Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33342d3334203d3e20323633303335.roa
File:                     323830343a6133383a3a2f33342d3334203d3e20323633303335.roa (raw, json)
Hash identifier:          Zx0QEaEjws3+9UFaWnch7gR+JKbfWO3uRBMts+/vmqQ=
Subject key identifier:   79:04:73:E1:ED:49:99:32:B6:07:36:D3:C8:A9:FE:27:5F:47:F8:D3
Certificate issuer:       /CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
Certificate serial:       5FF29BE3B1880524F047AE4C2A2A5C96C2E17C5D
Authority key identifier: 79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33342d3334203d3e20323633303335.roa
Signing time:             Thu 05 Sep 2024 17:39:51 +0000
ROA not before:           Thu 05 Sep 2024 17:34:51 +0000
ROA not after:            Thu 04 Sep 2025 17:39:51 +0000
asID:                     263035
IP address blocks:        2804:a38::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f2:9b:e3:b1:88:05:24:f0:47:ae:4c:2a:2a:5c:96:c2:e1:7c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Validity
            Not Before: Sep  5 17:34:51 2024 GMT
            Not After : Sep  4 17:39:51 2025 GMT
        Subject: CN=790473E1ED499932B60736D3C8A9FE275F47F8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:fa:31:7b:0d:fb:67:98:28:97:f0:48:99:
                    59:7b:f6:2a:dd:17:53:dc:d6:9c:86:35:a9:cd:18:
                    e7:74:63:1a:5c:07:6d:5a:16:93:8b:92:96:fa:8a:
                    e4:5d:20:05:64:02:df:3c:23:4b:b1:38:ff:31:30:
                    78:a5:af:a3:78:72:02:65:14:c7:30:fb:b4:5b:05:
                    fd:97:bd:24:fd:7e:eb:97:83:db:3f:26:6f:6b:2d:
                    10:d6:61:51:db:da:18:e1:d4:ac:26:7a:7a:79:93:
                    d8:de:94:03:9e:af:e9:b3:28:eb:2a:ad:c4:a3:3b:
                    64:0a:ae:87:07:a6:f8:f5:60:0d:40:f9:d7:c6:26:
                    80:6d:c7:7d:6e:45:6e:f1:2f:25:0b:8e:22:15:3a:
                    f4:09:c5:32:a8:7f:b3:c8:84:92:4c:4d:48:35:cc:
                    f3:5a:e4:21:a1:27:1f:b9:06:f1:15:16:40:26:65:
                    0c:fa:77:a5:6a:c0:51:1c:3d:a6:cb:ba:5c:1e:5c:
                    e6:3d:19:49:d2:10:3d:0c:b0:c2:e2:30:73:fb:b6:
                    e3:f6:c0:df:2e:6f:c0:01:e4:06:b3:6f:bf:1e:2c:
                    7f:3a:56:47:40:58:1a:18:1b:f8:5b:0f:f4:dc:4f:
                    fb:38:63:c7:1a:f8:60:3c:f7:d0:80:67:fb:b9:d6:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:73:E1:ED:49:99:32:B6:07:36:D3:C8:A9:FE:27:5F:47:F8:D3
            X509v3 Authority Key Identifier:
                keyid:79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33342d3334203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a38::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:df:a1:0c:40:22:49:bf:49:0b:48:94:3b:f1:f3:b3:09:10:
         c7:b8:91:5f:e0:f1:f8:13:b5:18:2c:09:de:67:20:56:a6:61:
         df:1c:54:9d:1a:ea:fb:4c:88:de:ac:6e:da:a3:af:db:ab:6b:
         26:bf:65:a9:d4:34:bd:bc:b7:5f:cf:fe:32:47:fa:be:d1:65:
         61:4f:03:6c:fe:94:cd:74:5a:f1:1b:04:8b:1c:ab:65:15:34:
         f6:bc:2a:ca:5b:24:fb:dd:89:18:eb:95:35:f7:d1:68:8d:bc:
         be:37:3e:4c:09:90:4f:89:c6:a4:93:49:3f:6f:11:d0:96:ed:
         b6:cc:c8:ca:f9:1f:9f:25:d6:5a:3a:be:0f:c8:d0:57:5f:5f:
         1e:13:c3:90:e7:b3:f6:0b:de:ab:a9:10:67:c9:b6:ee:2b:4f:
         2c:1e:6d:96:9b:02:c2:c4:0e:a4:18:b3:8f:af:ce:a8:89:ff:
         cb:1c:52:4e:ee:38:f6:2a:9c:c0:88:bd:71:8a:2f:3b:f7:df:
         40:f5:8e:3a:a6:2a:5a:cc:7c:c3:ef:6d:b1:eb:c9:de:c5:2a:
         d9:ba:a9:b6:39:51:3b:23:6e:bf:46:ab:05:f4:fb:87:8e:6f:
         bb:35:cd:37:01:05:ad:65:64:71:84:b8:ca:44:8d:11:b9:ab:
         b5:7a:35:39
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX/Kb47GIBSTwR65MKipclsLhfF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk3M0E2RjdEMjVCNTE5QURBOTM4QThDM0E5NTVFRDg3
NjVBMzQwNDAeFw0yNDA5MDUxNzM0NTFaFw0yNTA5MDQxNzM5NTFaMDMxMTAvBgNV
BAMTKDc5MDQ3M0UxRUQ0OTk5MzJCNjA3MzZEM0M4QTlGRTI3NUY0N0Y4RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cfoxew37Z5gol/BImVl79ird
F1Pc1pyGNanNGOd0YxpcB21aFpOLkpb6iuRdIAVkAt88I0uxOP8xMHilr6N4cgJl
FMcw+7RbBf2XvST9fuuXg9s/Jm9rLRDWYVHb2hjh1Kwmenp5k9jelAOer+mzKOsq
rcSjO2QKrocHpvj1YA1A+dfGJoBtx31uRW7xLyULjiIVOvQJxTKof7PIhJJMTUg1
zPNa5CGhJx+5BvEVFkAmZQz6d6VqwFEcPabLulweXOY9GUnSED0MsMLiMHP7tuP2
wN8ub8AB5Aazb78eLH86VkdAWBoYG/hbD/TcT/s4Y8ca+GA899CAZ/u51uQhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeQRz4e1JmTK2BzbTyKn+J19H+NMwHwYDVR0j
BBgwFoAUeXOm99JbUZrak4qMOpVe2HZaNAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpNcmRVZ2p6cnlHeXlxd2FpMTRlZXo5elZqWnRieTZ6R3IxcUJ0QW9K
RDIvMC83OTczQTZGN0QyNUI1MTlBREE5MzhBOEMzQTk1NUVEODc2NUEzNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5NzNBNkY3RDI1QjUxOUFE
QTkzOEE4QzNBOTU1RUQ4NzY1QTM0MDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKTXJkVWdqenJ5R3l5cXdhaTE0ZWV6OXpWalp0Ynk2ekdyMXFCdEFvSkQyLzAv
MzIzODMwMzQzYTYxMzMzODNhM2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzMzMw
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigECjgAMA0GCSqGSIb3DQEBCwUAA4IBAQBn36EMQCJJ
v0kLSJQ78fOzCRDHuJFf4PH4E7UYLAneZyBWpmHfHFSdGur7TIjerG7ao6/bq2sm
v2Wp1DS9vLdfz/4yR/q+0WVhTwNs/pTNdFrxGwSLHKtlFTT2vCrKWyT73YkY65U1
99Fojby+Nz5MCZBPicakk0k/bxHQlu22zMjK+R+fJdZaOr4PyNBXX18eE8OQ57P2
C96rqRBnybbuK08sHm2WmwLCxA6kGLOPr86oif/LHFJO7jj2KpzAiL1xii87999A
9Y46pipazHzD722x68nexSrZuqm2OVE7I26/RqsF9PuHjm+7Nc03AQWtZWRxhLjK
RI0Ruau1ejU5
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:08 2025 by rpki-client