Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
File:                     323830343a313332343a3a2f33322d3332203d3e20323633353138.roa (raw, json)
Hash identifier:          ryA4j8lwgCLZ+e+3YJLN7o0c4X4N4PiaIfKfPX/QSDM=
Subject key identifier:   C0:FF:67:FF:4B:BF:9D:E3:9D:F0:B2:74:FD:5F:95:AA:AB:73:3A:71
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       3CAE121C3CE6CA3E06FC46F0BD7DB52FFECA899F
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
Signing time:             Thu 27 Mar 2025 17:28:47 +0000
ROA not before:           Thu 27 Mar 2025 17:23:47 +0000
ROA not after:            Thu 26 Mar 2026 17:28:47 +0000
asID:                     263518
IP address blocks:        2804:1324::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ae:12:1c:3c:e6:ca:3e:06:fc:46:f0:bd:7d:b5:2f:fe:ca:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Mar 27 17:23:47 2025 GMT
            Not After : Mar 26 17:28:47 2026 GMT
        Subject: CN=C0FF67FF4BBF9DE39DF0B274FD5F95AAAB733A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:ef:d5:9a:cb:de:f8:71:c0:b2:dd:0d:78:
                    40:bc:06:42:3d:91:af:38:5b:39:91:dc:e6:df:a5:
                    c4:fc:02:d3:96:1f:04:03:14:c0:80:16:30:36:f8:
                    9b:b4:19:0d:b9:ee:8a:9a:31:45:14:07:dc:5b:dc:
                    9a:65:c2:84:a9:c9:6a:5c:04:4f:15:cb:ad:e4:71:
                    ea:97:bc:55:7a:35:e1:69:f9:33:fb:b2:4f:aa:7f:
                    10:e8:3f:02:5c:83:b9:4e:3b:73:e5:31:b9:0e:36:
                    3c:cc:9c:67:6e:aa:00:dd:4e:5b:47:e5:cf:55:47:
                    74:f3:17:38:c0:a6:05:05:4c:e5:7b:ae:b1:b0:aa:
                    d0:50:b9:c9:95:36:6b:22:e7:8d:f6:76:cb:7c:58:
                    b1:4f:56:fb:d6:64:ec:94:db:73:e9:b6:f6:4f:fb:
                    fb:0d:bc:19:8b:a8:f6:2e:de:7a:a2:88:4b:74:cd:
                    c3:35:3a:63:f5:25:f4:86:d2:a2:d5:62:81:8d:2b:
                    7a:01:c3:f5:f5:54:9f:bc:e7:02:84:d2:88:6d:7d:
                    46:55:35:50:17:9d:ad:9c:30:9e:3c:6f:d4:56:4a:
                    d0:72:4d:33:30:7f:05:7e:93:e2:66:b7:82:6a:cc:
                    6a:5f:ab:3e:5f:e2:b7:6f:51:c6:59:55:70:d1:19:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:67:FF:4B:BF:9D:E3:9D:F0:B2:74:FD:5F:95:AA:AB:73:3A:71
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:69:5f:38:48:a5:46:bf:71:b8:a7:cb:c5:52:f9:68:66:
         6f:58:0f:61:ec:39:da:90:5d:68:7e:68:4f:6d:7e:9a:35:71:
         3f:cf:93:f9:b9:90:10:44:7f:d1:29:13:ad:22:89:6c:89:51:
         ab:fb:ed:61:4d:eb:0c:2d:4e:31:6f:9c:9b:41:3c:70:18:03:
         92:86:c5:b7:94:91:49:13:08:c1:cb:32:2d:a2:58:f1:13:3d:
         77:e9:9e:37:9a:2e:1e:8b:10:8e:22:b4:89:ff:46:a6:69:13:
         c6:59:a2:c5:4c:2c:c9:23:5a:cf:f9:43:e1:11:13:8d:e4:33:
         66:ef:ec:df:47:c6:54:f6:a7:e4:33:dd:eb:30:e3:3e:d4:e4:
         f7:ac:cc:df:6a:18:ea:16:22:33:5a:25:57:cf:41:6e:c1:b5:
         a8:6a:b8:c8:0b:0e:f4:52:de:bd:5f:c8:b2:94:be:67:76:26:
         d3:ee:81:3e:34:99:d0:40:d7:4a:5a:f6:1f:c1:76:39:42:b7:
         2a:ba:1e:65:13:b7:8e:45:a2:f9:ca:aa:8c:03:25:c4:f2:be:
         28:7e:1a:c8:7e:90:5c:23:6b:30:22:db:33:9d:8c:a4:b7:4a:
         1f:9f:19:5c:71:78:86:bf:ae:1f:52:00:b7:d3:db:41:c0:4e:
         f8:d9:bc:dd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPK4SHDzmyj4G/EbwvX21L/7KiZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTAzMjcxNzIzNDdaFw0yNjAzMjYxNzI4NDdaMDMxMTAvBgNV
BAMTKEMwRkY2N0ZGNEJCRjlERTM5REYwQjI3NEZENUY5NUFBQUI3MzNBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKk+/Vmsve+HHAst0NeEC8BkI9
ka84WzmR3ObfpcT8AtOWHwQDFMCAFjA2+Ju0GQ257oqaMUUUB9xb3JplwoSpyWpc
BE8Vy63kceqXvFV6NeFp+TP7sk+qfxDoPwJcg7lOO3PlMbkONjzMnGduqgDdTltH
5c9VR3TzFzjApgUFTOV7rrGwqtBQucmVNmsi5432dst8WLFPVvvWZOyU23PptvZP
+/sNvBmLqPYu3nqiiEt0zcM1OmP1JfSG0qLVYoGNK3oBw/X1VJ+85wKE0ohtfUZV
NVAXna2cMJ48b9RWStByTTMwfwV+k+Jmt4JqzGpfqz5f4rdvUcZZVXDRGfm/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwP9n/0u/neOd8LJ0/V+VqqtzOnEwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzIzODMwMzQzYTMxMzMzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzUzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQTJDANBgkqhkiG9w0BAQsFAAOCAQEANqFpXzhI
pUa/cbiny8VS+Whmb1gPYew52pBdaH5oT21+mjVxP8+T+bmQEER/0SkTrSKJbIlR
q/vtYU3rDC1OMW+cm0E8cBgDkobFt5SRSRMIwcsyLaJY8RM9d+meN5ouHosQjiK0
if9GpmkTxlmixUwsySNaz/lD4RETjeQzZu/s30fGVPan5DPd6zDjPtTk96zM32oY
6hYiM1olV89BbsG1qGq4yAsO9FLevV/IspS+Z3Ym0+6BPjSZ0EDXSlr2H8F2OUK3
KroeZRO3jkWi+cqqjAMlxPK+KH4ayH6QXCNrMCLbM52MpLdKH58ZXHF4hr+uH1IA
t9PbQcBO+Nm83Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:37 2025 by rpki-client