Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323033.roa
File:                     323830343a336439303a3a2f33322d3438203d3e20323033.roa (raw, json)
Hash identifier:          AQPHdJljAdhG/wYm9Kot+1Yr85ejt19heQzyn2Qy5Ok=
Subject key identifier:   6E:0F:77:24:25:8D:11:24:61:26:0E:E0:80:0B:D1:64:DA:3E:1B:BD
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       2A833C734EF4BD7607D235D2754314761086ED96
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323033.roa
Signing time:             Thu 06 Mar 2025 04:06:01 +0000
ROA not before:           Thu 06 Mar 2025 04:01:01 +0000
ROA not after:            Thu 05 Mar 2026 04:06:01 +0000
asID:                     203
IP address blocks:        2804:3d90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:83:3c:73:4e:f4:bd:76:07:d2:35:d2:75:43:14:76:10:86:ed:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Mar  6 04:01:01 2025 GMT
            Not After : Mar  5 04:06:01 2026 GMT
        Subject: CN=6E0F7724258D112461260EE0800BD164DA3E1BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:93:3d:fb:7a:bb:6f:3e:13:9e:4f:38:3f:
                    cc:ae:54:f2:30:20:10:6e:93:4d:d2:bd:b7:dc:e2:
                    ac:86:c9:df:58:66:27:7f:e0:4b:65:aa:6e:0e:78:
                    78:15:38:95:69:28:14:85:03:19:53:8f:ec:48:d1:
                    49:c9:d4:28:48:01:cb:60:73:f1:36:51:e9:c1:5c:
                    e6:1d:01:90:d2:b1:00:6a:78:76:47:b7:c8:f6:f4:
                    2d:80:6d:b1:66:1e:fe:d5:be:12:e6:9a:d8:08:8a:
                    a3:c1:a0:e9:12:f6:57:5c:46:9a:d8:23:41:d4:b5:
                    1a:fb:c0:b2:64:4a:f4:e8:54:cd:05:e3:83:8b:99:
                    c5:4b:01:5c:a6:b8:a4:fc:c7:17:d5:ad:84:6a:bd:
                    73:a9:08:b9:d3:26:c9:e0:c2:b7:cd:13:e4:6b:57:
                    fc:23:8e:80:57:4b:58:fa:e9:ef:31:5a:86:f6:ba:
                    37:cc:f8:25:3e:6e:47:cc:ce:9c:ad:da:33:6e:ba:
                    5c:a6:9e:3c:22:ba:12:65:4f:d6:4c:fb:59:4e:0e:
                    f5:29:cb:8e:82:af:66:ef:d0:ef:be:1a:20:20:21:
                    8b:fd:e1:f0:09:7c:6e:61:35:47:8c:91:82:10:04:
                    03:64:ac:8e:48:f4:04:75:9c:e0:08:58:e8:f8:3a:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:77:24:25:8D:11:24:61:26:0E:E0:80:0B:D1:64:DA:3E:1B:BD
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:94:09:5a:45:95:93:18:e8:5e:84:3c:72:80:0c:e6:b2:67:
         95:bc:bb:21:cb:39:48:bf:37:f8:45:29:fe:9e:fb:39:d5:ae:
         44:6e:40:d1:d9:62:bc:5e:a8:f7:93:30:df:3f:fc:e1:8e:79:
         54:93:73:68:c0:1f:30:98:25:b6:2b:bf:0e:39:10:42:28:87:
         94:5f:83:4a:55:d2:e0:9b:c6:bb:8c:51:08:4d:f4:27:3f:a3:
         c7:3a:d7:6d:16:c5:c4:d0:cc:60:85:d2:09:13:47:e8:44:30:
         c0:fa:c9:d9:2d:3f:8c:ce:b5:c4:ca:8d:a6:1d:f1:c7:a1:4e:
         68:6e:55:25:b3:bc:94:0e:36:79:01:58:fe:0d:83:db:09:0a:
         a3:62:30:69:a1:94:7a:b5:90:b2:90:ee:3f:e4:2b:54:35:74:
         f9:6c:1c:65:ea:66:03:85:57:a6:10:bb:ba:d0:5e:1e:44:2c:
         8a:22:27:69:6e:d6:3b:01:69:39:2e:c8:35:fd:d2:de:36:f3:
         d2:af:ab:92:a5:66:ac:62:26:44:6e:8f:55:4a:00:2e:11:c2:
         96:81:f2:84:4e:21:ec:05:56:78:66:75:26:0f:7a:a0:03:48:
         38:d5:b0:bd:04:c5:f1:40:5b:70:1b:7c:99:7e:27:0d:ae:36:
         0b:df:f5:e2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUKoM8c070vXYH0jXSdUMUdhCG7ZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNFQ0FBRDI5QUFGNzUxMjZEOEQyRjU5NEZDNDNBQjBF
N0IzQTEwRDAeFw0yNTAzMDYwNDAxMDFaFw0yNjAzMDUwNDA2MDFaMDMxMTAvBgNV
BAMTKDZFMEY3NzI0MjU4RDExMjQ2MTI2MEVFMDgwMEJEMTY0REEzRTFCQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/pM9+3q7bz4Tnk84P8yuVPIw
IBBuk03Svbfc4qyGyd9YZid/4Etlqm4OeHgVOJVpKBSFAxlTj+xI0UnJ1ChIActg
c/E2UenBXOYdAZDSsQBqeHZHt8j29C2AbbFmHv7VvhLmmtgIiqPBoOkS9ldcRprY
I0HUtRr7wLJkSvToVM0F44OLmcVLAVymuKT8xxfVrYRqvXOpCLnTJsngwrfNE+Rr
V/wjjoBXS1j66e8xWob2ujfM+CU+bkfMzpyt2jNuulymnjwiuhJlT9ZM+1lODvUp
y46Cr2bv0O++GiAgIYv94fAJfG5hNUeMkYIQBANkrI5I9AR1nOAIWOj4OgX3AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUbg93JCWNESRhJg7ggAvRZNo+G70wHwYDVR0j
BBgwFoAUrOyq0pqvdRJtjS9ZT8Q6sOezoQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYy
blovMi9BQ0VDQUFEMjlBQUY3NTEyNkQ4RDJGNTk0RkM0M0FCMEU3QjNBMTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRUNBQUQyOUFBRjc1MTI2
RDhEMkY1OTRGQzQzQUIwRTdCM0ExMEQuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htZkppVTh1UnZqbzVpSllRcFJ4SzFlWjZrNHh4SjVXMnNRTUY4MUhmMm5aLzIv
MzIzODMwMzQzYTMzNjQzOTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMDMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQ9kDANBgkqhkiG9w0BAQsFAAOCAQEARZQJWkWVkxjoXoQ8
coAM5rJnlby7Ics5SL83+EUp/p77OdWuRG5A0dlivF6o95Mw3z/84Y55VJNzaMAf
MJgltiu/DjkQQiiHlF+DSlXS4JvGu4xRCE30Jz+jxzrXbRbFxNDMYIXSCRNH6EQw
wPrJ2S0/jM61xMqNph3xx6FOaG5VJbO8lA42eQFY/g2D2wkKo2IwaaGUerWQspDu
P+QrVDV0+WwcZepmA4VXphC7utBeHkQsiiInaW7WOwFpOS7INf3S3jbz0q+rkqVm
rGImRG6PVUoALhHCloHyhE4h7AVWeGZ1Jg96oANIONWwvQTF8UBbcBt8mX4nDa42
C9/14g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:30:07 2025 by rpki-client