Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          zvz0CN8kbGWqx5I4tCurHxsS8Tyi+JJ/6b0nvOsBjcg=
Subject key identifier:   F3:A9:05:2A:11:07:25:69:C2:A6:38:A9:F3:22:C6:4F:50:4F:D2:9B
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       67D04B70F07610DBDC294E356DF0B645A9C07DA5
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Thu 06 Mar 2025 16:16:34 +0000
ROA not before:           Thu 06 Mar 2025 16:11:34 +0000
ROA not after:            Thu 05 Mar 2026 16:16:34 +0000
asID:                     263522
IP address blocks:        2804:1338:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d0:4b:70:f0:76:10:db:dc:29:4e:35:6d:f0:b6:45:a9:c0:7d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Mar  6 16:11:34 2025 GMT
            Not After : Mar  5 16:16:34 2026 GMT
        Subject: CN=F3A9052A11072569C2A638A9F322C64F504FD29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:23:9c:c6:53:05:63:d7:40:2c:74:a9:01:
                    91:6f:4a:de:fa:44:7d:aa:17:b9:40:6c:8b:53:25:
                    47:6c:60:48:23:6a:f0:dc:f0:eb:6f:63:fa:07:0a:
                    08:c4:26:02:5e:fd:bb:6a:32:ae:21:0e:5e:db:38:
                    d9:c4:c2:33:e3:b7:fd:9b:ea:4b:1c:e5:ba:b4:a8:
                    f4:4b:f9:d3:5e:0e:54:15:d3:f5:00:4d:e5:b6:3f:
                    77:4b:3f:2e:ca:1a:82:40:d2:8f:ec:87:d0:6c:01:
                    a4:4e:78:84:93:00:7d:55:04:5c:8f:47:2e:58:e9:
                    6a:e9:f4:8e:79:2b:bf:7e:39:3d:ca:3b:85:46:a8:
                    3f:95:3f:ae:a1:51:04:bb:c0:e9:15:51:c3:05:6d:
                    6e:73:37:53:83:e0:86:f4:bc:51:91:f9:86:ca:13:
                    cd:f4:e0:fb:4b:10:5f:43:c7:45:17:db:34:94:c3:
                    14:ab:06:59:6c:8e:1c:ab:95:e6:26:0c:7a:1d:35:
                    19:c8:0e:e6:6f:d9:f6:98:d7:f3:f3:35:f2:dc:08:
                    2f:d2:fb:4e:19:31:aa:9e:0d:e4:cb:16:bd:47:d2:
                    d4:f2:0b:b7:2e:68:82:7e:c3:cd:49:7c:1c:3c:4e:
                    24:97:d8:50:c0:9a:a5:f3:57:d4:a1:cd:4e:8e:e3:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:05:2A:11:07:25:69:C2:A6:38:A9:F3:22:C6:4F:50:4F:D2:9B
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:d3:ad:23:22:da:9d:01:76:ef:32:64:66:9c:01:d2:56:21:
         c6:e2:ea:c3:ae:af:ee:07:29:3d:48:33:dd:67:db:b4:e5:df:
         c3:2d:c5:b7:48:c1:bb:af:c9:84:01:03:49:96:22:60:cf:7f:
         91:36:17:57:72:39:33:9c:26:2f:e8:21:55:c6:ef:ae:77:21:
         57:60:e6:29:f1:33:c4:a4:10:48:97:40:26:36:f3:81:ae:79:
         d1:0e:bc:d8:17:aa:6c:43:2a:83:c6:b7:6d:96:4e:f6:f3:20:
         28:18:63:f4:48:74:d2:ae:15:37:9a:c5:0e:3d:11:ee:18:30:
         46:04:f2:15:af:d1:cb:ef:78:9f:2a:6f:80:24:ce:dc:11:e1:
         c1:14:71:1d:55:06:18:f9:c7:7f:03:93:9a:d6:af:cf:8d:78:
         29:b8:d1:ee:8e:ba:df:05:3d:2a:f9:12:c3:9d:ca:37:ec:b9:
         6b:57:18:bd:5a:cd:f2:f6:52:68:fb:86:80:6c:11:e9:45:07:
         b2:37:0b:f5:a6:74:02:b0:4c:e9:f2:ae:21:a9:17:bb:34:31:
         35:59:65:18:4e:d6:13:39:9b:57:df:f3:8f:4e:65:e6:09:d6:
         9e:6c:96:88:5b:7f:01:67:64:93:2a:c4:c0:f7:68:68:3d:56:
         cb:44:ea:ce
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUZ9BLcPB2ENvcKU41bfC2RanAfaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFNjI3MjlCN0MyRjY3NUNCQjYxNjgxNUNCQTI5MkE3
OThCRUI0QjAeFw0yNTAzMDYxNjExMzRaFw0yNjAzMDUxNjE2MzRaMDMxMTAvBgNV
BAMTKEYzQTkwNTJBMTEwNzI1NjlDMkE2MzhBOUYzMjJDNjRGNTA0RkQyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15iOcxlMFY9dALHSpAZFvSt76
RH2qF7lAbItTJUdsYEgjavDc8OtvY/oHCgjEJgJe/btqMq4hDl7bONnEwjPjt/2b
6ksc5bq0qPRL+dNeDlQV0/UATeW2P3dLPy7KGoJA0o/sh9BsAaROeISTAH1VBFyP
Ry5Y6Wrp9I55K79+OT3KO4VGqD+VP66hUQS7wOkVUcMFbW5zN1OD4Ib0vFGR+YbK
E8304PtLEF9Dx0UX2zSUwxSrBllsjhyrleYmDHodNRnIDuZv2faY1/PzNfLcCC/S
+04ZMaqeDeTLFr1H0tTyC7cuaIJ+w81JfBw8TiSX2FDAmqXzV9ShzU6O44FhAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU86kFKhEHJWnCpjip8yLGT1BP0pswHwYDVR0j
BBgwFoAUreYnKbfC9nXLthaBXLopKnmL60swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMS9BREU2MjcyOUI3QzJGNjc1Q0JCNjE2ODE1Q0JBMjkyQTc5OEJFQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERTYyNzI5QjdDMkY2NzVD
QkI2MTY4MTVDQkEyOTJBNzk4QkVCNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzEv
MzIzODMwMzQzYTMxMzMzMzM4M2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEEzgABDANBgkqhkiG9w0BAQsFAAOCAQEA
u9OtIyLanQF27zJkZpwB0lYhxuLqw66v7gcpPUgz3WfbtOXfwy3Ft0jBu6/JhAED
SZYiYM9/kTYXV3I5M5wmL+ghVcbvrnchV2DmKfEzxKQQSJdAJjbzga550Q682Beq
bEMqg8a3bZZO9vMgKBhj9Eh00q4VN5rFDj0R7hgwRgTyFa/Ry+94nypvgCTO3BHh
wRRxHVUGGPnHfwOTmtavz414KbjR7o663wU9KvkSw53KN+y5a1cYvVrN8vZSaPuG
gGwR6UUHsjcL9aZ0ArBM6fKuIakXuzQxNVllGE7WEzmbV9/zj05l5gnWnmyWiFt/
AWdkkyrEwPdoaD1Wy0Tqzg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:07 2025 by rpki-client