roa
Signing time:             Mon 17 Mar 2025 13:38:06 +0000
ROA not before:           Mon 17 Mar 2025 13:33:06 +0000
ROA not after:            Mon 16 Mar 2026 13:38:06 +0000
asID:                     267992
IP address blocks:        2804:5658::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:65:e3:12:41:fa:92:7b:c7:49:a7:1e:7e:27:35:5a:44:4f:6b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1410B18CCA337433B73CA0533F1F503FDBB64BA7
        Validity
            Not Before: Mar 17 13:33:06 2025 GMT
            Not After : Mar 16 13:38:06 2026 GMT
        Subject: CN=0FF8C276261168CCB37061A489AC0DAD3863AAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:2a:92:e1:6c:c7:50:30:0c:a6:78:37:93:
                    7e:ab:79:6f:cb:34:28:0e:a1:65:3d:2e:dc:e2:52:
                    df:5d:89:00:19:fb:64:75:8d:5e:7f:01:6e:9a:75:
                    94:47:11:95:d8:b2:6c:51:5e:0c:65:de:05:c5:42:
                    88:e5:03:8f:a4:7d:c0:23:e6:dd:74:dc:c2:4a:94:
                    11:68:86:57:d7:78:9a:ef:2a:1c:f0:c1:a2:bd:b6:
                    11:eb:7e:bb:6e:0e:0d:99:8d:f1:8e:b1:93:21:96:
                    6a:c7:ac:39:14:df:1f:d0:b8:c5:dc:97:81:f4:db:
                    f2:e9:67:0e:57:c6:82:cb:74:4a:6e:7f:97:8c:41:
                    90:f5:75:20:4e:f8:96:b9:39:30:45:49:e9:79:d9:
                    24:6d:bd:1d:d1:fd:1b:56:91:a8:a4:ce:c2:cc:de:
                    99:0d:dd:eb:65:ef:cf:33:d1:87:b7:40:ca:fc:d8:
                    34:37:f4:5c:72:06:0c:2e:c0:d7:dc:32:93:78:da:
                    7a:eb:cf:02:3b:d0:38:fe:bf:b9:1c:c4:3b:63:e1:
                    e8:8c:74:c3:ba:20:b1:e8:fc:68:9b:2a:15:6e:cd:
                    60:c2:06:f3:9d:83:a7:c3:83:a8:77:be:61:5d:81:
                    5b:15:cc:8d:d6:7b:2e:0b:e5:a4:fe:e2:e7:12:eb:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F8:C2:76:26:11:68:CC:B3:70:61:A4:89:AC:0D:AD:38:63:AA:F4
            X509v3 Authority Key Identifier:
                keyid:14:10:B1:8C:CA:33:74:33:B7:3C:A0:53:3F:1F:50:3F:DB:B6:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/1410B18CCA337433B73CA0533F1F503FDBB64BA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1410B18CCA337433B73CA0533F1F503FDBB64BA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3438203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5658::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:48:be:f7:e3:89:3c:01:41:05:64:9a:de:8b:8f:c8:48:
         14:e1:f8:25:80:54:ef:59:3f:2b:d1:9b:d0:2d:bf:f7:f7:6d:
         30:de:74:d9:d4:8c:aa:2b:e4:d2:d1:41:ab:d4:03:be:04:3f:
         77:08:3b:a6:9e:4c:40:43:c6:68:a0:c6:47:37:b7:12:e3:03:
         d9:ec:f5:a9:4d:47:62:c6:fa:4e:64:12:db:6b:77:e3:7b:81:
         2f:9a:18:70:f4:8a:7b:f1:c9:27:a6:26:5b:09:23:66:7a:5d:
         5d:4d:d7:3e:67:89:5a:a5:eb:1c:5a:3b:18:4e:24:0a:1a:c1:
         d6:a4:be:51:44:9c:0b:88:34:db:a8:ab:44:5b:9f:8d:ae:81:
         6f:f1:6c:50:22:2b:08:96:08:4f:87:3a:72:dc:3e:d9:f0:5a:
         26:31:58:fb:9b:2d:aa:bc:06:99:77:82:a3:eb:78:95:21:2d:
         92:46:09:a8:07:c4:9a:7d:c3:55:ee:92:ac:6f:0a:09:f3:06:
         f3:93:3d:16:b5:ff:58:20:64:76:59:c4:bb:d8:39:18:66:4e:
         59:d5:9a:87:7b:60:19:63:ba:80:29:d8:2d:26:7d:f7:7c:10:
         5b:17:fb:a8:7e:d2:15:9d:31:50:3d:c5:30:0b:bc:53:51:68:
         64:7e:5e:09
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPGXjEkH6knvHSacefic1WkRPa6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxMEIxOENDQTMzNzQzM0I3M0NBMDUzM0YxRjUwM0ZE
QkI2NEJBNzAeFw0yNTAzMTcxMzMzMDZaFw0yNjAzMTYxMzM4MDZaMDMxMTAvBgNV
BAMTKDBGRjhDMjc2MjYxMTY4Q0NCMzcwNjFBNDg5QUMwREFEMzg2M0FBRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9iqS4WzHUDAMpng3k36reW/L
NCgOoWU9LtziUt9diQAZ+2R1jV5/AW6adZRHEZXYsmxRXgxl3gXFQojlA4+kfcAj
5t103MJKlBFohlfXeJrvKhzwwaK9thHrfrtuDg2ZjfGOsZMhlmrHrDkU3x/QuMXc
l4H02/LpZw5XxoLLdEpuf5eMQZD1dSBO+Ja5OTBFSel52SRtvR3R/RtWkaikzsLM
3pkN3etl788z0Ye3QMr82DQ39FxyBgwuwNfcMpN42nrrzwI70Dj+v7kcxDtj4eiM
dMO6ILHo/GibKhVuzWDCBvOdg6fDg6h3vmFdgVsVzI3Wey4L5aT+4ucS6/tVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUD/jCdiYRaMyzcGGkiawNrThjqvQwHwYDVR0j
BBgwFoAUFBCxjMozdDO3PKBTPx9QP9u2S6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JzaTJMNU0xUFpKdDNnTGJxbWl4MUNyUnVXQUFYWm5tRGR3cVFrTXd1
bmEvMC8xNDEwQjE4Q0NBMzM3NDMzQjczQ0EwNTMzRjFGNTAzRkRCQjY0QkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MTBCMThDQ0EzMzc0MzNC
NzNDQTA1MzNGMUY1MDNGREJCNjRCQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCc2kyTDVNMVBaSnQzZ0xicW1peDFDclJ1V0FBWFpubURkd3FRa013dW5hLzAv
MzIzODMwMzQzYTM1MzYzNTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzkzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWWDANBgkqhkiG9w0BAQsFAAOCAQEAa8dIvvfj
iTwBQQVkmt6Lj8hIFOH4JYBU71k/K9Gb0C2/9/dtMN502dSMqivk0tFBq9QDvgQ/
dwg7pp5MQEPGaKDGRze3EuMD2ez1qU1HYsb6TmQS22t343uBL5oYcPSKe/HJJ6Ym
WwkjZnpdXU3XPmeJWqXrHFo7GE4kChrB1qS+UUScC4g026irRFufja6Bb/FsUCIr
CJYIT4c6ctw+2fBaJjFY+5stqrwGmXeCo+t4lSEtkkYJqAfEmn3DVe6SrG8KCfMG
85M9FrX/WCBkdlnEu9g5GGZOWdWah3tgGWO6gCnYLSZ993wQWxf7qH7SFZ0xUD3F
MAu8U1FoZH5eCQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:35 2025 by rpki-client