Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d3438203d3e20323638303136.roa
File:                     323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (raw, json)
Hash identifier:          utKo2Mof6uc23k6oVU5SruYuDd70loDdb+DN8+2LXOQ=
Subject key identifier:   F7:64:03:BB:25:D6:F9:E8:79:F3:1B:8F:50:36:CB:18:0A:DC:1A:34
Certificate issuer:       /CN=1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1
Certificate serial:       120B6B93E583165EF01A55563AE6034BDD7BA340
Authority key identifier: 14:74:B1:FB:59:CC:BD:EC:AE:0E:CB:3C:A7:D2:C9:DC:35:48:52:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d3438203d3e20323638303136.roa
Signing time:             Tue 19 Mar 2024 14:40:44 +0000
ROA not before:           Tue 19 Mar 2024 14:35:44 +0000
ROA not after:            Tue 18 Mar 2025 14:40:44 +0000
asID:                     268016
IP address blocks:        2804:56a8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:6b:93:e5:83:16:5e:f0:1a:55:56:3a:e6:03:4b:dd:7b:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1
        Validity
            Not Before: Mar 19 14:35:44 2024 GMT
            Not After : Mar 18 14:40:44 2025 GMT
        Subject: CN=F76403BB25D6F9E879F31B8F5036CB180ADC1A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:b4:e8:46:fd:08:39:65:61:f9:65:0e:e1:
                    b8:1f:2b:a7:17:ac:8d:06:0b:a2:9c:c2:e1:57:70:
                    86:25:ac:a9:9d:87:f4:37:26:7e:ca:ba:73:9a:ee:
                    57:79:38:9a:4d:02:92:db:83:a0:41:d8:0c:33:38:
                    d9:c3:93:55:f0:1d:f8:a2:4e:7a:f1:6e:e2:70:f4:
                    57:f6:71:59:17:78:cf:58:1e:9b:b2:74:a9:0b:14:
                    d5:0b:c0:4c:70:2b:2b:22:2e:78:1d:a3:5d:5b:10:
                    75:aa:5a:f8:8b:22:c6:91:19:99:5d:69:02:8c:71:
                    31:15:89:3c:b8:26:d0:d5:10:9e:61:21:4a:7f:31:
                    e6:71:a3:4d:28:a6:09:82:68:72:b9:89:1e:e6:2e:
                    c6:04:9b:96:bf:88:bb:dd:21:9d:f2:4b:f0:67:43:
                    14:50:6d:31:9d:e5:85:92:53:49:f7:6d:67:49:b9:
                    3b:06:e5:53:c6:c4:d7:b2:76:c3:03:0a:ad:1f:4e:
                    b9:f0:46:76:d8:a2:00:fe:79:7e:8c:f7:f4:c0:be:
                    6d:7e:e9:36:cd:52:f7:de:7a:5e:06:59:52:22:69:
                    cf:94:55:2c:6e:51:fc:53:39:16:7a:1a:a3:70:06:
                    e3:0a:0c:83:15:c4:af:58:06:c2:f8:61:2b:f5:49:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:03:BB:25:D6:F9:E8:79:F3:1B:8F:50:36:CB:18:0A:DC:1A:34
            X509v3 Authority Key Identifier:
                keyid:14:74:B1:FB:59:CC:BD:EC:AE:0E:CB:3C:A7:D2:C9:DC:35:48:52:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d3438203d3e20323638303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:e5:f0:de:73:8a:4b:72:65:1e:3d:74:0c:78:c5:6a:69:47:
         7a:80:58:42:83:49:49:7d:96:24:62:ae:4a:4e:50:2e:0c:c0:
         3b:9d:6e:c9:a3:02:96:f2:76:b8:82:c2:ad:9f:6a:b8:81:01:
         6c:93:e3:39:00:86:d1:98:15:fe:4f:aa:09:5e:d8:c3:61:0b:
         70:e6:e3:b1:63:d3:5d:b8:46:60:64:48:31:35:f8:cf:09:9a:
         d8:33:08:58:af:4d:a2:94:3b:1a:0e:49:93:40:e7:1d:8a:40:
         71:5e:40:d4:9b:9f:a0:80:9b:92:84:d5:fc:75:8e:b6:a1:44:
         e8:01:73:df:5a:d0:c1:cc:46:fc:19:dc:71:e9:ef:ad:74:a9:
         65:f3:91:28:bc:91:48:d8:c0:ab:e5:c5:aa:98:38:7a:ff:2a:
         51:34:42:98:8b:c9:09:86:81:23:47:11:84:06:d7:d6:58:2f:
         c8:5d:e4:c7:fd:ff:c9:65:27:8a:06:19:5a:4f:40:aa:2d:c4:
         f1:8f:66:67:f8:88:ad:8c:56:c3:fc:21:c6:0a:d2:18:2a:34:
         85:a4:7d:8f:a0:34:a7:73:b2:09:5b:7a:69:5a:28:35:1d:38:
         b8:e0:9c:eb:09:3b:4c:0b:30:47:ad:ff:54:f2:d3:3e:db:d9:
         b2:09:13:56
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEgtrk+WDFl7wGlVWOuYDS917o0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ3NEIxRkI1OUNDQkRFQ0FFMEVDQjNDQTdEMkM5REMz
NTQ4NTJCMTAeFw0yNDAzMTkxNDM1NDRaFw0yNTAzMTgxNDQwNDRaMDMxMTAvBgNV
BAMTKEY3NjQwM0JCMjVENkY5RTg3OUYzMUI4RjUwMzZDQjE4MEFEQzFBMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7bToRv0IOWVh+WUO4bgfK6cX
rI0GC6KcwuFXcIYlrKmdh/Q3Jn7KunOa7ld5OJpNApLbg6BB2AwzONnDk1XwHfii
TnrxbuJw9Ff2cVkXeM9YHpuydKkLFNULwExwKysiLngdo11bEHWqWviLIsaRGZld
aQKMcTEViTy4JtDVEJ5hIUp/MeZxo00opgmCaHK5iR7mLsYEm5a/iLvdIZ3yS/Bn
QxRQbTGd5YWSU0n3bWdJuTsG5VPGxNeydsMDCq0fTrnwRnbYogD+eX6M9/TAvm1+
6TbNUvfeel4GWVIiac+UVSxuUfxTORZ6GqNwBuMKDIMVxK9YBsL4YSv1SdnbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU92QDuyXW+eh58xuPUDbLGArcGjQwHwYDVR0j
BBgwFoAUFHSx+1nMveyuDss8p9LJ3DVIUrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlBXQ3lMTUIxSjdvZEhTdVpjNDJrc0JveEg5RVJSQWpvc3h5Tnl1R2hk
b3gvMC8xNDc0QjFGQjU5Q0NCREVDQUUwRUNCM0NBN0QyQzlEQzM1NDg1MkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0NzRCMUZCNTlDQ0JERUNB
RTBFQ0IzQ0E3RDJDOURDMzU0ODUyQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQV0N5TE1CMUo3b2RIU3VaYzQya3NCb3hIOUVSUkFqb3N4eU55dUdoZG94LzAv
MzIzODMwMzQzYTM1MzY2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzAzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWqDANBgkqhkiG9w0BAQsFAAOCAQEAmOXw3nOK
S3JlHj10DHjFamlHeoBYQoNJSX2WJGKuSk5QLgzAO51uyaMClvJ2uILCrZ9quIEB
bJPjOQCG0ZgV/k+qCV7Yw2ELcObjsWPTXbhGYGRIMTX4zwma2DMIWK9NopQ7Gg5J
k0DnHYpAcV5A1JufoICbkoTV/HWOtqFE6AFz31rQwcxG/BnccenvrXSpZfORKLyR
SNjAq+XFqpg4ev8qUTRCmIvJCYaBI0cRhAbX1lgvyF3kx/3/yWUnigYZWk9Aqi3E
8Y9mZ/iIrYxWw/whxgrSGCo0haR9j6A0p3OyCVt6aVooNR04uOCc6wk7TAswR63/
VPLTPtvZsgkTVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org