Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa
File:                     323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier:          kWSZjP/S0wOZ/w2S2n/OH77oqdBgRGLwC0rMAZNbGzA=
Subject key identifier:   EF:2D:57:CB:32:31:46:5E:3D:78:75:1E:5F:96:85:C3:73:7A:69:8D
Certificate issuer:       /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial:       62C734A1329C3DF3ED1AF41CC7A68A2064547F64
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa
Signing time:             Sat 21 Dec 2024 00:23:48 +0000
ROA not before:           Sat 21 Dec 2024 00:18:48 +0000
ROA not after:            Sat 20 Dec 2025 00:23:48 +0000
asID:                     11097
IP address blocks:        2801:80:1418::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c7:34:a1:32:9c:3d:f3:ed:1a:f4:1c:c7:a6:8a:20:64:54:7f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
        Validity
            Not Before: Dec 21 00:18:48 2024 GMT
            Not After : Dec 20 00:23:48 2025 GMT
        Subject: CN=EF2D57CB3231465E3D78751E5F9685C3737A698D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:d2:36:8a:a4:aa:18:d1:ba:07:fe:8e:f2:
                    45:56:1e:20:f2:58:d3:95:3c:ee:93:43:93:b2:72:
                    ed:f1:d4:68:d5:a1:b5:41:80:f7:91:f7:2a:b7:ec:
                    8e:f9:67:88:86:49:b6:12:1c:4a:93:d9:c9:cd:4e:
                    48:8b:82:f5:6a:7d:75:93:1f:6a:15:5e:71:00:19:
                    53:95:4a:6a:28:5e:e5:9e:59:f8:83:2f:cb:a0:ad:
                    87:44:7b:86:57:e5:79:36:3b:5f:28:08:9e:b4:87:
                    ab:c1:bd:3f:51:fe:12:48:32:a6:d1:c4:5b:ad:30:
                    5b:ec:af:3d:18:11:95:ce:07:7b:bc:01:c8:ff:b0:
                    4a:a3:83:3e:7a:68:78:78:a4:f6:c1:47:c2:4c:5b:
                    b4:fb:cb:d3:d8:31:90:93:50:a9:6b:08:85:77:f4:
                    e2:ea:d4:4b:42:42:b1:89:61:50:d1:5a:4e:79:89:
                    d7:98:ce:db:43:8b:e0:be:9a:e1:c3:85:e5:1e:cb:
                    b0:8d:49:bc:a2:7b:5c:c2:b4:c9:17:d5:2b:0f:39:
                    a4:ef:1c:8a:04:f6:2b:2e:ca:83:2e:c7:93:9a:bd:
                    99:e6:97:6e:e4:05:0c:53:50:a2:be:ad:87:92:79:
                    d6:a1:79:ec:81:a2:42:49:21:15:c0:00:40:0c:dc:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2D:57:CB:32:31:46:5E:3D:78:75:1E:5F:96:85:C3:73:7A:69:8D
            X509v3 Authority Key Identifier:
                keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1418::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:99:7e:33:d7:16:cc:f1:61:02:ab:c1:84:d3:3a:30:24:
         1f:5c:96:02:40:cf:42:3d:70:ec:fd:df:d1:4e:b2:79:f0:e0:
         eb:81:31:b6:cb:41:96:61:bb:5b:28:8d:cf:79:c5:cb:ce:81:
         1e:8b:56:e1:de:90:b2:fd:d9:f9:6b:81:f7:91:5f:14:04:c6:
         75:02:c0:4b:79:41:1b:68:f8:f2:36:eb:60:3d:cd:9d:65:4c:
         ed:65:11:4d:52:fc:17:77:7e:dc:3f:ee:18:fc:4a:52:20:f4:
         b9:c6:d1:d6:43:28:5f:d5:20:3a:5e:a1:11:72:fb:33:a0:a1:
         80:ab:35:55:83:05:a0:4a:fe:1c:34:96:b8:6d:7f:18:2c:ae:
         14:89:36:c0:61:07:f1:6a:8c:b5:17:2d:f8:11:e1:8b:97:13:
         b2:2b:28:1b:78:99:eb:cd:73:ce:c8:10:98:89:48:a9:61:23:
         fb:88:c2:f6:9b:ae:0a:59:39:32:b5:53:ef:e1:2c:36:1a:46:
         a9:1f:43:fe:d2:bb:5c:99:c1:07:f5:e4:8a:c8:77:49:7d:79:
         5d:29:97:a2:6e:1f:18:d3:c7:98:cb:6e:ed:0a:63:74:1e:3a:
         18:74:7a:a9:d1:6a:42:dc:24:ee:6a:6b:73:1b:ba:4d:19:8b:
         4e:83:d7:ae
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUYsc0oTKcPfPtGvQcx6aKIGRUf2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAyRkE3Q0E0RkI2OEE3RjA0NERCQzg4ODExNDg0QzA2
NTMzNEE3NDAeFw0yNDEyMjEwMDE4NDhaFw0yNTEyMjAwMDIzNDhaMDMxMTAvBgNV
BAMTKEVGMkQ1N0NCMzIzMTQ2NUUzRDc4NzUxRTVGOTY4NUMzNzM3QTY5OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn8tI2iqSqGNG6B/6O8kVWHiDy
WNOVPO6TQ5Oycu3x1GjVobVBgPeR9yq37I75Z4iGSbYSHEqT2cnNTkiLgvVqfXWT
H2oVXnEAGVOVSmooXuWeWfiDL8ugrYdEe4ZX5Xk2O18oCJ60h6vBvT9R/hJIMqbR
xFutMFvsrz0YEZXOB3u8Acj/sEqjgz56aHh4pPbBR8JMW7T7y9PYMZCTUKlrCIV3
9OLq1EtCQrGJYVDRWk55ideYzttDi+C+muHDheUey7CNSbyie1zCtMkX1SsPOaTv
HIoE9isuyoMux5OavZnml27kBQxTUKK+rYeSedaheeyBokJJIRXAAEAM3G6pAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU7y1XyzIxRl49eHUeX5aFw3N6aY0wHwYDVR0j
BBgwFoAUIC+nyk+2in8ETbyIgRSEwGUzSnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFoybm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBp
ZWUvMC8yMDJGQTdDQTRGQjY4QTdGMDQ0REJDODg4MTE0ODRDMDY1MzM0QTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMkZBN0NBNEZCNjhBN0Yw
NDREQkM4ODgxMTQ4NEMwNjUzMzRBNzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaMm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAv
MzIzODMwMzEzYTM4MzAzYTMxMzQzMTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzEzMTMwMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAIAUGDANBgkqhkiG9w0BAQsFAAOCAQEA
Kc6ZfjPXFszxYQKrwYTTOjAkH1yWAkDPQj1w7P3f0U6yefDg64ExtstBlmG7WyiN
z3nFy86BHotW4d6Qsv3Z+WuB95FfFATGdQLAS3lBG2j48jbrYD3NnWVM7WURTVL8
F3d+3D/uGPxKUiD0ucbR1kMoX9UgOl6hEXL7M6ChgKs1VYMFoEr+HDSWuG1/GCyu
FIk2wGEH8WqMtRct+BHhi5cTsisoG3iZ681zzsgQmIlIqWEj+4jC9puuClk5MrVT
7+EsNhpGqR9D/tK7XJnBB/Xkish3SX15XSmXom4fGNPHmMtu7QpjdB46GHR6qdFq
Qtwk7mprcxu6TRmLToPXrg==
-----END CERTIFICATE-----
Generated at Thu May 8 10:14:00 2025 by rpki-client