Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a633030303a3a2f33342d3334203d3e20323632393432.roa
File:                     323830343a6533383a633030303a3a2f33342d3334203d3e20323632393432.roa (raw, json)
Hash identifier:          6+IYiLmJBRZd6PEX89ppnjPsSqQhq9Kr3HWzLCxOtmY=
Subject key identifier:   55:ED:5B:3F:15:07:27:B9:49:11:E6:BF:77:10:2E:A0:80:8B:33:0D
Certificate issuer:       /CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
Certificate serial:       035ECF4AA62A7A08C8EBC681D65E085FBE85A0F4
Authority key identifier: DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a633030303a3a2f33342d3334203d3e20323632393432.roa
Signing time:             Fri 24 Nov 2023 14:04:48 +0000
ROA not before:           Fri 24 Nov 2023 13:59:48 +0000
ROA not after:            Fri 22 Nov 2024 14:04:48 +0000
asID:                     262942
IP address blocks:        2804:e38:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5e:cf:4a:a6:2a:7a:08:c8:eb:c6:81:d6:5e:08:5f:be:85:a0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Validity
            Not Before: Nov 24 13:59:48 2023 GMT
            Not After : Nov 22 14:04:48 2024 GMT
        Subject: CN=55ED5B3F150727B94911E6BF77102EA0808B330D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:bb:53:4f:ab:cd:f2:f5:6b:30:d3:aa:ad:
                    33:47:7a:40:df:ea:31:ad:3a:d1:61:63:65:ca:74:
                    f8:1d:fc:c6:5a:2e:77:58:45:3a:c8:3b:3b:df:c2:
                    cf:cf:da:9f:d3:e2:a2:04:1b:de:37:96:c0:62:a6:
                    93:ab:d6:d5:83:e4:07:9f:3f:63:2b:a9:cd:eb:31:
                    c0:50:da:b5:01:d5:5a:54:77:b2:b9:a5:fe:4a:ee:
                    92:46:c0:bf:ef:a9:b6:57:80:c4:74:48:f6:af:bf:
                    4e:ee:1b:d5:cc:43:ae:23:93:9f:e1:4a:88:cf:6d:
                    79:a8:28:38:c2:6c:6c:2e:0c:da:14:75:c5:af:77:
                    11:f0:1c:04:e8:a3:8d:ed:3b:2b:6b:eb:e5:77:d0:
                    c7:6e:37:60:cf:3c:6f:d0:53:eb:f5:49:46:1d:08:
                    76:16:a6:72:70:70:52:89:b1:d4:23:31:a5:70:34:
                    44:30:39:d3:22:7c:fb:c8:eb:1f:09:a1:85:46:68:
                    be:c2:31:5e:90:ff:cd:5d:ea:eb:d9:74:2b:c1:3c:
                    bf:91:92:d5:51:4b:bb:96:fe:39:91:6e:66:26:0b:
                    3c:f0:2a:b9:1e:14:ca:7e:92:af:fa:7c:65:8a:6a:
                    c6:50:9c:44:02:6c:9e:8a:35:dd:40:a4:f9:a1:b0:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:ED:5B:3F:15:07:27:B9:49:11:E6:BF:77:10:2E:A0:80:8B:33:0D
            X509v3 Authority Key Identifier:
                keyid:DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a633030303a3a2f33342d3334203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:83:b0:25:2f:e3:ff:a6:bb:fe:c6:79:bb:fc:f6:7b:63:
         d3:31:12:d0:d4:43:a6:27:52:4c:77:b9:79:cf:0b:0a:b3:54:
         3d:7f:f2:31:ff:86:35:d6:c1:e5:0d:02:64:fe:22:47:ec:68:
         4f:fc:84:55:f1:6c:16:91:65:e9:45:f9:27:7f:6e:59:e1:c1:
         46:1a:c6:00:20:84:7b:29:73:19:73:be:a2:87:68:1d:2e:80:
         e8:25:67:88:5b:ed:fe:c5:39:96:42:39:eb:29:88:ef:fb:d7:
         93:18:8e:a6:0f:d2:a9:96:84:03:60:27:0e:a9:4c:29:9d:d1:
         cd:0b:0b:59:8b:db:6b:5f:7e:d5:88:66:0c:f2:41:1d:0c:47:
         0d:1d:fa:91:f4:db:a8:2c:36:59:55:71:7f:18:b5:a7:38:b3:
         6a:8b:e6:6d:02:f0:b2:56:ba:0d:e3:53:45:8f:78:7e:b5:f0:
         10:d1:a7:a6:8c:73:a8:68:67:e5:53:ab:71:2b:42:73:e8:1a:
         7c:31:55:89:35:af:fd:a5:8f:bc:c3:c4:73:d6:8f:ef:d2:27:
         51:56:30:d1:32:56:f1:ed:09:cf:78:65:91:d7:7c:da:49:05:
         22:32:ab:d1:20:75:66:af:e0:84:69:49:b0:10:f6:c5:58:ae:
         b0:0c:1a:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUA17PSqYqegjI68aB1l4IX76FoPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU4RDQyN0E5NDJENjNCODRENzc2RTk5MjVGRDhDODdD
RUI0RTM4OTAeFw0yMzExMjQxMzU5NDhaFw0yNDExMjIxNDA0NDhaMDMxMTAvBgNV
BAMTKDU1RUQ1QjNGMTUwNzI3Qjk0OTExRTZCRjc3MTAyRUEwODA4QjMzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SLtTT6vN8vVrMNOqrTNHekDf
6jGtOtFhY2XKdPgd/MZaLndYRTrIOzvfws/P2p/T4qIEG943lsBippOr1tWD5Aef
P2Mrqc3rMcBQ2rUB1VpUd7K5pf5K7pJGwL/vqbZXgMR0SPavv07uG9XMQ64jk5/h
SojPbXmoKDjCbGwuDNoUdcWvdxHwHAToo43tOytr6+V30MduN2DPPG/QU+v1SUYd
CHYWpnJwcFKJsdQjMaVwNEQwOdMifPvI6x8JoYVGaL7CMV6Q/81d6uvZdCvBPL+R
ktVRS7uW/jmRbmYmCzzwKrkeFMp+kq/6fGWKasZQnEQCbJ6KNd1ApPmhsDQPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVe1bPxUHJ7lJEea/dxAuoICLMw0wHwYDVR0j
BBgwFoAU3o1CepQtY7hNd26ZJf2Mh86044kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZaNGFqZG9pYVRUNUpaenpHa3phRmpScno1QWFkajJycEcydkdXVlJN
RU0vMC9ERThENDI3QTk0MkQ2M0I4NEQ3NzZFOTkyNUZEOEM4N0NFQjRFMzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFOEQ0MjdBOTQyRDYzQjg0
RDc3NkU5OTI1RkQ4Qzg3Q0VCNEUzODkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWWjRhamRvaWFUVDVKWnp6R2t6YUZqUnJ6NUFhZGoycnBHMnZHV1ZSTUVNLzAv
MzIzODMwMzQzYTY1MzMzODNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzIzOTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA44wDANBgkqhkiG9w0BAQsFAAOC
AQEApoGDsCUv4/+mu/7Gebv89ntj0zES0NRDpidSTHe5ec8LCrNUPX/yMf+GNdbB
5Q0CZP4iR+xoT/yEVfFsFpFl6UX5J39uWeHBRhrGACCEeylzGXO+oodoHS6A6CVn
iFvt/sU5lkI56ymI7/vXkxiOpg/SqZaEA2AnDqlMKZ3RzQsLWYvba19+1YhmDPJB
HQxHDR36kfTbqCw2WVVxfxi1pzizaovmbQLwsla6DeNTRY94frXwENGnpoxzqGhn
5VOrcStCc+gafDFViTWv/aWPvMPEc9aP79InUVYw0TJW8e0Jz3hlkdd82kkFIjKr
0SB1Zq/ghGlJsBD2xViusAwavA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org