Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a613a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a613a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          j1BmnlpGvKDC8hi8PoeCTRynQFdkGkhJ0Eq3dGA9LYQ=
Subject key identifier:   B0:AC:91:94:3D:13:AB:85:98:59:DA:AA:15:F0:9C:4E:F4:BE:51:29
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       35D0A1B00A6EECE38A80F71A0E0F96CD0A842C9D
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a613a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:23:57 +0000
ROA not before:           Fri 14 Feb 2025 19:18:57 +0000
ROA not after:            Fri 13 Feb 2026 19:23:57 +0000
asID:                     52580
IP address blocks:        2804:cf8:a::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d0:a1:b0:0a:6e:ec:e3:8a:80:f7:1a:0e:0f:96:cd:0a:84:2c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:18:57 2025 GMT
            Not After : Feb 13 19:23:57 2026 GMT
        Subject: CN=B0AC91943D13AB859859DAAA15F09C4EF4BE5129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:2d:2d:e1:ae:da:ea:4b:77:a6:13:c2:d5:
                    2b:f2:21:08:7c:f8:ba:55:0c:a1:3c:d2:25:45:0b:
                    7e:f1:f9:6c:6d:b4:85:75:d7:71:a6:1d:a3:37:d4:
                    4c:d0:31:32:2b:c9:b6:e5:e2:8b:66:ff:e9:9d:d8:
                    a5:64:79:24:ab:1b:31:51:28:6f:99:1e:3c:3d:4a:
                    06:4a:3b:98:66:a1:90:65:03:ad:39:5e:22:aa:ac:
                    61:ed:96:fd:3e:b0:d7:f4:bc:ef:ef:dd:fd:cf:70:
                    9c:28:f3:71:bf:42:10:93:1e:13:63:e3:61:34:6f:
                    9f:36:70:09:5d:c9:61:a7:de:d7:2e:e4:18:2d:72:
                    84:1e:10:34:62:1a:a3:a0:33:44:00:c0:1f:e6:10:
                    7b:3b:f8:ac:e5:91:25:38:e0:d3:72:ee:1f:bc:f6:
                    06:ff:b6:c3:dc:8a:96:be:52:a0:23:92:77:3c:6d:
                    e2:64:7c:57:4d:d9:13:32:ba:e2:64:31:d2:72:1b:
                    22:c5:6b:d4:ce:ee:a2:c0:58:99:99:7b:48:a0:34:
                    d8:27:b3:8b:7e:73:a1:14:60:e2:94:81:4f:f6:7e:
                    8e:0f:42:4f:3e:6c:91:20:bf:1c:4f:2f:80:a3:52:
                    10:56:16:4c:be:52:4e:6a:0c:f5:a8:78:69:de:cf:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:91:94:3D:13:AB:85:98:59:DA:AA:15:F0:9C:4E:F4:BE:51:29
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a613a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:b1:60:66:2a:3c:8c:0f:33:5d:e8:ed:c9:1e:0c:f1:84:9b:
         30:66:67:d6:0a:26:ef:c9:12:83:a3:c7:fe:3b:ed:68:39:7c:
         3a:4a:30:ce:96:40:23:f2:fa:05:09:41:3a:f6:34:b1:59:cb:
         f6:fc:7d:79:a7:c4:4e:8c:36:6c:d5:fd:f6:54:41:f6:84:49:
         6f:e0:7e:9e:91:1c:d5:af:0c:dd:8b:ec:28:17:98:47:14:54:
         9b:8f:f8:39:06:cd:24:a4:58:c3:08:cb:18:28:7d:2e:f8:fa:
         24:56:85:7e:71:bd:a1:68:44:d0:e5:4e:13:b4:e2:0e:fc:8a:
         f2:e1:8a:14:68:fb:0b:80:85:9b:7b:6c:b8:c7:26:1a:c6:8a:
         98:13:a8:1f:bf:58:b2:bd:90:98:14:10:63:4d:04:ef:94:58:
         09:41:a9:1f:0d:ee:e9:d1:6e:cc:54:67:3f:64:db:31:5d:ff:
         78:45:32:77:ed:a2:54:d4:00:a7:df:32:d3:7e:44:04:ac:7e:
         02:36:53:20:9b:a5:1a:f0:e0:20:16:1c:08:b6:91:9b:0e:2a:
         b2:d8:ad:22:96:7a:24:dc:e5:42:c3:d2:a9:0e:82:9b:1c:27:
         54:05:2a:a6:27:90:ef:36:80:db:49:5b:43:22:3a:ea:1e:d8:
         7c:38:97:dd
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUNdChsApu7OOKgPcaDg+WzQqELJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTE4NTdaFw0yNjAyMTMxOTIzNTdaMDMxMTAvBgNV
BAMTKEIwQUM5MTk0M0QxM0FCODU5ODU5REFBQTE1RjA5QzRFRjRCRTUxMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNS0t4a7a6kt3phPC1SvyIQh8
+LpVDKE80iVFC37x+WxttIV113GmHaM31EzQMTIrybbl4otm/+md2KVkeSSrGzFR
KG+ZHjw9SgZKO5hmoZBlA605XiKqrGHtlv0+sNf0vO/v3f3PcJwo83G/QhCTHhNj
42E0b582cAldyWGn3tcu5BgtcoQeEDRiGqOgM0QAwB/mEHs7+KzlkSU44NNy7h+8
9gb/tsPcipa+UqAjknc8beJkfFdN2RMyuuJkMdJyGyLFa9TO7qLAWJmZe0igNNgn
s4t+c6EUYOKUgU/2fo4PQk8+bJEgvxxPL4CjUhBWFky+Uk5qDPWoeGnez2qLAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUsKyRlD0Tq4WYWdqqFfCcTvS+USkwHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhNjEzYTNhMmYzNDM4MmQzMTMyMzgyMDNkM2UyMDM1
MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBAz4AAowDQYJKoZIhvcNAQELBQADggEBAGOx
YGYqPIwPM13o7ckeDPGEmzBmZ9YKJu/JEoOjx/477Wg5fDpKMM6WQCPy+gUJQTr2
NLFZy/b8fXmnxE6MNmzV/fZUQfaESW/gfp6RHNWvDN2L7CgXmEcUVJuP+DkGzSSk
WMMIyxgofS74+iRWhX5xvaFoRNDlThO04g78ivLhihRo+wuAhZt7bLjHJhrGipgT
qB+/WLK9kJgUEGNNBO+UWAlBqR8N7unRbsxUZz9k2zFd/3hFMnftolTUAKffMtN+
RASsfgI2UyCbpRrw4CAWHAi2kZsOKrLYrSKWeiTc5ULD0qkOgpscJ1QFKqYnkO82
gNtJW0MiOuoe2Hw4l90=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:17:24 2025 by rpki-client