Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/323830343a333139303a3a2f33322d3438203d3e203533303937.roa
File:                     323830343a333139303a3a2f33322d3438203d3e203533303937.roa (raw, json)
Hash identifier:          ubg+jA3GJlOU4m+E6yZWqzIzL5YRjki/5VP4cjC7m8Y=
Subject key identifier:   A0:C5:3B:AB:2C:16:9E:DE:0F:2D:83:7E:F3:9A:7E:5A:DD:E5:D0:23
Certificate issuer:       /CN=8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A
Certificate serial:       7ACDA5D14DE42675CD75FE137FCE309AD8856D11
Authority key identifier: 88:86:BA:0B:7E:A7:A5:EE:DD:66:D0:C1:4C:E0:FD:0F:9B:8C:87:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/323830343a333139303a3a2f33322d3438203d3e203533303937.roa
Signing time:             Wed 19 Feb 2025 20:43:31 +0000
ROA not before:           Wed 19 Feb 2025 20:38:31 +0000
ROA not after:            Wed 18 Feb 2026 20:43:31 +0000
asID:                     53097
IP address blocks:        2804:3190::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cd:a5:d1:4d:e4:26:75:cd:75:fe:13:7f:ce:30:9a:d8:85:6d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A
        Validity
            Not Before: Feb 19 20:38:31 2025 GMT
            Not After : Feb 18 20:43:31 2026 GMT
        Subject: CN=A0C53BAB2C169EDE0F2D837EF39A7E5ADDE5D023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:ad:08:e9:a2:a9:c1:7b:e9:55:a4:ef:1f:
                    31:a7:d3:23:50:e8:d9:25:74:41:30:02:25:c9:c5:
                    37:f9:72:d6:56:dd:ee:dd:49:71:a2:c3:66:9e:9c:
                    5a:6b:70:1a:ef:45:0a:67:8a:8a:84:ce:38:82:32:
                    c1:cd:65:52:86:2f:c4:36:d3:0e:6f:44:0b:28:0e:
                    5c:af:db:1d:a3:df:0b:67:04:a4:38:b0:20:a2:c7:
                    73:42:4d:a1:46:68:7d:1a:6b:1a:86:49:6c:17:21:
                    75:54:fa:d0:e4:94:7a:73:55:f8:a7:9f:b9:24:2e:
                    eb:bc:70:6d:8e:f3:d6:1d:a7:5b:49:89:f4:64:0e:
                    34:42:2f:ce:f0:19:79:77:0b:3f:b4:8f:63:ff:89:
                    52:3d:87:c8:7b:2e:ea:02:02:d6:64:3c:b6:7e:32:
                    d7:a0:a3:20:1b:15:20:9b:90:5f:53:bb:13:d0:f0:
                    58:80:f5:12:74:8c:52:ac:9c:38:91:9a:81:7d:fe:
                    b2:33:47:06:50:6a:31:da:cc:51:21:67:7d:69:3e:
                    d1:37:4e:8b:57:f9:d0:76:1a:2a:46:71:da:2d:87:
                    a1:87:e2:5f:47:3c:42:00:be:d5:b1:0e:ea:86:11:
                    0c:c7:3a:a5:b3:e1:6e:70:0f:07:06:82:2c:68:3f:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C5:3B:AB:2C:16:9E:DE:0F:2D:83:7E:F3:9A:7E:5A:DD:E5:D0:23
            X509v3 Authority Key Identifier:
                keyid:88:86:BA:0B:7E:A7:A5:EE:DD:66:D0:C1:4C:E0:FD:0F:9B:8C:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/323830343a333139303a3a2f33322d3438203d3e203533303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3190::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:28:a6:27:4c:2d:60:b9:b8:ea:03:93:28:17:36:4c:ad:c0:
         6c:c5:5d:ca:8d:66:ab:91:1a:0b:20:f2:35:bf:52:d0:6f:b8:
         18:aa:d8:ff:20:1e:b9:99:5e:e7:54:bb:5e:73:27:20:92:d6:
         ae:51:c3:b8:b2:47:52:2c:ef:86:64:94:9e:ec:75:ce:a3:19:
         4f:36:cd:db:6f:61:6f:82:43:a2:47:fe:f2:e3:ee:ac:7d:90:
         e0:6a:15:01:f4:61:fa:7b:2b:58:24:c6:a7:5f:a1:a8:69:e0:
         3f:19:3d:24:17:fb:22:d3:f5:91:be:db:c6:3b:f8:ab:90:34:
         9b:79:9e:b6:a3:9f:93:18:6f:fd:6d:3f:65:c8:f8:52:2d:29:
         12:4f:b4:3e:a1:28:91:fb:e4:a3:c8:b5:a8:51:b5:66:c1:8a:
         15:ea:dd:20:9a:71:ed:1d:d6:ce:95:dc:0b:39:4e:84:07:13:
         f0:c5:0a:ea:ce:33:97:e3:ff:9d:cc:4f:a8:b3:16:3b:6b:e4:
         dc:ff:25:24:dd:e6:60:72:e5:94:f4:f3:b7:3f:e7:14:76:5e:
         d2:f6:1a:93:c5:3f:a8:68:b8:95:3b:e7:e0:9c:7f:df:0d:15:
         7e:9d:67:41:75:32:4b:db:ab:d6:61:2c:05:29:64:7f:6f:19:
         5c:0b:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----