Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/323830343a333039383a3a2f33322d313238203d3e20323634393633.roa
File:                     323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (raw, json)
Hash identifier:          4YQCFpXPUhsLFUTDrQm1z410pZXkHXYKu3uwdvZnJS4=
Subject key identifier:   FE:29:AD:19:40:B4:B6:B9:24:02:F9:A5:4C:FF:4D:5A:54:C5:AC:1E
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       6C881EBE27863812B9BC3F3789FF2960D6258B6C
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/323830343a333039383a3a2f33322d313238203d3e20323634393633.roa
Signing time:             Thu 06 Mar 2025 17:53:33 +0000
ROA not before:           Thu 06 Mar 2025 17:48:33 +0000
ROA not after:            Thu 05 Mar 2026 17:53:33 +0000
asID:                     264963
IP address blocks:        2804:3098::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:88:1e:be:27:86:38:12:b9:bc:3f:37:89:ff:29:60:d6:25:8b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Mar  6 17:48:33 2025 GMT
            Not After : Mar  5 17:53:33 2026 GMT
        Subject: CN=FE29AD1940B4B6B92402F9A54CFF4D5A54C5AC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:46:9e:22:32:2e:7f:b4:42:94:c4:4a:b8:
                    c2:2c:4c:65:5e:1f:3e:14:cb:00:21:dd:57:66:f2:
                    e0:71:17:14:a1:8e:04:4e:a1:a5:ba:d4:e0:af:01:
                    a2:5d:9b:cb:3c:87:5e:d5:bc:2d:ec:d5:6a:94:4e:
                    29:ec:a7:5c:9a:fb:ea:9e:6a:a8:ee:5a:c7:42:11:
                    57:d9:68:b4:42:30:40:a1:13:b0:db:d4:b9:85:08:
                    0e:9f:9e:37:3d:95:2e:66:10:d5:02:4f:c6:de:86:
                    cd:43:3a:d7:f6:74:1e:e0:76:90:cc:fd:fe:9d:2e:
                    68:10:68:7a:92:03:c3:9f:c5:4f:8e:f9:5b:55:26:
                    ec:da:40:e4:95:b1:52:04:7b:59:5f:5a:fe:0b:c6:
                    bb:2c:fb:44:86:1e:ed:f9:27:7e:0a:8d:6c:5f:20:
                    3a:50:ff:e4:e9:f5:c9:70:45:7d:56:fe:00:81:b2:
                    47:18:30:20:82:f1:fd:39:fe:09:64:29:32:65:61:
                    0f:7a:47:00:e3:14:2e:21:bd:c0:b1:9a:79:49:29:
                    7c:9a:27:b0:6d:31:83:bf:f5:f9:42:f7:30:2e:93:
                    6c:e6:73:67:0d:dd:77:4d:db:3d:d8:4f:39:a6:a4:
                    c4:23:74:61:13:f5:88:1a:4b:d8:da:d5:3a:4b:bc:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:29:AD:19:40:B4:B6:B9:24:02:F9:A5:4C:FF:4D:5A:54:C5:AC:1E
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/323830343a333039383a3a2f33322d313238203d3e20323634393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3098::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:d5:85:6b:bf:3a:93:e4:c2:ff:53:89:ea:b7:e4:47:91:
         70:4b:ba:e4:a7:fb:a1:b9:39:47:e7:db:2c:be:ca:ea:bc:d1:
         52:e1:9f:7b:58:a0:aa:10:19:53:7c:98:93:00:a5:0d:ae:a8:
         4f:40:af:2f:fe:e3:6e:13:41:dc:db:7f:93:62:a0:3a:6a:2c:
         3f:92:cd:02:f4:f4:ad:8e:9e:b3:3f:92:84:74:7b:9e:30:e7:
         d5:96:11:1b:20:cd:3b:ba:cd:a8:98:c1:e3:89:dc:24:72:04:
         03:a7:4b:aa:0b:44:c2:38:1e:f9:87:1c:70:fa:7a:d2:24:74:
         93:b8:8d:50:2c:c6:14:95:59:49:8b:6a:3b:cf:aa:41:4f:e1:
         61:4c:0d:c8:da:dc:99:46:a0:de:69:6b:9b:96:94:e1:7c:58:
         fc:56:3b:1b:ad:15:be:9e:cb:f5:78:c0:ad:fe:02:d6:7d:1c:
         8a:43:80:81:29:a7:0c:43:17:57:12:66:42:85:4f:a4:b9:38:
         c7:6d:17:e9:5c:8b:56:42:66:1c:c5:bb:da:5c:43:b9:eb:dc:
         19:a2:4f:ed:0d:e2:e1:6c:5f:6c:f2:08:e4:e7:2c:fb:b4:5e:
         51:c1:61:43:8c:15:d9:d0:30:6f:fe:eb:de:73:5e:38:17:7a:
         4b:b2:e4:19
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUbIgevieGOBK5vD83if8pYNYli2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBRjAwODQzQzkwMjRCNjhBRTNFQzQzMzFFNzUzQjdC
MkI0MjJERjAeFw0yNTAzMDYxNzQ4MzNaFw0yNjAzMDUxNzUzMzNaMDMxMTAvBgNV
BAMTKEZFMjlBRDE5NDBCNEI2QjkyNDAyRjlBNTRDRkY0RDVBNTRDNUFDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnkaeIjIuf7RClMRKuMIsTGVe
Hz4UywAh3Vdm8uBxFxShjgROoaW61OCvAaJdm8s8h17VvC3s1WqUTinsp1ya++qe
aqjuWsdCEVfZaLRCMEChE7Db1LmFCA6fnjc9lS5mENUCT8behs1DOtf2dB7gdpDM
/f6dLmgQaHqSA8OfxU+O+VtVJuzaQOSVsVIEe1lfWv4Lxrss+0SGHu35J34KjWxf
IDpQ/+Tp9clwRX1W/gCBskcYMCCC8f05/glkKTJlYQ96RwDjFC4hvcCxmnlJKXya
J7BtMYO/9flC9zAuk2zmc2cN3XdN2z3YTzmmpMQjdGET9YgaS9ja1TpLvN4PAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU/imtGUC0trkkAvmlTP9NWlTFrB4wHwYDVR0j
BBgwFoAUuK8AhDyQJLaK4+xDMedTt7K0It8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy
UkgvMS9COEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QUYwMDg0M0M5MDI0QjY4
QUUzRUM0MzMxRTc1M0I3QjJCNDIyREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUeWgzR1pDRmJiQVlwTkgxa1hvSHh4aXRKYVdZV1I0UDNQb2cyTjVCclJILzEv
MzIzODMwMzQzYTMzMzAzOTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzOTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDCYMA0GCSqGSIb3DQEBCwUAA4IBAQBoT9WF
a786k+TC/1OJ6rfkR5FwS7rkp/uhuTlH59ssvsrqvNFS4Z97WKCqEBlTfJiTAKUN
rqhPQK8v/uNuE0Hc23+TYqA6aiw/ks0C9PStjp6zP5KEdHueMOfVlhEbIM07us2o
mMHjidwkcgQDp0uqC0TCOB75hxxw+nrSJHSTuI1QLMYUlVlJi2o7z6pBT+FhTA3I
2tyZRqDeaWublpThfFj8VjsbrRW+nsv1eMCt/gLWfRyKQ4CBKacMQxdXEmZChU+k
uTjHbRfpXItWQmYcxbvaXEO569wZok/tDeLhbF9s8gjk5yz7tF5RwWFDjBXZ0DBv
/uvec144F3pLsuQZ
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:56 2025 by rpki-client