Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/323830343a353832633a3a2f33322d313238203d3e20323638313131.roa
File:                     323830343a353832633a3a2f33322d313238203d3e20323638313131.roa (raw, json)
Hash identifier:          wx2OjgVPCKu0mi8tJ2Kv38MzFkGZ1wDQiARdjJR5DhA=
Subject key identifier:   EE:5F:6F:44:25:55:48:18:BE:12:23:8C:D0:22:3B:B0:4C:B1:95:D3
Certificate issuer:       /CN=2F31829AD9E8542E92D68A1D4B84371FA881196F
Certificate serial:       162A14D2478ACE79199587469FD4982544C2E15F
Authority key identifier: 2F:31:82:9A:D9:E8:54:2E:92:D6:8A:1D:4B:84:37:1F:A8:81:19:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F31829AD9E8542E92D68A1D4B84371FA881196F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/323830343a353832633a3a2f33322d313238203d3e20323638313131.roa
Signing time:             Thu 05 Dec 2024 15:34:36 +0000
ROA not before:           Thu 05 Dec 2024 15:29:36 +0000
ROA not after:            Thu 04 Dec 2025 15:34:36 +0000
asID:                     268111
IP address blocks:        2804:582c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2a:14:d2:47:8a:ce:79:19:95:87:46:9f:d4:98:25:44:c2:e1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F31829AD9E8542E92D68A1D4B84371FA881196F
        Validity
            Not Before: Dec  5 15:29:36 2024 GMT
            Not After : Dec  4 15:34:36 2025 GMT
        Subject: CN=EE5F6F4425554818BE12238CD0223BB04CB195D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:cd:e5:f7:c6:c5:93:bb:b1:3f:6e:73:dc:
                    39:fe:87:9b:7a:b9:73:e6:f6:84:50:52:fd:9c:f3:
                    4b:31:a2:23:d2:8f:1a:8d:7a:0b:8e:1b:66:99:14:
                    0e:a3:62:9d:59:39:05:36:74:23:d1:46:39:28:22:
                    fc:69:fc:c6:5d:84:01:f4:06:f7:6b:d7:e3:09:f4:
                    13:1c:7d:1b:53:a6:74:89:fa:a0:1d:a5:43:87:0c:
                    c0:cf:7d:02:a0:ed:c0:5e:b4:ea:9e:41:52:62:33:
                    65:3c:22:2c:7d:95:b1:0c:09:f8:83:40:24:45:b5:
                    ad:71:41:4b:9d:f0:59:38:06:3e:b5:fd:ce:29:c8:
                    82:59:73:e6:15:27:3c:ff:c3:fc:1b:1d:19:89:d3:
                    5c:42:07:29:8f:75:e7:cf:19:b0:52:8c:d8:77:c3:
                    b1:84:64:5a:e0:8d:a7:6d:91:73:f8:6c:88:47:c4:
                    dd:41:6e:a8:a4:57:2c:ee:f6:d6:cc:69:d9:a9:8c:
                    ae:10:45:0d:eb:2b:70:d2:7d:53:09:2f:ce:8b:1d:
                    57:08:74:67:e0:4f:0c:3a:63:e3:c7:0d:d5:a0:4b:
                    36:89:d0:b5:45:de:0f:06:a4:97:0a:a5:02:15:7c:
                    da:b0:da:e4:e2:fc:cb:3d:fb:2e:10:a2:f4:68:c2:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5F:6F:44:25:55:48:18:BE:12:23:8C:D0:22:3B:B0:4C:B1:95:D3
            X509v3 Authority Key Identifier:
                keyid:2F:31:82:9A:D9:E8:54:2E:92:D6:8A:1D:4B:84:37:1F:A8:81:19:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/2F31829AD9E8542E92D68A1D4B84371FA881196F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F31829AD9E8542E92D68A1D4B84371FA881196F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/323830343a353832633a3a2f33322d313238203d3e20323638313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:582c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:b0:f2:50:42:1c:34:ef:a3:16:8f:97:eb:e7:46:9d:a9:
         c8:3e:da:51:d1:48:76:c4:b8:94:cc:62:c6:d0:b9:7c:17:61:
         51:1d:da:38:fb:54:fc:6e:e2:76:fe:19:70:40:96:ec:92:34:
         b6:9c:50:d2:4c:19:e2:cc:c7:3e:47:45:5c:9a:4e:ef:84:d1:
         41:83:f4:f6:ca:8e:52:f1:4b:08:3f:d6:54:08:48:11:7b:74:
         89:15:64:a7:9c:8e:59:9f:ad:52:a4:1f:58:3b:1d:d2:e6:7a:
         33:ec:77:a8:33:22:9c:28:d2:f2:4b:fc:0b:e6:9b:71:b9:87:
         04:f9:90:84:ec:7b:85:31:a0:07:19:2e:80:8b:43:1b:c3:7d:
         71:68:53:b1:c7:dc:fa:6f:bc:ca:87:75:0e:a1:56:7c:8c:91:
         9b:a2:d3:1c:13:03:65:c4:e5:82:2a:7e:20:55:56:e9:e3:0e:
         de:79:32:35:4f:4a:88:95:24:90:60:f5:00:0a:da:b2:a8:5a:
         4f:00:ca:a7:bf:7a:42:2c:1a:55:a2:cf:33:3c:8b:22:11:c0:
         b0:c0:bf:a5:b8:5b:85:ac:9d:e2:eb:d1:d1:6d:d3:eb:62:47:
         e5:70:e9:af:cd:3e:a4:62:90:da:52:9a:07:ef:96:70:1a:d8:
         0d:35:e2:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFioU0keKznkZlYdGn9SYJUTC4V8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzMTgyOUFEOUU4NTQyRTkyRDY4QTFENEI4NDM3MUZB
ODgxMTk2RjAeFw0yNDEyMDUxNTI5MzZaFw0yNTEyMDQxNTM0MzZaMDMxMTAvBgNV
BAMTKEVFNUY2RjQ0MjU1NTQ4MThCRTEyMjM4Q0QwMjIzQkIwNENCMTk1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGuM3l98bFk7uxP25z3Dn+h5t6
uXPm9oRQUv2c80sxoiPSjxqNeguOG2aZFA6jYp1ZOQU2dCPRRjkoIvxp/MZdhAH0
Bvdr1+MJ9BMcfRtTpnSJ+qAdpUOHDMDPfQKg7cBetOqeQVJiM2U8Iix9lbEMCfiD
QCRFta1xQUud8Fk4Bj61/c4pyIJZc+YVJzz/w/wbHRmJ01xCBymPdefPGbBSjNh3
w7GEZFrgjadtkXP4bIhHxN1BbqikVyzu9tbMadmpjK4QRQ3rK3DSfVMJL86LHVcI
dGfgTww6Y+PHDdWgSzaJ0LVF3g8GpJcKpQIVfNqw2uTi/Ms9+y4QovRowsx9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7l9vRCVVSBi+EiOM0CI7sEyxldMwHwYDVR0j
BBgwFoAULzGCmtnoVC6S1oodS4Q3H6iBGW8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9tYldEeG1aVnRaMzhSdG11WjFaR0xNVDRrYVphYmk2YktCSHFjSnM3NEw4
LzAvMkYzMTgyOUFEOUU4NTQyRTkyRDY4QTFENEI4NDM3MUZBODgxMTk2Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRjMxODI5QUQ5RTg1NDJFOTJE
NjhBMUQ0Qjg0MzcxRkE4ODExOTZGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9t
YldEeG1aVnRaMzhSdG11WjFaR0xNVDRrYVphYmk2YktCSHFjSnM3NEw4LzAvMzIz
ODMwMzQzYTM1MzgzMjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzgz
MTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBFgsMA0GCSqGSIb3DQEBCwUAA4IBAQBqmbDyUEIc
NO+jFo+X6+dGnanIPtpR0Uh2xLiUzGLG0Ll8F2FRHdo4+1T8buJ2/hlwQJbskjS2
nFDSTBnizMc+R0Vcmk7vhNFBg/T2yo5S8UsIP9ZUCEgRe3SJFWSnnI5Zn61SpB9Y
Ox3S5noz7HeoMyKcKNLyS/wL5ptxuYcE+ZCE7HuFMaAHGS6Ai0Mbw31xaFOxx9z6
b7zKh3UOoVZ8jJGbotMcEwNlxOWCKn4gVVbp4w7eeTI1T0qIlSSQYPUACtqyqFpP
AMqnv3pCLBpVos8zPIsiEcCwwL+luFuFrJ3i69HRbdPrYkflcOmvzT6kYpDaUpoH
75ZwGtgNNeKa
-----END CERTIFICATE-----
Generated at Sun Apr 13 23:30:09 2025 by rpki-client