Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33332d3333203d3e20323635313431.roa
File:                     323830343a326363303a3a2f33332d3333203d3e20323635313431.roa (raw, json)
Hash identifier:          hOIm5d6fWm31mNw/gWyapoywqaV17N4nmse3aD6iPL8=
Subject key identifier:   70:17:0F:D2:3F:6F:C6:4A:CD:ED:57:E1:8D:D1:37:F7:C6:AF:38:09
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       4B3CE802C3078805150435CAA5269DCE8675ABE9
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33332d3333203d3e20323635313431.roa
Signing time:             Thu 04 Apr 2024 23:07:38 +0000
ROA not before:           Thu 04 Apr 2024 23:02:38 +0000
ROA not after:            Thu 03 Apr 2025 23:07:38 +0000
asID:                     265141
IP address blocks:        2804:2cc0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3c:e8:02:c3:07:88:05:15:04:35:ca:a5:26:9d:ce:86:75:ab:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:38 2024 GMT
            Not After : Apr  3 23:07:38 2025 GMT
        Subject: CN=70170FD23F6FC64ACDED57E18DD137F7C6AF3809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:25:3c:fe:cb:9a:68:99:b4:76:1f:57:e1:
                    ea:0d:b7:71:64:1f:9d:68:a5:66:63:2a:9f:d7:7b:
                    fd:c4:cc:93:77:75:7a:47:cf:b9:6c:e7:bd:cf:6d:
                    2f:9b:95:d9:d1:be:67:0b:ad:ec:08:d5:fb:0d:c0:
                    92:15:46:7f:78:3b:17:65:8b:7a:92:27:9d:fe:2d:
                    cd:ea:34:c5:3e:fd:34:2c:52:58:d4:c1:f1:e5:14:
                    2f:4e:63:dc:41:b1:5a:c0:9f:d3:62:54:f0:ec:99:
                    fa:7e:31:26:48:51:12:88:6c:5f:a8:6e:3d:95:71:
                    96:e6:27:b9:57:3a:d2:b8:ac:f2:3c:67:18:14:4a:
                    0e:c0:96:02:e9:aa:f5:4d:6c:d4:f4:ed:82:d2:8c:
                    93:58:a4:bf:3a:d8:a4:bb:dd:17:53:56:0b:2b:2c:
                    59:6f:f9:5b:25:0d:ce:3e:96:eb:f4:80:ff:28:c1:
                    0a:93:07:ea:27:4f:59:00:b5:e7:15:12:0f:ae:21:
                    1c:6c:6a:25:85:9d:d0:d5:0e:76:a3:53:d1:6b:13:
                    53:70:bb:0e:b0:3f:0e:74:b5:9e:92:c9:c9:ec:10:
                    50:8f:ad:10:2c:42:f4:9e:38:b3:fc:52:73:2d:f5:
                    ac:ed:5f:a9:c7:ca:a3:14:b0:10:43:69:b7:45:ae:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:17:0F:D2:3F:6F:C6:4A:CD:ED:57:E1:8D:D1:37:F7:C6:AF:38:09
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33332d3333203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a3:14:13:0a:05:80:a4:01:33:08:88:19:c8:43:ec:c7:4e:c0:
         5a:81:29:87:3d:3b:22:c3:ff:6f:26:4e:33:e3:4e:63:d4:23:
         28:b8:3a:48:84:09:04:9a:e2:39:79:e2:50:eb:43:22:7e:cd:
         a4:b9:f6:b7:dc:84:74:19:7b:01:14:32:1c:d0:12:de:b1:93:
         ca:c3:e3:48:81:3f:99:a0:2a:69:64:fe:f4:bc:04:27:f7:7c:
         85:9e:e2:62:3d:54:d3:51:ed:99:d0:d8:63:03:b7:cb:bb:fd:
         e4:fc:53:b5:0a:e0:f5:94:12:46:98:c9:d6:85:53:fc:09:ab:
         11:88:0f:b2:60:5f:e0:18:7b:8b:29:71:ed:d8:59:6d:22:f9:
         c1:1f:ba:26:cf:97:6f:ec:50:3b:59:61:ad:6d:fe:f2:cf:01:
         37:11:e5:28:27:6e:6b:33:22:09:16:11:cb:e0:1b:a2:ae:43:
         c8:05:56:fa:08:08:d5:ff:5d:e1:85:4e:f4:69:83:ae:1b:2d:
         6f:9c:d7:3a:7d:26:8e:6a:53:98:ee:dd:61:46:57:70:ae:ee:
         88:fa:24:6e:56:9d:4f:dd:6a:08:6b:e2:14:8a:f2:96:82:3c:
         70:c6:47:c5:b0:20:0c:e1:1c:19:64:50:f8:86:06:db:27:15:
         7b:15:15:dd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSzzoAsMHiAUVBDXKpSadzoZ1q+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGNDQ1RDA4Q0Y4QjQ4QTc3MjRDREQzNUYwQTU0RDU0
MjVFM0NCQTAeFw0yNDA0MDQyMzAyMzhaFw0yNTA0MDMyMzA3MzhaMDMxMTAvBgNV
BAMTKDcwMTcwRkQyM0Y2RkM2NEFDREVENTdFMThERDEzN0Y3QzZBRjM4MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RyU8/suaaJm0dh9X4eoNt3Fk
H51opWZjKp/Xe/3EzJN3dXpHz7ls573PbS+bldnRvmcLrewI1fsNwJIVRn94Oxdl
i3qSJ53+Lc3qNMU+/TQsUljUwfHlFC9OY9xBsVrAn9NiVPDsmfp+MSZIURKIbF+o
bj2VcZbmJ7lXOtK4rPI8ZxgUSg7AlgLpqvVNbNT07YLSjJNYpL862KS73RdTVgsr
LFlv+VslDc4+luv0gP8owQqTB+onT1kAtecVEg+uIRxsaiWFndDVDnajU9FrE1Nw
uw6wPw50tZ6SycnsEFCPrRAsQvSeOLP8UnMt9aztX6nHyqMUsBBDabdFrma3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcBcP0j9vxkrN7VfhjdE398avOAkwHwYDVR0j
BBgwFoAUFfRF0Iz4tIp3JM3TXwpU1UJePLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFvY1J1aHFhZVNQ
Sm0vMS8xNUY0NDVEMDhDRjhCNDhBNzcyNENERDM1RjBBNTRENTQyNUUzQ0JBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1RjQ0NUQwOENGOEI0OEE3
NzI0Q0REMzVGMEE1NEQ1NDI1RTNDQkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOc0Mxb1FXVHYyOWVTOGJHcFpxRUFqUUI3eWV2cGQxb2NSdWhxYWVTUEptLzEv
MzIzODMwMzQzYTMyNjM2MzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzEzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQswAAwDQYJKoZIhvcNAQELBQADggEBAKMUEwoF
gKQBMwiIGchD7MdOwFqBKYc9OyLD/28mTjPjTmPUIyi4OkiECQSa4jl54lDrQyJ+
zaS59rfchHQZewEUMhzQEt6xk8rD40iBP5mgKmlk/vS8BCf3fIWe4mI9VNNR7ZnQ
2GMDt8u7/eT8U7UK4PWUEkaYydaFU/wJqxGID7JgX+AYe4spce3YWW0i+cEfuibP
l2/sUDtZYa1t/vLPATcR5SgnbmszIgkWEcvgG6KuQ8gFVvoICNX/XeGFTvRpg64b
LW+c1zp9Jo5qU5ju3WFGV3Cu7oj6JG5WnU/daghr4hSK8paCPHDGR8WwIAzhHBlk
UPiGBtsnFXsVFd0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org