Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/323830343a323636343a3a2f33322d3438203d3e203532373231.roa
File:                     323830343a323636343a3a2f33322d3438203d3e203532373231.roa (raw, json)
Hash identifier:          lZu9VG7LwrMFII9obt26cacMAsYi4Jig7uPUIszG6xU=
Subject key identifier:   7F:12:53:B3:4D:F8:63:A9:D0:D6:BB:BA:5E:A5:5F:CC:45:26:E9:97
Certificate issuer:       /CN=68B79D737297088228371E4509382F36484FD924
Certificate serial:       73AA4847799CA8475A96F9810AEAB588E8E4B135
Authority key identifier: 68:B7:9D:73:72:97:08:82:28:37:1E:45:09:38:2F:36:48:4F:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B79D737297088228371E4509382F36484FD924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/323830343a323636343a3a2f33322d3438203d3e203532373231.roa
Signing time:             Wed 02 Aug 2023 19:28:58 +0000
ROA not before:           Wed 02 Aug 2023 19:23:58 +0000
ROA not after:            Wed 31 Jul 2024 19:28:58 +0000
asID:                     52721
IP address blocks:        2804:2664::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:aa:48:47:79:9c:a8:47:5a:96:f9:81:0a:ea:b5:88:e8:e4:b1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B79D737297088228371E4509382F36484FD924
        Validity
            Not Before: Aug  2 19:23:58 2023 GMT
            Not After : Jul 31 19:28:58 2024 GMT
        Subject: CN=7F1253B34DF863A9D0D6BBBA5EA55FCC4526E997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:24:01:48:ea:bf:9b:fe:f7:63:f7:69:b4:
                    6c:a0:0d:a4:19:b2:96:a2:f3:a8:6e:9d:00:ce:eb:
                    ea:43:af:a9:b5:74:2a:95:07:13:70:7d:39:31:13:
                    cb:dd:6d:9f:14:cc:d6:f9:bd:98:11:1c:c6:f6:6d:
                    8d:cc:e0:c9:3a:ab:c3:db:f1:f3:d8:97:89:a4:8b:
                    19:65:a9:98:76:2e:cb:45:ad:57:a6:88:e5:96:7b:
                    30:b1:df:11:8e:fd:a8:98:7a:4d:f0:41:e5:17:54:
                    ce:69:69:fa:3c:96:4a:f1:dc:46:dd:c7:88:da:de:
                    b5:ed:77:0a:be:f0:68:f2:75:63:03:80:f6:6a:16:
                    5e:2c:ac:a3:2e:77:3e:99:5e:98:b3:42:48:9a:34:
                    ea:27:5d:8a:1c:65:46:42:20:df:bd:1a:c9:5f:61:
                    32:2f:ca:1c:61:8b:95:3b:3f:d1:82:29:f2:8f:1b:
                    ab:d4:8b:5a:f8:1c:1c:d9:ca:c3:00:1a:3c:2b:4f:
                    1b:11:aa:08:75:e8:14:03:80:0c:64:60:ea:74:8a:
                    91:00:bd:47:0d:24:73:c8:b4:2b:5c:bb:05:b7:d9:
                    be:89:18:5f:db:d9:d8:fb:37:98:45:a5:70:5b:2c:
                    0f:fb:a5:65:e9:d6:21:fa:4e:90:37:3e:dd:db:3e:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:53:B3:4D:F8:63:A9:D0:D6:BB:BA:5E:A5:5F:CC:45:26:E9:97
            X509v3 Authority Key Identifier:
                keyid:68:B7:9D:73:72:97:08:82:28:37:1E:45:09:38:2F:36:48:4F:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/68B79D737297088228371E4509382F36484FD924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B79D737297088228371E4509382F36484FD924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/323830343a323636343a3a2f33322d3438203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2664::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:92:9e:09:47:fe:df:6d:d9:df:f5:73:48:4a:89:b8:47:
         59:39:70:6d:a6:db:0a:9f:06:52:b1:8d:ca:0d:3b:55:e0:f2:
         0c:af:45:ba:d6:ba:5e:49:10:35:b4:e6:0e:07:48:61:9e:69:
         9a:cc:47:d4:c7:20:8c:48:66:6e:d7:c7:aa:53:69:47:a7:09:
         32:e7:b3:6b:1a:19:c2:9f:c5:78:91:20:06:67:f0:78:91:6d:
         c4:a5:41:04:57:8a:58:fd:c7:91:17:ff:d8:bb:a7:1c:e3:6c:
         7b:11:03:13:60:56:2a:b5:75:5c:f1:44:32:91:19:40:dc:0f:
         4d:f8:00:09:12:a0:fe:93:03:14:98:af:b8:c8:1e:b9:f3:49:
         c2:c0:f4:90:6c:aa:16:4c:03:11:e0:70:a7:4d:ee:01:3a:0d:
         53:27:fe:96:6e:e7:41:90:77:86:98:d0:ce:5d:2c:50:6b:8e:
         5f:eb:f6:6f:4a:b1:6f:36:28:94:55:a0:72:01:73:b9:e9:81:
         51:53:f6:2f:19:26:ea:3e:bb:bc:5b:22:46:3e:31:1b:78:a8:
         11:fa:f3:9b:de:32:47:4b:04:d6:05:67:18:81:f2:c7:ea:df:
         89:d7:44:19:28:75:db:63:36:20:3e:63:e0:74:e1:d1:a6:c1:
         66:9f:4e:0d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUc6pIR3mcqEdalvmBCuq1iOjksTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhCNzlENzM3Mjk3MDg4MjI4MzcxRTQ1MDkzODJGMzY0
ODRGRDkyNDAeFw0yMzA4MDIxOTIzNThaFw0yNDA3MzExOTI4NThaMDMxMTAvBgNV
BAMTKDdGMTI1M0IzNERGODYzQTlEMEQ2QkJCQTVFQTU1RkNDNDUyNkU5OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWgCQBSOq/m/73Y/dptGygDaQZ
spai86hunQDO6+pDr6m1dCqVBxNwfTkxE8vdbZ8UzNb5vZgRHMb2bY3M4Mk6q8Pb
8fPYl4mkixllqZh2LstFrVemiOWWezCx3xGO/aiYek3wQeUXVM5pafo8lkrx3Ebd
x4ja3rXtdwq+8GjydWMDgPZqFl4srKMudz6ZXpizQkiaNOonXYocZUZCIN+9Gslf
YTIvyhxhi5U7P9GCKfKPG6vUi1r4HBzZysMAGjwrTxsRqgh16BQDgAxkYOp0ipEA
vUcNJHPItCtcuwW32b6JGF/b2dj7N5hFpXBbLA/7pWXp1iH6TpA3Pt3bPtfNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUfxJTs034Y6nQ1ru6XqVfzEUm6ZcwHwYDVR0j
BBgwFoAUaLedc3KXCIIoNx5FCTgvNkhP2SQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ
cWUvMS82OEI3OUQ3MzcyOTcwODgyMjgzNzFFNDUwOTM4MkYzNjQ4NEZEOTI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY4Qjc5RDczNzI5NzA4ODIy
ODM3MUU0NTA5MzgyRjM2NDg0RkQ5MjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzEv
MzIzODMwMzQzYTMyMzYzNjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM3
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEJmQwDQYJKoZIhvcNAQELBQADggEBAF1zkp4JR/7f
bdnf9XNISom4R1k5cG2m2wqfBlKxjcoNO1Xg8gyvRbrWul5JEDW05g4HSGGeaZrM
R9THIIxIZm7Xx6pTaUenCTLns2saGcKfxXiRIAZn8HiRbcSlQQRXilj9x5EX/9i7
pxzjbHsRAxNgViq1dVzxRDKRGUDcD034AAkSoP6TAxSYr7jIHrnzScLA9JBsqhZM
AxHgcKdN7gE6DVMn/pZu50GQd4aY0M5dLFBrjl/r9m9KsW82KJRVoHIBc7npgVFT
9i8ZJuo+u7xbIkY+MRt4qBH685veMkdLBNYFZxiB8sfq34nXRBkoddtjNiA+Y+B0
4dGmwWafTg0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org