Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/323830343a363264343a3a2f33322d313238203d3e20323639333231.roa
File:                     323830343a363264343a3a2f33322d313238203d3e20323639333231.roa (raw, json)
Hash identifier:          wbwuRlMjLPOCXJKUbbSDrlODKBsPkEpA4KBtLyI+YKo=
Subject key identifier:   88:61:BA:5A:D2:57:CD:0A:B1:2A:D5:C9:39:C5:5A:DE:51:07:55:C0
Certificate issuer:       /CN=841C90889EF2740616BDCD520B31777D63885648
Certificate serial:       2C11B815003602539391B91172C2E69F0445389E
Authority key identifier: 84:1C:90:88:9E:F2:74:06:16:BD:CD:52:0B:31:77:7D:63:88:56:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/841C90889EF2740616BDCD520B31777D63885648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/323830343a363264343a3a2f33322d313238203d3e20323639333231.roa
Signing time:             Tue 07 Jan 2025 18:13:15 +0000
ROA not before:           Tue 07 Jan 2025 18:08:15 +0000
ROA not after:            Tue 06 Jan 2026 18:13:15 +0000
asID:                     269321
IP address blocks:        2804:62d4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:11:b8:15:00:36:02:53:93:91:b9:11:72:c2:e6:9f:04:45:38:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841C90889EF2740616BDCD520B31777D63885648
        Validity
            Not Before: Jan  7 18:08:15 2025 GMT
            Not After : Jan  6 18:13:15 2026 GMT
        Subject: CN=8861BA5AD257CD0AB12AD5C939C55ADE510755C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:f8:8f:b1:13:d6:e0:8a:fc:af:12:2c:c3:
                    a1:40:8b:d5:e5:77:03:e8:af:b3:b2:2c:f2:4f:c7:
                    d5:86:5b:c0:0d:17:09:22:23:cb:51:55:e2:d8:56:
                    b2:b5:95:16:79:e7:51:41:f0:d5:f5:f6:95:d5:a3:
                    fe:2f:d0:03:56:36:17:9a:01:c3:6f:bd:66:12:c9:
                    78:e3:88:3e:ef:b4:b5:78:0d:bb:6f:1f:c5:74:00:
                    c7:be:66:f5:1d:d5:71:a9:ae:87:12:39:9e:53:ff:
                    ec:c3:cd:d3:22:c4:47:a9:b8:56:85:47:4e:ec:54:
                    6e:60:80:b4:e8:41:b8:32:b8:4f:75:b4:15:94:ae:
                    bc:b8:de:a0:00:7c:14:84:b5:a4:55:84:70:c1:a0:
                    2a:c9:22:ce:df:b4:85:02:33:9c:cf:2d:25:d1:7f:
                    af:4e:d6:e9:13:16:cb:4d:b4:4d:59:ae:1f:b7:91:
                    41:c3:82:26:77:58:c4:58:a5:c7:76:8f:f7:37:d3:
                    75:3c:68:5a:f6:97:b5:00:1e:c5:f8:bd:a5:69:bd:
                    84:48:c5:c3:d0:49:5b:1a:1f:f3:9e:0f:c2:4c:bd:
                    de:17:09:af:28:92:e6:41:b6:c6:95:21:03:7d:6f:
                    7b:a2:bc:ba:59:45:fe:a8:64:80:f4:a1:2f:01:9c:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:61:BA:5A:D2:57:CD:0A:B1:2A:D5:C9:39:C5:5A:DE:51:07:55:C0
            X509v3 Authority Key Identifier:
                keyid:84:1C:90:88:9E:F2:74:06:16:BD:CD:52:0B:31:77:7D:63:88:56:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/841C90889EF2740616BDCD520B31777D63885648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/841C90889EF2740616BDCD520B31777D63885648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/323830343a363264343a3a2f33322d313238203d3e20323639333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:bf:22:90:f2:35:ef:c9:ee:1f:ba:d7:63:0d:79:c4:6d:c8:
         7f:82:ea:0f:5d:93:d0:6e:29:e2:79:9c:2c:cb:21:27:d7:77:
         b4:4b:9b:de:32:d1:13:c0:b4:cb:df:69:89:ff:3a:f0:19:a2:
         41:e2:85:1e:33:da:c7:88:bc:ce:0d:e9:2a:cb:5c:cf:a5:3b:
         4f:c2:8e:33:cd:8a:fa:83:f6:5b:7b:4e:d0:d4:bc:73:08:69:
         ab:ac:02:21:dd:07:35:65:ad:e7:20:fa:21:7c:65:66:11:fb:
         05:b9:99:ad:41:00:ec:25:1d:55:89:95:3d:2f:ee:16:67:35:
         63:dc:47:58:7a:68:eb:f9:3e:5d:3d:23:42:37:00:af:51:ce:
         e3:c3:61:64:93:19:32:85:c2:d9:14:b4:f9:8d:d5:52:2d:58:
         92:c3:7f:ab:84:c5:6d:74:27:dc:df:15:d4:35:38:91:e8:51:
         f7:df:bc:c2:76:7f:b7:45:e6:6e:2b:c3:02:1c:34:63:7c:46:
         89:32:51:74:e8:0c:50:b1:41:2e:16:b0:dd:5d:44:3d:48:84:
         9e:5a:e4:da:69:57:d2:16:6f:fe:2b:6d:83:83:e2:aa:6b:ac:
         13:e6:0f:35:f6:49:5d:81:d1:cc:5e:67:55:1d:09:bc:0f:70:
         ce:69:ba:65
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULBG4FQA2AlOTkbkRcsLmnwRFOJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxQzkwODg5RUYyNzQwNjE2QkRDRDUyMEIzMTc3N0Q2
Mzg4NTY0ODAeFw0yNTAxMDcxODA4MTVaFw0yNjAxMDYxODEzMTVaMDMxMTAvBgNV
BAMTKDg4NjFCQTVBRDI1N0NEMEFCMTJBRDVDOTM5QzU1QURFNTEwNzU1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2k/iPsRPW4Ir8rxIsw6FAi9Xl
dwPor7OyLPJPx9WGW8ANFwkiI8tRVeLYVrK1lRZ551FB8NX19pXVo/4v0ANWNhea
AcNvvWYSyXjjiD7vtLV4DbtvH8V0AMe+ZvUd1XGprocSOZ5T/+zDzdMixEepuFaF
R07sVG5ggLToQbgyuE91tBWUrry43qAAfBSEtaRVhHDBoCrJIs7ftIUCM5zPLSXR
f69O1ukTFstNtE1Zrh+3kUHDgiZ3WMRYpcd2j/c303U8aFr2l7UAHsX4vaVpvYRI
xcPQSVsaH/OeD8JMvd4XCa8okuZBtsaVIQN9b3uivLpZRf6oZID0oS8BnGCZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUiGG6WtJXzQqxKtXJOcVa3lEHVcAwHwYDVR0j
BBgwFoAUhByQiJ7ydAYWvc1SCzF3fWOIVkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1lzcURvMnd4eHh2alRKR3VkQXFoSzFOM05ZaUNaR3NlblVtTXhLZG1z
dlovMC84NDFDOTA4ODlFRjI3NDA2MTZCRENENTIwQjMxNzc3RDYzODg1NjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MUM5MDg4OUVGMjc0MDYx
NkJEQ0Q1MjBCMzE3NzdENjM4ODU2NDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dZc3FEbzJ3eHh4dmpUSkd1ZEFxaEsxTjNOWWlDWkdzZW5VbU14S2Rtc3ZaLzAv
MzIzODMwMzQzYTM2MzI2NDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGLUMA0GCSqGSIb3DQEBCwUAA4IBAQBmvyKQ
8jXvye4futdjDXnEbch/guoPXZPQbinieZwsyyEn13e0S5veMtETwLTL32mJ/zrw
GaJB4oUeM9rHiLzODekqy1zPpTtPwo4zzYr6g/Zbe07Q1LxzCGmrrAIh3Qc1Za3n
IPohfGVmEfsFuZmtQQDsJR1ViZU9L+4WZzVj3EdYemjr+T5dPSNCNwCvUc7jw2Fk
kxkyhcLZFLT5jdVSLViSw3+rhMVtdCfc3xXUNTiR6FH337zCdn+3ReZuK8MCHDRj
fEaJMlF06AxQsUEuFrDdXUQ9SISeWuTaaVfSFm/+K22Dg+Kqa6wT5g819kldgdHM
XmdVHQm8D3DOabpl
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:34:57 2025 by rpki-client