Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a343062303a3a2f33322d313238203d3e20323635393735.roa
File:                     323830343a343062303a3a2f33322d313238203d3e20323635393735.roa (raw, json)
Hash identifier:          1V0p22hZM7jjt+stuY2FSH6BaOV4pkNmgT14Gc4rIr4=
Subject key identifier:   EF:F7:D3:37:4B:65:59:25:8D:2C:F2:65:26:7E:72:8D:6B:8F:16:0C
Certificate issuer:       /CN=D123858020F0224957058CA805488D517D88F47A
Certificate serial:       227D7956A5F8395A10A44ACD73D31245DA71F788
Authority key identifier: D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a343062303a3a2f33322d313238203d3e20323635393735.roa
Signing time:             Wed 05 Mar 2025 18:34:18 +0000
ROA not before:           Wed 05 Mar 2025 18:29:18 +0000
ROA not after:            Wed 04 Mar 2026 18:34:18 +0000
asID:                     265975
IP address blocks:        2804:40b0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7d:79:56:a5:f8:39:5a:10:a4:4a:cd:73:d3:12:45:da:71:f7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D123858020F0224957058CA805488D517D88F47A
        Validity
            Not Before: Mar  5 18:29:18 2025 GMT
            Not After : Mar  4 18:34:18 2026 GMT
        Subject: CN=EFF7D3374B6559258D2CF265267E728D6B8F160C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:13:6e:35:7c:28:03:b1:3b:12:62:08:39:
                    81:63:10:da:e0:83:86:5c:0d:f7:bb:52:7b:21:71:
                    eb:fa:79:c3:1a:43:4a:dd:2f:f0:4a:f4:c6:02:be:
                    6d:4d:b2:5d:23:7b:e5:a0:01:86:b1:a2:ab:d9:c6:
                    dc:e4:09:ad:76:58:fc:d5:81:c1:4b:b1:66:09:15:
                    b6:12:f3:96:bc:35:d8:f7:35:d1:0f:8d:18:87:88:
                    d6:e3:c1:41:32:12:77:f2:39:80:e5:6c:47:18:d0:
                    c6:4c:6e:b5:13:32:45:e3:13:70:05:ec:98:10:db:
                    3a:67:52:20:4b:22:ac:e3:08:cd:68:14:b1:69:e6:
                    a3:07:07:0d:63:b9:c1:00:e8:f4:c4:39:8e:c1:af:
                    8b:12:73:ad:8d:2e:7d:09:08:dd:4a:76:52:56:08:
                    b7:9c:5f:72:44:5a:9c:b8:26:7b:48:8e:14:cc:9f:
                    07:67:f7:65:5b:47:9a:03:e1:7a:71:da:60:1c:dc:
                    c9:af:5c:d3:cf:db:53:6e:4e:36:a2:46:80:f9:db:
                    42:5d:36:9a:bd:22:c3:ee:2a:e6:97:f4:de:d5:6d:
                    c8:28:62:0e:26:b5:73:2a:d0:3c:0d:f2:ae:8e:f0:
                    6c:4f:df:3f:7a:a2:30:c3:c1:40:6e:7a:31:91:e6:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F7:D3:37:4B:65:59:25:8D:2C:F2:65:26:7E:72:8D:6B:8F:16:0C
            X509v3 Authority Key Identifier:
                keyid:D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a343062303a3a2f33322d313238203d3e20323635393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:b7:86:b0:80:54:e4:c5:5f:1f:3e:81:61:79:4f:06:74:bb:
         fd:21:ce:11:03:1d:ad:59:3e:1e:84:00:16:f1:5d:ef:5e:bf:
         a3:31:85:0d:3b:dd:93:74:e0:d2:24:5c:14:71:5d:bc:15:9c:
         e8:8d:ed:7a:c2:0b:72:d4:06:a8:bf:de:02:bc:d6:6a:01:2e:
         b8:8c:96:1c:cf:07:83:cb:44:23:f3:d6:58:21:9f:5d:4e:2c:
         8f:e5:f4:03:21:f8:1a:c3:4c:c6:3a:a7:b3:fc:23:60:59:10:
         5f:40:f2:4c:3f:48:3d:d1:cb:90:a2:4b:94:9c:87:36:b5:dd:
         0b:56:b9:fd:77:61:86:a3:4f:c5:d0:bd:f8:4e:3f:c9:a3:af:
         7f:36:28:fd:e9:68:5b:b1:e4:d7:32:13:07:2f:2b:82:76:4f:
         f6:4d:2d:2b:4b:4d:c7:65:1f:ec:ba:0b:95:22:20:01:39:ed:
         b1:70:3d:28:8c:f6:17:59:47:ed:9d:09:09:21:90:21:03:b2:
         ff:6b:cb:4c:51:d7:21:01:54:dc:85:5e:89:d2:b1:ab:3c:73:
         2e:13:0b:b4:71:40:9f:68:ff:b6:52:18:ad:6e:ab:0c:a9:c5:
         f0:11:4c:92:44:82:d5:60:16:58:3a:db:85:ec:f1:1d:8c:82:
         ae:c6:ec:1e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIn15VqX4OVoQpErNc9MSRdpx94gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEyMzg1ODAyMEYwMjI0OTU3MDU4Q0E4MDU0ODhENTE3
RDg4RjQ3QTAeFw0yNTAzMDUxODI5MThaFw0yNjAzMDQxODM0MThaMDMxMTAvBgNV
BAMTKEVGRjdEMzM3NEI2NTU5MjU4RDJDRjI2NTI2N0U3MjhENkI4RjE2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0RNuNXwoA7E7EmIIOYFjENrg
g4ZcDfe7Unshcev6ecMaQ0rdL/BK9MYCvm1Nsl0je+WgAYaxoqvZxtzkCa12WPzV
gcFLsWYJFbYS85a8Ndj3NdEPjRiHiNbjwUEyEnfyOYDlbEcY0MZMbrUTMkXjE3AF
7JgQ2zpnUiBLIqzjCM1oFLFp5qMHBw1jucEA6PTEOY7Br4sSc62NLn0JCN1KdlJW
CLecX3JEWpy4JntIjhTMnwdn92VbR5oD4Xpx2mAc3MmvXNPP21NuTjaiRoD520Jd
Npq9IsPuKuaX9N7VbcgoYg4mtXMq0DwN8q6O8GxP3z96ojDDwUBuejGR5tiJAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7/fTN0tlWSWNLPJlJn5yjWuPFgwwHwYDVR0j
BBgwFoAU0SOFgCDwIklXBYyoBUiNUX2I9HowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3BWclVpaFphTHh4Z1FpMWNaOEM5c0Nja1JyYXdqVW0xUXRBN3NZNjJw
ZkYvMS9EMTIzODU4MDIwRjAyMjQ5NTcwNThDQTgwNTQ4OEQ1MTdEODhGNDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMjM4NTgwMjBGMDIyNDk1
NzA1OENBODA1NDg4RDUxN0Q4OEY0N0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwVnJVaWhaYUx4eGdRaTFjWjhDOXNDY2tScmF3alVtMVF0QTdzWTYycGZGLzEv
MzIzODMwMzQzYTM0MzA2MjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzOTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBECwMA0GCSqGSIb3DQEBCwUAA4IBAQC8t4aw
gFTkxV8fPoFheU8GdLv9Ic4RAx2tWT4ehAAW8V3vXr+jMYUNO92TdODSJFwUcV28
FZzoje16wgty1Aaov94CvNZqAS64jJYczweDy0Qj89ZYIZ9dTiyP5fQDIfgaw0zG
Oqez/CNgWRBfQPJMP0g90cuQokuUnIc2td0LVrn9d2GGo0/F0L34Tj/Jo69/Nij9
6WhbseTXMhMHLyuCdk/2TS0rS03HZR/suguVIiABOe2xcD0ojPYXWUftnQkJIZAh
A7L/a8tMUdchAVTchV6J0rGrPHMuEwu0cUCfaP+2UhitbqsMqcXwEUySRILVYBZY
OtuF7PEdjIKuxuwe
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:47:04 2025 by rpki-client