Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a3a2f33332d3333203d3e20323639313630.roa
File:                     323830343a363035343a3a2f33332d3333203d3e20323639313630.roa (raw, json)
Hash identifier:          s39yd4tLMjx8I0G8UBZ3L06L8fTHqSwH21EVriEA4KE=
Subject key identifier:   64:8D:82:38:19:32:F7:35:A2:FC:25:D9:C6:0B:A9:10:B3:FD:A7:E9
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       1A98079109D951E836A3AB1FCABDBE9B11E17605
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a3a2f33332d3333203d3e20323639313630.roa
Signing time:             Tue 19 Dec 2023 22:31:39 +0000
ROA not before:           Tue 19 Dec 2023 22:26:39 +0000
ROA not after:            Tue 17 Dec 2024 22:31:39 +0000
asID:                     269160
IP address blocks:        2804:6054::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:98:07:91:09:d9:51:e8:36:a3:ab:1f:ca:bd:be:9b:11:e1:76:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Dec 19 22:26:39 2023 GMT
            Not After : Dec 17 22:31:39 2024 GMT
        Subject: CN=648D82381932F735A2FC25D9C60BA910B3FDA7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:cd:66:82:74:a5:90:6e:f2:fa:6d:8a:1d:
                    7a:e8:35:b1:58:27:eb:5e:04:f0:ec:fc:27:49:ec:
                    9b:f7:b8:11:51:b5:2f:2a:65:50:cb:3c:09:9f:9a:
                    60:e9:a7:6b:3f:3d:4a:f4:67:80:f8:7e:6e:64:8e:
                    96:6c:6b:24:74:16:0f:a8:9f:0b:de:bc:ec:ac:c8:
                    d4:4a:fd:fa:5c:f2:ac:56:d5:f1:24:7e:8e:5d:2b:
                    0c:c0:60:d5:b5:d1:e9:4f:e4:fd:23:91:10:3c:c3:
                    02:89:8d:5d:fd:25:d1:73:07:5e:95:2a:77:38:49:
                    69:f6:5b:f9:c9:36:2e:e1:20:a8:fa:db:6a:67:85:
                    cf:83:99:92:92:d9:12:e7:f5:11:80:ec:47:db:a6:
                    31:f2:b8:87:d7:21:11:06:e0:6e:fa:91:3b:e2:06:
                    e1:36:e7:07:0d:4b:7a:de:b4:29:bb:62:82:95:e6:
                    6c:49:00:61:d8:2a:43:4d:f5:20:83:69:b4:f3:b3:
                    5d:7f:72:44:74:a9:1d:6c:7f:9b:8c:1c:3d:0f:9b:
                    22:f1:9e:c4:c1:22:9e:33:3d:fa:27:9a:c3:f4:15:
                    b7:c9:2a:7e:f1:7f:8b:1c:04:cf:db:f7:8d:b2:64:
                    43:31:ed:98:ec:8f:01:0c:5a:cc:90:ce:cf:88:81:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8D:82:38:19:32:F7:35:A2:FC:25:D9:C6:0B:A9:10:B3:FD:A7:E9
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a3a2f33332d3333203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6054::/33

    Signature Algorithm: sha256WithRSAEncryption
         c9:fd:5b:8b:a9:a4:fb:94:63:5c:06:24:40:1f:5b:d8:60:cd:
         f1:a5:23:df:c9:bc:2f:8a:19:67:09:f2:ca:8d:cb:66:a9:cd:
         35:2b:b7:41:7f:99:da:a5:8b:0e:b0:cc:91:fd:91:39:7c:4f:
         35:0d:79:ff:45:50:6e:cf:26:0f:6e:47:1f:49:45:44:67:4b:
         33:9a:67:c5:41:46:e3:79:8c:73:ee:05:4a:8a:47:13:7e:d3:
         f6:ca:e3:8c:26:c5:33:64:a5:22:38:35:e6:30:a2:7d:28:4e:
         bd:66:77:47:d4:5c:be:73:7c:eb:62:44:0c:6a:76:4f:14:2d:
         43:77:f0:81:28:37:e8:89:41:42:7d:77:58:07:50:02:9b:b2:
         dc:bf:dc:40:3d:43:24:53:3a:1d:5d:13:af:d0:7c:77:43:38:
         0e:ff:25:36:37:09:c6:09:ec:bb:01:24:93:d5:6a:10:e2:69:
         d1:98:c0:8a:4e:fb:a8:2b:eb:d7:51:51:3e:2f:a8:05:d2:20:
         f2:fd:44:a8:40:1f:32:6c:b9:43:be:5a:36:23:5c:7c:cd:56:
         cf:55:e3:6d:8b:69:11:0f:41:20:f1:60:a8:c2:74:5d:ca:20:
         22:01:df:ef:14:2d:58:7e:2b:e1:bc:92:6c:9a:f1:72:36:88:
         3e:20:b5:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGpgHkQnZUeg2o6sfyr2+mxHhdgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCOThEMUUwOEJDNTY2NDE2RjJBNzhGNjIxMEMyMEU4
RjhFNjcwMDAeFw0yMzEyMTkyMjI2MzlaFw0yNDEyMTcyMjMxMzlaMDMxMTAvBgNV
BAMTKDY0OEQ4MjM4MTkzMkY3MzVBMkZDMjVEOUM2MEJBOTEwQjNGREE3RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOs1mgnSlkG7y+m2KHXroNbFY
J+teBPDs/CdJ7Jv3uBFRtS8qZVDLPAmfmmDpp2s/PUr0Z4D4fm5kjpZsayR0Fg+o
nwvevOysyNRK/fpc8qxW1fEkfo5dKwzAYNW10elP5P0jkRA8wwKJjV39JdFzB16V
Knc4SWn2W/nJNi7hIKj622pnhc+DmZKS2RLn9RGA7EfbpjHyuIfXIREG4G76kTvi
BuE25wcNS3retCm7YoKV5mxJAGHYKkNN9SCDabTzs11/ckR0qR1sf5uMHD0PmyLx
nsTBIp4zPfonmsP0FbfJKn7xf4scBM/b942yZEMx7ZjsjwEMWsyQzs+IgfxdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZI2COBky9zWi/CXZxgupELP9p+kwHwYDVR0j
BBgwFoAUcrmNHgi8VmQW8qePYhDCDo+OZwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkJGc3FNZkZXdWNBcExLQm8yUFVmazJMSjFDNXIxYkRKaGJnZE50RXZo
OWcvMC83MkI5OEQxRTA4QkM1NjY0MTZGMkE3OEY2MjEwQzIwRThGOEU2NzAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyQjk4RDFFMDhCQzU2NjQx
NkYyQTc4RjYyMTBDMjBFOEY4RTY3MDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJCRnNxTWZGV3VjQXBMS0JvMlBVZmsyTEoxQzVyMWJESmhiZ2ROdEV2aDlnLzAv
MzIzODMwMzQzYTM2MzAzNTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARgVAAwDQYJKoZIhvcNAQELBQADggEBAMn9W4up
pPuUY1wGJEAfW9hgzfGlI9/JvC+KGWcJ8sqNy2apzTUrt0F/mdqliw6wzJH9kTl8
TzUNef9FUG7PJg9uRx9JRURnSzOaZ8VBRuN5jHPuBUqKRxN+0/bK44wmxTNkpSI4
NeYwon0oTr1md0fUXL5zfOtiRAxqdk8ULUN38IEoN+iJQUJ9d1gHUAKbsty/3EA9
QyRTOh1dE6/QfHdDOA7/JTY3CcYJ7LsBJJPVahDiadGYwIpO+6gr69dRUT4vqAXS
IPL9RKhAHzJsuUO+WjYjXHzNVs9V422LaREPQSDxYKjCdF3KICIB3+8ULVh+K+G8
kmya8XI2iD4gtXg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org