Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/323830343a333237303a3a2f33322d3332203d3e20323635303738.roa
File:                     323830343a333237303a3a2f33322d3332203d3e20323635303738.roa (raw, json)
Hash identifier:          PgPHcIog4FQ8YtSvK+tnQ+icjUEVzPIv+BXpBxmOZp8=
Subject key identifier:   91:C5:D1:59:FA:6A:ED:38:88:2B:D0:FC:37:A4:D9:94:CE:8A:BC:2D
Certificate issuer:       /CN=5F2847FF19664413E34F373356471BF3808443E8
Certificate serial:       3CA5ED208A99AF7F2F9E38DDA0B6EFA6F5E8F26C
Authority key identifier: 5F:28:47:FF:19:66:44:13:E3:4F:37:33:56:47:1B:F3:80:84:43:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F2847FF19664413E34F373356471BF3808443E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/323830343a333237303a3a2f33322d3332203d3e20323635303738.roa
Signing time:             Fri 04 Feb 2022 17:48:18 +0000
ROA not before:           Fri 04 Feb 2022 17:43:18 +0000
ROA not after:            Fri 03 Feb 2023 17:48:18 +0000
asID:                     265078
IP address blocks:        2804:3270::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a5:ed:20:8a:99:af:7f:2f:9e:38:dd:a0:b6:ef:a6:f5:e8:f2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F2847FF19664413E34F373356471BF3808443E8
        Validity
            Not Before: Feb  4 17:43:18 2022 GMT
            Not After : Feb  3 17:48:18 2023 GMT
        Subject: CN=91C5D159FA6AED38882BD0FC37A4D994CE8ABC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:61:84:0b:a5:d4:05:b0:5f:4b:99:ca:a6:
                    c1:89:69:42:a6:1b:75:8f:fe:10:f6:ec:af:79:d7:
                    a1:73:8c:61:85:5e:10:3c:10:7b:bf:50:8b:ec:0e:
                    e9:48:78:d6:06:34:a5:10:be:00:45:7c:f1:b5:d0:
                    bf:4d:4c:c8:ab:4c:83:6b:b1:b1:5b:11:43:db:71:
                    5c:98:c7:87:77:0c:14:cd:c9:4d:bc:b4:eb:e7:7f:
                    32:2b:ce:67:b6:e5:00:66:58:66:76:f5:9d:e9:a9:
                    21:f1:cc:7d:70:1e:65:5d:60:f7:7e:82:c3:a1:5e:
                    0f:2b:b7:d7:71:fb:e4:05:58:67:c0:21:2b:ed:ef:
                    c9:ad:3e:98:15:c3:bd:ab:80:e6:8c:1e:45:aa:12:
                    ac:a1:a7:4e:52:71:be:6a:6e:31:7b:1b:22:76:bf:
                    f6:8b:29:8a:31:27:08:c1:3e:b7:34:74:8f:60:54:
                    56:e9:d0:de:43:69:0c:6e:47:8d:f6:b1:7e:d2:43:
                    7f:41:cb:9a:78:c6:89:b9:47:81:b6:da:32:04:77:
                    6a:22:ca:26:63:a3:d9:49:fe:36:ae:95:2d:f8:0c:
                    65:31:46:27:45:9d:d3:c1:53:30:86:6d:0f:a5:44:
                    12:d9:86:ab:1f:4f:b9:dd:a8:1f:8d:ee:c4:3d:c2:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C5:D1:59:FA:6A:ED:38:88:2B:D0:FC:37:A4:D9:94:CE:8A:BC:2D
            X509v3 Authority Key Identifier:
                keyid:5F:28:47:FF:19:66:44:13:E3:4F:37:33:56:47:1B:F3:80:84:43:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/5F2847FF19664413E34F373356471BF3808443E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F2847FF19664413E34F373356471BF3808443E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/323830343a333237303a3a2f33322d3332203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3270::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:88:ed:ec:36:3e:41:22:84:47:f2:2d:17:79:33:6a:7b:ff:
         4a:98:b2:b1:6a:a7:a6:96:78:77:c6:96:a9:23:e5:9f:47:cd:
         fd:5a:37:a3:a3:88:ae:75:19:6a:42:aa:b9:61:2d:43:be:3f:
         db:ee:06:3d:d6:fd:54:66:fe:31:65:ec:eb:23:bf:64:94:3b:
         14:df:54:b7:de:66:d6:8f:c1:bb:91:6d:0b:91:5e:c2:db:f3:
         d8:a2:0e:d3:a1:cb:87:8f:43:fa:af:f4:93:b2:cf:2a:d6:b6:
         9b:30:d3:ca:cf:f2:a8:f8:bd:1e:17:9e:3f:97:6f:ea:31:e7:
         f0:df:0d:ad:6d:cb:ba:0e:7f:0a:be:96:95:09:1d:82:69:6b:
         b3:3d:4d:7c:05:cd:a3:4c:ce:29:3b:b1:2d:50:7e:fb:e9:b8:
         50:90:db:f7:f1:94:53:b1:67:a4:da:da:ce:4c:57:40:03:ef:
         78:04:e5:5f:2b:fd:97:1e:05:33:3b:33:b4:aa:59:98:09:e1:
         ca:10:27:dd:c8:05:95:fe:0a:51:e6:8c:e5:bb:9f:3f:6c:90:
         1b:0b:4b:93:cc:65:9e:45:0b:59:8a:1e:04:80:04:50:8b:e1:
         a6:0d:58:e2:d9:f4:5d:62:2c:b2:4d:10:67:5b:ff:59:d0:65:
         34:13:94:86
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPKXtIIqZr38vnjjdoLbvpvXo8mwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYyODQ3RkYxOTY2NDQxM0UzNEYzNzMzNTY0NzFCRjM4
MDg0NDNFODAeFw0yMjAyMDQxNzQzMThaFw0yMzAyMDMxNzQ4MThaMDMxMTAvBgNV
BAMTKDkxQzVEMTU5RkE2QUVEMzg4ODJCRDBGQzM3QTREOTk0Q0U4QUJDMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbWGEC6XUBbBfS5nKpsGJaUKm
G3WP/hD27K9516FzjGGFXhA8EHu/UIvsDulIeNYGNKUQvgBFfPG10L9NTMirTINr
sbFbEUPbcVyYx4d3DBTNyU28tOvnfzIrzme25QBmWGZ29Z3pqSHxzH1wHmVdYPd+
gsOhXg8rt9dx++QFWGfAISvt78mtPpgVw72rgOaMHkWqEqyhp05Scb5qbjF7GyJ2
v/aLKYoxJwjBPrc0dI9gVFbp0N5DaQxuR432sX7SQ39By5p4xom5R4G22jIEd2oi
yiZjo9lJ/jaulS34DGUxRidFndPBUzCGbQ+lRBLZhqsfT7ndqB+N7sQ9wmCrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUkcXRWfpq7TiIK9D8N6TZlM6KvC0wHwYDVR0j
BBgwFoAUXyhH/xlmRBPjTzczVkcb84CEQ+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz
VHYvMC81RjI4NDdGRjE5NjY0NDEzRTM0RjM3MzM1NjQ3MUJGMzgwODQ0M0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGMjg0N0ZGMTk2NjQ0MTNF
MzRGMzczMzU2NDcxQkYzODA4NDQzRTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2YjV0ZEZLeU40NXczaXBka2RSQTdIV0p5RnU0Rm9FaGNVbllSUDVXc1R2LzAv
MzIzODMwMzQzYTMzMzIzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzAzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQycDANBgkqhkiG9w0BAQsFAAOCAQEAl4jt7DY+
QSKER/ItF3kzanv/SpiysWqnppZ4d8aWqSPln0fN/Vo3o6OIrnUZakKquWEtQ74/
2+4GPdb9VGb+MWXs6yO/ZJQ7FN9Ut95m1o/Bu5FtC5Fewtvz2KIO06HLh49D+q/0
k7LPKta2mzDTys/yqPi9HheeP5dv6jHn8N8NrW3Lug5/Cr6WlQkdgmlrsz1NfAXN
o0zOKTuxLVB+++m4UJDb9/GUU7FnpNrazkxXQAPveATlXyv9lx4FMzsztKpZmAnh
yhAn3cgFlf4KUeaM5bufP2yQGwtLk8xlnkULWYoeBIAEUIvhpg1Y4tn0XWIssk0Q
Z1v/WdBlNBOUhg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org