Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/323830343a313536343a3a2f33322d3336203d3e203532353730.roa
File:                     323830343a313536343a3a2f33322d3336203d3e203532353730.roa (raw, json)
Hash identifier:          EDLEFK2c2OsTV724ZulJywwBCNQB6sTm+pAEZnqh644=
Subject key identifier:   CB:70:73:AE:7D:F8:C3:25:4F:2F:A0:43:7E:72:5B:52:A9:E1:BC:7E
Certificate issuer:       /CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
Certificate serial:       3B83B558CACE0FDE9D8F5B70EAA710D112A67F0B
Authority key identifier: 2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/323830343a313536343a3a2f33322d3336203d3e203532353730.roa
Signing time:             Fri 08 Mar 2024 10:04:00 +0000
ROA not before:           Fri 08 Mar 2024 09:59:00 +0000
ROA not after:            Fri 07 Mar 2025 10:04:00 +0000
asID:                     52570
IP address blocks:        2804:1564::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:83:b5:58:ca:ce:0f:de:9d:8f:5b:70:ea:a7:10:d1:12:a6:7f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
        Validity
            Not Before: Mar  8 09:59:00 2024 GMT
            Not After : Mar  7 10:04:00 2025 GMT
        Subject: CN=CB7073AE7DF8C3254F2FA0437E725B52A9E1BC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:38:69:9f:bc:d1:af:91:03:32:59:cd:3e:
                    ed:1a:3c:3d:9c:36:63:c0:dc:fb:40:81:cc:93:ac:
                    33:99:99:8d:a0:6e:cd:f0:a3:a0:d0:6a:bd:c8:c3:
                    28:31:33:39:41:8d:83:5b:1a:86:6d:82:48:e8:a4:
                    a4:13:e3:db:cb:68:ed:78:82:28:0b:d8:bb:f7:8f:
                    37:cb:06:a9:9e:a9:43:6b:b8:ab:30:30:cb:d5:a3:
                    df:13:c2:fa:2b:e0:1a:3b:a9:4a:e3:1b:96:30:d4:
                    b4:a6:1a:a9:0a:97:25:a6:87:04:62:9d:54:fd:3c:
                    68:51:e1:87:bf:2e:71:2b:ed:a3:3a:9a:dc:06:ed:
                    d2:78:48:6a:48:8c:07:c1:e5:0a:5b:84:a7:66:aa:
                    5f:55:fa:92:f1:0d:5c:83:5a:c4:27:93:88:0d:47:
                    00:94:8d:ae:84:c7:d6:99:22:c4:39:e1:ed:6a:a4:
                    6c:4a:e5:5c:6c:7f:b0:d4:36:36:2b:9d:aa:52:cb:
                    ef:97:a8:cc:ff:7b:01:31:cd:b3:bf:d7:3f:53:95:
                    9d:f5:a1:e0:22:57:18:4c:71:8a:24:0c:69:e5:cd:
                    cc:2b:6e:06:fe:8d:e0:f3:7a:d9:9f:5a:52:0a:1c:
                    d2:af:7b:87:f2:0d:2f:70:7e:5e:e0:43:57:a8:96:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:70:73:AE:7D:F8:C3:25:4F:2F:A0:43:7E:72:5B:52:A9:E1:BC:7E
            X509v3 Authority Key Identifier:
                keyid:2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/323830343a313536343a3a2f33322d3336203d3e203532353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1564::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:72:70:6f:7b:04:1f:46:73:8e:bb:a7:9e:1b:db:3c:78:b5:
         7d:5d:c2:88:b4:1c:53:89:ef:ab:23:d3:d3:b2:35:5a:55:3c:
         38:b2:e7:f5:a1:ee:99:ac:a3:11:95:79:38:e5:f8:6e:b8:02:
         90:41:2a:99:11:c0:48:dd:d8:35:1a:b3:e3:07:ab:fb:88:f2:
         f0:34:5e:c7:9f:25:e9:67:64:5d:65:fb:bd:bc:95:90:7f:09:
         2a:66:5e:95:47:b1:e8:b7:6e:b4:a8:7a:f1:70:1b:de:9d:6c:
         78:63:1e:0a:a2:1a:45:79:6c:8c:57:27:b9:97:eb:4f:4e:27:
         89:e3:90:f7:ea:f6:dc:0e:8b:5b:91:8f:2a:db:d3:b4:d6:c3:
         47:91:2a:3d:89:75:2d:d2:4e:b5:df:b0:85:f5:79:c8:ed:c7:
         7e:67:47:2d:50:8e:51:de:88:e1:69:79:7a:fa:86:ec:be:3b:
         9b:a8:ab:e1:6b:b9:5a:e1:4e:5c:53:16:da:90:a7:2d:42:07:
         74:69:c4:c7:c6:8b:4c:bf:58:22:d5:2b:52:00:e4:cd:46:a9:
         cf:08:ff:b5:a6:e3:03:ea:34:5d:cf:27:b4:13:bd:e8:e3:84:
         8c:75:11:10:89:04:1b:48:d0:3c:a2:46:93:3d:e5:af:a8:c2:
         fd:fb:30:b8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUO4O1WMrOD96dj1tw6qcQ0RKmfwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1QzZDQUNEMzExMzIxQjJFOTExNTlERDlBNUNENzJG
Q0JERDk2NjAeFw0yNDAzMDgwOTU5MDBaFw0yNTAzMDcxMDA0MDBaMDMxMTAvBgNV
BAMTKENCNzA3M0FFN0RGOEMzMjU0RjJGQTA0MzdFNzI1QjUyQTlFMUJDN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7jhpn7zRr5EDMlnNPu0aPD2c
NmPA3PtAgcyTrDOZmY2gbs3wo6DQar3IwygxMzlBjYNbGoZtgkjopKQT49vLaO14
gigL2Lv3jzfLBqmeqUNruKswMMvVo98Twvor4Bo7qUrjG5Yw1LSmGqkKlyWmhwRi
nVT9PGhR4Ye/LnEr7aM6mtwG7dJ4SGpIjAfB5QpbhKdmql9V+pLxDVyDWsQnk4gN
RwCUja6Ex9aZIsQ54e1qpGxK5Vxsf7DUNjYrnapSy++XqMz/ewExzbO/1z9TlZ31
oeAiVxhMcYokDGnlzcwrbgb+jeDzetmfWlIKHNKve4fyDS9wfl7gQ1eolmM7AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUy3Bzrn34wyVPL6BDfnJbUqnhvH4wHwYDVR0j
BBgwFoAULVxsrNMRMhsukRWd2aXNcvy92WYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5
ZDIvMC8yRDVDNkNBQ0QzMTEzMjFCMkU5MTE1OUREOUE1Q0Q3MkZDQkREOTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENUM2Q0FDRDMxMTMyMUIy
RTkxMTU5REQ5QTVDRDcyRkNCREQ5NjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSdVJMTGF1YXp6cVFkNzVHaVpMaXROYVFaeG1kVXE2TERKWmo4ZnFleWQyLzAv
MzIzODMwMzQzYTMxMzUzNjM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzUzMjM1
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFWQwDQYJKoZIhvcNAQELBQADggEBAERycG97BB9G
c467p54b2zx4tX1dwoi0HFOJ76sj09OyNVpVPDiy5/Wh7pmsoxGVeTjl+G64ApBB
KpkRwEjd2DUas+MHq/uI8vA0XsefJelnZF1l+728lZB/CSpmXpVHsei3brSoevFw
G96dbHhjHgqiGkV5bIxXJ7mX609OJ4njkPfq9twOi1uRjyrb07TWw0eRKj2JdS3S
TrXfsIX1ecjtx35nRy1QjlHeiOFpeXr6huy+O5uoq+FruVrhTlxTFtqQpy1CB3Rp
xMfGi0y/WCLVK1IA5M1Gqc8I/7Wm4wPqNF3PJ7QTvejjhIx1ERCJBBtI0DyiRpM9
5a+owv37MLg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org