Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/323830343a353165383a3a2f33332d3333203d3e20323638343834.roa
File:                     323830343a353165383a3a2f33332d3333203d3e20323638343834.roa (raw, json)
Hash identifier:          tVEFAk46aQHZ2diZnKWF0660h3oUOWPlpqzglIzDUFo=
Subject key identifier:   67:E6:E9:C8:5B:5D:31:08:64:65:44:A1:FA:32:7D:40:47:E5:62:F9
Certificate issuer:       /CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
Certificate serial:       08201EFDC8891B6C6E4195DF16C33D049BDC1030
Authority key identifier: 31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/323830343a353165383a3a2f33332d3333203d3e20323638343834.roa
Signing time:             Thu 04 Apr 2024 01:58:51 +0000
ROA not before:           Thu 04 Apr 2024 01:53:51 +0000
ROA not after:            Thu 03 Apr 2025 01:58:51 +0000
asID:                     268484
IP address blocks:        2804:51e8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:20:1e:fd:c8:89:1b:6c:6e:41:95:df:16:c3:3d:04:9b:dc:10:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
        Validity
            Not Before: Apr  4 01:53:51 2024 GMT
            Not After : Apr  3 01:58:51 2025 GMT
        Subject: CN=67E6E9C85B5D3108646544A1FA327D4047E562F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ea:25:ec:9e:cf:ad:f6:e1:ec:3e:2a:d8:16:
                    ac:5d:4a:ef:09:f9:c6:48:4b:8e:35:aa:2b:05:08:
                    36:46:cd:9e:e9:81:d4:95:0d:79:11:3c:51:ed:bc:
                    0a:63:7e:99:a3:7d:9d:ae:78:e0:2b:ac:be:d2:e2:
                    1f:e5:e4:f3:1c:ab:41:04:b4:0e:ff:a3:0d:9f:66:
                    07:11:8f:78:5d:b8:06:e7:ff:c1:0e:8f:b1:b9:c4:
                    3d:21:b8:b0:ab:09:a6:a5:9a:38:a4:ae:5f:fe:b7:
                    78:57:5f:ff:3f:ea:1e:34:49:2b:38:21:28:6e:58:
                    dd:02:d3:ef:bc:c8:03:12:18:b0:dd:dd:3c:59:1d:
                    6f:88:80:03:30:26:d5:04:24:88:f0:a7:cb:db:0f:
                    06:0f:7d:2e:62:d4:df:26:97:47:4d:99:33:f6:39:
                    f8:05:56:c2:87:14:3d:a6:e8:68:57:f7:49:ad:cf:
                    12:7f:5b:7f:ba:c8:e7:cf:53:37:35:a2:9e:0f:46:
                    d9:6c:3e:f0:f7:ea:57:24:7f:53:ce:4e:e8:17:92:
                    21:6f:d6:92:7f:1a:50:08:71:5d:18:d2:95:ef:77:
                    5c:eb:5e:a6:40:f9:c0:a8:b0:53:46:b5:6c:5e:75:
                    a6:10:62:d0:b6:74:ea:7d:0a:25:4d:b9:a6:bc:c9:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:E9:C8:5B:5D:31:08:64:65:44:A1:FA:32:7D:40:47:E5:62:F9
            X509v3 Authority Key Identifier:
                keyid:31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/323830343a353165383a3a2f33332d3333203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e8::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:29:6b:9f:b5:24:db:67:65:f6:95:4a:b8:2b:7c:c6:f0:7f:
         62:bb:bf:0e:a7:01:d2:8c:23:9f:3b:7d:4d:e9:70:6a:11:0a:
         9e:85:9e:f4:23:c6:d1:1b:da:c2:43:77:d6:a5:71:c7:5f:17:
         f1:db:4e:49:08:3d:3b:61:49:c4:11:4c:61:93:b2:30:7d:de:
         97:af:d0:b9:10:b6:d1:e3:46:7e:9a:3d:78:5c:a5:77:14:16:
         ff:12:a9:30:c7:a9:e8:ed:39:91:76:24:fd:66:60:49:a7:a2:
         1b:af:5c:f1:5a:c4:9f:cc:a7:fc:eb:b5:11:e6:1c:bf:39:fb:
         70:7c:7c:4a:08:26:01:86:78:71:a2:5c:3b:4a:62:b0:ae:05:
         98:2b:b7:c1:40:b6:a4:4f:5a:04:b6:b0:f8:c6:82:d6:ce:64:
         76:e8:69:ed:ce:57:cf:d0:a3:fc:20:40:9b:de:42:38:34:c7:
         0e:42:cb:5c:48:2e:0d:9a:a4:6f:62:84:14:28:69:bc:34:8a:
         fa:06:22:b3:0e:55:89:51:18:7e:ff:49:3a:c1:c5:ec:c4:56:
         b1:16:b8:e9:f5:da:32:fe:13:32:05:33:86:a1:73:18:a3:ad:
         3d:bd:1e:f6:bb:f8:56:64:49:e9:d8:cd:ae:be:7a:7f:e5:30:
         92:87:d5:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCCAe/ciJG2xuQZXfFsM9BJvcEDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFEQ0I2MDFENEZEN0ZERDg3RDc0QzkzRUJCMjAxQ0ZC
RDBDQTlFNjAeFw0yNDA0MDQwMTUzNTFaFw0yNTA0MDMwMTU4NTFaMDMxMTAvBgNV
BAMTKDY3RTZFOUM4NUI1RDMxMDg2NDY1NDRBMUZBMzI3RDQwNDdFNTYyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr6iXsns+t9uHsPirYFqxdSu8J
+cZIS441qisFCDZGzZ7pgdSVDXkRPFHtvApjfpmjfZ2ueOArrL7S4h/l5PMcq0EE
tA7/ow2fZgcRj3hduAbn/8EOj7G5xD0huLCrCaalmjikrl/+t3hXX/8/6h40SSs4
IShuWN0C0++8yAMSGLDd3TxZHW+IgAMwJtUEJIjwp8vbDwYPfS5i1N8ml0dNmTP2
OfgFVsKHFD2m6GhX90mtzxJ/W3+6yOfPUzc1op4PRtlsPvD36lckf1POTugXkiFv
1pJ/GlAIcV0Y0pXvd1zrXqZA+cCosFNGtWxedaYQYtC2dOp9CiVNuaa8yUL1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ+bpyFtdMQhkZUSh+jJ9QEflYvkwHwYDVR0j
BBgwFoAUMdy2AdT9f92H10yT67IBz70MqeYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjMya1Y2M0dMZ1NtZ05HODlxZ3FySmRKQlV1NlNQaVJEY3FmV3hqQllt
NmQvMS8zMURDQjYwMUQ0RkQ3RkREODdENzRDOTNFQkIyMDFDRkJEMENBOUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxRENCNjAxRDRGRDdGREQ4
N0Q3NEM5M0VCQjIwMUNGQkQwQ0E5RTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzMmtWNjNHTGdTbWdORzg5cWdxckpkSkJVdTZTUGlSRGNxZld4akJZbTZkLzEv
MzIzODMwMzQzYTM1MzE2NTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzQzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARR6AAwDQYJKoZIhvcNAQELBQADggEBACMpa5+1
JNtnZfaVSrgrfMbwf2K7vw6nAdKMI587fU3pcGoRCp6FnvQjxtEb2sJDd9alccdf
F/HbTkkIPTthScQRTGGTsjB93pev0LkQttHjRn6aPXhcpXcUFv8SqTDHqejtOZF2
JP1mYEmnohuvXPFaxJ/Mp/zrtRHmHL85+3B8fEoIJgGGeHGiXDtKYrCuBZgrt8FA
tqRPWgS2sPjGgtbOZHboae3OV8/Qo/wgQJveQjg0xw5Cy1xILg2apG9ihBQoabw0
ivoGIrMOVYlRGH7/STrBxezEVrEWuOn12jL+EzIFM4ahcxijrT29Hva7+FZkSenY
za6+en/lMJKH1Rk=
-----END CERTIFICATE-----
Generated at Wed Sep 11 13:24:04 2024 by rpki-client on console-ams.rpki-client.org