Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/323830343a343539383a666630303a3a2f34302d3430203d3e20323636393337.roa
File:                     323830343a343539383a666630303a3a2f34302d3430203d3e20323636393337.roa (raw, json)
Hash identifier:          pWUwwniiTmG08zWsTtJ2hdHenqgY8T+IQK0m0y5pm6s=
Subject key identifier:   59:F6:13:AD:B2:CF:1E:08:32:17:22:F3:2E:1D:28:52:81:08:B4:E7
Certificate issuer:       /CN=97764746EEB9C90039CB4860CD2FF43664361E0C
Certificate serial:       1FB2CC90BB185D99386700B751E75A20CCA201A3
Authority key identifier: 97:76:47:46:EE:B9:C9:00:39:CB:48:60:CD:2F:F4:36:64:36:1E:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97764746EEB9C90039CB4860CD2FF43664361E0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/323830343a343539383a666630303a3a2f34302d3430203d3e20323636393337.roa
Signing time:             Tue 11 Feb 2025 15:15:15 +0000
ROA not before:           Tue 11 Feb 2025 15:10:15 +0000
ROA not after:            Tue 10 Feb 2026 15:15:15 +0000
asID:                     266937
IP address blocks:        2804:4598:ff00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b2:cc:90:bb:18:5d:99:38:67:00:b7:51:e7:5a:20:cc:a2:01:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97764746EEB9C90039CB4860CD2FF43664361E0C
        Validity
            Not Before: Feb 11 15:10:15 2025 GMT
            Not After : Feb 10 15:15:15 2026 GMT
        Subject: CN=59F613ADB2CF1E08321722F32E1D28528108B4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:71:a6:3a:1c:03:e0:e3:d1:8e:50:36:b5:
                    d7:6e:5f:ed:cd:14:41:66:c6:ff:c5:73:26:19:3e:
                    20:e6:85:77:eb:9d:2c:53:a0:1f:78:18:e2:9c:a2:
                    bc:8d:5c:1d:e8:0f:c6:d9:d6:26:b2:13:6b:65:78:
                    d7:22:9c:f2:02:5b:99:23:e2:f9:3d:32:66:4b:a8:
                    63:f1:c1:5a:f6:9f:75:ad:88:4e:29:3c:f1:ff:6d:
                    ad:de:1b:8d:96:57:f7:d1:83:25:91:d8:ed:6e:30:
                    c7:01:97:fc:d1:7a:12:0a:56:8e:67:54:c9:2c:a1:
                    00:37:a3:8e:3e:ce:07:ca:c5:c2:3a:5b:fc:8e:11:
                    9e:4d:7d:fa:3e:0e:33:1e:de:12:97:c1:8a:4a:54:
                    07:fc:f7:d0:90:5a:84:5c:0c:c8:d8:55:83:80:59:
                    a0:a3:d7:f0:a6:8e:08:b8:7b:4f:00:88:19:0b:e0:
                    74:10:a5:73:22:2f:b9:d9:ed:18:74:36:0a:54:21:
                    d0:a5:f1:23:bc:17:e6:55:c0:ae:29:c9:bd:7f:46:
                    d5:93:31:a1:08:4d:eb:9b:ac:0b:aa:97:f4:ac:ea:
                    03:4f:1c:ca:6b:2f:cf:be:04:36:62:00:a0:44:8d:
                    c1:61:63:bf:ce:09:5a:89:4b:bf:b1:18:6d:43:7c:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F6:13:AD:B2:CF:1E:08:32:17:22:F3:2E:1D:28:52:81:08:B4:E7
            X509v3 Authority Key Identifier:
                keyid:97:76:47:46:EE:B9:C9:00:39:CB:48:60:CD:2F:F4:36:64:36:1E:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/97764746EEB9C90039CB4860CD2FF43664361E0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97764746EEB9C90039CB4860CD2FF43664361E0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/323830343a343539383a666630303a3a2f34302d3430203d3e20323636393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4598:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:10:80:02:9d:a0:58:19:ed:d8:85:38:fa:cc:16:fd:25:cf:
         89:8f:76:c8:0c:58:8f:f7:c5:1c:f8:66:6d:08:b1:9a:b5:24:
         ab:64:5e:5e:73:ab:b6:d5:82:73:72:c8:f8:5b:95:2d:fa:e3:
         dd:cf:62:33:84:e5:48:fc:62:bf:14:e7:fe:d3:dd:1b:74:44:
         de:f0:2e:82:f3:52:c1:45:97:51:3e:9a:14:02:61:c3:8b:9e:
         b7:5a:3e:54:17:06:b7:f2:9b:9c:5a:14:6c:23:2f:bc:c7:d4:
         4a:6b:d1:86:ee:ee:97:ad:fe:ab:86:2b:9d:28:0c:1f:2b:45:
         c3:d1:50:38:ae:0c:4c:04:ad:20:b2:db:95:4c:d9:a2:9f:a3:
         68:68:a9:2f:4e:bb:c4:5a:cc:bd:20:76:ac:23:2f:4b:05:fb:
         00:32:0c:52:0a:02:cf:4d:7d:12:36:69:d6:f1:70:92:7f:50:
         d2:9a:68:b1:45:73:fc:e0:7b:9d:f6:82:1a:51:e5:36:e6:54:
         69:96:d1:e8:11:2b:df:1f:84:48:10:7a:f3:f2:64:ea:01:57:
         22:3b:c5:15:eb:11:40:f5:f5:78:12:1b:b2:69:63:f9:38:2a:
         40:d1:07:d7:d3:6b:82:19:9b:f8:2f:14:44:77:63:c7:50:07:
         aa:81:10:ad
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUH7LMkLsYXZk4ZwC3UedaIMyiAaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc3NjQ3NDZFRUI5QzkwMDM5Q0I0ODYwQ0QyRkY0MzY2
NDM2MUUwQzAeFw0yNTAyMTExNTEwMTVaFw0yNjAyMTAxNTE1MTVaMDMxMTAvBgNV
BAMTKDU5RjYxM0FEQjJDRjFFMDgzMjE3MjJGMzJFMUQyODUyODEwOEI0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5nGmOhwD4OPRjlA2tdduX+3N
FEFmxv/FcyYZPiDmhXfrnSxToB94GOKcoryNXB3oD8bZ1iayE2tleNcinPICW5kj
4vk9MmZLqGPxwVr2n3WtiE4pPPH/ba3eG42WV/fRgyWR2O1uMMcBl/zRehIKVo5n
VMksoQA3o44+zgfKxcI6W/yOEZ5Nffo+DjMe3hKXwYpKVAf899CQWoRcDMjYVYOA
WaCj1/Cmjgi4e08AiBkL4HQQpXMiL7nZ7Rh0NgpUIdCl8SO8F+ZVwK4pyb1/RtWT
MaEITeubrAuql/Ss6gNPHMprL8++BDZiAKBEjcFhY7/OCVqJS7+xGG1DfJhHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWfYTrbLPHggyFyLzLh0oUoEItOcwHwYDVR0j
BBgwFoAUl3ZHRu65yQA5y0hgzS/0NmQ2HgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3hCa21pNmI4dGI5VE1CV1JoYzZDcmhuMUI1a3lRdnRSQjFMaW5DRVZo
dUUvMC85Nzc2NDc0NkVFQjlDOTAwMzlDQjQ4NjBDRDJGRjQzNjY0MzYxRTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NzY0NzQ2RUVCOUM5MDAz
OUNCNDg2MENEMkZGNDM2NjQzNjFFMEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d4QmttaTZiOHRiOVRNQldSaGM2Q3JobjFCNWt5UXZ0UkIxTGluQ0VWaHVFLzAv
MzIzODMwMzQzYTM0MzUzOTM4M2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjM5MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgERZj/MA0GCSqGSIb3DQEBCwUA
A4IBAQB0EIACnaBYGe3YhTj6zBb9Jc+Jj3bIDFiP98Uc+GZtCLGatSSrZF5ec6u2
1YJzcsj4W5Ut+uPdz2IzhOVI/GK/FOf+090bdETe8C6C81LBRZdRPpoUAmHDi563
Wj5UFwa38pucWhRsIy+8x9RKa9GG7u6Xrf6rhiudKAwfK0XD0VA4rgxMBK0gstuV
TNmin6NoaKkvTrvEWsy9IHasIy9LBfsAMgxSCgLPTX0SNmnW8XCSf1DSmmixRXP8
4Hud9oIaUeU25lRpltHoESvfH4RIEHrz8mTqAVciO8UV6xFA9fV4EhuyaWP5OCpA
0QfX02uCGZv4LxREd2PHUAeqgRCt
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:43:15 2025 by rpki-client