Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/323830343a313136383a3a2f33322d313238203d3e203532393034.roa
File:                     323830343a313136383a3a2f33322d313238203d3e203532393034.roa (raw, json)
Hash identifier:          noKRj1Eb47X30XeivmJwMyI/NGeWMDCIBPtcYmudZ0k=
Subject key identifier:   A3:1F:5C:24:FB:63:5F:4E:60:C3:0B:32:00:17:BF:CF:EB:45:05:86
Certificate issuer:       /CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C
Certificate serial:       16517975DF642E59937D451DEAB4874BFF4776AC
Authority key identifier: 5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/323830343a313136383a3a2f33322d313238203d3e203532393034.roa
Signing time:             Wed 05 Mar 2025 19:48:20 +0000
ROA not before:           Wed 05 Mar 2025 19:43:20 +0000
ROA not after:            Wed 04 Mar 2026 19:48:20 +0000
asID:                     52904
IP address blocks:        2804:1168::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:51:79:75:df:64:2e:59:93:7d:45:1d:ea:b4:87:4b:ff:47:76:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C
        Validity
            Not Before: Mar  5 19:43:20 2025 GMT
            Not After : Mar  4 19:48:20 2026 GMT
        Subject: CN=A31F5C24FB635F4E60C30B320017BFCFEB450586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:2d:ff:bb:54:88:63:56:9a:38:b5:27:99:
                    3b:c8:cd:ad:56:25:ab:c1:5a:3c:8d:92:ec:43:8f:
                    a3:a0:c3:94:1e:63:e7:c6:74:4c:4c:f3:a3:ba:e7:
                    8f:3b:da:a5:c7:dc:de:97:f0:f5:2f:4e:7e:f7:35:
                    dd:07:70:fe:80:81:cc:10:66:b0:e2:17:91:74:ae:
                    ac:b1:20:3c:46:bb:38:64:1f:f7:e1:00:c0:84:f6:
                    7b:d3:30:a6:ba:df:00:b5:10:20:52:e0:6e:1b:26:
                    78:50:11:e5:21:9e:3d:e8:2e:49:5f:5b:76:b1:98:
                    2f:1e:be:62:48:a2:b9:72:6d:f3:9e:51:39:7e:ad:
                    7d:e8:e4:74:56:7f:9e:af:1f:8a:9e:9f:fa:db:9c:
                    02:bd:01:98:28:a7:ca:b1:ff:6a:b5:80:01:83:ed:
                    6b:4a:30:1d:8c:e9:fa:1f:ef:de:5c:19:88:d6:9e:
                    2e:a0:d8:89:4f:75:ad:2d:19:b5:d6:6c:68:5f:42:
                    e0:1f:aa:98:91:83:f2:bf:37:7d:b9:fe:2c:62:2e:
                    52:9f:11:02:93:b2:2f:90:69:4e:27:15:72:16:ba:
                    a2:50:a4:bf:2f:fe:3e:af:b6:d0:58:32:d4:35:3e:
                    9e:8b:23:3f:8b:60:aa:b6:79:a1:bf:b2:88:73:09:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1F:5C:24:FB:63:5F:4E:60:C3:0B:32:00:17:BF:CF:EB:45:05:86
            X509v3 Authority Key Identifier:
                keyid:5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/323830343a313136383a3a2f33322d313238203d3e203532393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1168::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:1f:8f:1e:9d:da:ac:11:bc:fd:0b:0b:5b:e0:d7:91:2b:84:
         72:85:ee:75:f1:db:0c:0d:e6:ff:ca:5d:cb:a6:28:26:2d:58:
         4a:38:70:93:b4:7c:90:35:a6:1b:db:c1:9e:cd:6c:23:af:b7:
         c4:7c:d3:1b:cf:8c:17:0d:24:88:b9:18:9e:c8:37:95:89:84:
         19:6c:0e:7e:2e:a0:75:ac:08:65:ce:71:8c:67:fa:7c:c7:cd:
         e2:3f:a4:eb:c4:63:29:61:e2:0d:b1:2f:90:2d:ad:1a:4d:8e:
         f0:55:b5:72:52:e2:d8:98:12:6d:a5:8a:92:81:e9:f9:fb:d7:
         79:e2:63:da:28:33:17:6a:87:7e:1e:b5:50:c0:b1:4a:a1:db:
         e5:cf:3d:35:e8:28:cf:d8:eb:a2:6c:b4:4a:8b:5d:81:4d:48:
         f1:4b:fd:d6:9b:8c:a7:2f:8c:c6:b3:b3:4b:fe:2b:b5:8f:65:
         fd:0a:db:a8:d4:3c:bd:ea:5b:19:db:28:a7:00:f9:89:11:36:
         fc:3f:f3:a1:da:39:90:f2:76:ac:6c:d1:7b:d5:cb:82:19:4a:
         a0:b4:74:26:bf:f5:26:50:b9:ee:46:32:28:7e:03:0a:97:59:
         b0:54:0d:e1:43:c5:ff:d0:a8:ec:eb:e7:6b:c6:96:a0:d8:9c:
         b0:c3:83:68
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFlF5dd9kLlmTfUUd6rSHS/9HdqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBOTJEMDgyQUQ4QkRFMkU2QkZCNzkwREEzRjMzMjU5
QUQ1M0YwQzAeFw0yNTAzMDUxOTQzMjBaFw0yNjAzMDQxOTQ4MjBaMDMxMTAvBgNV
BAMTKEEzMUY1QzI0RkI2MzVGNEU2MEMzMEIzMjAwMTdCRkNGRUI0NTA1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3JC3/u1SIY1aaOLUnmTvIza1W
JavBWjyNkuxDj6Ogw5QeY+fGdExM86O654872qXH3N6X8PUvTn73Nd0HcP6AgcwQ
ZrDiF5F0rqyxIDxGuzhkH/fhAMCE9nvTMKa63wC1ECBS4G4bJnhQEeUhnj3oLklf
W3axmC8evmJIorlybfOeUTl+rX3o5HRWf56vH4qen/rbnAK9AZgop8qx/2q1gAGD
7WtKMB2M6fof795cGYjWni6g2IlPda0tGbXWbGhfQuAfqpiRg/K/N325/ixiLlKf
EQKTsi+QaU4nFXIWuqJQpL8v/j6vttBYMtQ1Pp6LIz+LYKq2eaG/sohzCUEXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUox9cJPtjX05gwwsyABe/z+tFBYYwHwYDVR0j
BBgwFoAUX6ktCCrYveLmv7eQ2j8zJZrVPwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZjTWszV3c2SmMyTHFoYk5mbmpuVjFad1piRHltZzNGeXhVb0pOUVJI
QXQvMS81RkE5MkQwODJBRDhCREUyRTZCRkI3OTBEQTNGMzMyNTlBRDUzRjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTkyRDA4MkFEOEJERTJF
NkJGQjc5MERBM0YzMzI1OUFENTNGMEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2Y01rM1d3NkpjMkxxaGJOZm5qblYxWndaYkR5bWczRnl4VW9KTlFSSEF0LzEv
MzIzODMwMzQzYTMxMzEzNjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy
MzkzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQRaDANBgkqhkiG9w0BAQsFAAOCAQEAER+PHp3a
rBG8/QsLW+DXkSuEcoXudfHbDA3m/8pdy6YoJi1YSjhwk7R8kDWmG9vBns1sI6+3
xHzTG8+MFw0kiLkYnsg3lYmEGWwOfi6gdawIZc5xjGf6fMfN4j+k68RjKWHiDbEv
kC2tGk2O8FW1clLi2JgSbaWKkoHp+fvXeeJj2igzF2qHfh61UMCxSqHb5c89Nego
z9jromy0SotdgU1I8Uv91puMpy+MxrOzS/4rtY9l/QrbqNQ8vepbGdsopwD5iRE2
/D/zodo5kPJ2rGzRe9XLghlKoLR0Jr/1JlC57kYyKH4DCpdZsFQN4UPF/9Co7Ovn
a8aWoNicsMODaA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:32:20 2025 by rpki-client