Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa
File:                     323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (raw, json)
Hash identifier:          7hicLItAadkbmPzxwFqf4jd6ep13U2luDvEMUlSbKyE=
Subject key identifier:   27:8A:1F:75:59:A9:30:00:AA:88:91:91:E1:32:18:A4:9B:E0:F6:F4
Certificate issuer:       /CN=2DD7DB25073BEE444F1A2C15B600446279751268
Certificate serial:       06AD2C23709A8409017BEE11DD3E31A34059ACB0
Authority key identifier: 2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa
Signing time:             Mon 04 Dec 2023 15:05:16 +0000
ROA not before:           Mon 04 Dec 2023 15:00:16 +0000
ROA not after:            Mon 02 Dec 2024 15:05:16 +0000
asID:                     268355
IP address blocks:        2804:4fe0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ad:2c:23:70:9a:84:09:01:7b:ee:11:dd:3e:31:a3:40:59:ac:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD7DB25073BEE444F1A2C15B600446279751268
        Validity
            Not Before: Dec  4 15:00:16 2023 GMT
            Not After : Dec  2 15:05:16 2024 GMT
        Subject: CN=278A1F7559A93000AA889191E13218A49BE0F6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:93:0c:d4:84:de:e5:31:36:03:5c:3e:f8:26:
                    cc:a9:da:34:a6:61:7c:6f:bf:27:b4:35:ca:53:43:
                    fd:a4:95:a5:5a:94:b8:66:cd:7d:0f:d5:9e:d9:22:
                    10:82:6d:7c:24:49:79:c5:f2:37:4f:85:71:c9:5f:
                    ea:ff:52:7a:f3:94:5e:20:fd:27:90:a6:52:cd:28:
                    ca:3c:d0:75:bd:0b:ab:7a:b1:c0:83:4a:a9:1e:4a:
                    95:37:70:46:39:6b:cd:42:49:bf:09:22:57:ea:bb:
                    f6:3d:d6:db:55:36:fc:b3:9c:62:03:f0:ff:84:da:
                    b5:93:17:ee:30:9c:a3:40:98:d1:f1:61:e1:b9:71:
                    8d:ec:75:e1:5d:cd:1e:47:56:c7:2b:78:ab:30:f4:
                    42:23:89:61:cf:05:07:ab:a0:7a:ac:7b:b1:10:48:
                    7a:a6:4f:76:46:ac:a0:87:b7:c4:9a:ad:47:47:6a:
                    24:f4:ad:91:b2:7e:16:99:7c:50:2b:de:cd:91:a0:
                    e8:44:24:58:7c:80:cb:b5:41:12:e0:6e:df:de:34:
                    42:8b:fc:ca:6e:62:c2:4c:87:cf:75:17:9d:95:8d:
                    e4:b9:cc:86:bb:c0:a3:bd:54:c3:23:54:5c:22:9a:
                    df:63:df:a2:e8:27:7c:67:84:79:9d:60:05:2a:dc:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8A:1F:75:59:A9:30:00:AA:88:91:91:E1:32:18:A4:9B:E0:F6:F4
            X509v3 Authority Key Identifier:
                keyid:2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/2DD7DB25073BEE444F1A2C15B600446279751268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe0::/33

    Signature Algorithm: sha256WithRSAEncryption
         33:85:7d:82:61:34:78:01:7f:1c:13:72:d6:17:b1:f0:ce:01:
         7e:42:cb:38:c7:64:50:37:34:53:93:f3:c9:b5:ef:59:54:0c:
         89:49:46:f7:41:50:0b:75:b6:ba:28:2d:3a:24:70:ae:c9:c3:
         1d:39:7f:49:be:dd:4a:73:d6:2f:ae:b6:f1:08:e0:d7:4b:50:
         fb:65:2e:d5:17:3e:11:ac:18:51:b1:6f:06:cc:62:53:94:c6:
         5e:ca:08:94:c5:77:69:e6:fa:47:fa:14:ff:42:3c:41:bb:35:
         0e:a7:c6:f2:af:f8:46:d3:07:93:70:08:5d:70:96:d9:fd:cd:
         bb:c5:45:f7:56:fc:49:2a:3f:23:45:7a:f6:cf:e0:08:36:39:
         be:0e:de:73:9b:85:4d:22:de:ad:29:f2:13:3e:0f:66:c5:03:
         dc:92:76:c4:18:3d:cc:22:98:b3:57:9d:1d:ba:fa:cf:5c:53:
         2b:f4:7b:75:a5:07:6c:98:ce:3e:00:41:bc:1a:06:eb:a1:78:
         5a:58:4e:0b:41:2a:e2:3e:ff:cd:62:71:c4:f4:b2:87:5a:5b:
         a7:09:2b:6a:bb:98:43:06:4c:6b:ef:da:e5:0b:ad:6b:f3:6d:
         78:25:68:d3:de:27:26:ac:01:83:a2:e3:39:90:d1:7b:4f:5e:
         e5:15:88:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBq0sI3CahAkBe+4R3T4xo0BZrLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkREN0RCMjUwNzNCRUU0NDRGMUEyQzE1QjYwMDQ0NjI3
OTc1MTI2ODAeFw0yMzEyMDQxNTAwMTZaFw0yNDEyMDIxNTA1MTZaMDMxMTAvBgNV
BAMTKDI3OEExRjc1NTlBOTMwMDBBQTg4OTE5MUUxMzIxOEE0OUJFMEY2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkwzUhN7lMTYDXD74Jsyp2jSm
YXxvvye0NcpTQ/2klaValLhmzX0P1Z7ZIhCCbXwkSXnF8jdPhXHJX+r/UnrzlF4g
/SeQplLNKMo80HW9C6t6scCDSqkeSpU3cEY5a81CSb8JIlfqu/Y91ttVNvyznGID
8P+E2rWTF+4wnKNAmNHxYeG5cY3sdeFdzR5HVscreKsw9EIjiWHPBQeroHqse7EQ
SHqmT3ZGrKCHt8SarUdHaiT0rZGyfhaZfFAr3s2RoOhEJFh8gMu1QRLgbt/eNEKL
/MpuYsJMh891F52VjeS5zIa7wKO9VMMjVFwimt9j36LoJ3xnhHmdYAUq3JBZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJ4ofdVmpMACqiJGR4TIYpJvg9vQwHwYDVR0j
BBgwFoAULdfbJQc77kRPGiwVtgBEYnl1EmgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJOVHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0
aTkvMC8yREQ3REIyNTA3M0JFRTQ0NEYxQTJDMTVCNjAwNDQ2Mjc5NzUxMjY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJERDdEQjI1MDczQkVFNDQ0
RjFBMkMxNUI2MDA0NDYyNzk3NTEyNjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyTlR3S1ZkZW5UUks3ZFhWUGNDMzFTcFJyVEhReWl3RXZ5WGhRVUJZdGk5LzAv
MzIzODMwMzQzYTM0NjY2NTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARP4AAwDQYJKoZIhvcNAQELBQADggEBADOFfYJh
NHgBfxwTctYXsfDOAX5CyzjHZFA3NFOT88m171lUDIlJRvdBUAt1trooLTokcK7J
wx05f0m+3Upz1i+utvEI4NdLUPtlLtUXPhGsGFGxbwbMYlOUxl7KCJTFd2nm+kf6
FP9CPEG7NQ6nxvKv+EbTB5NwCF1wltn9zbvFRfdW/EkqPyNFevbP4Ag2Ob4O3nOb
hU0i3q0p8hM+D2bFA9ySdsQYPcwimLNXnR26+s9cUyv0e3WlB2yYzj4AQbwaBuuh
eFpYTgtBKuI+/81iccT0sodaW6cJK2q7mEMGTGvv2uULrWvzbXglaNPeJyasAYOi
4zmQ0XtPXuUViOs=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org