Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/323830343a316332303a3a2f33322d3332203d3e203631363339.roa
File:                     323830343a316332303a3a2f33322d3332203d3e203631363339.roa (raw, json)
Hash identifier:          LZkW0X31oUFCwa4e6Ht+57EKwWavR00WsQneVdOcZ6g=
Subject key identifier:   CF:33:2A:D4:C8:71:69:55:2A:D0:76:64:D8:8A:7E:01:6E:7E:58:39
Certificate issuer:       /CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
Certificate serial:       5FF40719719F1AFF866427E17B6A33AD550DCC84
Authority key identifier: 15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/323830343a316332303a3a2f33322d3332203d3e203631363339.roa
Signing time:             Wed 02 Aug 2023 13:55:11 +0000
ROA not before:           Wed 02 Aug 2023 13:50:11 +0000
ROA not after:            Wed 31 Jul 2024 13:55:11 +0000
asID:                     61639
IP address blocks:        2804:1c20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f4:07:19:71:9f:1a:ff:86:64:27:e1:7b:6a:33:ad:55:0d:cc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
        Validity
            Not Before: Aug  2 13:50:11 2023 GMT
            Not After : Jul 31 13:55:11 2024 GMT
        Subject: CN=CF332AD4C87169552AD07664D88A7E016E7E5839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:75:54:1e:b8:fc:ca:6f:b9:76:c0:45:70:
                    0a:54:ac:2a:7e:ab:95:5b:bb:57:48:a9:9b:6a:33:
                    a2:1f:26:6d:20:59:c6:11:1c:43:40:6a:7c:16:bc:
                    8c:2e:b7:c1:1f:e7:27:54:b5:68:e2:cb:83:47:7a:
                    c0:18:b5:f1:77:c8:87:c2:b9:d6:41:68:a6:ca:51:
                    17:0a:d8:ce:3e:61:cc:c3:b2:02:65:d4:ad:4f:65:
                    0b:5e:aa:28:98:0a:a7:b1:b6:ee:f1:fd:f8:ed:79:
                    78:0a:db:56:d0:e9:7c:5f:7b:1e:93:1f:c5:13:7b:
                    e4:af:52:b0:ca:19:43:ff:4e:b5:05:e6:05:54:03:
                    d1:f7:5d:e3:b2:d2:8f:6a:39:8c:a0:aa:15:e6:6c:
                    72:28:36:2e:70:e6:15:b9:8e:bb:a5:8f:15:77:9f:
                    61:7e:5e:58:4e:9a:23:ca:d2:f8:5f:31:99:70:ca:
                    0f:ed:4f:e5:0d:86:5e:ec:91:7b:e7:e3:a4:0a:4d:
                    46:5a:4a:e9:bb:fc:7a:ed:93:af:2f:42:af:d9:64:
                    74:10:da:4f:e3:0b:57:86:8c:e6:7d:f2:6e:65:dd:
                    88:c6:1f:67:88:f2:b4:a8:f7:9b:61:9a:55:89:4e:
                    85:24:20:64:80:34:06:81:9c:3a:e3:f3:57:45:a1:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:33:2A:D4:C8:71:69:55:2A:D0:76:64:D8:8A:7E:01:6E:7E:58:39
            X509v3 Authority Key Identifier:
                keyid:15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/323830343a316332303a3a2f33322d3332203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:5d:a1:ac:2f:af:ff:8f:5e:48:57:e9:13:ca:7a:05:d8:
         9c:f0:82:0e:58:b3:ac:ca:d7:b7:e9:8b:09:23:99:84:bd:ad:
         61:b6:7f:e7:73:8b:a1:f6:00:71:db:48:6f:31:f9:05:81:8b:
         98:1f:9b:96:6d:f9:9f:74:f6:81:4a:e8:2d:b0:d8:b6:d7:4a:
         55:1a:ca:2e:d4:db:be:eb:5d:dc:97:cb:20:49:cc:4c:74:6d:
         52:72:d3:a8:b4:f5:56:63:8b:f5:f1:04:8e:54:e4:b8:93:3f:
         23:a4:22:ad:79:e6:cc:74:b3:70:89:01:d1:e1:c8:22:5a:60:
         25:4f:32:5d:ef:79:b7:40:9c:04:45:0d:fa:ca:17:eb:b7:55:
         28:8e:76:64:c0:ab:cf:fb:76:ac:6e:98:02:42:98:9f:57:1f:
         f1:f2:b8:93:51:65:16:89:3b:5f:48:9e:36:08:b3:b3:59:e1:
         94:7c:7b:fe:40:ce:f8:d1:3e:71:02:cf:67:11:54:44:b9:68:
         bc:b1:fe:59:35:6d:ef:7f:56:6a:4e:61:cc:f2:8e:82:02:b5:
         70:15:d4:53:eb:3d:39:0a:68:a4:de:b2:8f:41:3d:c7:7a:82:
         8c:db:1d:81:bb:6d:d6:ac:65:e7:e9:68:a9:f2:c6:60:30:4f:
         9f:dc:fc:40
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUX/QHGXGfGv+GZCfhe2ozrVUNzIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU5MzhENUU2N0Y3QTYyMzlDMDA4MEIzQjRCNEI0NkU5
NkRCOTUxOTAeFw0yMzA4MDIxMzUwMTFaFw0yNDA3MzExMzU1MTFaMDMxMTAvBgNV
BAMTKENGMzMyQUQ0Qzg3MTY5NTUyQUQwNzY2NEQ4OEE3RTAxNkU3RTU4MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lHVUHrj8ym+5dsBFcApUrCp+
q5Vbu1dIqZtqM6IfJm0gWcYRHENAanwWvIwut8Ef5ydUtWjiy4NHesAYtfF3yIfC
udZBaKbKURcK2M4+YczDsgJl1K1PZQteqiiYCqextu7x/fjteXgK21bQ6Xxfex6T
H8UTe+SvUrDKGUP/TrUF5gVUA9H3XeOy0o9qOYygqhXmbHIoNi5w5hW5jruljxV3
n2F+XlhOmiPK0vhfMZlwyg/tT+UNhl7skXvn46QKTUZaSum7/Hrtk68vQq/ZZHQQ
2k/jC1eGjOZ98m5l3YjGH2eI8rSo95thmlWJToUkIGSANAaBnDrj81dFoXwdAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUzzMq1MhxaVUq0HZk2Ip+AW5+WDkwHwYDVR0j
BBgwFoAUFZONXmf3piOcAICztLS0bpbblRkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTFNQ1B5QXljQk5mZnY5Mzl4enFWQUJ5VHVvN1JCakZ4dEgybjF2eHEy
dkUvMC8xNTkzOEQ1RTY3RjdBNjIzOUMwMDgwQjNCNEI0QjQ2RTk2REI5NTE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1OTM4RDVFNjdGN0E2MjM5
QzAwODBCM0I0QjRCNDZFOTZEQjk1MTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ExTUNQeUF5Y0JOZmZ2OTM5eHpxVkFCeVR1bzdSQmpGeHRIMm4xdnhxMnZFLzAv
MzIzODMwMzQzYTMxNjMzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHCAwDQYJKoZIhvcNAQELBQADggEBAHWeXaGsL6//
j15IV+kTynoF2Jzwgg5Ys6zK17fpiwkjmYS9rWG2f+dzi6H2AHHbSG8x+QWBi5gf
m5Zt+Z909oFK6C2w2LbXSlUayi7U277rXdyXyyBJzEx0bVJy06i09VZji/XxBI5U
5LiTPyOkIq155sx0s3CJAdHhyCJaYCVPMl3vebdAnARFDfrKF+u3VSiOdmTAq8/7
dqxumAJCmJ9XH/HyuJNRZRaJO19InjYIs7NZ4ZR8e/5AzvjRPnECz2cRVES5aLyx
/lk1be9/VmpOYczyjoICtXAV1FPrPTkKaKTeso9BPcd6gozbHYG7bdasZefpaKny
xmAwT5/c/EA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:15 2025 by rpki-client