Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa
File:                     323830343a376264633a3a2f33322d3438203d3e20323731343539.roa (raw, json)
Hash identifier:          YLhy70pyTQqdnxUOwI4eQ6sSNZqinMU/Bn7j02aG240=
Subject key identifier:   65:24:AF:F7:D4:57:D2:95:13:EC:B3:36:FC:79:24:DC:E1:AC:23:36
Certificate issuer:       /CN=9B57A6172822ADD9870A24E746B19FCFAD78E2E9
Certificate serial:       1026264E28EA39A1C33B5A857A08D0AFE9D8C71F
Authority key identifier: 9B:57:A6:17:28:22:AD:D9:87:0A:24:E7:46:B1:9F:CF:AD:78:E2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa
Signing time:             Thu 06 Mar 2025 00:51:43 +0000
ROA not before:           Thu 06 Mar 2025 00:46:43 +0000
ROA not after:            Thu 05 Mar 2026 00:51:43 +0000
asID:                     271459
IP address blocks:        2804:7bdc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:26:26:4e:28:ea:39:a1:c3:3b:5a:85:7a:08:d0:af:e9:d8:c7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B57A6172822ADD9870A24E746B19FCFAD78E2E9
        Validity
            Not Before: Mar  6 00:46:43 2025 GMT
            Not After : Mar  5 00:51:43 2026 GMT
        Subject: CN=6524AFF7D457D29513ECB336FC7924DCE1AC2336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cf:f9:6f:f5:ec:50:94:80:a9:59:f8:f2:25:
                    eb:c6:dc:90:73:a6:71:52:ff:ca:67:df:2e:9d:5b:
                    8d:d6:24:56:53:68:04:3b:51:d7:b0:f1:7d:8e:1a:
                    18:71:17:31:4c:ff:65:ec:d3:3f:76:c8:ac:85:95:
                    40:ae:10:24:89:11:ec:a4:37:30:9f:a1:4d:06:b0:
                    07:72:40:4d:ea:ff:24:4b:29:b7:46:16:08:ee:c7:
                    90:38:93:46:a9:ff:44:5c:61:d1:c5:47:bd:aa:5b:
                    54:53:33:e6:e6:23:63:9a:0b:52:37:3c:54:ff:88:
                    9f:63:07:5a:b3:1a:b4:af:59:be:a9:20:0f:cc:58:
                    7f:07:c6:b9:c4:7f:29:93:ff:5a:90:f1:dc:05:bc:
                    7f:ad:a3:32:e2:d5:74:c1:0a:37:61:02:1e:f5:13:
                    aa:7e:f2:a1:3e:35:b4:a7:8a:54:97:30:38:42:38:
                    9d:c5:c0:d7:8a:6a:c9:db:8d:c9:ca:5d:f0:ee:c1:
                    c8:19:16:d8:ec:e4:c6:00:58:19:9c:6f:f1:da:25:
                    14:41:ff:df:69:1c:0d:9c:cd:1c:18:dc:2d:06:5c:
                    e8:e4:8d:08:b0:93:8c:a3:fb:13:58:5e:9e:09:b6:
                    1a:86:2a:98:58:ef:1f:cd:f8:4e:68:09:62:09:10:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:24:AF:F7:D4:57:D2:95:13:EC:B3:36:FC:79:24:DC:E1:AC:23:36
            X509v3 Authority Key Identifier:
                keyid:9B:57:A6:17:28:22:AD:D9:87:0A:24:E7:46:B1:9F:CF:AD:78:E2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a1:03:1b:28:3d:6a:79:a7:e4:d8:b1:c5:c5:d0:7c:d5:4a:
         0d:f4:e2:12:ae:87:3c:9f:08:0c:43:77:a9:eb:05:28:48:8d:
         0a:91:ac:d0:97:81:d5:c6:f8:ac:10:93:8d:d4:22:0c:bb:e0:
         31:52:d1:a9:b3:7c:7c:88:79:19:76:0a:32:87:c6:32:2a:e9:
         f8:5b:0b:7a:68:6e:40:6b:62:4f:3e:65:ee:ad:bd:52:c1:c7:
         9c:44:e8:6e:e4:ad:37:72:06:97:fd:03:a2:1b:77:93:22:fb:
         71:61:01:d7:8b:6d:24:95:77:b2:e8:10:f0:25:69:d7:3f:3c:
         37:ee:a0:8f:b4:69:9f:bc:7b:e5:fa:fc:aa:d1:35:9b:5a:26:
         96:38:0d:48:1e:fb:32:55:08:e1:65:2f:27:f4:cc:4c:c8:f5:
         9a:69:fc:94:06:4e:a6:35:ec:e0:f4:6f:1f:16:51:80:d7:d0:
         76:98:c4:4a:ca:ca:7d:6b:62:12:f5:8a:fa:89:e1:e4:06:98:
         47:cf:c3:8c:40:40:02:b2:c6:b7:5b:4c:56:46:0a:e9:65:d5:
         a3:8e:59:67:e8:4d:0b:00:e2:73:79:1b:b1:52:da:46:e8:c3:
         b3:40:7e:93:ef:ee:50:7c:c7:1d:18:21:24:c9:40:40:7d:6a:
         98:b6:0d:9d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUECYmTijqOaHDO1qFegjQr+nYxx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI1N0E2MTcyODIyQUREOTg3MEEyNEU3NDZCMTlGQ0ZB
RDc4RTJFOTAeFw0yNTAzMDYwMDQ2NDNaFw0yNjAzMDUwMDUxNDNaMDMxMTAvBgNV
BAMTKDY1MjRBRkY3RDQ1N0QyOTUxM0VDQjMzNkZDNzkyNERDRTFBQzIzMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDez/lv9exQlICpWfjyJevG3JBz
pnFS/8pn3y6dW43WJFZTaAQ7Udew8X2OGhhxFzFM/2Xs0z92yKyFlUCuECSJEeyk
NzCfoU0GsAdyQE3q/yRLKbdGFgjux5A4k0ap/0RcYdHFR72qW1RTM+bmI2OaC1I3
PFT/iJ9jB1qzGrSvWb6pIA/MWH8HxrnEfymT/1qQ8dwFvH+tozLi1XTBCjdhAh71
E6p+8qE+NbSnilSXMDhCOJ3FwNeKasnbjcnKXfDuwcgZFtjs5MYAWBmcb/HaJRRB
/99pHA2czRwY3C0GXOjkjQiwk4yj+xNYXp4JthqGKphY7x/N+E5oCWIJEOwxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZSSv99RX0pUT7LM2/Hkk3OGsIzYwHwYDVR0j
BBgwFoAUm1emFygirdmHCiTnRrGfz6144ukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEZHcks4Um9keVlmZFpWdjJoZGFtWlB6UUY2akppYVJlWjZuTXFkWWtF
bnUvMi85QjU3QTYxNzI4MjJBREQ5ODcwQTI0RTc0NkIxOUZDRkFENzhFMkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNTdBNjE3MjgyMkFERDk4
NzBBMjRFNzQ2QjE5RkNGQUQ3OEUyRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hGR3JLOFJvZHlZZmRaVnYyaGRhbVpQelFGNmpKaWFSZVo2bk1xZFlrRW51LzIv
MzIzODMwMzQzYTM3NjI2NDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR73DANBgkqhkiG9w0BAQsFAAOCAQEAOaEDGyg9
anmn5NixxcXQfNVKDfTiEq6HPJ8IDEN3qesFKEiNCpGs0JeB1cb4rBCTjdQiDLvg
MVLRqbN8fIh5GXYKMofGMirp+FsLemhuQGtiTz5l7q29UsHHnETobuStN3IGl/0D
oht3kyL7cWEB14ttJJV3sugQ8CVp1z88N+6gj7Rpn7x75fr8qtE1m1omljgNSB77
MlUI4WUvJ/TMTMj1mmn8lAZOpjXs4PRvHxZRgNfQdpjESsrKfWtiEvWK+onh5AaY
R8/DjEBAArLGt1tMVkYK6WXVo45ZZ+hNCwDic3kbsVLaRujDs0B+k+/uUHzHHRgh
JMlAQH1qmLYNnQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:47 2025 by rpki-client