Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/323830343a366335303a3a2f33322d313238203d3e20323730343539.roa
File:                     323830343a366335303a3a2f33322d313238203d3e20323730343539.roa (raw, json)
Hash identifier:          kcLNwUoWNpycMxq6VWyWCiBe2W/MGm0nGLphNAB73l0=
Subject key identifier:   64:C8:53:57:DD:E9:E6:FC:07:A3:43:87:CE:CB:EB:C8:68:D6:DA:2C
Certificate issuer:       /CN=F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C
Certificate serial:       2A8753D26A69DF91B1523BB97EF32E38E714BF09
Authority key identifier: F9:F7:B1:CD:A4:04:47:60:11:A4:CC:28:A2:45:5A:83:B6:BB:5B:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/323830343a366335303a3a2f33322d313238203d3e20323730343539.roa
Signing time:             Tue 25 Feb 2025 21:19:30 +0000
ROA not before:           Tue 25 Feb 2025 21:14:30 +0000
ROA not after:            Tue 24 Feb 2026 21:19:30 +0000
asID:                     270459
IP address blocks:        2804:6c50::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:87:53:d2:6a:69:df:91:b1:52:3b:b9:7e:f3:2e:38:e7:14:bf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C
        Validity
            Not Before: Feb 25 21:14:30 2025 GMT
            Not After : Feb 24 21:19:30 2026 GMT
        Subject: CN=64C85357DDE9E6FC07A34387CECBEBC868D6DA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:05:74:12:66:80:be:9a:bb:02:bf:c3:87:
                    c9:b0:5f:e4:e8:9a:b2:3d:06:0d:9c:4d:e0:05:70:
                    77:15:1a:8c:0a:91:bb:6b:39:2d:4d:31:db:39:45:
                    33:f5:e4:75:64:42:87:38:0a:1c:61:e6:3e:78:e8:
                    9c:a5:b1:79:c0:27:1d:06:06:84:5a:94:c4:42:84:
                    ab:e4:5a:62:06:f9:2a:19:b2:4e:44:34:4b:80:71:
                    f1:51:18:77:43:2e:19:d6:de:70:27:2d:9c:dd:35:
                    5c:76:52:78:81:08:49:30:02:bf:74:10:3f:5b:2b:
                    af:14:78:ce:51:0c:e6:de:b3:2c:27:71:e4:6c:d3:
                    8f:a4:a4:10:7b:53:2a:40:a0:28:51:73:72:07:b2:
                    0d:b6:7d:ac:2e:f2:7d:1d:73:21:50:08:52:ce:69:
                    4a:41:2f:3b:1e:3f:4d:ec:25:ea:b0:49:eb:df:90:
                    d1:69:a8:41:c6:87:40:83:79:2f:6e:37:db:be:26:
                    b3:79:98:f4:7a:ef:d5:26:e5:25:d8:11:ce:a0:6f:
                    01:72:18:ef:49:47:fd:96:13:cd:0c:22:ce:ed:ed:
                    62:c4:c4:78:e2:2f:97:57:d5:37:04:1c:db:be:3a:
                    5d:db:db:bb:8f:d4:22:e9:e3:d3:f1:7b:eb:d8:14:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C8:53:57:DD:E9:E6:FC:07:A3:43:87:CE:CB:EB:C8:68:D6:DA:2C
            X509v3 Authority Key Identifier:
                keyid:F9:F7:B1:CD:A4:04:47:60:11:A4:CC:28:A2:45:5A:83:B6:BB:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/323830343a366335303a3a2f33322d313238203d3e20323730343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:84:06:38:18:99:75:d1:6b:18:fd:da:ad:17:21:4c:14:94:
         1b:63:b0:42:55:d5:bb:03:b9:8c:a7:04:cb:6a:a2:9c:4d:4f:
         dd:77:2d:59:26:cb:bd:9d:cb:4c:9b:61:ba:72:15:1e:3d:59:
         60:a0:c9:7b:3b:e7:a6:15:e8:15:84:33:fd:e3:46:ed:55:f1:
         92:00:f1:9e:af:53:ab:f7:30:a5:97:fc:ae:0a:2e:37:42:e1:
         e2:6c:e5:4e:08:c3:1e:6d:fd:2e:b3:27:9d:7d:3d:42:b8:d3:
         46:9c:55:2a:c4:f0:c4:ee:64:b6:8a:e8:09:e5:2d:b9:32:db:
         9d:53:f6:e8:82:42:c9:ca:c2:64:e6:80:6c:68:25:4a:34:e5:
         9a:55:0e:4b:f3:1f:a2:1b:e9:33:93:f9:06:40:79:6d:04:34:
         fd:12:62:fc:74:34:a0:b1:3c:54:c9:79:72:e9:f2:c4:fc:1c:
         c3:70:3d:ef:48:53:7c:1d:49:71:2f:e3:0c:94:9c:58:84:8f:
         01:46:cf:3e:6d:5b:22:de:1f:c0:3b:54:8f:29:32:94:df:82:
         27:2e:0c:46:37:16:60:ed:f1:23:0d:e6:89:b6:cc:3f:9a:83:
         5e:f2:ab:00:80:8e:bd:1f:47:65:68:68:7e:c4:85:1f:cb:17:
         29:d5:c5:2e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKodT0mpp35GxUju5fvMuOOcUvwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGN0IxQ0RBNDA0NDc2MDExQTRDQzI4QTI0NTVBODNC
NkJCNUI2QzAeFw0yNTAyMjUyMTE0MzBaFw0yNjAyMjQyMTE5MzBaMDMxMTAvBgNV
BAMTKDY0Qzg1MzU3RERFOUU2RkMwN0EzNDM4N0NFQ0JFQkM4NjhENkRBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnMgV0EmaAvpq7Ar/Dh8mwX+To
mrI9Bg2cTeAFcHcVGowKkbtrOS1NMds5RTP15HVkQoc4Chxh5j546JylsXnAJx0G
BoRalMRChKvkWmIG+SoZsk5ENEuAcfFRGHdDLhnW3nAnLZzdNVx2UniBCEkwAr90
ED9bK68UeM5RDObesywnceRs04+kpBB7UypAoChRc3IHsg22fawu8n0dcyFQCFLO
aUpBLzseP03sJeqwSevfkNFpqEHGh0CDeS9uN9u+JrN5mPR679Um5SXYEc6gbwFy
GO9JR/2WE80MIs7t7WLExHjiL5dX1TcEHNu+Ol3b27uP1CLp49Pxe+vYFG3LAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUZMhTV93p5vwHo0OHzsvryGjW2iwwHwYDVR0j
BBgwFoAU+fexzaQER2ARpMwookVag7a7W2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExHRXdYTVo1U3hESzViWldFMlY3YlFSNmR6UWF4dFdZNjF5dTI2Z3N5
TVUvMC9GOUY3QjFDREE0MDQ0NzYwMTFBNENDMjhBMjQ1NUE4M0I2QkI1QjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RjdCMUNEQTQwNDQ3NjAx
MUE0Q0MyOEEyNDU1QTgzQjZCQjVCNkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMR0V3WE1aNVN4REs1YlpXRTJWN2JRUjZkelFheHRXWTYxeXUyNmdzeU1VLzAv
MzIzODMwMzQzYTM2NjMzNTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGxQMA0GCSqGSIb3DQEBCwUAA4IBAQAchAY4
GJl10WsY/dqtFyFMFJQbY7BCVdW7A7mMpwTLaqKcTU/ddy1ZJsu9nctMm2G6chUe
PVlgoMl7O+emFegVhDP940btVfGSAPGer1Or9zCll/yuCi43QuHibOVOCMMebf0u
syedfT1CuNNGnFUqxPDE7mS2iugJ5S25MtudU/bogkLJysJk5oBsaCVKNOWaVQ5L
8x+iG+kzk/kGQHltBDT9EmL8dDSgsTxUyXly6fLE/BzDcD3vSFN8HUlxL+MMlJxY
hI8BRs8+bVsi3h/AO1SPKTKU34InLgxGNxZg7fEjDeaJtsw/moNe8qsAgI69H0dl
aGh+xIUfyxcp1cUu
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:33:46 2025 by rpki-client