Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a343030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          Exqqzly7YuJxlwTr3oWt1S1y4LTj/e/yAPS6C+PG3Po=
Subject key identifier:   1A:EA:91:E4:08:50:61:D3:8E:A2:E1:F9:DB:B9:26:B5:57:B5:76:62
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       4D7970A1C1AE239AD4CC6673002D1882B126357E
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:35 +0000
ROA not before:           Wed 28 Feb 2024 14:06:35 +0000
ROA not after:            Wed 26 Feb 2025 14:11:35 +0000
asID:                     262532
IP address blocks:        2804:ec8:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:79:70:a1:c1:ae:23:9a:d4:cc:66:73:00:2d:18:82:b1:26:35:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:35 2024 GMT
            Not After : Feb 26 14:11:35 2025 GMT
        Subject: CN=1AEA91E4085061D38EA2E1F9DBB926B557B57662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:45:e0:fb:0a:72:d7:f8:c9:46:9b:64:b1:
                    5a:7f:cf:61:d2:a0:b7:ad:1c:14:8f:dd:39:f7:e9:
                    d0:74:85:09:83:97:ca:4f:c1:a3:01:c1:e3:be:44:
                    7c:76:8d:3a:20:6d:f8:9a:ea:89:d5:2b:7a:1a:e3:
                    5e:bf:4b:35:49:78:86:6f:ed:2a:ed:70:3c:29:83:
                    65:88:ff:a4:3e:ff:07:03:00:cf:9a:cb:9f:da:b2:
                    66:12:36:9e:6b:7c:c2:1d:73:c5:33:b0:93:45:4d:
                    e8:56:4c:aa:c8:c5:a8:c6:31:29:a6:f6:47:e0:e7:
                    42:53:14:ef:57:65:c9:92:db:a9:f3:08:06:7e:47:
                    21:37:87:e0:b6:58:bb:e5:27:2e:4d:71:e5:8b:c2:
                    29:57:8a:ed:7d:cb:c6:ff:f1:f1:31:4f:2b:97:67:
                    0c:40:3b:0c:22:f2:ac:94:17:b2:00:49:5d:82:12:
                    f4:34:7c:7e:0f:38:bc:b1:78:62:6c:e7:a7:bd:e1:
                    eb:14:27:80:77:b5:e2:4d:4f:f4:5d:5e:b8:22:7b:
                    a4:e8:a4:b4:85:45:25:b7:47:39:51:2d:dd:f2:fb:
                    b5:cf:1a:d3:f1:ef:04:86:ea:34:7a:35:3d:80:c9:
                    d8:c1:5e:fa:98:cb:2f:f7:09:e8:7a:42:1e:a6:d3:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:91:E4:08:50:61:D3:8E:A2:E1:F9:DB:B9:26:B5:57:B5:76:62
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:b9:6b:b2:2b:fe:7a:42:a7:78:68:55:07:3f:ed:b6:b9:
         28:60:a5:d9:dd:59:79:de:44:cd:2a:1e:7d:92:4a:ad:73:81:
         bb:16:92:db:7d:1d:7f:36:25:9f:6f:e6:12:82:34:12:f7:6f:
         1f:b4:25:14:2a:a0:4f:a2:10:72:78:9e:2f:38:20:53:59:63:
         dc:9e:da:f3:ac:6e:ec:33:32:eb:d9:3f:9f:59:d4:f9:01:32:
         fb:1c:04:5e:3d:27:a4:0b:cb:12:f6:34:22:5c:74:60:65:47:
         5f:84:c1:e4:ed:07:e1:35:4e:ec:d8:aa:ae:cc:9c:9c:86:70:
         fe:b3:b3:60:6b:d0:28:08:73:d0:e5:28:b7:c8:f8:08:2e:30:
         ea:13:60:bd:6a:4f:39:ed:95:ed:45:b2:ff:3e:80:84:2a:35:
         53:43:8a:0b:52:41:1b:72:66:fc:97:47:20:fb:56:ae:57:82:
         66:03:68:60:ea:1a:33:0c:6a:1e:1f:92:51:fb:c0:68:43:67:
         6d:58:54:cf:b2:58:d8:9a:5a:28:ce:0b:84:28:cd:bd:9f:e1:
         66:a1:31:7c:5a:70:8a:24:ce:04:d5:70:b2:5b:e2:3c:f3:8e:
         47:91:7e:75:a6:1b:1c:db:25:00:3a:89:0b:db:bf:77:a5:4e:
         3b:e4:73:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTXlwocGuI5rUzGZzAC0YgrEmNX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNDREQjBGQ0JEMUREMjdCOTM4MzdGOEIwNTJDRTNC
OUIyOTJBRjAeFw0yNDAyMjgxNDA2MzVaFw0yNTAyMjYxNDExMzVaMDMxMTAvBgNV
BAMTKDFBRUE5MUU0MDg1MDYxRDM4RUEyRTFGOURCQjkyNkI1NTdCNTc2NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9EXg+wpy1/jJRptksVp/z2HS
oLetHBSP3Tn36dB0hQmDl8pPwaMBweO+RHx2jTogbfia6onVK3oa416/SzVJeIZv
7SrtcDwpg2WI/6Q+/wcDAM+ay5/asmYSNp5rfMIdc8UzsJNFTehWTKrIxajGMSmm
9kfg50JTFO9XZcmS26nzCAZ+RyE3h+C2WLvlJy5NceWLwilXiu19y8b/8fExTyuX
ZwxAOwwi8qyUF7IASV2CEvQ0fH4POLyxeGJs56e94esUJ4B3teJNT/RdXrgie6To
pLSFRSW3RzlRLd3y+7XPGtPx7wSG6jR6NT2AydjBXvqYyy/3Ceh6Qh6m032LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGuqR5AhQYdOOouH527kmtVe1dmIwHwYDVR0j
BBgwFoAUySRNsPy9HdJ7k4N/iwUs47mykq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9DOTI0NERCMEZDQkQxREQyN0I5MzgzN0Y4QjA1MkNFM0I5QjI5MkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5MjQ0REIwRkNCRDFERDI3
QjkzODM3RjhCMDUyQ0UzQjlCMjkyQUYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzIzODMwMzQzYTY1NjMzODNhMzQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA7IQDANBgkqhkiG9w0BAQsFAAOC
AQEAL7K5a7Ir/npCp3hoVQc/7ba5KGCl2d1Zed5EzSoefZJKrXOBuxaS230dfzYl
n2/mEoI0EvdvH7QlFCqgT6IQcnieLzggU1lj3J7a86xu7DMy69k/n1nU+QEy+xwE
Xj0npAvLEvY0Ilx0YGVHX4TB5O0H4TVO7NiqrsycnIZw/rOzYGvQKAhz0OUot8j4
CC4w6hNgvWpPOe2V7UWy/z6AhCo1U0OKC1JBG3Jm/JdHIPtWrleCZgNoYOoaMwxq
Hh+SUfvAaENnbVhUz7JY2JpaKM4LhCjNvZ/hZqExfFpwiiTOBNVwslviPPOOR5F+
daYbHNslADqJC9u/d6VOO+RzlQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:31 2025 by rpki-client