Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa
File:                     323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa (raw, json)
Hash identifier:          Xm0gvMZbvPXdPICUEM0x9g2sv5ftDbQ8ylMbGCEuz+M=
Subject key identifier:   57:76:7F:B9:1F:DF:85:4F:9F:BF:5D:61:84:1B:8E:DC:C7:A3:1B:1B
Certificate issuer:       /CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
Certificate serial:       1DAE2E552AA50262792C85461BC35955C4484C04
Authority key identifier: 9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa
Signing time:             Wed 20 Mar 2024 11:45:35 +0000
ROA not before:           Wed 20 Mar 2024 11:40:35 +0000
ROA not after:            Wed 19 Mar 2025 11:45:35 +0000
asID:                     271311
IP address blocks:        2804:7988:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ae:2e:55:2a:a5:02:62:79:2c:85:46:1b:c3:59:55:c4:48:4c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
        Validity
            Not Before: Mar 20 11:40:35 2024 GMT
            Not After : Mar 19 11:45:35 2025 GMT
        Subject: CN=57767FB91FDF854F9FBF5D61841B8EDCC7A31B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:8d:b3:9a:b4:b1:08:bc:48:a0:0d:5f:4d:
                    dc:06:d5:52:9e:66:6a:bf:bd:61:f2:1a:e0:a6:2b:
                    31:d1:97:47:11:ad:fd:15:e4:34:db:9a:02:eb:57:
                    05:3e:57:46:67:01:67:5c:96:09:32:b4:b5:76:91:
                    f2:4b:87:58:1a:df:c3:60:8a:ca:e0:e9:24:a9:6f:
                    7d:b3:12:66:bf:fe:a2:a4:35:f6:ed:75:37:0c:5d:
                    6b:46:35:bc:42:cf:a7:06:7e:4c:3a:2d:32:82:90:
                    9a:3d:ec:79:a4:dd:59:76:35:b8:31:c1:68:6b:3d:
                    7f:02:e4:43:af:65:8e:f5:ea:90:b4:45:14:83:44:
                    0f:ff:d2:18:6f:f2:0c:a8:06:f3:6e:07:9b:33:16:
                    99:4e:c4:f3:97:3e:9a:9e:c3:ac:ee:b2:c4:d0:02:
                    84:14:f2:14:74:13:2e:3c:93:e2:07:a2:f8:cb:65:
                    e3:0d:4a:e2:7f:6d:57:74:7c:55:6e:14:06:53:dc:
                    b2:4f:2f:7f:56:52:a2:38:d1:36:d4:fe:c8:87:a4:
                    ef:20:8b:03:fe:a5:87:8d:9f:ce:34:0c:aa:97:6b:
                    56:68:d2:c3:24:52:9c:dc:0a:80:d6:1a:56:8d:01:
                    b3:b0:64:19:64:80:61:1f:1b:a3:1e:9d:0c:75:ef:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:76:7F:B9:1F:DF:85:4F:9F:BF:5D:61:84:1B:8E:DC:C7:A3:1B:1B
            X509v3 Authority Key Identifier:
                keyid:9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7988:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:be:64:e2:11:fd:45:87:f3:97:69:70:85:ca:53:96:8f:21:
         90:77:09:da:11:90:74:32:e1:66:be:42:58:ba:4f:4f:97:66:
         be:34:df:a1:79:16:67:e2:36:61:08:24:3b:dc:a9:a7:d2:e9:
         03:78:0e:aa:ca:5c:96:a4:0c:36:3e:27:55:70:be:87:35:d6:
         f6:e7:75:ad:c7:4d:e4:3c:dc:2d:ca:96:95:29:97:ea:30:e5:
         18:6f:61:4f:e2:cc:29:3a:4b:45:01:38:73:e4:22:b1:26:b7:
         05:a3:4c:6d:39:52:8f:22:d3:75:f2:0f:dc:24:ca:db:10:4c:
         e3:3a:d6:16:3b:00:a2:a2:7b:dc:ce:bb:b3:89:5d:10:ca:c1:
         9d:92:c7:4e:79:4e:7f:29:54:6f:da:f8:70:ac:d3:47:76:64:
         81:cb:47:28:51:c1:b4:7f:80:6d:ea:5b:91:9e:41:35:14:16:
         87:25:2f:ef:78:22:c7:39:01:7b:07:0d:4e:1d:11:fe:c9:12:
         66:df:e9:45:bc:20:5f:51:4f:76:ab:4a:45:8f:a6:a6:02:4f:
         e6:4d:4e:aa:d4:d6:d9:03:8c:3f:ef:d0:31:3d:61:dc:04:40:
         9f:9f:49:f8:3a:6f:1d:08:1a:84:be:5b:6f:2d:fb:25:8c:c4:
         a5:e9:50:94
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHa4uVSqlAmJ5LIVGG8NZVcRITAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMyMTI2MTBFNEIzNjc4QUU1OTgyNDgyQThCQjk1OTRB
MTA5QkRFMTAeFw0yNDAzMjAxMTQwMzVaFw0yNTAzMTkxMTQ1MzVaMDMxMTAvBgNV
BAMTKDU3NzY3RkI5MUZERjg1NEY5RkJGNUQ2MTg0MUI4RURDQzdBMzFCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Q42zmrSxCLxIoA1fTdwG1VKe
Zmq/vWHyGuCmKzHRl0cRrf0V5DTbmgLrVwU+V0ZnAWdclgkytLV2kfJLh1ga38Ng
isrg6SSpb32zEma//qKkNfbtdTcMXWtGNbxCz6cGfkw6LTKCkJo97Hmk3Vl2Nbgx
wWhrPX8C5EOvZY716pC0RRSDRA//0hhv8gyoBvNuB5szFplOxPOXPpqew6zussTQ
AoQU8hR0Ey48k+IHovjLZeMNSuJ/bVd0fFVuFAZT3LJPL39WUqI40TbU/siHpO8g
iwP+pYeNn840DKqXa1Zo0sMkUpzcCoDWGlaNAbOwZBlkgGEfG6MenQx173BrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUV3Z/uR/fhU+fv11hhBuO3MejGxswHwYDVR0j
BBgwFoAUnCEmEOSzZ4rlmCSCqLuVlKEJveEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2dnU1hYbjdXRHBxMXFxNmh6Ync5WThzemJtWDdEV0VxVDM1YnRoN0NX
VkUvMC85QzIxMjYxMEU0QjM2NzhBRTU5ODI0ODJBOEJCOTU5NEExMDlCREUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlDMjEyNjEwRTRCMzY3OEFF
NTk4MjQ4MkE4QkI5NTk0QTEwOUJERTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdnZ1NYWG43V0RwcTFxcTZoemJ3OVk4c3pibVg3RFdFcVQzNWJ0aDdDV1ZFLzAv
MzIzODMwMzQzYTM3MzkzODM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEeYiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCavmTiEf1Fh/OXaXCFylOWjyGQdwnaEZB0MuFmvkJYuk9Pl2a+NN+heRZn
4jZhCCQ73Kmn0ukDeA6qylyWpAw2PidVcL6HNdb253Wtx03kPNwtypaVKZfqMOUY
b2FP4swpOktFAThz5CKxJrcFo0xtOVKPItN18g/cJMrbEEzjOtYWOwCionvczruz
iV0QysGdksdOeU5/KVRv2vhwrNNHdmSBy0coUcG0f4Bt6luRnkE1FBaHJS/veCLH
OQF7Bw1OHRH+yRJm3+lFvCBfUU92q0pFj6amAk/mTU6q1NbZA4w/79AxPWHcBECf
n0n4Om8dCBqEvltvLfsljMSl6VCU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org