Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d313238203d3e20323633303335.roa
File:                     323830343a6133383a3a2f33322d313238203d3e20323633303335.roa (raw, json)
Hash identifier:          cEmT6jxAFYTI46kr/sA8i8czyQVKjZQ5u2lSpq3iTWQ=
Subject key identifier:   08:5E:A8:93:14:F8:74:33:51:C3:BD:5C:4E:0F:C2:EF:8C:77:3F:D0
Certificate issuer:       /CN=19A733DE5B44DD36F1A86E3C044DC5036BAD7D00
Certificate serial:       56BBDF81B36ABE61E80FD78B079C53CDE3344FAE
Authority key identifier: 19:A7:33:DE:5B:44:DD:36:F1:A8:6E:3C:04:4D:C5:03:6B:AD:7D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d313238203d3e20323633303335.roa
Signing time:             Sat 04 Jan 2025 19:51:55 +0000
ROA not before:           Sat 04 Jan 2025 19:46:55 +0000
ROA not after:            Sat 03 Jan 2026 19:51:55 +0000
asID:                     263035
IP address blocks:        2804:a38::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bb:df:81:b3:6a:be:61:e8:0f:d7:8b:07:9c:53:cd:e3:34:4f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A733DE5B44DD36F1A86E3C044DC5036BAD7D00
        Validity
            Not Before: Jan  4 19:46:55 2025 GMT
            Not After : Jan  3 19:51:55 2026 GMT
        Subject: CN=085EA89314F8743351C3BD5C4E0FC2EF8C773FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:cf:f4:12:0e:a7:7e:6f:c8:ef:fb:2c:0c:
                    c3:6c:91:c6:5c:c4:5e:ab:b5:81:38:23:6b:ea:ce:
                    5e:cd:40:f0:07:e1:5f:61:31:0a:b2:42:ee:91:2a:
                    36:03:9b:47:2c:0a:2a:e4:03:5d:a4:a3:93:ee:44:
                    4c:74:0d:79:3e:4e:d5:16:e2:0b:8c:c8:02:29:44:
                    05:39:c2:c9:70:3f:5a:c4:c8:16:98:b7:d0:91:ff:
                    aa:dd:94:73:a9:09:68:1f:04:fa:4e:e1:53:67:71:
                    a7:ad:04:3d:9f:e7:d9:f6:07:6a:db:5c:0c:a8:98:
                    20:0b:49:94:ae:29:ab:cb:c4:ee:f6:6a:52:6f:1a:
                    0a:5a:a0:65:21:8c:85:75:87:5a:5f:a7:db:95:65:
                    39:2a:bb:3b:56:92:ba:88:ad:38:4c:74:57:d9:2f:
                    68:5b:18:9c:24:26:f6:7e:85:d6:ee:f7:0e:7b:b9:
                    eb:42:86:06:1c:41:8d:b6:5d:44:80:96:ae:51:42:
                    78:f1:c1:bc:a0:1f:bb:e5:82:ff:c4:33:49:5f:3c:
                    eb:a6:fd:02:a2:2d:34:30:7f:a5:56:4b:c8:b1:95:
                    d4:f5:50:42:56:f9:24:1f:7f:ce:55:de:15:58:3e:
                    93:04:d4:f1:9f:9c:0d:a0:ac:7d:83:b0:4e:15:de:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5E:A8:93:14:F8:74:33:51:C3:BD:5C:4E:0F:C2:EF:8C:77:3F:D0
            X509v3 Authority Key Identifier:
                keyid:19:A7:33:DE:5B:44:DD:36:F1:A8:6E:3C:04:4D:C5:03:6B:AD:7D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d313238203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a38::/32

    Signature Algorithm: sha256WithRSAEncryption
         e0:6f:00:cf:59:cd:79:df:38:d5:90:1e:03:d1:17:5d:fc:cf:
         e1:85:05:03:a9:c5:cf:38:a8:df:c6:52:bd:be:99:ec:02:f7:
         2f:28:b9:90:b4:a6:82:70:68:0b:62:c8:4f:22:58:8f:72:48:
         da:31:7a:e0:91:18:c2:68:15:cb:45:d1:6f:80:17:f4:2b:8f:
         b6:6e:83:2f:a6:46:eb:6e:f4:2b:3a:11:00:7e:26:27:e4:26:
         59:1f:83:d7:c3:c4:ac:93:c5:27:f0:19:0e:7a:1e:11:dc:48:
         f0:f1:c8:7a:56:c3:da:39:e8:da:06:d1:f9:58:b7:fc:ca:d1:
         3e:ee:1d:e7:70:00:7d:a7:ec:67:b5:eb:73:a9:51:b8:16:55:
         90:04:1a:ef:ea:ab:54:d5:1c:f9:5e:7a:6e:57:15:71:3d:2a:
         e9:f2:3d:d0:ce:53:09:7f:87:31:c9:7a:77:f8:d7:21:b1:20:
         9d:49:c0:cb:c3:7e:38:d9:78:c0:26:4b:b5:37:60:61:84:5a:
         38:69:ff:4b:e0:f2:ed:63:5a:20:4a:65:0e:37:ee:b1:0b:1c:
         b3:65:d1:e6:92:75:5d:e1:15:41:2c:6d:90:71:52:ab:f4:84:
         01:5f:f4:de:df:b8:66:7f:9f:48:d5:d3:96:d5:fe:25:22:60:
         1a:13:76:54
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVrvfgbNqvmHoD9eLB5xTzeM0T64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlBNzMzREU1QjQ0REQzNkYxQTg2RTNDMDQ0REM1MDM2
QkFEN0QwMDAeFw0yNTAxMDQxOTQ2NTVaFw0yNjAxMDMxOTUxNTVaMDMxMTAvBgNV
BAMTKDA4NUVBODkzMTRGODc0MzM1MUMzQkQ1QzRFMEZDMkVGOEM3NzNGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHs/0Eg6nfm/I7/ssDMNskcZc
xF6rtYE4I2vqzl7NQPAH4V9hMQqyQu6RKjYDm0csCirkA12ko5PuREx0DXk+TtUW
4guMyAIpRAU5wslwP1rEyBaYt9CR/6rdlHOpCWgfBPpO4VNncaetBD2f59n2B2rb
XAyomCALSZSuKavLxO72alJvGgpaoGUhjIV1h1pfp9uVZTkquztWkrqIrThMdFfZ
L2hbGJwkJvZ+hdbu9w57uetChgYcQY22XUSAlq5RQnjxwbygH7vlgv/EM0lfPOum
/QKiLTQwf6VWS8ixldT1UEJW+SQff85V3hVYPpME1PGfnA2grH2DsE4V3j2RAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUCF6okxT4dDNRw71cTg/C74x3P9AwHwYDVR0j
BBgwFoAUGacz3ltE3TbxqG48BE3FA2utfQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpNcmRVZ2p6cnlHeXlxd2FpMTRlZXo5elZqWnRieTZ6R3IxcUJ0QW9K
RDIvMC8xOUE3MzNERTVCNDRERDM2RjFBODZFM0MwNDREQzUwMzZCQUQ3RDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5QTczM0RFNUI0NEREMzZG
MUE4NkUzQzA0NERDNTAzNkJBRDdEMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKTXJkVWdqenJ5R3l5cXdhaTE0ZWV6OXpWalp0Ynk2ekdyMXFCdEFvSkQyLzAv
MzIzODMwMzQzYTYxMzMzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMz
MzAzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQKODANBgkqhkiG9w0BAQsFAAOCAQEA4G8Az1nN
ed841ZAeA9EXXfzP4YUFA6nFzzio38ZSvb6Z7AL3Lyi5kLSmgnBoC2LITyJYj3JI
2jF64JEYwmgVy0XRb4AX9CuPtm6DL6ZG6270KzoRAH4mJ+QmWR+D18PErJPFJ/AZ
DnoeEdxI8PHIelbD2jno2gbR+Vi3/MrRPu4d53AAfafsZ7Xrc6lRuBZVkAQa7+qr
VNUc+V56blcVcT0q6fI90M5TCX+HMcl6d/jXIbEgnUnAy8N+ONl4wCZLtTdgYYRa
OGn/S+Dy7WNaIEplDjfusQscs2XR5pJ1XeEVQSxtkHFSq/SEAV/03t+4Zn+fSNXT
ltX+JSJgGhN2VA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:47 2025 by rpki-client