Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa
File:                     323830343a373964343a3a2f33322d3336203d3e20323731333330.roa (raw, json)
Hash identifier:          Nkm9emMIu75jNHp9r6+Pz6W5PIaDoJBt7Gz9KYqIigI=
Subject key identifier:   C5:51:1F:7B:82:9E:B9:68:D0:0E:88:18:F8:C6:63:14:01:50:D6:0C
Certificate issuer:       /CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
Certificate serial:       31043BA2E5C114CB8ACB0D9733DDB1839A1AB9D5
Authority key identifier: 8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa
Signing time:             Mon 18 Sep 2023 16:00:00 +0000
ROA not before:           Mon 18 Sep 2023 15:55:00 +0000
ROA not after:            Mon 16 Sep 2024 16:00:00 +0000
asID:                     271330
IP address blocks:        2804:79d4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:04:3b:a2:e5:c1:14:cb:8a:cb:0d:97:33:dd:b1:83:9a:1a:b9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
        Validity
            Not Before: Sep 18 15:55:00 2023 GMT
            Not After : Sep 16 16:00:00 2024 GMT
        Subject: CN=3082010A0282010100C1703E5EC5389A56027AA1EAC87C82B201A03548D5583F0C363B1F5C56E8152128C7F7F0E882F39E1891DDA8842E2E85FA2EADC8A4D53B02528BD565B07DE1FEC64C9E258994F08C54250D64882E1973211EC5FBBB9AE5695D980B1E337426041AD6CA6C1D87D866474B7C1274E98E6CF9BBFC842C50C1BC5B84B5E075F390BB96FB716EBE387E7495BD01C415B24B93AEBC29D8723D87BC7D9449F71734D71D5F8DBE5ECCA51AAAFB696079ABA4F7B36AB1C007EB72062D7EE32B65D17A65C2A3FF695CC2FAFE7DF2643E7EF3AF252DE31C7EB826C1AB67525B9B5935B02BF1E9109551C925F141219530A92C6F677860450FDE4140DE08B3C4E6D5A20BDAA70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:3e:5e:c5:38:9a:56:02:7a:a1:ea:c8:7c:
                    82:b2:01:a0:35:48:d5:58:3f:0c:36:3b:1f:5c:56:
                    e8:15:21:28:c7:f7:f0:e8:82:f3:9e:18:91:dd:a8:
                    84:2e:2e:85:fa:2e:ad:c8:a4:d5:3b:02:52:8b:d5:
                    65:b0:7d:e1:fe:c6:4c:9e:25:89:94:f0:8c:54:25:
                    0d:64:88:2e:19:73:21:1e:c5:fb:bb:9a:e5:69:5d:
                    98:0b:1e:33:74:26:04:1a:d6:ca:6c:1d:87:d8:66:
                    47:4b:7c:12:74:e9:8e:6c:f9:bb:fc:84:2c:50:c1:
                    bc:5b:84:b5:e0:75:f3:90:bb:96:fb:71:6e:be:38:
                    7e:74:95:bd:01:c4:15:b2:4b:93:ae:bc:29:d8:72:
                    3d:87:bc:7d:94:49:f7:17:34:d7:1d:5f:8d:be:5e:
                    cc:a5:1a:aa:fb:69:60:79:ab:a4:f7:b3:6a:b1:c0:
                    07:eb:72:06:2d:7e:e3:2b:65:d1:7a:65:c2:a3:ff:
                    69:5c:c2:fa:fe:7d:f2:64:3e:7e:f3:af:25:2d:e3:
                    1c:7e:b8:26:c1:ab:67:52:5b:9b:59:35:b0:2b:f1:
                    e9:10:95:51:c9:25:f1:41:21:95:30:a9:2c:6f:67:
                    78:60:45:0f:de:41:40:de:08:b3:c4:e6:d5:a2:0b:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:51:1F:7B:82:9E:B9:68:D0:0E:88:18:F8:C6:63:14:01:50:D6:0C
            X509v3 Authority Key Identifier:
                keyid:8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:61:6d:77:3e:00:79:cc:92:3d:96:f8:7e:b0:17:78:b0:f7:
         a4:d9:64:82:46:0b:77:c1:c4:10:e1:f4:25:2a:7e:dd:95:c3:
         e1:c2:02:28:10:81:d8:e3:89:2b:ff:70:11:5f:c2:3f:15:17:
         0f:a9:71:d3:dd:39:8b:5c:ce:94:a4:63:fb:2f:b6:df:72:38:
         b5:c2:c1:0a:4a:e0:e8:9c:a9:8a:4e:0a:f4:8e:05:46:dd:a8:
         d5:64:a1:b4:17:25:47:cf:ed:a5:78:04:97:98:bb:20:ef:4a:
         fe:be:4f:83:ef:a9:69:12:91:f3:f5:67:e7:a2:8b:a4:a3:7b:
         36:d1:34:00:6e:1d:76:d7:27:0c:fd:a2:da:1b:48:d6:92:d2:
         e9:bb:da:d8:c1:a6:44:15:b5:1e:ab:8d:69:53:a0:01:8d:9d:
         30:46:bf:72:b3:9b:1e:ee:2d:5f:05:54:e8:36:41:b0:42:f6:
         3a:51:05:38:79:72:ee:d4:7a:97:fc:5f:23:11:84:27:61:e8:
         56:25:17:ca:d9:7e:88:2c:4c:1a:d9:71:60:94:a7:46:60:f4:
         ca:31:bc:90:75:47:93:71:32:17:9c:35:1a:8c:46:08:5c:b5:
         00:ea:56:3b:14:a7:16:64:5e:7e:3e:df:b0:a8:a1:7a:ae:9b:
         e1:c3:5b:26
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUMQQ7ouXBFMuKyw2XM92xg5oaudUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIxQUYxOTMyRDlBOEMyMURGQzkyNjhFOUZBOTMwOEMz
MDRDNThBRTAeFw0yMzA5MTgxNTU1MDBaFw0yNDA5MTYxNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE3MDNFNUVDNTM4OUE1NjAy
N0FBMUVBQzg3QzgyQjIwMUEwMzU0OEQ1NTgzRjBDMzYzQjFGNUM1NkU4MTUyMTI4
QzdGN0YwRTg4MkYzOUUxODkxRERBODg0MkUyRTg1RkEyRUFEQzhBNEQ1M0IwMjUy
OEJENTY1QjA3REUxRkVDNjRDOUUyNTg5OTRGMDhDNTQyNTBENjQ4ODJFMTk3MzIx
MUVDNUZCQkI5QUU1Njk1RDk4MEIxRTMzNzQyNjA0MUFENkNBNkMxRDg3RDg2NjQ3
NEI3QzEyNzRFOThFNkNGOUJCRkM4NDJDNTBDMUJDNUI4NEI1RTA3NUYzOTBCQjk2
RkI3MTZFQkUzODdFNzQ5NUJEMDFDNDE1QjI0QjkzQUVCQzI5RDg3MjNEODdCQzdE
OTQ0OUY3MTczNEQ3MUQ1RjhEQkU1RUNDQTUxQUFBRkI2OTYwNzlBQkE0RjdCMzZB
QjFDMDA3RUI3MjA2MkQ3RUUzMkI2NUQxN0E2NUMyQTNGRjY5NUNDMkZBRkU3REYy
NjQzRTdFRjNBRjI1MkRFMzFDN0VCODI2QzFBQjY3NTI1QjlCNTkzNUIwMkJGMUU5
MTA5NTUxQzkyNUYxNDEyMTk1MzBBOTJDNkY2Nzc4NjA0NTBGREU0MTQwREUwOEIz
QzRFNkQ1QTIwQkRBQTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwXA+XsU4mlYCeqHqyHyCsgGgNUjVWD8MNjsfXFboFSEox/fw6ILz
nhiR3aiELi6F+i6tyKTVOwJSi9VlsH3h/sZMniWJlPCMVCUNZIguGXMhHsX7u5rl
aV2YCx4zdCYEGtbKbB2H2GZHS3wSdOmObPm7/IQsUMG8W4S14HXzkLuW+3Fuvjh+
dJW9AcQVskuTrrwp2HI9h7x9lEn3FzTXHV+Nvl7MpRqq+2lgeauk97NqscAH63IG
LX7jK2XRemXCo/9pXML6/n3yZD5+868lLeMcfrgmwatnUlubWTWwK/HpEJVRySXx
QSGVMKksb2d4YEUP3kFA3gizxObVogvapwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FMVRH3uCnrlo0A6IGPjGYxQBUNYMMB8GA1UdIwQYMBaAFIsa8ZMtmowh38kmjp+p
MIwwTFiuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJGd0dwS2VoSmpRcHhM
cXJNZFN1a2c2czV2YkhndW5IbnRTbVVGZWthblZLLzAvOEIxQUYxOTMyRDlBOEMy
MURGQzkyNjhFOUZBOTMwOEMzMDRDNThBRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QjFBRjE5MzJEOUE4QzIxREZDOTI2OEU5RkE5MzA4QzMwNEM1
OEFFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yRndHcEtlaEpqUXB4THFyTWRT
dWtnNnM1dmJIZ3VuSG50U21VRmVrYW5WSy8wLzMyMzgzMDM0M2EzNzM5NjQzNDNh
M2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzczMTMzMzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
edQwDQYJKoZIhvcNAQELBQADggEBADdhbXc+AHnMkj2W+H6wF3iw96TZZIJGC3fB
xBDh9CUqft2Vw+HCAigQgdjjiSv/cBFfwj8VFw+pcdPdOYtczpSkY/svtt9yOLXC
wQpK4OicqYpOCvSOBUbdqNVkobQXJUfP7aV4BJeYuyDvSv6+T4PvqWkSkfP1Z+ei
i6SjezbRNABuHXbXJwz9otobSNaS0um72tjBpkQVtR6rjWlToAGNnTBGv3Kzmx7u
LV8FVOg2QbBC9jpRBTh5cu7Uepf8XyMRhCdh6FYlF8rZfogsTBrZcWCUp0Zg9Mox
vJB1R5NxMhecNRqMRghctQDqVjsUpxZkXn4+37CooXqum+HDWyY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org