Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/323830343a323561343a3a2f33322d313238203d3e203532383231.roa
File:                     323830343a323561343a3a2f33322d313238203d3e203532383231.roa (raw, json)
Hash identifier:          LOLwONIVGlc32jGyLSy6DWlhRwgM+3+a7sOGkUOlcNQ=
Subject key identifier:   B0:D4:9B:83:1E:6C:C7:6A:91:F5:6C:E1:ED:FC:AA:29:49:09:B3:38
Certificate issuer:       /CN=47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3
Certificate serial:       7626EDB8B6339272ABD3A1E9C3B9597769E3E2B6
Authority key identifier: 47:E7:DC:55:F4:FB:A4:DD:E2:B6:BD:A8:3D:31:03:59:39:43:A8:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/323830343a323561343a3a2f33322d313238203d3e203532383231.roa
Signing time:             Tue 09 Jan 2024 14:39:59 +0000
ROA not before:           Tue 09 Jan 2024 14:34:59 +0000
ROA not after:            Tue 07 Jan 2025 14:39:59 +0000
asID:                     52821
IP address blocks:        2804:25a4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:26:ed:b8:b6:33:92:72:ab:d3:a1:e9:c3:b9:59:77:69:e3:e2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3
        Validity
            Not Before: Jan  9 14:34:59 2024 GMT
            Not After : Jan  7 14:39:59 2025 GMT
        Subject: CN=B0D49B831E6CC76A91F56CE1EDFCAA294909B338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:4e:b0:bb:24:68:35:f6:14:dd:bf:50:eb:
                    bd:2e:08:b6:a7:bb:f9:2d:77:25:c3:5e:12:be:f7:
                    2b:ab:79:4e:e4:42:73:a6:ec:36:05:6b:cc:19:53:
                    eb:6f:54:43:04:47:bf:3e:66:34:ca:7f:80:63:79:
                    9a:58:b7:5d:25:eb:96:65:b4:a1:8e:c7:5d:83:d0:
                    8a:d9:1b:44:4c:45:39:08:a9:11:52:6e:9f:31:35:
                    f2:47:a6:af:77:96:6c:53:2b:6b:f9:c8:c9:fd:3c:
                    ac:66:15:e5:00:c0:f1:5d:5c:d0:c8:48:f1:90:29:
                    48:1b:32:cd:73:25:7c:b7:39:a1:8c:1e:80:69:e6:
                    a4:67:bb:18:79:51:3e:41:84:98:78:74:c4:a0:b8:
                    e4:05:b5:42:1e:25:3f:c0:68:f7:5f:e0:d1:eb:6e:
                    85:18:f5:c1:18:97:22:34:50:2b:c9:ca:30:7b:12:
                    32:58:11:01:44:cf:11:57:21:39:6e:ac:f4:6a:1e:
                    0b:bf:41:83:f0:2f:00:09:5e:49:77:eb:ec:cc:77:
                    a5:db:f3:e6:23:58:d4:12:ad:bd:39:86:58:1f:ba:
                    9b:55:de:e5:6f:f7:76:a3:ff:72:1c:ac:95:6b:8c:
                    b8:6b:de:38:1b:43:dd:dc:aa:98:9d:40:73:b3:c9:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D4:9B:83:1E:6C:C7:6A:91:F5:6C:E1:ED:FC:AA:29:49:09:B3:38
            X509v3 Authority Key Identifier:
                keyid:47:E7:DC:55:F4:FB:A4:DD:E2:B6:BD:A8:3D:31:03:59:39:43:A8:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/323830343a323561343a3a2f33322d313238203d3e203532383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:39:d4:87:dc:1d:be:7d:ce:8c:14:d6:92:37:2a:40:52:0e:
         6a:43:1f:17:f6:08:82:d5:75:c5:59:b3:4b:e3:96:22:64:a9:
         a6:b7:48:63:6b:54:fb:22:a0:75:e1:be:ad:e7:43:f2:f9:6f:
         13:74:5b:a8:6b:4b:22:d3:e7:a7:7f:15:4e:e6:d5:4f:c3:7a:
         8f:43:ad:cc:63:bb:f1:f2:0b:87:f3:ee:d2:90:06:37:b8:d5:
         94:c7:51:a2:08:fb:7a:e6:08:30:0e:c5:a8:8a:10:35:8f:eb:
         8b:9b:c6:66:d1:f3:9e:a1:88:d7:00:49:f5:26:bb:f2:21:54:
         a9:14:ef:b5:10:34:d5:7d:82:ec:b8:6a:0c:68:2e:99:d2:50:
         94:67:5b:56:d5:db:55:76:7b:46:83:c9:3f:df:4e:44:ad:cc:
         2c:88:ee:db:3b:d2:e1:3e:ad:49:50:09:da:17:ef:86:05:66:
         08:49:a2:4c:8c:f5:89:9e:21:92:24:e4:23:6a:f5:7f:64:f3:
         a9:ab:a9:e6:27:4c:3f:24:94:45:c2:c9:da:04:31:be:de:81:
         55:ec:a0:ea:4d:88:94:df:cf:59:69:c1:63:af:5e:05:e5:74:
         25:b9:12:92:a1:2f:6d:e4:1c:a5:d5:20:a8:86:1c:93:72:8c:
         02:59:f0:f4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdibtuLYzknKr06Hpw7lZd2nj4rYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdFN0RDNTVGNEZCQTREREUyQjZCREE4M0QzMTAzNTkz
OTQzQThFMzAeFw0yNDAxMDkxNDM0NTlaFw0yNTAxMDcxNDM5NTlaMDMxMTAvBgNV
BAMTKEIwRDQ5QjgzMUU2Q0M3NkE5MUY1NkNFMUVERkNBQTI5NDkwOUIzMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbbU6wuyRoNfYU3b9Q670uCLan
u/ktdyXDXhK+9yureU7kQnOm7DYFa8wZU+tvVEMER78+ZjTKf4BjeZpYt10l65Zl
tKGOx12D0IrZG0RMRTkIqRFSbp8xNfJHpq93lmxTK2v5yMn9PKxmFeUAwPFdXNDI
SPGQKUgbMs1zJXy3OaGMHoBp5qRnuxh5UT5BhJh4dMSguOQFtUIeJT/AaPdf4NHr
boUY9cEYlyI0UCvJyjB7EjJYEQFEzxFXITlurPRqHgu/QYPwLwAJXkl36+zMd6Xb
8+YjWNQSrb05hlgfuptV3uVv93aj/3IcrJVrjLhr3jgbQ93cqpidQHOzycRrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsNSbgx5sx2qR9Wzh7fyqKUkJszgwHwYDVR0j
BBgwFoAUR+fcVfT7pN3itr2oPTEDWTlDqOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlNnRFkxaVhWa1VaRGt0dUJoTTZlU2h4Q0tMR3J0VGVWNjFnY0NiUnFi
SmUvMC80N0U3REM1NUY0RkJBNERERTJCNkJEQTgzRDMxMDM1OTM5NDNBOEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3RTdEQzU1RjRGQkE0RERF
MkI2QkRBODNEMzEwMzU5Mzk0M0E4RTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTZ0RZMWlYVmtVWkRrdHVCaE02ZVNoeENLTEdydFRlVjYxZ2NDYlJxYkplLzAv
MzIzODMwMzQzYTMyMzU2MTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy
MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQlpDANBgkqhkiG9w0BAQsFAAOCAQEAtDnUh9wd
vn3OjBTWkjcqQFIOakMfF/YIgtV1xVmzS+OWImSpprdIY2tU+yKgdeG+redD8vlv
E3RbqGtLItPnp38VTubVT8N6j0OtzGO78fILh/Pu0pAGN7jVlMdRogj7euYIMA7F
qIoQNY/ri5vGZtHznqGI1wBJ9Sa78iFUqRTvtRA01X2C7LhqDGgumdJQlGdbVtXb
VXZ7RoPJP99ORK3MLIju2zvS4T6tSVAJ2hfvhgVmCEmiTIz1iZ4hkiTkI2r1f2Tz
qaup5idMPySURcLJ2gQxvt6BVeyg6k2IlN/PWWnBY69eBeV0JbkSkqEvbeQcpdUg
qIYck3KMAlnw9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org