Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a633030303a3a2f33342d3334203d3e20323639343339.roa
File:                     323830343a363461303a633030303a3a2f33342d3334203d3e20323639343339.roa (raw, json)
Hash identifier:          eIwt+Rn9MLVDpYEin85au2hw5Q8eesU4HOWKUAOFbzA=
Subject key identifier:   CC:7F:37:CE:EC:73:93:FF:C9:FB:0A:B3:40:F1:46:AF:6B:70:EA:62
Certificate issuer:       /CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
Certificate serial:       4CA85D2F7A06733408698F57AC956639B6D561CD
Authority key identifier: C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a633030303a3a2f33342d3334203d3e20323639343339.roa
Signing time:             Wed 22 Jan 2025 12:55:53 +0000
ROA not before:           Wed 22 Jan 2025 12:50:53 +0000
ROA not after:            Wed 21 Jan 2026 12:55:53 +0000
asID:                     269439
IP address blocks:        2804:64a0:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a8:5d:2f:7a:06:73:34:08:69:8f:57:ac:95:66:39:b6:d5:61:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
        Validity
            Not Before: Jan 22 12:50:53 2025 GMT
            Not After : Jan 21 12:55:53 2026 GMT
        Subject: CN=CC7F37CEEC7393FFC9FB0AB340F146AF6B70EA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:5b:55:c0:5b:08:54:76:e2:13:e6:22:1d:
                    b8:17:f5:e6:7c:83:87:71:7f:86:36:9f:da:e6:00:
                    10:7d:72:4e:98:85:ec:30:20:b2:42:89:16:cb:92:
                    54:c3:f2:a8:ad:a7:5e:5e:e0:c6:52:6c:84:d4:74:
                    2b:ad:e7:c2:88:f4:f4:ce:7a:37:c7:1a:86:25:e2:
                    27:6f:b8:eb:a9:2e:a2:24:ee:95:85:8e:86:04:e1:
                    60:28:be:03:2c:62:b9:65:5c:19:4b:f7:cc:37:f5:
                    45:ea:01:50:56:69:5a:39:ab:b0:86:a7:c4:4f:71:
                    66:f6:12:fb:e6:0f:b7:5a:c0:db:ab:95:ab:ec:4f:
                    a3:49:1c:65:6b:5d:cb:c6:58:52:73:b4:ba:9e:f6:
                    08:d0:a4:82:59:21:a6:d6:7b:6a:ce:22:11:ec:2c:
                    6d:30:ff:15:1b:f0:c8:50:6a:90:c4:d8:9b:e7:17:
                    5a:13:ed:2e:f2:74:71:ae:74:19:5c:bd:e0:5b:af:
                    1a:72:06:29:01:9f:00:1c:d4:07:ed:42:54:d8:f1:
                    2c:97:71:b2:ec:32:f6:dd:f8:8a:00:c9:ce:72:ff:
                    35:82:a8:5e:d0:52:a1:65:83:3a:6d:e9:05:ee:23:
                    b2:92:09:c4:2a:db:24:dd:5b:89:9b:80:b9:f5:eb:
                    38:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7F:37:CE:EC:73:93:FF:C9:FB:0A:B3:40:F1:46:AF:6B:70:EA:62
            X509v3 Authority Key Identifier:
                keyid:C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a633030303a3a2f33342d3334203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:99:e4:e9:a5:10:4a:48:49:f9:eb:16:c5:5e:df:99:5e:02:
         64:14:39:87:e1:79:fd:15:69:bd:dc:fe:f2:ce:3b:da:4a:df:
         1a:72:0d:cc:7d:87:e4:ec:8a:e8:4d:fa:c7:11:0b:fa:9c:23:
         a2:72:a5:0c:68:c1:18:e2:bd:ce:08:8a:7f:5b:53:5d:d4:75:
         d6:39:70:8d:32:64:dd:2c:6a:51:c4:bf:38:3e:ef:21:a0:ee:
         2a:c5:7a:dc:0d:b7:8a:d9:2b:bf:79:75:fa:8d:17:8e:1a:58:
         b6:3e:89:91:24:f1:50:0b:ca:38:67:1d:b1:a8:e9:1a:1c:4d:
         ba:d9:ac:76:8c:49:d6:cb:af:c7:6e:b3:6c:17:28:89:7b:37:
         e8:16:29:f4:d1:5d:e5:de:21:2c:65:e6:2b:e3:15:99:d9:a9:
         fe:24:5e:9f:a2:51:8a:f5:1a:c6:50:41:17:47:7f:7d:12:e6:
         cf:fb:1c:6e:81:37:49:3d:8b:5a:eb:d0:84:27:93:49:43:0f:
         04:22:89:d6:23:93:1a:e2:8f:0d:d6:ee:3a:a4:ea:ae:62:d6:
         55:64:62:ea:30:5c:09:c9:ee:27:e9:ef:02:5e:40:67:a6:4b:
         ba:ea:e1:87:dd:cf:a5:97:b8:4c:be:f1:29:e9:63:0a:4a:2d:
         07:d0:96:c6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTKhdL3oGczQIaY9XrJVmObbVYc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlDRjRBRTc5ODg3NjM5ODU5RkQwMDEwNjA1OEJEQ0VC
QTEwMDJBQzAeFw0yNTAxMjIxMjUwNTNaFw0yNjAxMjExMjU1NTNaMDMxMTAvBgNV
BAMTKENDN0YzN0NFRUM3MzkzRkZDOUZCMEFCMzQwRjE0NkFGNkI3MEVBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeE1tVwFsIVHbiE+YiHbgX9eZ8
g4dxf4Y2n9rmABB9ck6YhewwILJCiRbLklTD8qitp15e4MZSbITUdCut58KI9PTO
ejfHGoYl4idvuOupLqIk7pWFjoYE4WAovgMsYrllXBlL98w39UXqAVBWaVo5q7CG
p8RPcWb2EvvmD7dawNurlavsT6NJHGVrXcvGWFJztLqe9gjQpIJZIabWe2rOIhHs
LG0w/xUb8MhQapDE2JvnF1oT7S7ydHGudBlcveBbrxpyBikBnwAc1AftQlTY8SyX
cbLsMvbd+IoAyc5y/zWCqF7QUqFlgzpt6QXuI7KSCcQq2yTdW4mbgLn16zgrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUzH83zuxzk//J+wqzQPFGr2tw6mIwHwYDVR0j
BBgwFoAUyc9K55iHY5hZ/QAQYFi9zroQAqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFlCVUZDTmFBWW40RVVGNEJxUjc4NVBGaVlKZHlWalpRTFJkQmo1V1F4
VVovMC9DOUNGNEFFNzk4ODc2Mzk4NTlGRDAwMTA2MDU4QkRDRUJBMTAwMkFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5Q0Y0QUU3OTg4NzYzOTg1
OUZEMDAxMDYwNThCRENFQkExMDAyQUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hZQlVGQ05hQVluNEVVRjRCcVI3ODVQRmlZSmR5VmpaUUxSZEJqNVdReFVaLzAv
MzIzODMwMzQzYTM2MzQ2MTMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM0MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZKDAMA0GCSqGSIb3DQEBCwUA
A4IBAQAKmeTppRBKSEn56xbFXt+ZXgJkFDmH4Xn9FWm93P7yzjvaSt8acg3MfYfk
7IroTfrHEQv6nCOicqUMaMEY4r3OCIp/W1Nd1HXWOXCNMmTdLGpRxL84Pu8hoO4q
xXrcDbeK2Su/eXX6jReOGli2PomRJPFQC8o4Zx2xqOkaHE262ax2jEnWy6/HbrNs
FyiJezfoFin00V3l3iEsZeYr4xWZ2an+JF6folGK9RrGUEEXR399EubP+xxugTdJ
PYta69CEJ5NJQw8EIonWI5Ma4o8N1u46pOquYtZVZGLqMFwJye4n6e8CXkBnpku6
6uGH3c+ll7hMvvEp6WMKSi0H0JbG
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:55 2025 by rpki-client