Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/323830343a343564383a3a2f33322d3438203d3e20323636393533.roa
File:                     323830343a343564383a3a2f33322d3438203d3e20323636393533.roa (raw, json)
Hash identifier:          inZ4YECHSRyJQP+9s0sneBuew75lTT06nE7jo0k0Hcs=
Subject key identifier:   E0:E2:FE:EE:E0:7C:85:02:59:A6:12:21:D0:AF:1C:19:82:91:4C:5A
Certificate issuer:       /CN=9D291B973130E34B8410AEA2E18AECCC5DFC9096
Certificate serial:       0F4948588495275C49EC4B5B4385796A7FD2D815
Authority key identifier: 9D:29:1B:97:31:30:E3:4B:84:10:AE:A2:E1:8A:EC:CC:5D:FC:90:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/323830343a343564383a3a2f33322d3438203d3e20323636393533.roa
Signing time:             Wed 06 Mar 2024 18:33:59 +0000
ROA not before:           Wed 06 Mar 2024 18:28:59 +0000
ROA not after:            Wed 05 Mar 2025 18:33:59 +0000
asID:                     266953
IP address blocks:        2804:45d8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:49:48:58:84:95:27:5c:49:ec:4b:5b:43:85:79:6a:7f:d2:d8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D291B973130E34B8410AEA2E18AECCC5DFC9096
        Validity
            Not Before: Mar  6 18:28:59 2024 GMT
            Not After : Mar  5 18:33:59 2025 GMT
        Subject: CN=E0E2FEEEE07C850259A61221D0AF1C1982914C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:14:01:45:a1:c4:c5:e0:02:34:1e:85:af:
                    61:9f:5b:53:0b:b8:b5:4f:bc:af:98:4e:ef:3a:7e:
                    80:cc:60:ea:37:8d:2e:16:24:d9:e9:f0:47:3b:f3:
                    08:61:6d:30:be:9d:ac:93:35:f9:73:15:7a:88:a2:
                    8f:c4:f7:be:ba:20:64:64:24:6a:33:5d:3a:a1:3d:
                    35:e8:d0:b4:84:3d:8e:32:e6:6d:4e:ce:be:14:bd:
                    c6:2f:97:6c:29:73:3e:b7:9c:0b:0c:57:99:22:22:
                    0e:d6:34:3c:fa:d3:b7:4b:96:ab:77:f2:b1:7f:06:
                    33:8f:5a:ba:ed:fd:c9:df:68:22:b3:33:91:28:45:
                    bb:0c:8a:71:62:af:32:be:f5:45:e5:16:0f:58:d5:
                    38:b2:ba:4b:34:92:cb:a7:aa:4c:c8:3d:31:63:b3:
                    d5:d2:9a:c6:8b:d9:29:cb:36:05:73:87:f8:6a:ce:
                    8b:27:27:2a:bc:a7:a3:6d:4f:cf:09:83:3f:07:8f:
                    29:28:cb:ff:e5:b4:f3:9a:fe:6d:64:2c:6b:45:dd:
                    8a:74:23:ff:28:ef:56:bc:21:77:ef:fc:57:f6:6a:
                    8f:e3:de:91:d0:df:9b:d3:96:0e:cb:90:f1:09:1a:
                    89:20:17:2d:42:16:2c:bb:c1:7f:50:cd:3a:04:e0:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E2:FE:EE:E0:7C:85:02:59:A6:12:21:D0:AF:1C:19:82:91:4C:5A
            X509v3 Authority Key Identifier:
                keyid:9D:29:1B:97:31:30:E3:4B:84:10:AE:A2:E1:8A:EC:CC:5D:FC:90:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/323830343a343564383a3a2f33322d3438203d3e20323636393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:54:0b:6e:3b:d2:a8:d6:8d:66:51:a8:89:f8:50:e8:f2:f6:
         68:4a:b0:f1:3f:d4:20:61:c6:31:bb:52:16:c5:d4:5c:a8:62:
         b8:be:bd:ee:bd:db:30:68:cc:8c:bf:26:ca:6e:a1:d6:54:e1:
         a7:b4:49:d5:6d:5f:2e:f0:52:35:5e:36:80:1e:9d:08:53:71:
         21:ae:77:24:41:02:3d:fd:fc:77:5a:33:e2:b2:fc:3e:5d:27:
         34:7b:37:8a:c8:16:98:20:18:e2:f9:2b:8e:a4:3c:0c:7c:47:
         a3:95:60:dd:e8:98:2b:6f:4b:24:5e:62:e7:7f:4c:b8:01:b1:
         3d:e3:10:d2:97:9c:69:3d:2b:12:3d:68:93:89:e6:71:9e:23:
         ed:62:09:9a:8d:08:17:25:3a:d6:f7:a0:85:a7:81:45:6b:c7:
         a4:c6:d0:fc:fc:61:a3:0e:bd:97:64:c7:d7:91:0c:d9:6e:7a:
         cb:eb:72:58:71:af:4a:e1:cf:44:b2:87:e9:56:c1:e3:c5:ff:
         53:d9:56:1c:98:f2:eb:0d:77:dc:0b:a2:5a:c7:d4:27:c5:6e:
         12:05:73:77:c2:e2:14:60:af:bb:dc:94:91:06:97:c2:5c:b2:
         dc:7a:b8:56:12:4f:c7:8a:b4:c6:66:d0:72:8b:3a:64:78:61:
         b4:2e:f3:f0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD0lIWISVJ1xJ7EtbQ4V5an/S2BUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyOTFCOTczMTMwRTM0Qjg0MTBBRUEyRTE4QUVDQ0M1
REZDOTA5NjAeFw0yNDAzMDYxODI4NTlaFw0yNTAzMDUxODMzNTlaMDMxMTAvBgNV
BAMTKEUwRTJGRUVFRTA3Qzg1MDI1OUE2MTIyMUQwQUYxQzE5ODI5MTRDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ2BQBRaHExeACNB6Fr2GfW1ML
uLVPvK+YTu86foDMYOo3jS4WJNnp8Ec78whhbTC+nayTNflzFXqIoo/E9766IGRk
JGozXTqhPTXo0LSEPY4y5m1Ozr4UvcYvl2wpcz63nAsMV5kiIg7WNDz607dLlqt3
8rF/BjOPWrrt/cnfaCKzM5EoRbsMinFirzK+9UXlFg9Y1Tiyuks0ksunqkzIPTFj
s9XSmsaL2SnLNgVzh/hqzosnJyq8p6NtT88Jgz8Hjykoy//ltPOa/m1kLGtF3Yp0
I/8o71a8IXfv/Ff2ao/j3pHQ35vTlg7LkPEJGokgFy1CFiy7wX9QzToE4LkhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4OL+7uB8hQJZphIh0K8cGYKRTFowHwYDVR0j
BBgwFoAUnSkblzEw40uEEK6i4YrszF38kJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdZQVd6S2FFQXNTWHBZQVpUemFOdThOZ3dXU2lkTHJ0U1VFUWdMdGlx
cEYvMC85RDI5MUI5NzMxMzBFMzRCODQxMEFFQTJFMThBRUNDQzVERkM5MDk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEMjkxQjk3MzEzMEUzNEI4
NDEwQUVBMkUxOEFFQ0NDNURGQzkwOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJHWUFXekthRUFzU1hwWUFaVHphTnU4Tmd3V1NpZExydFNVRVFnTHRpcXBGLzAv
MzIzODMwMzQzYTM0MzU2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzkzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARF2DANBgkqhkiG9w0BAQsFAAOCAQEACFQLbjvS
qNaNZlGoifhQ6PL2aEqw8T/UIGHGMbtSFsXUXKhiuL697r3bMGjMjL8mym6h1lTh
p7RJ1W1fLvBSNV42gB6dCFNxIa53JEECPf38d1oz4rL8Pl0nNHs3isgWmCAY4vkr
jqQ8DHxHo5Vg3eiYK29LJF5i539MuAGxPeMQ0pecaT0rEj1ok4nmcZ4j7WIJmo0I
FyU61veghaeBRWvHpMbQ/Pxhow69l2TH15EM2W56y+tyWHGvSuHPRLKH6VbB48X/
U9lWHJjy6w133AuiWsfUJ8VuEgVzd8LiFGCvu9yUkQaXwlyy3Hq4VhJPx4q0xmbQ
cos6ZHhhtC7z8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org