Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa
File:                     323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (raw, json)
Hash identifier:          oxHxONE9x52U+e5QcW3K1P/Di5t/pz6PYQ4GKPQ5jt0=
Subject key identifier:   9E:06:1C:E4:53:5E:6F:53:04:DC:12:FC:03:54:1D:D1:C3:83:78:0C
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       057520652848E783EC84E9A9F66E46B82EE8A0E2
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa
Signing time:             Wed 05 Mar 2025 19:00:24 +0000
ROA not before:           Wed 05 Mar 2025 18:55:24 +0000
ROA not after:            Wed 04 Mar 2026 19:00:24 +0000
asID:                     265100
IP address blocks:        2804:32d4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:75:20:65:28:48:e7:83:ec:84:e9:a9:f6:6e:46:b8:2e:e8:a0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Mar  5 18:55:24 2025 GMT
            Not After : Mar  4 19:00:24 2026 GMT
        Subject: CN=9E061CE4535E6F5304DC12FC03541DD1C383780C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:b0:d4:99:0b:d7:c4:02:13:85:74:26:89:
                    4f:81:d8:8a:f0:7f:62:71:85:04:d9:05:90:ec:74:
                    7d:5d:fb:c5:79:c2:79:2a:8b:8e:5c:4a:29:79:07:
                    32:a6:cd:ec:83:cc:79:ea:fa:e8:d1:df:e7:6f:b4:
                    ae:60:37:d4:cd:7d:09:47:5c:34:8d:8f:8f:59:45:
                    52:c1:f8:17:e9:ae:eb:1c:54:8a:70:6d:88:2d:07:
                    de:cb:45:a7:63:4a:bb:f1:7a:44:fe:93:d6:d5:e8:
                    14:96:c9:02:46:07:aa:5e:f3:3a:09:a0:e1:17:43:
                    d8:71:cd:ab:df:ba:df:0c:f9:b4:a7:74:44:83:ff:
                    24:ae:8b:19:32:06:cf:dc:4d:3a:14:c8:5c:ff:9d:
                    d4:0c:a4:cd:4b:09:97:ed:8c:1b:44:f1:97:0b:f5:
                    5a:a7:c9:0f:24:41:6e:fc:d3:7b:a0:ff:1c:4d:04:
                    49:11:f2:a4:cc:7e:38:21:0a:ad:dd:bb:a7:33:da:
                    0a:35:cc:6a:e9:60:57:e9:79:c0:f1:19:64:b9:18:
                    7b:fa:61:3e:3b:45:79:71:1e:9b:c6:56:1c:14:e7:
                    5f:6f:39:30:cc:0c:b3:2e:4d:2b:79:7f:07:ab:ac:
                    dd:da:4c:5d:6b:10:a3:4b:d2:45:82:6c:8e:ac:a1:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:1C:E4:53:5E:6F:53:04:DC:12:FC:03:54:1D:D1:C3:83:78:0C
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:38:d8:c9:a1:b3:df:ca:a4:4f:a7:cc:18:78:e9:0f:39:2c:
         84:d3:3e:73:d3:ea:5c:48:0f:19:c7:21:2b:aa:e1:ba:f5:d1:
         98:21:eb:da:09:f7:d3:81:82:bb:0d:61:cb:c2:e5:9f:f4:a6:
         39:23:cb:ff:7b:2a:2f:1d:04:f2:21:ee:91:1d:70:ed:87:d1:
         8f:0e:04:cd:0f:c7:ef:64:8a:05:13:f7:f6:e3:2a:c1:e6:d6:
         e9:a9:cb:54:44:fe:26:8c:50:2e:e2:07:a3:a6:65:19:17:36:
         3a:44:85:4e:cd:4b:02:77:0b:c6:f6:c6:f0:1b:e5:39:c3:e0:
         b3:c8:6a:da:b6:d0:0c:77:3a:46:86:39:0b:6d:06:d9:0f:0b:
         8c:63:00:55:48:8e:8e:1a:93:63:18:a1:c0:b2:9d:71:6c:ae:
         57:6a:f4:b7:d9:f2:80:13:7e:f3:a0:a0:d6:5d:91:7e:11:38:
         0a:b0:fa:fb:f7:f3:50:b9:54:fc:6a:d4:19:68:64:e4:58:9e:
         f3:25:d4:d2:22:73:fe:53:44:5d:a9:0f:6a:92:43:40:26:d6:
         b8:18:d0:33:11:f0:7a:e1:fe:00:de:39:98:07:e7:30:22:55:
         10:b5:65:79:3a:8b:67:2d:2c:d7:70:d6:6a:97:2b:1d:0b:d9:
         ae:89:f0:aa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBXUgZShI54PshOmp9m5GuC7ooOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGQzVGMDhCOEM0ODY0MDEzREMzQTRDQTQ3QzIyMDBC
M0MyQjgxOTAeFw0yNTAzMDUxODU1MjRaFw0yNjAzMDQxOTAwMjRaMDMxMTAvBgNV
BAMTKDlFMDYxQ0U0NTM1RTZGNTMwNERDMTJGQzAzNTQxREQxQzM4Mzc4MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxLDUmQvXxAIThXQmiU+B2Irw
f2JxhQTZBZDsdH1d+8V5wnkqi45cSil5BzKmzeyDzHnq+ujR3+dvtK5gN9TNfQlH
XDSNj49ZRVLB+BfpruscVIpwbYgtB97LRadjSrvxekT+k9bV6BSWyQJGB6pe8zoJ
oOEXQ9hxzavfut8M+bSndESD/ySuixkyBs/cTToUyFz/ndQMpM1LCZftjBtE8ZcL
9VqnyQ8kQW7803ug/xxNBEkR8qTMfjghCq3du6cz2go1zGrpYFfpecDxGWS5GHv6
YT47RXlxHpvGVhwU519vOTDMDLMuTSt5fwerrN3aTF1rEKNL0kWCbI6sofLbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUngYc5FNeb1ME3BL8A1Qd0cODeAwwHwYDVR0j
BBgwFoAUtfxfCLjEhkAT3DpMpHwiALPCuBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hM
ZEQvMS9CNUZDNUYwOEI4QzQ4NjQwMTNEQzNBNENBNDdDMjIwMEIzQzJCODE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RkM1RjA4QjhDNDg2NDAx
M0RDM0E0Q0E0N0MyMjAwQjNDMkI4MTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhZFpTRWRnZnNyenNXU2JXdVRQSmJwRVh2VFNBVmF0NG1nV3Q5dENITGRELzEv
MzIzODMwMzQzYTMzMzI2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzEzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQy1DANBgkqhkiG9w0BAQsFAAOCAQEAJzjYyaGz
38qkT6fMGHjpDzkshNM+c9PqXEgPGcchK6rhuvXRmCHr2gn304GCuw1hy8Lln/Sm
OSPL/3sqLx0E8iHukR1w7YfRjw4EzQ/H72SKBRP39uMqwebW6anLVET+JoxQLuIH
o6ZlGRc2OkSFTs1LAncLxvbG8BvlOcPgs8hq2rbQDHc6RoY5C20G2Q8LjGMAVUiO
jhqTYxihwLKdcWyuV2r0t9nygBN+86Cg1l2RfhE4CrD6+/fzULlU/GrUGWhk5Fie
8yXU0iJz/lNEXakPapJDQCbWuBjQMxHweuH+AN45mAfnMCJVELVleTqLZy0s13DW
apcrHQvZronwqg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:33 2025 by rpki-client