Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33322d313238203d3e203631373132.roa
File:                     323830343a316232383a3a2f33322d313238203d3e203631373132.roa (raw, json)
Hash identifier:          +bKTxiOkAlvaJRE2lc8B1k4pgo1ELAyBQj5kBrdHu/Y=
Subject key identifier:   A1:88:95:F3:C1:25:D6:48:6A:EB:99:18:AD:F1:F3:F4:0C:BC:C2:42
Certificate issuer:       /CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
Certificate serial:       117CD1713DBE2291C2D6EB59E59EC75BCF20CD31
Authority key identifier: 7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33322d313238203d3e203631373132.roa
Signing time:             Sat 09 Mar 2024 12:39:50 +0000
ROA not before:           Sat 09 Mar 2024 12:34:50 +0000
ROA not after:            Sat 08 Mar 2025 12:39:50 +0000
asID:                     61712
IP address blocks:        2804:1b28::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7c:d1:71:3d:be:22:91:c2:d6:eb:59:e5:9e:c7:5b:cf:20:cd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
        Validity
            Not Before: Mar  9 12:34:50 2024 GMT
            Not After : Mar  8 12:39:50 2025 GMT
        Subject: CN=A18895F3C125D6486AEB9918ADF1F3F40CBCC242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:78:88:85:8a:27:8e:6f:47:ca:3a:40:cf:
                    02:c4:47:c2:99:73:f3:41:f4:cc:4e:fc:02:bf:e2:
                    ba:8a:b0:f8:2b:c0:87:ef:38:9d:05:c9:c0:6a:11:
                    e7:6e:e0:cc:be:fe:13:c9:17:a5:bd:46:0b:23:ba:
                    74:69:1f:8e:dc:f6:80:d7:ef:25:99:f0:3c:f4:1c:
                    e9:33:f6:c5:fb:65:2e:ae:17:8f:28:3b:48:c2:df:
                    7d:b2:36:31:7d:2f:66:7a:5e:79:c9:73:1e:1a:c1:
                    17:64:cd:2c:30:8a:09:45:f0:29:59:b4:36:56:f3:
                    02:b8:f2:90:50:aa:97:af:ff:07:89:76:45:27:f6:
                    c5:5c:2c:90:ce:5f:7b:3b:cf:1a:16:f7:16:6e:b9:
                    48:11:ee:fe:dd:26:c4:a7:77:c7:2a:37:9f:60:b4:
                    d5:a9:4e:b7:f7:c7:b4:70:41:de:ba:b3:2d:cd:76:
                    b3:07:1c:2e:19:f1:87:f4:f1:49:4c:80:03:c7:f7:
                    0a:9c:3b:a0:32:23:57:95:a5:f7:91:69:0d:ae:97:
                    37:86:ca:b9:69:6d:6f:57:a7:f3:d0:f1:27:1c:f9:
                    49:8b:ce:b8:a2:02:19:ce:82:8c:59:9c:65:26:30:
                    77:46:e6:3f:ad:d3:a3:e6:d1:d9:93:95:b1:dd:46:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:88:95:F3:C1:25:D6:48:6A:EB:99:18:AD:F1:F3:F4:0C:BC:C2:42
            X509v3 Authority Key Identifier:
                keyid:7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33322d313238203d3e203631373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:67:34:d3:96:63:56:64:41:93:21:c7:3b:81:77:be:b8:0e:
         94:51:e1:6c:e7:67:3f:86:94:a0:d7:db:93:cf:ef:7c:82:ef:
         51:95:71:3f:56:60:11:d8:27:f7:97:a0:33:82:06:71:7d:92:
         b4:50:2d:4f:1d:0b:fe:36:5b:cd:01:a8:f6:50:ac:ab:a5:6c:
         f0:36:e1:b9:2d:fa:a4:ae:96:ca:ea:27:00:81:3f:89:09:72:
         18:b9:bd:19:a0:06:6e:0f:db:82:a1:57:76:ab:2c:74:38:d0:
         a2:13:7f:9c:67:d4:42:05:9e:21:19:28:57:67:4f:fe:d2:e9:
         3c:df:fc:f6:a6:1f:31:2c:96:d7:56:e7:f9:ab:d3:bc:be:63:
         d3:92:69:7f:14:6a:f5:a0:b9:9e:09:bb:c0:4f:a0:84:b7:98:
         aa:1b:d9:5f:6b:e2:31:8f:93:98:6f:92:34:98:60:5c:23:d0:
         ce:c6:f3:95:9b:23:71:85:f6:79:3d:1c:9c:d9:52:eb:ac:fd:
         78:4b:d4:c3:94:28:91:56:94:71:15:ea:98:da:7a:62:5a:02:
         80:a9:32:8e:3a:de:90:89:a9:04:1d:3e:4b:fd:7f:de:1f:61:
         55:b1:c6:c4:c4:76:03:16:d4:bc:e7:e6:9f:7f:db:90:8d:6a:
         c8:87:46:8c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEXzRcT2+IpHC1utZ5Z7HW88gzTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JENTQ1NkUzQTA0OENGRTJGNjJGNkY3QkZEMkYwRENE
MUY4NUI1RDAeFw0yNDAzMDkxMjM0NTBaFw0yNTAzMDgxMjM5NTBaMDMxMTAvBgNV
BAMTKEExODg5NUYzQzEyNUQ2NDg2QUVCOTkxOEFERjFGM0Y0MENCQ0MyNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHniIhYonjm9HyjpAzwLER8KZ
c/NB9MxO/AK/4rqKsPgrwIfvOJ0FycBqEedu4My+/hPJF6W9RgsjunRpH47c9oDX
7yWZ8Dz0HOkz9sX7ZS6uF48oO0jC332yNjF9L2Z6XnnJcx4awRdkzSwwiglF8ClZ
tDZW8wK48pBQqpev/weJdkUn9sVcLJDOX3s7zxoW9xZuuUgR7v7dJsSnd8cqN59g
tNWpTrf3x7RwQd66sy3NdrMHHC4Z8Yf08UlMgAPH9wqcO6AyI1eVpfeRaQ2ulzeG
yrlpbW9Xp/PQ8Scc+UmLzriiAhnOgoxZnGUmMHdG5j+t06Pm0dmTlbHdRjiPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUoYiV88El1khq65kYrfHz9Ay8wkIwHwYDVR0j
BBgwFoAUe9VFbjoEjP4vYvb3v9Lw3NH4W10wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZM
eGIvMC83QkQ1NDU2RTNBMDQ4Q0ZFMkY2MkY2RjdCRkQyRjBEQ0QxRjg1QjVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdCRDU0NTZFM0EwNDhDRkUy
RjYyRjZGN0JGRDJGMERDRDFGODVCNUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1eHY1Zjh2c3Vob1dZdHNzcXFvZUtTNzg1dllvRWtmNHlmRGpuRzdmTHhiLzAv
MzIzODMwMzQzYTMxNjIzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzczMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQbKDANBgkqhkiG9w0BAQsFAAOCAQEAOGc005Zj
VmRBkyHHO4F3vrgOlFHhbOdnP4aUoNfbk8/vfILvUZVxP1ZgEdgn95egM4IGcX2S
tFAtTx0L/jZbzQGo9lCsq6Vs8DbhuS36pK6WyuonAIE/iQlyGLm9GaAGbg/bgqFX
dqssdDjQohN/nGfUQgWeIRkoV2dP/tLpPN/89qYfMSyW11bn+avTvL5j05JpfxRq
9aC5ngm7wE+ghLeYqhvZX2viMY+TmG+SNJhgXCPQzsbzlZsjcYX2eT0cnNlS66z9
eEvUw5QokVaUcRXqmNp6YloCgKkyjjrekImpBB0+S/1/3h9hVbHGxMR2AxbUvOfm
n3/bkI1qyIdGjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org