Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33332d3333203d3e20323639303234.roa
File:                     323830343a356534633a383030303a3a2f33332d3333203d3e20323639303234.roa (raw, json)
Hash identifier:          VTlAl0DzQFV0g4d1QcyZ/A2DTN+obxWRCXz0TcLhW3c=
Subject key identifier:   FC:B8:A7:3A:3B:74:99:34:EC:82:2F:32:27:05:99:BA:60:1A:14:76
Certificate issuer:       /CN=7962F63B2A96B25A149B7A2C1CD72908ECFD5E38
Certificate serial:       05FF9D3E7F3A03416BD86F7A42FF0032AE7B0E04
Authority key identifier: 79:62:F6:3B:2A:96:B2:5A:14:9B:7A:2C:1C:D7:29:08:EC:FD:5E:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7962F63B2A96B25A149B7A2C1CD72908ECFD5E38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33332d3333203d3e20323639303234.roa
Signing time:             Thu 30 Jan 2025 21:00:23 +0000
ROA not before:           Thu 30 Jan 2025 20:55:23 +0000
ROA not after:            Thu 29 Jan 2026 21:00:23 +0000
asID:                     269024
IP address blocks:        2804:5e4c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ff:9d:3e:7f:3a:03:41:6b:d8:6f:7a:42:ff:00:32:ae:7b:0e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7962F63B2A96B25A149B7A2C1CD72908ECFD5E38
        Validity
            Not Before: Jan 30 20:55:23 2025 GMT
            Not After : Jan 29 21:00:23 2026 GMT
        Subject: CN=FCB8A73A3B749934EC822F32270599BA601A1476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:5e:35:17:23:6f:2b:b5:a4:06:a4:2a:98:
                    d5:fd:81:49:00:52:a9:53:c4:a8:5c:dc:3d:7c:4c:
                    19:3c:cf:11:39:60:1f:0c:3f:9f:ce:1a:47:92:32:
                    a6:3f:a7:52:c0:3e:76:26:ab:35:96:bf:ce:ce:51:
                    5e:16:13:d0:7f:e9:20:70:c5:33:77:f3:d6:f4:98:
                    28:7e:c1:4b:82:40:36:37:9a:fb:06:ef:fc:c3:a7:
                    2e:7c:29:99:5d:83:79:27:17:98:0b:e3:12:20:b5:
                    00:3b:f2:b0:65:45:a2:15:75:74:d2:fe:f6:ea:f4:
                    c4:2f:87:41:8f:2e:e2:02:17:bf:09:c8:9f:54:d0:
                    90:9d:04:14:08:ec:9e:52:bb:92:58:eb:f6:ce:b9:
                    58:9e:21:5b:b4:b5:38:39:e1:00:83:4d:d6:da:02:
                    88:a4:42:09:e2:1a:a7:92:93:75:2d:b2:18:4d:2e:
                    58:9e:4a:18:9b:c3:89:83:a2:04:e5:f2:7a:84:8c:
                    25:be:63:d3:1d:78:67:f0:e9:34:b7:42:f6:a0:8a:
                    4c:86:7f:e4:4e:5a:93:d7:e7:c3:20:7d:d6:ac:01:
                    ad:11:30:ad:de:c6:be:00:aa:7e:52:ae:17:8f:20:
                    f2:6f:06:80:d0:d5:76:16:1f:a5:37:b2:6e:77:e2:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:A7:3A:3B:74:99:34:EC:82:2F:32:27:05:99:BA:60:1A:14:76
            X509v3 Authority Key Identifier:
                keyid:79:62:F6:3B:2A:96:B2:5A:14:9B:7A:2C:1C:D7:29:08:EC:FD:5E:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/7962F63B2A96B25A149B7A2C1CD72908ECFD5E38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7962F63B2A96B25A149B7A2C1CD72908ECFD5E38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33332d3333203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:02:90:78:38:f3:1c:b9:18:50:af:59:9e:a3:83:ee:22:7f:
         18:2d:0d:bf:b8:43:76:4d:30:72:b1:2c:cf:a8:b4:b3:b1:ed:
         47:61:3b:c4:67:cc:39:30:d4:c7:04:4b:28:9c:de:83:62:ad:
         67:43:e9:47:b0:ec:ad:6a:1d:a2:e1:9b:00:5f:43:4a:0d:55:
         02:2b:ed:18:15:a3:80:c4:2d:91:d6:06:7f:a2:e0:d4:75:72:
         60:2c:47:13:13:9d:1f:28:98:dd:5c:76:9e:4a:05:4a:01:83:
         5f:db:56:9e:6a:b0:a6:60:20:a4:0d:31:d0:56:64:cb:99:85:
         63:4f:d6:45:11:ee:d5:d8:37:f3:6a:80:25:9d:80:e7:ac:0e:
         0c:a5:e1:74:ab:cb:e4:ec:a9:43:fd:7b:7f:b0:e4:46:92:6a:
         3d:31:0a:42:04:12:a8:96:76:82:db:a7:be:f1:4e:d5:25:e4:
         4c:c5:17:90:11:e1:5e:8a:95:c7:c3:aa:b1:00:19:30:00:a3:
         87:64:fb:1c:8a:2b:30:71:f2:92:75:d2:9b:c5:ae:e0:e8:f0:
         b1:1a:c3:82:66:b1:6e:8c:06:16:40:ce:df:80:19:f5:b8:83:
         2d:85:17:10:bb:ec:cd:b6:0c:10:01:ee:80:ef:ed:5b:05:4f:
         02:d9:26:b3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBf+dPn86A0Fr2G96Qv8AMq57DgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk2MkY2M0IyQTk2QjI1QTE0OUI3QTJDMUNENzI5MDhF
Q0ZENUUzODAeFw0yNTAxMzAyMDU1MjNaFw0yNjAxMjkyMTAwMjNaMDMxMTAvBgNV
BAMTKEZDQjhBNzNBM0I3NDk5MzRFQzgyMkYzMjI3MDU5OUJBNjAxQTE0NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hl41FyNvK7WkBqQqmNX9gUkA
UqlTxKhc3D18TBk8zxE5YB8MP5/OGkeSMqY/p1LAPnYmqzWWv87OUV4WE9B/6SBw
xTN389b0mCh+wUuCQDY3mvsG7/zDpy58KZldg3knF5gL4xIgtQA78rBlRaIVdXTS
/vbq9MQvh0GPLuICF78JyJ9U0JCdBBQI7J5Su5JY6/bOuVieIVu0tTg54QCDTdba
AoikQgniGqeSk3UtshhNLlieShibw4mDogTl8nqEjCW+Y9MdeGfw6TS3QvagikyG
f+ROWpPX58MgfdasAa0RMK3exr4Aqn5SrhePIPJvBoDQ1XYWH6U3sm534rCZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/LinOjt0mTTsgi8yJwWZumAaFHYwHwYDVR0j
BBgwFoAUeWL2OyqWsloUm3osHNcpCOz9XjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENjSHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lE
ZFovMC83OTYyRjYzQjJBOTZCMjVBMTQ5QjdBMkMxQ0Q3MjkwOEVDRkQ1RTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5NjJGNjNCMkE5NkIyNUEx
NDlCN0EyQzFDRDcyOTA4RUNGRDVFMzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDY0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAv
MzIzODMwMzQzYTM1NjUzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTMwMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEXkyAMA0GCSqGSIb3DQEBCwUA
A4IBAQAnApB4OPMcuRhQr1meo4PuIn8YLQ2/uEN2TTBysSzPqLSzse1HYTvEZ8w5
MNTHBEsonN6DYq1nQ+lHsOytah2i4ZsAX0NKDVUCK+0YFaOAxC2R1gZ/ouDUdXJg
LEcTE50fKJjdXHaeSgVKAYNf21aearCmYCCkDTHQVmTLmYVjT9ZFEe7V2DfzaoAl
nYDnrA4MpeF0q8vk7KlD/Xt/sORGkmo9MQpCBBKolnaC26e+8U7VJeRMxReQEeFe
ipXHw6qxABkwAKOHZPsciiswcfKSddKbxa7g6PCxGsOCZrFujAYWQM7fgBn1uIMt
hRcQu+zNtgwQAe6A7+1bBU8C2Saz
-----END CERTIFICATE-----
Generated at Fri May 9 00:23:01 2025 by rpki-client