Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a333031663a3a2f34382d3438203d3e20323635323639.roa
File:                     323830343a326434303a333031663a3a2f34382d3438203d3e20323635323639.roa (raw, json)
Hash identifier:          6L4aPGz8s8DVa6rfLU+h1T/giACzJg6/Cy21tMsX5Sg=
Subject key identifier:   63:FF:65:60:1C:AA:66:AC:B2:60:05:CB:6D:0C:4C:98:48:3B:B0:5C
Certificate issuer:       /CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Certificate serial:       270277FA1750AC0220F814B123024ADD54BD2DFA
Authority key identifier: C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a333031663a3a2f34382d3438203d3e20323635323639.roa
Signing time:             Tue 28 Jan 2025 12:07:59 +0000
ROA not before:           Tue 28 Jan 2025 12:02:59 +0000
ROA not after:            Tue 27 Jan 2026 12:07:59 +0000
asID:                     265269
IP address blocks:        2804:2d40:301f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:02:77:fa:17:50:ac:02:20:f8:14:b1:23:02:4a:dd:54:bd:2d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
        Validity
            Not Before: Jan 28 12:02:59 2025 GMT
            Not After : Jan 27 12:07:59 2026 GMT
        Subject: CN=63FF65601CAA66ACB26005CB6D0C4C98483BB05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:8d:ad:db:ea:7b:41:02:cc:4a:c3:37:2e:
                    8c:91:ff:2c:f1:b4:49:c1:77:b0:ff:42:e7:7a:80:
                    93:6e:7a:f6:1b:5b:2e:3d:28:cd:61:a6:a8:14:56:
                    c2:71:17:b7:2e:41:b4:41:64:af:28:30:64:89:a8:
                    a1:86:0e:e2:85:16:cd:79:f5:e0:82:d4:6b:1e:3a:
                    8c:4b:1c:88:ff:8f:04:82:47:65:43:8d:5a:03:6f:
                    c0:78:96:d3:5d:64:72:81:08:6c:e9:49:64:cb:a4:
                    5f:92:f0:68:79:cf:74:7d:d9:13:21:35:8f:27:d1:
                    eb:3f:ec:4e:91:74:a7:81:19:43:95:bc:c1:9f:fb:
                    e5:88:75:38:a9:95:77:c6:12:5e:9a:d0:59:cb:6e:
                    ef:c2:4c:c3:9a:ed:20:5c:61:22:29:05:39:43:1f:
                    8c:83:f4:9b:a2:2a:2e:f0:93:e8:2e:06:b1:ab:3b:
                    b8:15:1c:61:4c:9c:bf:d0:75:14:8d:a4:17:65:b9:
                    33:61:3f:cd:c0:79:3d:36:b0:c2:10:8e:e0:29:7a:
                    10:8f:82:e0:88:30:e6:ad:d3:19:7d:a5:90:63:9c:
                    88:6d:28:32:0e:b6:39:89:27:da:32:08:7b:7e:d7:
                    2c:60:6e:e1:b2:2a:24:61:49:35:2e:04:e6:07:59:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FF:65:60:1C:AA:66:AC:B2:60:05:CB:6D:0C:4C:98:48:3B:B0:5C
            X509v3 Authority Key Identifier:
                keyid:C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a333031663a3a2f34382d3438203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d40:301f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:a1:30:1b:65:66:97:a0:04:01:e0:dd:12:28:3f:9d:01:
         0a:9b:42:03:59:e6:93:4c:30:b5:3e:25:39:26:c0:f9:a6:77:
         12:7b:a7:6e:fd:68:4b:54:4a:24:33:e3:05:97:0f:27:c4:58:
         f4:30:9b:6c:95:5a:6e:18:81:e8:73:88:6a:d3:3e:cc:ea:73:
         c5:e0:2b:35:83:6e:cd:70:e5:40:32:fb:c0:60:ee:33:74:97:
         cd:4e:7b:a1:13:6a:ff:5c:90:e1:9a:98:7f:13:93:90:48:03:
         b7:9b:83:a2:1f:09:f8:87:28:98:a8:76:8d:e0:ff:31:57:b5:
         46:e4:21:54:df:41:4b:f8:40:50:3f:6c:db:77:97:8a:66:10:
         75:6a:24:ba:4b:8d:6d:a4:3a:a6:85:59:72:e4:45:3d:1a:14:
         98:63:eb:c2:f4:8f:12:9f:c5:6d:62:76:b2:6f:12:47:57:dc:
         0c:ad:17:b4:5c:b5:58:1f:67:d0:5f:78:76:07:fb:e3:f4:b3:
         b7:57:cf:f7:7c:07:ad:c4:29:4a:e5:89:a0:d0:25:bc:65:a3:
         4f:e3:eb:47:61:67:72:cc:33:21:dc:d2:da:c3:58:8a:8c:23:
         03:dc:69:b4:37:9d:aa:2d:f6:ff:94:53:35:b8:69:c2:49:dc:
         de:5f:f7:33
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUJwJ3+hdQrAIg+BSxIwJK3VS9LfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzExQUE5QTdBNTM4QzIyQTAyNThFNzRERUJFMzJGNUI2
NjI4RTE4NjAeFw0yNTAxMjgxMjAyNTlaFw0yNjAxMjcxMjA3NTlaMDMxMTAvBgNV
BAMTKDYzRkY2NTYwMUNBQTY2QUNCMjYwMDVDQjZEMEM0Qzk4NDgzQkIwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySY2t2+p7QQLMSsM3LoyR/yzx
tEnBd7D/Qud6gJNuevYbWy49KM1hpqgUVsJxF7cuQbRBZK8oMGSJqKGGDuKFFs15
9eCC1GseOoxLHIj/jwSCR2VDjVoDb8B4ltNdZHKBCGzpSWTLpF+S8Gh5z3R92RMh
NY8n0es/7E6RdKeBGUOVvMGf++WIdTiplXfGEl6a0FnLbu/CTMOa7SBcYSIpBTlD
H4yD9JuiKi7wk+guBrGrO7gVHGFMnL/QdRSNpBdluTNhP83AeT02sMIQjuApehCP
guCIMOat0xl9pZBjnIhtKDIOtjmJJ9oyCHt+1yxgbuGyKiRhSTUuBOYHWfdRAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUY/9lYByqZqyyYAXLbQxMmEg7sFwwHwYDVR0j
BBgwFoAUwRqpp6U4wioCWOdN6+MvW2Yo4YYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3JuSHFmcWt4SldNbmIxZWFpNGFxa3JHczVrS1NEaWpmYXBuSk11Mlhv
THcvMC9DMTFBQTlBN0E1MzhDMjJBMDI1OEU3NERFQkUzMkY1QjY2MjhFMTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUFBOUE3QTUzOEMyMkEw
MjU4RTc0REVCRTMyRjVCNjYyOEUxODYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dybkhxZnFreEpXTW5iMWVhaTRhcWtyR3M1a0tTRGlqZmFwbkpNdTJYb0x3LzAv
MzIzODMwMzQzYTMyNjQzNDMwM2EzMzMwMzE2NjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNTMyMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgELUAwHzANBgkqhkiG9w0BAQsF
AAOCAQEAoU+hMBtlZpegBAHg3RIoP50BCptCA1nmk0wwtT4lOSbA+aZ3Enunbv1o
S1RKJDPjBZcPJ8RY9DCbbJVabhiB6HOIatM+zOpzxeArNYNuzXDlQDL7wGDuM3SX
zU57oRNq/1yQ4ZqYfxOTkEgDt5uDoh8J+IcomKh2jeD/MVe1RuQhVN9BS/hAUD9s
23eXimYQdWokukuNbaQ6poVZcuRFPRoUmGPrwvSPEp/FbWJ2sm8SR1fcDK0XtFy1
WB9n0F94dgf74/Szt1fP93wHrcQpSuWJoNAlvGWjT+PrR2FncswzIdzS2sNYiowj
A9xptDedqi32/5RTNbhpwknc3l/3Mw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:46 2025 by rpki-client