Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a3a2f33322d3332203d3e20323638393430.roa
File:                     323830343a356366303a3a2f33322d3332203d3e20323638393430.roa (raw, json)
Hash identifier:          mPO2t0m/kUSrkhRA4xXZm6FTTa0YpDgFmylbdzncyjg=
Subject key identifier:   CF:FD:31:E5:59:22:14:1A:FF:3F:E0:9E:A6:D3:29:66:1B:83:AF:3A
Certificate issuer:       /CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
Certificate serial:       17C913CC4263149FD57893D5DFEC4A302D49ECC9
Authority key identifier: D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a3a2f33322d3332203d3e20323638393430.roa
Signing time:             Wed 19 Feb 2025 12:59:42 +0000
ROA not before:           Wed 19 Feb 2025 12:54:42 +0000
ROA not after:            Wed 18 Feb 2026 12:59:42 +0000
asID:                     268940
IP address blocks:        2804:5cf0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c9:13:cc:42:63:14:9f:d5:78:93:d5:df:ec:4a:30:2d:49:ec:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
        Validity
            Not Before: Feb 19 12:54:42 2025 GMT
            Not After : Feb 18 12:59:42 2026 GMT
        Subject: CN=CFFD31E55922141AFF3FE09EA6D329661B83AF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c2:09:4b:6f:8d:91:26:55:1b:81:e0:be:c8:
                    72:39:10:9b:9b:67:37:6b:58:eb:7c:47:e4:73:73:
                    56:3e:2c:7b:58:28:91:ba:8e:a8:52:ae:da:8b:58:
                    a2:f4:08:c4:66:da:32:e7:40:0e:26:19:80:76:83:
                    a6:1f:58:88:bb:75:73:7f:3e:60:99:57:9e:ba:ea:
                    10:f6:4b:6e:7f:4c:67:ac:88:a8:c1:07:21:74:2e:
                    c1:87:6d:6b:59:de:9f:71:4c:d0:0a:06:67:56:6b:
                    34:ff:a8:7d:3e:94:21:a1:cc:8d:be:21:21:d7:8a:
                    a8:73:4f:dd:93:62:27:f3:bd:55:c7:15:12:77:14:
                    c2:bf:71:d4:75:26:28:ba:f3:ea:0c:a1:2a:c9:ec:
                    4a:8f:9a:fb:90:7f:cb:28:9e:9f:ea:75:ce:0b:b4:
                    45:78:85:f5:78:66:75:4e:f4:88:53:6b:5d:79:6b:
                    6b:97:2e:12:8d:f5:bd:56:de:d8:39:cd:ef:52:31:
                    37:6e:b5:ab:e7:cd:49:7c:b9:c9:d6:db:91:88:47:
                    a1:5f:95:2f:0c:d7:9a:b2:83:8d:58:3f:cf:61:90:
                    b8:2c:08:ae:df:20:f2:2b:95:e3:6b:e1:67:6c:fb:
                    35:a9:5e:45:94:95:88:b8:51:50:bd:15:9b:87:be:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FD:31:E5:59:22:14:1A:FF:3F:E0:9E:A6:D3:29:66:1B:83:AF:3A
            X509v3 Authority Key Identifier:
                keyid:D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a3a2f33322d3332203d3e20323638393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:d1:11:14:3a:a6:20:99:45:db:f7:25:29:29:62:76:56:4b:
         cf:b2:66:78:20:a2:db:f5:64:6f:3a:28:cf:ca:a9:d2:11:96:
         79:70:83:d2:5b:bc:0b:49:57:85:ce:70:2a:db:f9:05:2f:20:
         13:c6:ee:b2:e7:74:df:3f:73:51:ca:b3:65:5a:78:dc:56:c4:
         a9:1e:f1:13:84:a4:02:4b:42:d4:e4:95:1a:53:4b:a1:3d:ae:
         65:d1:39:71:ac:66:85:74:16:11:f3:e1:f2:21:d4:f4:a9:4f:
         e1:0f:68:b2:92:02:32:4c:89:3c:57:11:d5:0c:11:84:90:d5:
         90:7c:43:6d:c6:ea:2e:ef:f0:e4:17:39:01:d9:d9:31:7b:8e:
         e2:86:63:7a:95:f0:e5:47:44:df:a7:89:50:c2:5e:ce:4f:9a:
         57:f9:0b:29:ed:c4:3e:9c:24:fe:bd:41:b5:23:3a:6b:e1:bb:
         eb:2c:47:cc:cb:42:a4:d4:fe:32:66:58:69:64:b0:cb:e6:c1:
         c7:17:62:2d:3a:7c:0c:4c:e6:53:10:13:06:b3:6e:95:26:22:
         43:e1:80:78:8e:f3:7a:a9:cb:48:0e:a1:a4:db:c8:28:dc:01:
         db:5e:5e:16:fa:d6:f2:ec:3c:72:b7:a3:41:c9:c1:bc:84:fd:
         26:25:8f:26
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUF8kTzEJjFJ/VeJPV3+xKMC1J7MkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgwMjE1NzNCOEZERENCMTUyM0MwMDZGQTgwMEE3QkFD
NUJBNDI0MDAeFw0yNTAyMTkxMjU0NDJaFw0yNjAyMTgxMjU5NDJaMDMxMTAvBgNV
BAMTKENGRkQzMUU1NTkyMjE0MUFGRjNGRTA5RUE2RDMyOTY2MUI4M0FGM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmwglLb42RJlUbgeC+yHI5EJub
ZzdrWOt8R+Rzc1Y+LHtYKJG6jqhSrtqLWKL0CMRm2jLnQA4mGYB2g6YfWIi7dXN/
PmCZV5666hD2S25/TGesiKjBByF0LsGHbWtZ3p9xTNAKBmdWazT/qH0+lCGhzI2+
ISHXiqhzT92TYifzvVXHFRJ3FMK/cdR1Jii68+oMoSrJ7EqPmvuQf8sonp/qdc4L
tEV4hfV4ZnVO9IhTa115a2uXLhKN9b1W3tg5ze9SMTdutavnzUl8ucnW25GIR6Ff
lS8M15qyg41YP89hkLgsCK7fIPIrleNr4Wds+zWpXkWUlYi4UVC9FZuHvoSrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUz/0x5VkiFBr/P+CeptMpZhuDrzowHwYDVR0j
BBgwFoAU2AIVc7j93LFSPABvqACnusW6QkAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFBKOTZ3YlJMZ3ZyRXh1UjFMYVM1ZTNOVEFyR0dNRXF0MUVQUFBFd2tX
TUIvMC9EODAyMTU3M0I4RkREQ0IxNTIzQzAwNkZBODAwQTdCQUM1QkE0MjQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4MDIxNTczQjhGRERDQjE1
MjNDMDA2RkE4MDBBN0JBQzVCQTQyNDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hQSjk2d2JSTGd2ckV4dVIxTGFTNWUzTlRBckdHTUVxdDFFUFBQRXdrV01CLzAv
MzIzODMwMzQzYTM1NjM2NjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzkzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARc8DANBgkqhkiG9w0BAQsFAAOCAQEAMtERFDqm
IJlF2/clKSlidlZLz7JmeCCi2/Vkbzooz8qp0hGWeXCD0lu8C0lXhc5wKtv5BS8g
E8busud03z9zUcqzZVp43FbEqR7xE4SkAktC1OSVGlNLoT2uZdE5caxmhXQWEfPh
8iHU9KlP4Q9ospICMkyJPFcR1QwRhJDVkHxDbcbqLu/w5Bc5AdnZMXuO4oZjepXw
5UdE36eJUMJezk+aV/kLKe3EPpwk/r1BtSM6a+G76yxHzMtCpNT+MmZYaWSwy+bB
xxdiLTp8DEzmUxATBrNulSYiQ+GAeI7zeqnLSA6hpNvIKNwB215eFvrW8uw8crej
QcnBvIT9JiWPJg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:08 2025 by rpki-client