Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a383030303a3a2f33342d3334203d3e20323634353530.roa
File:                     323830343a323135633a383030303a3a2f33342d3334203d3e20323634353530.roa (raw, json)
Hash identifier:          eNOMSj9tywITDFRhOyaMEr4YbQyTZ8vsLHl7s7+3ErE=
Subject key identifier:   D1:BA:24:E9:93:D5:99:BE:0E:BB:89:63:1A:33:26:F5:7B:78:91:C5
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       0E600520B86EF4FDEC616C16F94EE88C49F45E41
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a383030303a3a2f33342d3334203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:02 +0000
ROA not before:           Wed 10 Apr 2024 00:16:02 +0000
ROA not after:            Wed 09 Apr 2025 00:21:02 +0000
asID:                     264550
IP address blocks:        2804:215c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:60:05:20:b8:6e:f4:fd:ec:61:6c:16:f9:4e:e8:8c:49:f4:5e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:16:02 2024 GMT
            Not After : Apr  9 00:21:02 2025 GMT
        Subject: CN=D1BA24E993D599BE0EBB89631A3326F57B7891C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:8f:5f:84:dc:1b:f6:e0:52:78:c0:b9:a5:
                    ec:57:88:0d:79:61:e4:d5:90:e1:65:c9:26:8e:b5:
                    6c:0a:52:2a:54:72:56:e7:5b:0c:88:eb:d4:e2:dd:
                    ac:67:6c:63:05:93:15:12:0a:5f:2f:1f:30:9e:be:
                    46:cc:41:29:4a:ee:e6:a9:c1:00:6c:87:0c:83:7c:
                    09:fe:9e:6c:85:ee:3c:d1:03:8c:ca:d2:82:87:06:
                    f2:81:e5:3b:e8:a0:88:7d:18:42:9e:b2:63:77:0d:
                    4a:c0:38:fd:ac:7d:79:68:f9:04:83:43:f1:57:c4:
                    99:7c:45:5d:43:15:08:18:eb:de:14:ad:59:5f:5c:
                    4f:d1:69:0a:1c:c6:6a:b9:d6:50:44:01:14:13:4b:
                    04:71:eb:ae:e5:84:f0:a0:cb:76:56:cb:24:b2:7f:
                    43:bb:ff:94:8e:b2:62:a6:c6:26:a1:dd:65:9d:e3:
                    bc:bc:2a:98:04:87:64:24:83:c9:67:fd:ed:07:55:
                    28:09:5e:bc:8e:fc:cc:4f:25:bd:a3:9b:16:05:6d:
                    a2:b3:1e:81:cd:94:be:9c:85:63:1e:0b:ae:23:61:
                    26:82:92:64:bd:57:2d:5f:df:0c:90:b2:bb:d2:f4:
                    02:22:36:f3:fc:1d:cc:32:31:e8:42:9d:99:2a:6d:
                    d8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BA:24:E9:93:D5:99:BE:0E:BB:89:63:1A:33:26:F5:7B:78:91:C5
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a383030303a3a2f33342d3334203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         50:42:db:e0:0c:d0:00:ea:ba:cc:62:64:ee:ca:c4:21:bb:7b:
         93:f8:37:60:79:cd:e0:f0:37:73:35:12:7a:3d:f3:c4:4b:55:
         92:1b:57:8c:67:77:5a:6a:ec:cb:b7:95:4a:41:fc:cd:ac:00:
         fb:ec:f7:a4:e2:63:40:11:af:74:68:3c:31:d7:62:d7:ed:48:
         29:79:49:a0:1a:b6:d0:0a:65:b0:65:5c:cd:22:eb:4d:7d:04:
         88:a4:e7:17:1b:ac:a2:03:70:d2:a2:fe:23:45:a6:53:9b:96:
         86:9f:97:17:0d:f3:9f:86:ad:78:01:f4:f1:1d:e2:4d:66:40:
         9c:23:f7:b4:8c:df:fb:78:5f:59:d7:40:93:f7:b6:fb:c8:28:
         03:e8:2c:6c:d6:5e:7f:84:e9:b7:83:4f:63:c5:30:88:5d:05:
         1b:d8:52:04:0d:c3:29:2f:6c:49:51:28:b4:8b:80:36:15:cd:
         1c:13:7f:13:b2:6b:55:fb:8d:ca:95:23:56:a4:60:94:a3:9a:
         eb:34:25:7e:57:73:4a:5a:61:90:80:05:52:e5:17:b0:d3:ba:
         6b:84:7c:6a:ab:66:a2:7f:54:eb:12:6a:83:f4:ce:31:0d:5e:
         43:23:b7:0e:72:f5:2f:29:ed:44:b7:b9:ea:88:1a:33:ce:a9:
         41:38:39:6a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDmAFILhu9P3sYWwW+U7ojEn0XkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYxOTAxRDQ5QURENEY5QkY4RDhCQTU3MjRGNjAzMERD
MTM5NTc4RTAeFw0yNDA0MTAwMDE2MDJaFw0yNTA0MDkwMDIxMDJaMDMxMTAvBgNV
BAMTKEQxQkEyNEU5OTNENTk5QkUwRUJCODk2MzFBMzMyNkY1N0I3ODkxQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgoo9fhNwb9uBSeMC5pexXiA15
YeTVkOFlySaOtWwKUipUclbnWwyI69Ti3axnbGMFkxUSCl8vHzCevkbMQSlK7uap
wQBshwyDfAn+nmyF7jzRA4zK0oKHBvKB5TvooIh9GEKesmN3DUrAOP2sfXlo+QSD
Q/FXxJl8RV1DFQgY694UrVlfXE/RaQocxmq51lBEARQTSwRx667lhPCgy3ZWyySy
f0O7/5SOsmKmxiah3WWd47y8KpgEh2Qkg8ln/e0HVSgJXryO/MxPJb2jmxYFbaKz
HoHNlL6chWMeC64jYSaCkmS9Vy1f3wyQsrvS9AIiNvP8HcwyMehCnZkqbdglAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0bok6ZPVmb4Ou4ljGjMm9Xt4kcUwHwYDVR0j
BBgwFoAUDxkB1JrdT5v42LpXJPYDDcE5V44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMS8wRjE5MDFENDlBREQ0RjlCRjhEOEJBNTcyNEY2MDMwREMxMzk1NzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGMTkwMUQ0OUFERDRGOUJG
OEQ4QkE1NzI0RjYwMzBEQzEzOTU3OEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzEv
MzIzODMwMzQzYTMyMzEzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM1MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEIVyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBQQtvgDNAA6rrMYmTuysQhu3uT+Ddgec3g8DdzNRJ6PfPES1WSG1eMZ3da
auzLt5VKQfzNrAD77Pek4mNAEa90aDwx12LX7UgpeUmgGrbQCmWwZVzNIutNfQSI
pOcXG6yiA3DSov4jRaZTm5aGn5cXDfOfhq14AfTxHeJNZkCcI/e0jN/7eF9Z10CT
97b7yCgD6Cxs1l5/hOm3g09jxTCIXQUb2FIEDcMpL2xJUSi0i4A2Fc0cE38TsmtV
+43KlSNWpGCUo5rrNCV+V3NKWmGQgAVS5Rew07prhHxqq2aif1TrEmqD9M4xDV5D
I7cOcvUvKe1Et7nqiBozzqlBODlq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org