Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/0/323830343a373339303a3a2f33322d3438203d3e20323730393233.roa
File:                     323830343a373339303a3a2f33322d3438203d3e20323730393233.roa (raw, json)
Hash identifier:          0tSxErSNPuWTodC3nsc1MWuAGIg9YzSwPkK+IV55e7c=
Subject key identifier:   E2:73:00:07:E0:94:49:84:F0:2C:31:83:7C:85:2B:75:6C:37:C1:1E
Certificate issuer:       /CN=E2719B3171031584345C8B699B7DD180AFE20E24
Certificate serial:       270ABB672A74C0D68D1370E1EEA58920E3FE19E2
Authority key identifier: E2:71:9B:31:71:03:15:84:34:5C:8B:69:9B:7D:D1:80:AF:E2:0E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2719B3171031584345C8B699B7DD180AFE20E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/0/323830343a373339303a3a2f33322d3438203d3e20323730393233.roa
Signing time:             Thu 30 Nov 2023 20:01:21 +0000
ROA not before:           Thu 30 Nov 2023 19:56:21 +0000
ROA not after:            Thu 28 Nov 2024 20:01:21 +0000
asID:                     270923
IP address blocks:        2804:7390::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0a:bb:67:2a:74:c0:d6:8d:13:70:e1:ee:a5:89:20:e3:fe:19:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2719B3171031584345C8B699B7DD180AFE20E24
        Validity
            Not Before: Nov 30 19:56:21 2023 GMT
            Not After : Nov 28 20:01:21 2024 GMT
        Subject: CN=E2730007E0944984F02C31837C852B756C37C11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a5:fd:67:e2:06:e7:af:c8:10:0b:85:37:5d:
                    9b:7c:b2:fa:db:6a:02:0d:00:6c:4d:cd:53:0a:80:
                    b7:08:e4:8a:54:bb:6d:07:e8:d2:b2:ad:b6:aa:99:
                    61:76:97:7b:50:6e:c9:83:61:f2:44:23:d8:9b:0d:
                    ba:0d:bd:9a:40:89:a3:86:43:7f:9e:b1:c7:d6:52:
                    2d:7e:51:98:e3:77:41:4f:eb:c0:bb:a9:9b:5c:7a:
                    cc:9c:a6:ad:f5:ca:3d:22:14:e6:45:ad:9c:d6:93:
                    06:93:fa:a2:c2:00:27:b8:be:ab:20:b2:6b:bf:9b:
                    c1:8b:12:26:c4:15:1b:0a:f6:99:15:7b:9e:11:1a:
                    e8:7d:42:7d:92:47:ee:32:02:66:a5:a6:f8:e6:b2:
                    2a:8f:22:e8:d6:d6:96:34:4b:25:bc:a9:6f:0a:dd:
                    26:a8:45:4d:ac:4c:ab:94:08:e2:ae:f4:a2:6f:51:
                    5c:0e:c3:78:a8:3c:ff:26:c5:72:a8:40:5a:be:9d:
                    a3:65:1f:e9:79:c5:e5:cf:cf:91:af:71:d4:54:23:
                    aa:fb:de:79:e1:b3:a2:e5:ff:08:48:01:88:3e:fb:
                    16:10:ea:73:1e:e4:db:36:7c:ab:ae:67:84:98:83:
                    66:4f:58:5c:d9:ba:6e:41:fd:4d:cc:21:d1:31:5f:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:73:00:07:E0:94:49:84:F0:2C:31:83:7C:85:2B:75:6C:37:C1:1E
            X509v3 Authority Key Identifier:
                keyid:E2:71:9B:31:71:03:15:84:34:5C:8B:69:9B:7D:D1:80:AF:E2:0E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/0/E2719B3171031584345C8B699B7DD180AFE20E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2719B3171031584345C8B699B7DD180AFE20E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/0/323830343a373339303a3a2f33322d3438203d3e20323730393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7390::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:71:1e:f6:6a:3f:ab:b5:9c:8e:1a:29:62:c9:19:ce:d9:e7:
         54:88:43:23:d6:03:66:13:c0:92:bb:68:3e:05:ea:bc:4d:46:
         e3:7e:32:fe:f4:e7:9b:42:3d:43:1b:eb:3f:77:17:a8:e0:b9:
         ca:04:b7:6e:f6:b2:98:d2:1a:0b:43:a7:54:30:67:ab:71:c9:
         ca:fe:60:d9:f6:16:58:68:69:47:d4:2d:71:5d:79:10:16:0d:
         75:56:52:73:0c:fd:33:6b:a2:1d:4d:4c:4b:0e:2d:7e:6f:1c:
         05:fe:f1:ed:0b:fc:4e:43:38:29:ab:51:a3:69:d1:cb:e3:29:
         1b:5d:7b:3c:a0:ce:d7:83:af:ed:18:2b:56:ec:04:23:b8:31:
         10:0d:b1:7f:55:fd:71:24:d7:f1:21:41:ee:c9:4a:ae:fc:ae:
         71:f9:b9:ff:15:49:06:54:2c:b3:62:d7:e5:18:ad:19:f9:3f:
         82:7f:41:f7:8c:8e:8f:54:00:7d:cf:f0:47:a2:1c:e1:1f:d4:
         be:ff:11:c7:92:d6:c8:18:da:f5:6a:97:e5:5a:f7:0d:d1:eb:
         f4:63:75:63:b5:7d:92:cb:c1:33:d0:48:ec:8f:51:0b:f9:e9:
         ad:95:4e:55:06:7a:e6:51:70:9f:e0:4a:43:a1:a4:ba:4a:c6:
         13:a5:c7:38
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJwq7Zyp0wNaNE3Dh7qWJIOP+GeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI3MTlCMzE3MTAzMTU4NDM0NUM4QjY5OUI3REQxODBB
RkUyMEUyNDAeFw0yMzExMzAxOTU2MjFaFw0yNDExMjgyMDAxMjFaMDMxMTAvBgNV
BAMTKEUyNzMwMDA3RTA5NDQ5ODRGMDJDMzE4MzdDODUyQjc1NkMzN0MxMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDppf1n4gbnr8gQC4U3XZt8svrb
agINAGxNzVMKgLcI5IpUu20H6NKyrbaqmWF2l3tQbsmDYfJEI9ibDboNvZpAiaOG
Q3+escfWUi1+UZjjd0FP68C7qZtcesycpq31yj0iFOZFrZzWkwaT+qLCACe4vqsg
smu/m8GLEibEFRsK9pkVe54RGuh9Qn2SR+4yAmalpvjmsiqPIujW1pY0SyW8qW8K
3SaoRU2sTKuUCOKu9KJvUVwOw3ioPP8mxXKoQFq+naNlH+l5xeXPz5GvcdRUI6r7
3nnhs6Ll/whIAYg++xYQ6nMe5Ns2fKuuZ4SYg2ZPWFzZum5B/U3MIdExX2eZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4nMAB+CUSYTwLDGDfIUrdWw3wR4wHwYDVR0j
BBgwFoAU4nGbMXEDFYQ0XItpm33RgK/iDiQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREU0RHUzN012VWtNdkQzV2RReXh0NmhEZFRnamt2dHFaMkgyZURqbktU
V3YvMC9FMjcxOUIzMTcxMDMxNTg0MzQ1QzhCNjk5QjdERDE4MEFGRTIwRTI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyNzE5QjMxNzEwMzE1ODQz
NDVDOEI2OTlCN0REMTgwQUZFMjBFMjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFNER1MzdNdlVrTXZEM1dkUXl4dDZoRGRUZ2prdnRxWjJIMmVEam5LVFd2LzAv
MzIzODMwMzQzYTM3MzMzOTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzkzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARzkDANBgkqhkiG9w0BAQsFAAOCAQEAr3Ee9mo/
q7WcjhopYskZztnnVIhDI9YDZhPAkrtoPgXqvE1G434y/vTnm0I9QxvrP3cXqOC5
ygS3bvaymNIaC0OnVDBnq3HJyv5g2fYWWGhpR9QtcV15EBYNdVZScwz9M2uiHU1M
Sw4tfm8cBf7x7Qv8TkM4KatRo2nRy+MpG117PKDO14Ov7RgrVuwEI7gxEA2xf1X9
cSTX8SFB7slKrvyucfm5/xVJBlQss2LX5RitGfk/gn9B94yOj1QAfc/wR6Ic4R/U
vv8Rx5LWyBja9WqX5Vr3DdHr9GN1Y7V9ksvBM9BI7I9RC/nprZVOVQZ65lFwn+BK
Q6GkukrGE6XHOA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org