Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa
File:                     323830343a393138383a3a2f33322d3332203d3e20323734363437.roa (raw, json)
Hash identifier:          WGLHtQ2O8hTbWh2Qj8iJZ0HmwSz1hSc3TQF5WpmRU40=
Subject key identifier:   19:39:BF:E7:1C:AC:A6:B8:CA:7A:BF:20:06:BF:8A:E4:C2:A1:08:2C
Certificate issuer:       /CN=FE39B00057FECCE0AC6B48381399AE27C177533F
Certificate serial:       1108A254DA1A18293404771C2D6D25EBEB52B36B
Authority key identifier: FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa
Signing time:             Thu 20 Mar 2025 15:06:05 +0000
ROA not before:           Thu 20 Mar 2025 15:01:05 +0000
ROA not after:            Thu 19 Mar 2026 15:06:05 +0000
asID:                     274647
IP address blocks:        2804:9188::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:08:a2:54:da:1a:18:29:34:04:77:1c:2d:6d:25:eb:eb:52:b3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE39B00057FECCE0AC6B48381399AE27C177533F
        Validity
            Not Before: Mar 20 15:01:05 2025 GMT
            Not After : Mar 19 15:06:05 2026 GMT
        Subject: CN=1939BFE71CACA6B8CA7ABF2006BF8AE4C2A1082C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:99:c8:40:d0:c3:d2:2a:da:49:0c:fa:f9:
                    13:a6:2b:da:54:36:4f:53:75:d1:98:55:65:6e:5b:
                    a9:76:2e:e5:b3:11:d5:0d:f9:44:a4:ca:50:36:de:
                    62:5c:cc:2b:80:65:46:33:45:67:36:34:ea:96:e6:
                    fd:2f:3b:7b:98:51:24:e0:0c:67:2b:a2:bf:7b:32:
                    35:ee:5e:5f:f0:d7:ab:3a:b0:14:28:67:69:ed:91:
                    cc:cd:8b:49:2e:0a:06:38:1b:9d:5f:a5:db:48:ca:
                    3f:4f:29:71:2f:60:00:1e:0f:d0:8e:ae:c0:79:a1:
                    1a:d2:21:58:0d:a4:48:8d:d1:9d:f5:10:90:f1:71:
                    9c:3c:01:60:69:88:8b:6f:68:8a:8a:7d:0b:8c:cd:
                    ca:08:15:4e:b4:e5:bf:8d:c9:4e:9b:fa:8d:ef:8c:
                    bc:04:a3:0b:b1:84:ab:78:60:f8:b2:68:b7:b4:cc:
                    84:4b:91:d7:92:21:6a:8e:fe:1d:c1:48:46:e7:56:
                    1f:5d:7d:d2:c5:dc:8f:8d:a2:e2:fa:44:ef:88:c6:
                    74:f7:99:af:1e:cd:f5:d5:36:9c:10:9b:e1:ed:ec:
                    b3:69:68:f1:bd:5e:77:e9:ce:8d:eb:22:09:30:b6:
                    6c:27:68:96:e5:41:40:b4:c7:1c:f6:32:f8:79:b9:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:39:BF:E7:1C:AC:A6:B8:CA:7A:BF:20:06:BF:8A:E4:C2:A1:08:2C
            X509v3 Authority Key Identifier:
                keyid:FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:66:8f:e8:06:95:75:1c:73:a9:48:fe:c1:b9:34:1a:40:
         3a:b4:cc:5c:a2:c3:01:e7:70:40:d4:82:01:a2:46:0b:fc:f2:
         32:17:bd:39:84:be:80:6a:fb:93:f7:a4:3e:91:a0:25:f6:9c:
         ab:1e:79:23:45:94:e4:01:8f:06:c4:47:be:70:3a:de:13:01:
         4f:f8:3e:44:ea:65:4d:c5:33:54:ac:ad:06:4f:ed:22:c7:ec:
         15:fb:2d:c1:32:de:2d:e3:91:b8:b5:b2:3b:2a:30:32:54:52:
         16:1f:75:8f:c4:4e:72:6a:85:c8:0e:71:5a:f6:46:0a:58:a3:
         6f:6c:69:6f:01:77:78:a6:01:87:f2:b9:8b:62:57:c1:8d:10:
         fc:08:a7:e3:45:5d:0c:05:18:c0:97:e8:56:68:58:85:52:cd:
         c5:cd:d2:79:7c:de:37:fd:06:9b:b4:99:84:70:8f:0d:11:cc:
         fb:a0:f8:5f:0d:82:a6:1e:88:b3:3a:d2:01:d2:96:9f:9c:1c:
         48:44:a8:b3:d1:ad:77:ca:40:12:d4:96:a3:ed:27:df:e6:13:
         bb:33:6e:1d:8e:6a:64:84:3a:d2:ba:ca:15:bc:b9:10:62:1f:
         6b:b7:ec:33:35:9c:d3:ff:8c:3c:df:86:ed:c8:a3:61:0e:e2:
         2a:4c:43:70
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEQiiVNoaGCk0BHccLW0l6+tSs2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUzOUIwMDA1N0ZFQ0NFMEFDNkI0ODM4MTM5OUFFMjdD
MTc3NTMzRjAeFw0yNTAzMjAxNTAxMDVaFw0yNjAzMTkxNTA2MDVaMDMxMTAvBgNV
BAMTKDE5MzlCRkU3MUNBQ0E2QjhDQTdBQkYyMDA2QkY4QUU0QzJBMTA4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdZnIQNDD0iraSQz6+ROmK9pU
Nk9TddGYVWVuW6l2LuWzEdUN+USkylA23mJczCuAZUYzRWc2NOqW5v0vO3uYUSTg
DGcror97MjXuXl/w16s6sBQoZ2ntkczNi0kuCgY4G51fpdtIyj9PKXEvYAAeD9CO
rsB5oRrSIVgNpEiN0Z31EJDxcZw8AWBpiItvaIqKfQuMzcoIFU605b+NyU6b+o3v
jLwEowuxhKt4YPiyaLe0zIRLkdeSIWqO/h3BSEbnVh9dfdLF3I+NouL6RO+IxnT3
ma8ezfXVNpwQm+Ht7LNpaPG9Xnfpzo3rIgkwtmwnaJblQUC0xxz2Mvh5uWjRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGTm/5xysprjKer8gBr+K5MKhCCwwHwYDVR0j
BBgwFoAU/jmwAFf+zOCsa0g4E5muJ8F3Uz8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSENHTXJESjViRkFZVEw2bk1rVHREYzFKdmZnd3l0WmN3ck1SbjFrclJ6
akcvMC9GRTM5QjAwMDU3RkVDQ0UwQUM2QjQ4MzgxMzk5QUUyN0MxNzc1MzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMzlCMDAwNTdGRUNDRTBB
QzZCNDgzODEzOTlBRTI3QzE3NzUzM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDR01yREo1YkZBWVRMNm5Na1R0RGMxSnZmZ3d5dFpjd3JNUm4xa3JSempHLzAv
MzIzODMwMzQzYTM5MzEzODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0
MzYzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASRiDANBgkqhkiG9w0BAQsFAAOCAQEATRJmj+gG
lXUcc6lI/sG5NBpAOrTMXKLDAedwQNSCAaJGC/zyMhe9OYS+gGr7k/ekPpGgJfac
qx55I0WU5AGPBsRHvnA63hMBT/g+ROplTcUzVKytBk/tIsfsFfstwTLeLeORuLWy
OyowMlRSFh91j8ROcmqFyA5xWvZGClijb2xpbwF3eKYBh/K5i2JXwY0Q/Ain40Vd
DAUYwJfoVmhYhVLNxc3SeXzeN/0Gm7SZhHCPDRHM+6D4Xw2Cph6IszrSAdKWn5wc
SESos9Gtd8pAEtSWo+0n3+YTuzNuHY5qZIQ60rrKFby5EGIfa7fsMzWc0/+MPN+G
7cijYQ7iKkxDcA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:58:15 2025 by rpki-client