Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/2/323830343a373430343a3a2f33322d3438203d3e20323730393533.roa
File:                     323830343a373430343a3a2f33322d3438203d3e20323730393533.roa (raw, json)
Hash identifier:          fKX5CL6XZCZ8rxEV2S2v/O65cP2HtF+NGAuUBYAcEkg=
Subject key identifier:   BA:28:6F:FC:08:EA:D0:55:E1:88:7A:78:EA:9B:88:8C:7F:61:86:B5
Certificate issuer:       /CN=025EE02009AD503805F2736AC6708D4A37C5A12C
Certificate serial:       22235F78309C9AB14E154505E044CF042AB03021
Authority key identifier: 02:5E:E0:20:09:AD:50:38:05:F2:73:6A:C6:70:8D:4A:37:C5:A1:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025EE02009AD503805F2736AC6708D4A37C5A12C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/2/323830343a373430343a3a2f33322d3438203d3e20323730393533.roa
Signing time:             Thu 04 Apr 2024 14:58:07 +0000
ROA not before:           Thu 04 Apr 2024 14:53:07 +0000
ROA not after:            Thu 03 Apr 2025 14:58:07 +0000
asID:                     270953
IP address blocks:        2804:7404::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:23:5f:78:30:9c:9a:b1:4e:15:45:05:e0:44:cf:04:2a:b0:30:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025EE02009AD503805F2736AC6708D4A37C5A12C
        Validity
            Not Before: Apr  4 14:53:07 2024 GMT
            Not After : Apr  3 14:58:07 2025 GMT
        Subject: CN=BA286FFC08EAD055E1887A78EA9B888C7F6186B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:23:58:37:dc:97:5e:8c:8a:7f:0f:62:4e:
                    56:61:c5:47:a5:bd:78:77:ea:91:fb:2e:74:0a:13:
                    f2:22:0a:f1:9a:5e:bb:28:be:46:49:a8:75:1b:cb:
                    b4:0f:25:ab:7b:b2:71:85:75:67:20:b8:c6:58:2a:
                    e0:e2:b3:97:a7:1f:70:e9:4e:31:70:01:8f:d1:6a:
                    77:4a:36:0b:fb:1c:71:53:5d:15:ae:b5:8a:44:a2:
                    d5:11:38:a7:27:d1:88:8e:ee:76:a9:1d:52:91:86:
                    89:15:62:88:f7:a2:c9:8f:b2:bd:b1:fd:4f:a5:76:
                    0c:64:11:43:14:ad:1d:19:88:5d:e5:e3:6a:1c:a1:
                    08:0b:a1:cd:c6:52:2f:99:56:fc:ec:ec:12:ba:23:
                    d4:8c:eb:b3:15:51:06:bc:bf:19:08:04:89:d6:1e:
                    8a:37:73:9f:39:c4:0a:1f:35:f3:57:28:fd:ab:60:
                    b0:82:80:d8:61:2b:c0:f9:dc:5b:0e:40:df:4a:0a:
                    9e:77:b4:2c:4e:9b:a2:f9:19:6b:7c:fa:c3:f5:1b:
                    42:af:79:2e:32:99:06:b9:b5:40:ef:5d:48:fc:1d:
                    bf:4a:61:b6:85:c7:a4:5f:70:4a:37:5e:ec:4a:65:
                    fa:3f:27:27:58:e1:fe:7d:ad:c7:a6:65:fd:97:9f:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:28:6F:FC:08:EA:D0:55:E1:88:7A:78:EA:9B:88:8C:7F:61:86:B5
            X509v3 Authority Key Identifier:
                keyid:02:5E:E0:20:09:AD:50:38:05:F2:73:6A:C6:70:8D:4A:37:C5:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/2/025EE02009AD503805F2736AC6708D4A37C5A12C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025EE02009AD503805F2736AC6708D4A37C5A12C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/2/323830343a373430343a3a2f33322d3438203d3e20323730393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7404::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:01:fa:3e:66:77:56:93:0b:e2:b1:09:ec:68:7f:c5:29:1a:
         30:a6:08:1f:22:b0:8a:c3:1b:f3:dd:ad:82:a4:cd:c4:28:20:
         36:7f:2c:d6:65:9b:07:8c:52:41:68:27:eb:da:02:1d:61:d8:
         7d:ee:63:29:39:9b:e5:15:c0:1d:c3:93:46:87:73:00:51:10:
         fc:f8:07:fe:13:21:ed:3b:be:cc:21:70:ba:82:45:66:23:ee:
         26:7c:a0:a1:50:3a:26:5c:04:5c:95:7b:7d:bf:75:e7:08:9e:
         d2:d0:83:9f:37:03:8e:e1:56:2e:e5:e5:f0:3a:12:75:b0:61:
         ad:f6:12:1f:07:fe:f2:44:fc:98:d9:d5:c1:b1:48:32:4f:3b:
         5b:eb:5f:39:b9:bc:36:0d:4f:43:a8:5b:01:00:ce:32:1f:ca:
         22:7d:45:0e:26:fc:c2:38:77:29:cc:bf:33:54:ec:f8:99:9f:
         17:34:05:ba:99:de:e1:28:76:de:5d:df:d5:e3:a5:59:63:11:
         5c:f2:ed:42:78:c5:7b:a6:6c:a1:f9:55:b5:ca:81:e6:bd:14:
         cf:b1:11:ec:13:fc:b0:b9:f1:66:fe:a4:1b:8c:4a:6e:75:13:
         12:bc:08:9c:81:ad:77:13:5b:5a:09:1a:da:f9:87:17:98:97:
         66:10:f0:a9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIiNfeDCcmrFOFUUF4ETPBCqwMCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI1RUUwMjAwOUFENTAzODA1RjI3MzZBQzY3MDhENEEz
N0M1QTEyQzAeFw0yNDA0MDQxNDUzMDdaFw0yNTA0MDMxNDU4MDdaMDMxMTAvBgNV
BAMTKEJBMjg2RkZDMDhFQUQwNTVFMTg4N0E3OEVBOUI4ODhDN0Y2MTg2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CyNYN9yXXoyKfw9iTlZhxUel
vXh36pH7LnQKE/IiCvGaXrsovkZJqHUby7QPJat7snGFdWcguMZYKuDis5enH3Dp
TjFwAY/RandKNgv7HHFTXRWutYpEotUROKcn0YiO7napHVKRhokVYoj3osmPsr2x
/U+ldgxkEUMUrR0ZiF3l42ocoQgLoc3GUi+ZVvzs7BK6I9SM67MVUQa8vxkIBInW
Hoo3c585xAofNfNXKP2rYLCCgNhhK8D53FsOQN9KCp53tCxOm6L5GWt8+sP1G0Kv
eS4ymQa5tUDvXUj8Hb9KYbaFx6RfcEo3XuxKZfo/JydY4f59rcemZf2Xn8fBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuihv/Ajq0FXhiHp46puIjH9hhrUwHwYDVR0j
BBgwFoAUAl7gIAmtUDgF8nNqxnCNSjfFoSwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjd4Vnh3VkcxdmdxRWV0SHJ6ckxIeVVNSzdyZlNqMThNeFQ3dmZUZDF3
RlYvMi8wMjVFRTAyMDA5QUQ1MDM4MDVGMjczNkFDNjcwOEQ0QTM3QzVBMTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyNUVFMDIwMDlBRDUwMzgw
NUYyNzM2QUM2NzA4RDRBMzdDNUExMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI3eFZ4d1ZHMXZncUVldEhyenJMSHlVTUs3cmZTajE4TXhUN3ZmVGQxd0ZWLzIv
MzIzODMwMzQzYTM3MzQzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzkzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR0BDANBgkqhkiG9w0BAQsFAAOCAQEArAH6PmZ3
VpML4rEJ7Gh/xSkaMKYIHyKwisMb892tgqTNxCggNn8s1mWbB4xSQWgn69oCHWHY
fe5jKTmb5RXAHcOTRodzAFEQ/PgH/hMh7Tu+zCFwuoJFZiPuJnygoVA6JlwEXJV7
fb915wie0tCDnzcDjuFWLuXl8DoSdbBhrfYSHwf+8kT8mNnVwbFIMk87W+tfObm8
Ng1PQ6hbAQDOMh/KIn1FDib8wjh3Kcy/M1Ts+JmfFzQFupne4Sh23l3f1eOlWWMR
XPLtQnjFe6ZsoflVtcqB5r0Uz7ER7BP8sLnxZv6kG4xKbnUTErwInIGtdxNbWgka
2vmHF5iXZhDwqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org