Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa
File:                     323830343a353562383a3a2f33322d313238203d3e20323637393532.roa (raw, json)
Hash identifier:          /73K3hTxHSTHeFeJurKGp4NJmSxvPNjOmRCDWd4mo9s=
Subject key identifier:   37:29:4B:13:F3:D6:5F:A1:DF:FB:8F:96:B9:07:6C:19:E3:5D:93:FA
Certificate issuer:       /CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
Certificate serial:       46A251C71BF352A03430937DD9D784D4BEF6059F
Authority key identifier: 21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa
Signing time:             Wed 11 Dec 2024 18:53:52 +0000
ROA not before:           Wed 11 Dec 2024 18:48:52 +0000
ROA not after:            Wed 10 Dec 2025 18:53:52 +0000
asID:                     267952
IP address blocks:        2804:55b8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a2:51:c7:1b:f3:52:a0:34:30:93:7d:d9:d7:84:d4:be:f6:05:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
        Validity
            Not Before: Dec 11 18:48:52 2024 GMT
            Not After : Dec 10 18:53:52 2025 GMT
        Subject: CN=37294B13F3D65FA1DFFB8F96B9076C19E35D93FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:66:54:f9:09:c2:c0:99:80:a4:1d:3e:ef:
                    a3:fc:6a:a8:27:28:62:36:2f:eb:f8:68:b2:13:15:
                    b9:af:cf:04:b1:72:82:ac:f5:5f:0d:34:8f:a7:4c:
                    7b:41:b9:e5:76:19:6e:ec:e2:22:ca:3c:5a:2a:d1:
                    b6:ad:c4:aa:f0:f4:a3:ae:fa:52:49:b0:70:37:f8:
                    9d:b5:a6:1d:25:56:c4:fc:39:28:11:8b:ca:11:8a:
                    7a:a0:0d:20:6c:44:78:55:09:75:53:0a:7e:cf:e7:
                    8d:84:fa:98:a8:e1:bd:53:1c:28:9c:07:f0:75:66:
                    64:7b:bb:78:d6:ad:a5:95:6d:99:61:7a:34:ab:47:
                    f8:c6:ae:f3:4d:ea:f4:fc:43:73:3d:41:97:10:7f:
                    54:aa:09:f1:2d:d1:f4:09:61:fd:f4:80:0f:98:fa:
                    9c:e7:d3:66:67:9b:27:14:0b:75:0f:a7:68:7d:73:
                    da:07:7e:22:e1:0a:ff:c5:3f:51:44:6a:63:4a:a4:
                    30:9d:92:5d:40:a6:91:69:f9:84:aa:83:c6:88:6e:
                    ec:84:51:10:4d:25:e2:8c:c8:ff:74:f9:25:a6:77:
                    91:2c:e2:aa:a4:9d:5a:ff:9d:d2:a1:b4:21:f1:86:
                    29:5b:b5:f7:e9:d1:85:fa:2c:68:92:07:4c:d1:2b:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:29:4B:13:F3:D6:5F:A1:DF:FB:8F:96:B9:07:6C:19:E3:5D:93:FA
            X509v3 Authority Key Identifier:
                keyid:21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:aa:ca:85:ad:cd:9d:05:2e:7d:2c:c0:de:61:b8:5f:d6:d4:
         4f:78:6e:da:9d:34:97:77:86:e3:d3:94:72:81:e5:f4:ce:c7:
         2c:fa:a3:ea:54:d7:56:67:42:25:74:ae:93:2c:e5:25:32:89:
         fc:5a:b3:61:be:69:e4:df:46:c3:3f:5c:b0:ce:c4:c4:7d:73:
         d9:b9:8b:30:be:45:f2:cc:f0:d0:49:a8:39:b8:fa:d5:81:45:
         69:46:54:6c:79:d3:03:96:b0:46:3e:78:71:f2:e0:fc:9c:ed:
         35:b3:cf:5c:7d:c1:61:f9:b9:43:c7:f2:24:dd:65:f4:94:e2:
         6f:35:c5:aa:a0:cd:75:1c:5b:34:e2:54:99:d4:aa:12:27:15:
         c4:a3:61:c2:65:2e:bb:45:18:36:f6:b6:eb:d6:a8:34:e6:a9:
         94:b8:69:dd:f3:a7:08:35:09:3b:ed:8b:8f:4c:5e:8f:a1:2c:
         34:60:bf:7f:31:1e:13:e0:af:e6:0e:7c:0d:45:01:23:b1:ec:
         2a:67:fc:96:4b:2f:b6:75:75:f0:19:35:c3:6a:9a:ae:3a:7b:
         68:44:49:33:0e:20:91:c7:a9:b6:56:24:93:a9:ab:69:89:01:
         23:06:23:56:58:33:e2:f4:f1:86:16:37:10:08:82:81:68:bb:
         93:eb:5c:df
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIURqJRxxvzUqA0MJN92deE1L72BZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExQkY0ODBDMTcxMDdGN0FFNjg4MkNDM0ZFMjIwRTM3
QUZFNzVGODAeFw0yNDEyMTExODQ4NTJaFw0yNTEyMTAxODUzNTJaMDMxMTAvBgNV
BAMTKDM3Mjk0QjEzRjNENjVGQTFERkZCOEY5NkI5MDc2QzE5RTM1RDkzRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjvGZU+QnCwJmApB0+76P8aqgn
KGI2L+v4aLITFbmvzwSxcoKs9V8NNI+nTHtBueV2GW7s4iLKPFoq0batxKrw9KOu
+lJJsHA3+J21ph0lVsT8OSgRi8oRinqgDSBsRHhVCXVTCn7P542E+pio4b1THCic
B/B1ZmR7u3jWraWVbZlhejSrR/jGrvNN6vT8Q3M9QZcQf1SqCfEt0fQJYf30gA+Y
+pzn02ZnmycUC3UPp2h9c9oHfiLhCv/FP1FEamNKpDCdkl1AppFp+YSqg8aIbuyE
URBNJeKMyP90+SWmd5Es4qqknVr/ndKhtCHxhilbtffp0YX6LGiSB0zRK9AzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUNylLE/PWX6Hf+4+WuQdsGeNdk/owHwYDVR0j
BBgwFoAUIRv0gMFxB/euaILMP+Ig43r+dfgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRuV3JjdmR5Y21aNjY5aUtaRnJ1anlITGhiUHR3TjZrWjMzNHdTNFFW
TEwvMC8yMTFCRjQ4MEMxNzEwN0Y3QUU2ODgyQ0MzRkUyMjBFMzdBRkU3NUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMUJGNDgwQzE3MTA3RjdB
RTY4ODJDQzNGRTIyMEUzN0FGRTc1RjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUbldyY3ZkeWNtWjY2OWlLWkZydWp5SExoYlB0d042a1ozMzR3UzRRVkxMLzAv
MzIzODMwMzQzYTM1MzU2MjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFW4MA0GCSqGSIb3DQEBCwUAA4IBAQCLqsqF
rc2dBS59LMDeYbhf1tRPeG7anTSXd4bj05RygeX0zscs+qPqVNdWZ0IldK6TLOUl
Mon8WrNhvmnk30bDP1ywzsTEfXPZuYswvkXyzPDQSag5uPrVgUVpRlRsedMDlrBG
Pnhx8uD8nO01s89cfcFh+blDx/Ik3WX0lOJvNcWqoM11HFs04lSZ1KoSJxXEo2HC
ZS67RRg29rbr1qg05qmUuGnd86cINQk77YuPTF6PoSw0YL9/MR4T4K/mDnwNRQEj
sewqZ/yWSy+2dXXwGTXDapquOntoREkzDiCRx6m2ViSTqatpiQEjBiNWWDPi9PGG
FjcQCIKBaLuT61zf
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:36:03 2025 by rpki-client