Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa
File:                     323830343a323230303a3a2f33322d3332203d3e20323634353835.roa (raw, json)
Hash identifier:          V6b/slgAbNMpLaKIGcslwdj7RpN9MQGMnLelZpuuFY0=
Subject key identifier:   7E:D3:67:E8:41:A7:72:28:63:B9:F9:98:4B:87:CC:07:D5:4B:DF:38
Certificate issuer:       /CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
Certificate serial:       1D826F4E87D6DCBD7A48BABC57AB41ABA0B668F8
Authority key identifier: 54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa
Signing time:             Mon 19 Aug 2024 20:22:17 +0000
ROA not before:           Mon 19 Aug 2024 20:17:17 +0000
ROA not after:            Mon 18 Aug 2025 20:22:17 +0000
asID:                     264585
IP address blocks:        2804:2200::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:82:6f:4e:87:d6:dc:bd:7a:48:ba:bc:57:ab:41:ab:a0:b6:68:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
        Validity
            Not Before: Aug 19 20:17:17 2024 GMT
            Not After : Aug 18 20:22:17 2025 GMT
        Subject: CN=7ED367E841A7722863B9F9984B87CC07D54BDF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e6:c4:e5:21:df:bf:a6:48:7d:8b:57:af:de:
                    8a:a4:4f:48:21:18:f5:47:1f:0e:35:c7:7f:32:bf:
                    c8:29:4a:c5:31:61:2b:5a:bc:ed:ca:18:43:a3:aa:
                    d0:42:4d:66:37:44:36:b1:5c:2c:3a:68:11:f7:30:
                    d4:96:66:09:7d:4a:7c:85:f4:04:9c:2c:94:a3:ef:
                    29:f4:36:4b:5a:09:87:03:59:b1:87:ff:69:b8:53:
                    ee:d5:70:3f:91:b5:89:a9:a1:cb:bd:7d:46:53:f5:
                    e4:bf:dc:2c:66:36:53:c7:42:22:34:37:6c:25:c2:
                    d9:d9:cf:7c:24:de:00:42:87:fa:3f:e9:7f:2b:ae:
                    82:07:4b:79:e6:b3:03:93:9c:ec:31:d0:f7:84:8b:
                    d9:dd:d7:65:70:c0:9e:72:76:68:d9:1c:63:c8:5f:
                    3c:d8:05:cc:5f:2f:13:df:e8:e0:e5:b2:3e:c6:e5:
                    4a:95:7e:3f:ae:26:dd:20:6e:1a:d4:a0:39:1b:c8:
                    ef:76:d0:26:93:3b:36:76:f1:13:3e:9b:dc:83:38:
                    33:5d:89:27:4b:53:4c:1c:59:e2:7d:de:87:29:7a:
                    d0:0b:50:16:0a:94:13:92:88:29:43:1f:81:b9:25:
                    ae:a2:4d:82:20:60:2d:91:c5:a4:9f:86:2e:f9:81:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D3:67:E8:41:A7:72:28:63:B9:F9:98:4B:87:CC:07:D5:4B:DF:38
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2200::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:37:71:1a:f3:d7:c9:b6:fc:90:11:ba:c8:1c:6a:57:8c:
         fd:fa:64:cb:07:80:9a:36:a3:79:91:eb:a5:e5:fa:39:d4:a5:
         4d:d9:35:45:1d:0a:d8:23:d2:64:34:b6:49:e7:6d:4e:2e:d8:
         5c:c2:df:ca:db:84:08:4d:af:1b:83:31:82:24:55:97:f8:c1:
         9e:21:71:e1:a7:2b:e6:01:fb:b1:4a:db:91:3a:11:46:a4:aa:
         95:a6:92:20:39:fe:6e:f3:c6:d4:c5:62:bb:c7:86:e0:ee:1f:
         f5:63:14:8e:bc:c1:68:9f:88:a8:d2:e5:ab:c8:fb:8d:92:58:
         e6:a2:8e:a6:72:58:3f:8a:d9:6e:fc:e8:4a:62:59:7c:d6:30:
         e7:95:55:28:a4:f0:de:ea:f8:1e:bd:f5:ff:43:1c:5b:a9:5d:
         f4:7a:c9:6f:ad:45:e2:af:2a:02:ac:59:eb:42:f4:64:9f:e7:
         c8:cd:f2:75:af:87:17:d0:ef:91:30:f7:43:2f:27:6f:c9:02:
         41:a9:13:d2:26:4e:79:71:f1:17:6e:c9:2f:cb:03:4f:aa:c4:
         1c:30:53:5e:7e:55:f3:4b:cf:8f:97:6b:e0:40:5b:44:de:73:
         cd:5e:9f:6e:0c:91:0f:f4:8a:fd:03:08:0a:44:26:b5:bb:81:
         da:30:05:ce
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHYJvTofW3L16SLq8V6tBq6C2aPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQwNDdEOTJBNTk3OUM4OTFFQkE0M0YxREQ2OTRFQkZD
QzNEQ0QxRDAeFw0yNDA4MTkyMDE3MTdaFw0yNTA4MTgyMDIyMTdaMDMxMTAvBgNV
BAMTKDdFRDM2N0U4NDFBNzcyMjg2M0I5Rjk5ODRCODdDQzA3RDU0QkRGMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh5sTlId+/pkh9i1ev3oqkT0gh
GPVHHw41x38yv8gpSsUxYStavO3KGEOjqtBCTWY3RDaxXCw6aBH3MNSWZgl9SnyF
9AScLJSj7yn0NktaCYcDWbGH/2m4U+7VcD+RtYmpocu9fUZT9eS/3CxmNlPHQiI0
N2wlwtnZz3wk3gBCh/o/6X8rroIHS3nmswOTnOwx0PeEi9nd12VwwJ5ydmjZHGPI
XzzYBcxfLxPf6ODlsj7G5UqVfj+uJt0gbhrUoDkbyO920CaTOzZ28RM+m9yDODNd
iSdLU0wcWeJ93ocpetALUBYKlBOSiClDH4G5Ja6iTYIgYC2RxaSfhi75gYxxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUftNn6EGncihjufmYS4fMB9VL3zgwHwYDVR0j
BBgwFoAUVAR9kqWXnIkeukPx3WlOv8w9zR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUo4eEpkaE5YSFlwWFFuemFod0x6eGdIUlc3N2d5OHgzYXp6eWRRQ2J3
NDMvMC81NDA0N0Q5MkE1OTc5Qzg5MUVCQTQzRjFERDY5NEVCRkNDM0RDRDFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MDQ3RDkyQTU5NzlDODkx
RUJBNDNGMURENjk0RUJGQ0MzRENEMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKOHhKZGhOWEhZcFhRbnphaHdMenhnSFJXNzdneTh4M2F6enlkUUNidzQzLzAv
MzIzODMwMzQzYTMyMzIzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzUzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQiADANBgkqhkiG9w0BAQsFAAOCAQEACjQ3cRrz
18m2/JARusgcaleM/fpkyweAmjajeZHrpeX6OdSlTdk1RR0K2CPSZDS2SedtTi7Y
XMLfytuECE2vG4MxgiRVl/jBniFx4acr5gH7sUrbkToRRqSqlaaSIDn+bvPG1MVi
u8eG4O4f9WMUjrzBaJ+IqNLlq8j7jZJY5qKOpnJYP4rZbvzoSmJZfNYw55VVKKTw
3ur4Hr31/0McW6ld9HrJb61F4q8qAqxZ60L0ZJ/nyM3yda+HF9DvkTD3Qy8nb8kC
QakT0iZOeXHxF27JL8sDT6rEHDBTXn5V80vPj5dr4EBbRN5zzV6fbgyRD/SK/QMI
CkQmtbuB2jAFzg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:39:57 2025 by rpki-client