Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/1/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa
File:                     323830343a373334383a3a2f33322d3332203d3e20323632363930.roa (raw, json)
Hash identifier:          oLw1u72zv/DQcUv7jbuqHQmct08d3ncpx7gZvgfdLrw=
Subject key identifier:   0D:35:00:C5:7D:96:B1:12:AA:A5:E6:7F:EE:43:0C:3D:10:75:96:1B
Certificate issuer:       /CN=FA0EB41F8EE1939E6DEA00EAC64C4A816E1FA193
Certificate serial:       76D3FE412FE5CBC53C8AB837F821AA890DE8DD03
Authority key identifier: FA:0E:B4:1F:8E:E1:93:9E:6D:EA:00:EA:C6:4C:4A:81:6E:1F:A1:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA0EB41F8EE1939E6DEA00EAC64C4A816E1FA193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/1/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa
Signing time:             Tue 28 Jan 2025 14:08:10 +0000
ROA not before:           Tue 28 Jan 2025 14:03:10 +0000
ROA not after:            Tue 27 Jan 2026 14:08:10 +0000
asID:                     262690
IP address blocks:        2804:7348::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d3:fe:41:2f:e5:cb:c5:3c:8a:b8:37:f8:21:aa:89:0d:e8:dd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA0EB41F8EE1939E6DEA00EAC64C4A816E1FA193
        Validity
            Not Before: Jan 28 14:03:10 2025 GMT
            Not After : Jan 27 14:08:10 2026 GMT
        Subject: CN=0D3500C57D96B112AAA5E67FEE430C3D1075961B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:d6:83:00:f3:86:f9:a7:6b:da:31:f2:b4:
                    c8:46:ce:c8:f5:2a:ab:1a:a6:0c:de:61:0c:b4:8a:
                    fc:4f:15:96:66:93:be:f0:e9:b1:eb:b6:e0:13:33:
                    cf:a1:12:1c:6e:40:02:7e:60:df:43:8f:24:a9:ad:
                    a3:2d:44:a0:29:1b:2d:09:c2:13:1b:30:c5:36:f6:
                    7e:09:08:d1:0c:78:8f:8e:b1:83:e5:2e:bc:48:b8:
                    61:6d:2c:c1:46:0d:d0:24:ad:fa:0b:47:cc:54:49:
                    a5:75:90:04:f1:f6:11:a6:24:7d:e8:2a:61:42:d3:
                    58:eb:e1:f1:06:36:49:fa:41:3c:66:a9:f6:d7:04:
                    de:da:b0:d1:bc:48:ab:cc:8a:36:fa:2c:2b:6d:36:
                    98:c5:63:6c:3e:fb:96:21:3e:58:88:dd:e0:bc:c8:
                    09:2e:da:90:fe:94:aa:01:c8:26:9f:4a:19:15:bd:
                    92:0d:f5:30:4e:78:63:91:02:4b:58:7a:5b:02:0d:
                    23:b2:40:92:89:95:d4:08:51:52:9b:b7:25:e4:00:
                    57:49:e1:13:c8:f0:5f:86:56:8d:e5:43:43:b5:fd:
                    97:fb:53:9f:95:7a:58:e4:b0:51:35:1b:67:aa:a0:
                    6e:91:09:b6:bc:07:e9:ef:a3:96:9b:54:32:7c:16:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:35:00:C5:7D:96:B1:12:AA:A5:E6:7F:EE:43:0C:3D:10:75:96:1B
            X509v3 Authority Key Identifier:
                keyid:FA:0E:B4:1F:8E:E1:93:9E:6D:EA:00:EA:C6:4C:4A:81:6E:1F:A1:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/1/FA0EB41F8EE1939E6DEA00EAC64C4A816E1FA193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA0EB41F8EE1939E6DEA00EAC64C4A816E1FA193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/1/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7348::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:da:b3:d4:e4:21:d5:dd:70:02:4e:e9:37:64:12:8f:35:a5:
         43:9a:fa:a0:96:0d:ff:04:e7:c9:f5:1f:39:ee:06:85:00:3e:
         a3:7f:ad:c1:29:ea:d4:14:74:00:9e:64:85:d0:ec:8a:82:d5:
         07:1f:bb:fd:a6:5e:7d:c3:51:4e:82:29:4a:90:0c:b4:55:8f:
         81:f2:b0:3e:8e:1b:7f:22:89:19:2b:58:c5:1c:a8:6e:1c:6f:
         46:dc:a0:0b:9f:3b:b7:c7:39:d3:31:9c:f8:79:4c:34:49:09:
         35:c0:07:2c:bc:26:6f:65:5a:15:0c:4f:e5:35:99:10:f6:33:
         fb:74:c7:52:70:0c:d1:10:2f:35:ec:fa:ca:35:78:87:4d:e5:
         6b:0c:7e:fe:69:c7:0e:ba:ff:25:98:62:b2:bc:b1:e0:e7:01:
         ea:31:47:b0:ff:87:28:77:53:c2:4f:58:9e:c9:0a:57:15:d3:
         e8:06:c5:63:65:7c:60:f4:98:15:f1:b7:a7:aa:5a:d1:a3:64:
         0a:04:6f:37:ff:8d:53:c0:dd:b4:42:8b:cf:8a:21:6e:40:f5:
         1c:aa:c6:66:10:ff:39:11:15:92:61:61:71:21:3e:7c:69:90:
         0d:9a:03:65:56:b7:ba:8e:80:4d:7d:c8:ca:31:b7:e0:65:0f:
         e7:51:e3:73
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdtP+QS/ly8U8irg3+CGqiQ3o3QMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkEwRUI0MUY4RUUxOTM5RTZERUEwMEVBQzY0QzRBODE2
RTFGQTE5MzAeFw0yNTAxMjgxNDAzMTBaFw0yNjAxMjcxNDA4MTBaMDMxMTAvBgNV
BAMTKDBEMzUwMEM1N0Q5NkIxMTJBQUE1RTY3RkVFNDMwQzNEMTA3NTk2MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PNaDAPOG+adr2jHytMhGzsj1
KqsapgzeYQy0ivxPFZZmk77w6bHrtuATM8+hEhxuQAJ+YN9DjySpraMtRKApGy0J
whMbMMU29n4JCNEMeI+OsYPlLrxIuGFtLMFGDdAkrfoLR8xUSaV1kATx9hGmJH3o
KmFC01jr4fEGNkn6QTxmqfbXBN7asNG8SKvMijb6LCttNpjFY2w++5YhPliI3eC8
yAku2pD+lKoByCafShkVvZIN9TBOeGORAktYelsCDSOyQJKJldQIUVKbtyXkAFdJ
4RPI8F+GVo3lQ0O1/Zf7U5+VeljksFE1G2eqoG6RCba8B+nvo5abVDJ8FrsrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDTUAxX2WsRKqpeZ/7kMMPRB1lhswHwYDVR0j
BBgwFoAU+g60H47hk55t6gDqxkxKgW4foZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODJ6cnVhU1RkYWNVMWFQc0FDSkc4bXFXY1A3a1c2SlF4ZkZ5WG15cnBO
bVovMS9GQTBFQjQxRjhFRTE5MzlFNkRFQTAwRUFDNjRDNEE4MTZFMUZBMTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMEVCNDFGOEVFMTkzOUU2
REVBMDBFQUM2NEM0QTgxNkUxRkExOTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgyenJ1YVNUZGFjVTFhUHNBQ0pHOG1xV2NQN2tXNkpReGZGeVhteXJwTm1aLzEv
MzIzODMwMzQzYTM3MzMzNDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzYzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARzSDANBgkqhkiG9w0BAQsFAAOCAQEATdqz1OQh
1d1wAk7pN2QSjzWlQ5r6oJYN/wTnyfUfOe4GhQA+o3+twSnq1BR0AJ5khdDsioLV
Bx+7/aZefcNRToIpSpAMtFWPgfKwPo4bfyKJGStYxRyobhxvRtygC587t8c50zGc
+HlMNEkJNcAHLLwmb2VaFQxP5TWZEPYz+3THUnAM0RAvNez6yjV4h03lawx+/mnH
Drr/JZhisryx4OcB6jFHsP+HKHdTwk9YnskKVxXT6AbFY2V8YPSYFfG3p6pa0aNk
CgRvN/+NU8DdtEKLz4ohbkD1HKrGZhD/OREVkmFhcSE+fGmQDZoDZVa3uo6ATX3I
yjG34GUP51Hjcw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:13 2025 by rpki-client