Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/323830343a373838303a3a2f33322d3438203d3e20323731323437.roa
File:                     323830343a373838303a3a2f33322d3438203d3e20323731323437.roa (raw, json)
Hash identifier:          byV95Vk9WBzJvORJYdYaU2yZHkvOezdlnAPCNjC6AoY=
Subject key identifier:   77:FE:51:82:82:64:42:8E:F7:EC:F4:F7:8F:C2:DB:EF:0B:BE:59:0E
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       01DEC52EAACADE5BC6129AAD09A3A0CFEF742AF2
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/323830343a373838303a3a2f33322d3438203d3e20323731323437.roa
Signing time:             Wed 22 Nov 2023 14:00:00 +0000
ROA not before:           Wed 22 Nov 2023 13:55:00 +0000
ROA not after:            Wed 20 Nov 2024 14:00:00 +0000
asID:                     271247
IP address blocks:        2804:7880::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:de:c5:2e:aa:ca:de:5b:c6:12:9a:ad:09:a3:a0:cf:ef:74:2a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Nov 22 13:55:00 2023 GMT
            Not After : Nov 20 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100B3B39E1A4A47E7ABF475361B9607D1AE8FFD3D95F81B97C1747D37A2AC396DFE4677C1D689379EC7EAC6E2EA45674D41C92D3F61B80A7F1762C7CC32131C4DB42FD00D17F1352E15A82E76B72B7F5ADA90E375B972354A888B2463C8A0C1C98C16620F88FE6DBA3011E3F054615C54D4489832480845FABCBE448B5D3E11C752887DD6B6E615EE0AF2E34100F99755952A33B28A971F92F7F3B50FA9CEE0C93E978A25A95F8A00BB295467C0AA9C1802A19F231ED2EBC5092EB19F7935E72A3842BC9C8A130859F6A5B66E093E5780EB5DC64C469CFC5C47D8CF223DF7492E69881146601EB741FC5716D8D752764C61275F880191F61A4BCDC56CBD7023E8B30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:9e:1a:4a:47:e7:ab:f4:75:36:1b:96:07:
                    d1:ae:8f:fd:3d:95:f8:1b:97:c1:74:7d:37:a2:ac:
                    39:6d:fe:46:77:c1:d6:89:37:9e:c7:ea:c6:e2:ea:
                    45:67:4d:41:c9:2d:3f:61:b8:0a:7f:17:62:c7:cc:
                    32:13:1c:4d:b4:2f:d0:0d:17:f1:35:2e:15:a8:2e:
                    76:b7:2b:7f:5a:da:90:e3:75:b9:72:35:4a:88:8b:
                    24:63:c8:a0:c1:c9:8c:16:62:0f:88:fe:6d:ba:30:
                    11:e3:f0:54:61:5c:54:d4:48:98:32:48:08:45:fa:
                    bc:be:44:8b:5d:3e:11:c7:52:88:7d:d6:b6:e6:15:
                    ee:0a:f2:e3:41:00:f9:97:55:95:2a:33:b2:8a:97:
                    1f:92:f7:f3:b5:0f:a9:ce:e0:c9:3e:97:8a:25:a9:
                    5f:8a:00:bb:29:54:67:c0:aa:9c:18:02:a1:9f:23:
                    1e:d2:eb:c5:09:2e:b1:9f:79:35:e7:2a:38:42:bc:
                    9c:8a:13:08:59:f6:a5:b6:6e:09:3e:57:80:eb:5d:
                    c6:4c:46:9c:fc:5c:47:d8:cf:22:3d:f7:49:2e:69:
                    88:11:46:60:1e:b7:41:fc:57:16:d8:d7:52:76:4c:
                    61:27:5f:88:01:91:f6:1a:4b:cd:c5:6c:bd:70:23:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:51:82:82:64:42:8E:F7:EC:F4:F7:8F:C2:DB:EF:0B:BE:59:0E
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/323830343a373838303a3a2f33322d3438203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7880::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:9b:06:58:d6:c1:39:aa:f8:c3:2f:0a:95:c6:16:f1:65:5a:
         02:69:68:13:30:c8:61:05:d5:1b:00:38:27:7e:b0:65:15:0a:
         17:ea:1b:95:0c:43:d1:a5:89:0a:3f:ad:df:04:91:f2:5a:cd:
         a1:51:1e:82:5b:b2:26:5f:0d:f6:8b:a6:39:1e:15:1b:05:2c:
         19:94:55:07:21:1c:84:ac:42:55:49:51:aa:e3:48:d5:bf:43:
         a4:be:d9:e2:71:95:bd:ed:ed:81:eb:16:a7:23:d8:da:f7:ae:
         02:0f:8e:e5:7f:2b:e0:96:24:4f:57:a9:39:57:46:81:c4:ec:
         c1:2e:02:d3:39:48:09:81:db:88:da:1e:8c:b6:52:2b:7b:35:
         0e:3d:4e:a6:08:9a:24:ce:30:4a:19:11:70:ae:8d:13:f7:10:
         16:1c:7a:9f:62:51:fb:ef:84:dd:a2:45:ae:cb:d7:d4:8b:cc:
         2e:13:d1:3f:39:3d:fc:67:d5:99:54:dc:7c:22:72:24:33:bb:
         61:cb:2b:5f:08:49:0b:8b:8f:4a:e2:bc:0d:96:61:1b:ea:38:
         a8:23:73:b4:48:22:d8:a8:1f:bc:5b:85:b0:67:66:40:e5:4b:
         7c:d6:cd:96:f2:b9:c4:17:e5:29:3d:79:0f:b9:20:ce:b6:b5:
         aa:f0:08:f0
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUAd7FLqrK3lvGEpqtCaOgz+90KvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdFMTk0OEFCNjM4QzhFRkY5MEY1Mjk3NTMzRjRCMzU0
MEYwNDdDMzAeFw0yMzExMjIxMzU1MDBaFw0yNDExMjAxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNCMzlFMUE0QTQ3RTdBQkY0
NzUzNjFCOTYwN0QxQUU4RkZEM0Q5NUY4MUI5N0MxNzQ3RDM3QTJBQzM5NkRGRTQ2
NzdDMUQ2ODkzNzlFQzdFQUM2RTJFQTQ1Njc0RDQxQzkyRDNGNjFCODBBN0YxNzYy
QzdDQzMyMTMxQzREQjQyRkQwMEQxN0YxMzUyRTE1QTgyRTc2QjcyQjdGNUFEQTkw
RTM3NUI5NzIzNTRBODg4QjI0NjNDOEEwQzFDOThDMTY2MjBGODhGRTZEQkEzMDEx
RTNGMDU0NjE1QzU0RDQ0ODk4MzI0ODA4NDVGQUJDQkU0NDhCNUQzRTExQzc1Mjg4
N0RENkI2RTYxNUVFMEFGMkUzNDEwMEY5OTc1NTk1MkEzM0IyOEE5NzFGOTJGN0Yz
QjUwRkE5Q0VFMEM5M0U5NzhBMjVBOTVGOEEwMEJCMjk1NDY3QzBBQTlDMTgwMkEx
OUYyMzFFRDJFQkM1MDkyRUIxOUY3OTM1RTcyQTM4NDJCQzlDOEExMzA4NTlGNkE1
QjY2RTA5M0U1NzgwRUI1REM2NEM0NjlDRkM1QzQ3RDhDRjIyM0RGNzQ5MkU2OTg4
MTE0NjYwMUVCNzQxRkM1NzE2RDhENzUyNzY0QzYxMjc1Rjg4MDE5MUY2MUE0QkNE
QzU2Q0JENzAyM0U4QjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs7OeGkpH56v0dTYblgfRro/9PZX4G5fBdH03oqw5bf5Gd8HWiTee
x+rG4upFZ01ByS0/YbgKfxdix8wyExxNtC/QDRfxNS4VqC52tyt/WtqQ43W5cjVK
iIskY8igwcmMFmIPiP5tujAR4/BUYVxU1EiYMkgIRfq8vkSLXT4Rx1KIfda25hXu
CvLjQQD5l1WVKjOyipcfkvfztQ+pzuDJPpeKJalfigC7KVRnwKqcGAKhnyMe0uvF
CS6xn3k15yo4QrycihMIWfaltm4JPleA613GTEac/FxH2M8iPfdJLmmIEUZgHrdB
/FcW2NdSdkxhJ1+IAZH2GkvNxWy9cCPoswIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FHf+UYKCZEKO9+z094/C2+8LvlkOMB8GA1UdIwQYMBaAFJfhlIq2OMjv+Q9Sl1M/
SzVA8EfDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RGa2UyaEtDcFpTRUpV
cHN0VFhEODZNUFpMeUVwUDJmWGY4NVpkWWQyOVhLLzAvOTdFMTk0OEFCNjM4QzhF
RkY5MEY1Mjk3NTMzRjRCMzU0MEYwNDdDMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85N0UxOTQ4QUI2MzhDOEVGRjkwRjUyOTc1MzNGNEIzNTQwRjA0
N0MzLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERmtlMmhLQ3BaU0VKVXBzdFRY
RDg2TVBaTHlFcFAyZlhmODVaZFlkMjlYSy8wLzMyMzgzMDM0M2EzNzM4MzgzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTMyMzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
eIAwDQYJKoZIhvcNAQELBQADggEBABibBljWwTmq+MMvCpXGFvFlWgJpaBMwyGEF
1RsAOCd+sGUVChfqG5UMQ9GliQo/rd8EkfJazaFRHoJbsiZfDfaLpjkeFRsFLBmU
VQchHISsQlVJUarjSNW/Q6S+2eJxlb3t7YHrFqcj2Nr3rgIPjuV/K+CWJE9XqTlX
RoHE7MEuAtM5SAmB24jaHoy2Uit7NQ49TqYImiTOMEoZEXCujRP3EBYcep9iUfvv
hN2iRa7L19SLzC4T0T85Pfxn1ZlU3HwiciQzu2HLK18ISQuLj0rivA2WYRvqOKgj
c7RIItioH7xbhbBnZkDlS3zWzZbyucQX5Sk9eQ+5IM62tarwCPA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org