Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa
File:                     323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa (raw, json)
Hash identifier:          i9n0mnZjPhybIsRyHAAw3YzcoPVAiWEf3Z91t5lNy0M=
Subject key identifier:   5C:25:05:CC:0D:0B:80:B6:95:1A:93:6D:6B:6B:8F:FA:F3:9A:13:F4
Certificate issuer:       /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial:       1105A3298DED0871B4FE983EBA22215693D07572
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa
Signing time:             Thu 13 Mar 2025 18:14:24 +0000
ROA not before:           Thu 13 Mar 2025 18:09:24 +0000
ROA not after:            Thu 12 Mar 2026 18:14:24 +0000
asID:                     264915
IP address blocks:        2804:2fd8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:05:a3:29:8d:ed:08:71:b4:fe:98:3e:ba:22:21:56:93:d0:75:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
        Validity
            Not Before: Mar 13 18:09:24 2025 GMT
            Not After : Mar 12 18:14:24 2026 GMT
        Subject: CN=5C2505CC0D0B80B6951A936D6B6B8FFAF39A13F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:32:c1:db:69:e4:be:b2:28:41:39:99:9f:
                    2b:ed:30:04:59:5a:4b:2d:16:30:9b:ee:54:e0:51:
                    c7:95:a5:7a:7e:f7:63:dd:74:cc:71:ff:f0:80:2b:
                    d6:23:2d:e6:12:42:d2:a2:cf:19:74:92:b1:74:c0:
                    7a:3e:37:f8:9c:b2:ed:cd:af:cd:e0:ff:80:70:50:
                    33:fa:fc:ee:65:a2:00:81:4c:ab:89:bc:b7:33:ec:
                    9e:6e:78:ca:4f:9c:30:f5:10:12:16:16:e9:4b:df:
                    d5:be:e5:5b:d9:11:70:2a:56:3f:69:6c:df:8e:fd:
                    66:37:8f:b7:de:49:1f:29:65:4a:cc:cc:a0:63:37:
                    48:79:cb:a9:8a:fa:40:de:d4:e0:da:d8:4d:48:ea:
                    6f:fa:d0:ce:a5:b9:2e:9f:17:2d:42:5e:4a:e5:0c:
                    46:be:c2:eb:3d:f1:74:0e:34:52:04:1c:8e:1d:cb:
                    83:09:4a:34:59:87:43:f8:e3:11:3b:0d:a3:9f:52:
                    40:2b:bd:e0:b5:a5:07:44:e1:52:b5:9f:57:27:e6:
                    39:b9:f7:23:88:7b:a0:9e:8b:18:1d:ef:f3:00:4f:
                    f2:6e:d7:ee:30:d1:5e:74:ab:b9:3e:94:80:82:aa:
                    5d:1f:ea:c0:e6:0e:f4:3e:e5:37:61:da:ad:ad:e6:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:05:CC:0D:0B:80:B6:95:1A:93:6D:6B:6B:8F:FA:F3:9A:13:F4
            X509v3 Authority Key Identifier:
                keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:33:f4:2b:1f:ae:c2:d0:a3:dc:9a:8b:bd:4c:f9:00:f6:
         6d:e4:f8:69:df:11:a7:7f:54:02:4d:17:5a:f7:42:f7:cd:71:
         97:c0:72:77:e2:16:97:6c:92:43:46:41:02:df:1f:2a:0b:d1:
         2e:ab:f8:de:9f:94:3e:8b:f9:ea:87:4d:48:01:df:ba:e7:62:
         15:f2:1b:76:4f:e8:c1:94:34:75:3e:27:ec:8c:bc:0c:02:ab:
         5a:0d:bb:14:eb:c5:bc:b3:54:4b:8c:a6:6c:79:f6:81:f7:16:
         29:1d:c2:0d:ac:03:c3:0f:8b:46:28:be:60:f1:1d:c5:95:6c:
         7a:23:03:ee:42:4e:73:e9:1c:71:85:07:89:fb:34:bd:8a:e0:
         6b:f8:65:ba:87:76:44:46:9a:4e:fb:1f:a0:76:15:94:4c:c2:
         37:bb:28:1f:ce:5e:d5:a5:91:de:bf:73:47:e0:b7:56:25:f3:
         10:74:27:bf:dc:64:6b:49:ac:6c:3e:47:db:67:ec:56:61:aa:
         ff:8e:9d:f7:e5:ed:f2:42:62:92:64:2f:a4:15:41:28:61:ec:
         f9:86:8e:52:37:3b:05:ce:6b:44:d3:cc:9b:27:84:d3:9d:2c:
         f4:b3:48:cf:0c:28:6c:35:31:6b:d3:82:6b:2d:09:c2:49:3b:
         09:80:68:51
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEQWjKY3tCHG0/pg+uiIhVpPQdXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyOEM1QTJFQTFFNTY0OTVBQTk2NkZCMTk4NEM3RjMw
NjRGREExRDAeFw0yNTAzMTMxODA5MjRaFw0yNjAzMTIxODE0MjRaMDMxMTAvBgNV
BAMTKDVDMjUwNUNDMEQwQjgwQjY5NTFBOTM2RDZCNkI4RkZBRjM5QTEzRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkTLB22nkvrIoQTmZnyvtMARZ
WkstFjCb7lTgUceVpXp+92PddMxx//CAK9YjLeYSQtKizxl0krF0wHo+N/icsu3N
r83g/4BwUDP6/O5logCBTKuJvLcz7J5ueMpPnDD1EBIWFulL39W+5VvZEXAqVj9p
bN+O/WY3j7feSR8pZUrMzKBjN0h5y6mK+kDe1ODa2E1I6m/60M6luS6fFy1CXkrl
DEa+wus98XQONFIEHI4dy4MJSjRZh0P44xE7DaOfUkArveC1pQdE4VK1n1cn5jm5
9yOIe6Ceixgd7/MAT/Ju1+4w0V50q7k+lICCql0f6sDmDvQ+5Tdh2q2t5tbVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXCUFzA0LgLaVGpNta2uP+vOaE/QwHwYDVR0j
BBgwFoAU3CjFouoeVklaqWb7GYTH8wZP2h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3
a2MvMC9EQzI4QzVBMkVBMUU1NjQ5NUFBOTY2RkIxOTg0QzdGMzA2NEZEQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMjhDNUEyRUExRTU2NDk1
QUE5NjZGQjE5ODRDN0YzMDY0RkRBMUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDekVSNndBZ1J3dkVUTVprb3JicUx4TWpYUnljRk1ZTG1wZUdLdENLN2tjLzAv
MzIzODMwMzQzYTMyNjY2NDM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDM5MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEL9iAMA0GCSqGSIb3DQEBCwUA
A4IBAQBy6zP0Kx+uwtCj3JqLvUz5APZt5Php3xGnf1QCTRda90L3zXGXwHJ34haX
bJJDRkEC3x8qC9Euq/jen5Q+i/nqh01IAd+652IV8ht2T+jBlDR1PifsjLwMAqta
DbsU68W8s1RLjKZsefaB9xYpHcINrAPDD4tGKL5g8R3FlWx6IwPuQk5z6RxxhQeJ
+zS9iuBr+GW6h3ZERppO+x+gdhWUTMI3uygfzl7VpZHev3NH4LdWJfMQdCe/3GRr
SaxsPkfbZ+xWYar/jp335e3yQmKSZC+kFUEoYez5ho5SNzsFzmtE08ybJ4TTnSz0
s0jPDChsNTFr04JrLQnCSTsJgGhR
-----END CERTIFICATE-----
Generated at Sat May 17 07:12:53 2025 by rpki-client