Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa
File:                     323830343a333334343a3a2f33322d313238203d3e20323635333835.roa (raw, json)
Hash identifier:          z/SkJXc9Y1J6VtL8eIHtuiHy4eEEGogGrXXJEWij/tA=
Subject key identifier:   48:4A:27:F8:32:60:A2:51:04:3B:7B:F3:D8:5B:22:57:BE:D3:B0:B9
Certificate issuer:       /CN=CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8
Certificate serial:       4EA9FC6F152B32D24A8983A316BA014D8FFA5EB5
Authority key identifier: CB:F7:BB:C1:E6:37:F8:F0:17:C5:A0:51:A7:EF:75:CF:F8:BD:34:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa
Signing time:             Mon 15 Jan 2024 20:41:11 +0000
ROA not before:           Mon 15 Jan 2024 20:36:11 +0000
ROA not after:            Mon 13 Jan 2025 20:41:11 +0000
asID:                     265385
IP address blocks:        2804:3344::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a9:fc:6f:15:2b:32:d2:4a:89:83:a3:16:ba:01:4d:8f:fa:5e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8
        Validity
            Not Before: Jan 15 20:36:11 2024 GMT
            Not After : Jan 13 20:41:11 2025 GMT
        Subject: CN=484A27F83260A251043B7BF3D85B2257BED3B0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:b6:32:23:b2:f0:69:99:fc:ec:71:82:9d:
                    b4:87:7d:b4:f0:7b:bd:9b:66:2d:b1:55:aa:fa:92:
                    9a:cc:c4:dd:7d:d8:74:9b:06:fa:6c:83:33:c3:d0:
                    dc:a4:c5:65:67:50:13:b1:9e:be:5c:7b:42:b8:c3:
                    ce:61:d7:e4:f1:e3:e7:64:d4:ab:85:79:43:b1:e7:
                    92:0b:31:34:8b:f5:db:b1:77:17:89:71:ac:e8:49:
                    1f:19:9d:af:42:23:81:ba:1f:23:fe:19:9a:79:72:
                    1f:4f:ec:ed:09:55:c9:01:c8:8f:71:42:b5:fd:20:
                    e8:46:4d:cd:36:4a:d9:6a:b0:c0:9d:8f:89:b1:2c:
                    bb:a4:45:21:ef:e1:4a:6f:06:13:2d:40:14:f6:02:
                    75:a1:5d:7e:d5:63:41:1b:40:d7:68:5b:08:18:82:
                    d9:12:2c:5b:10:94:85:d7:68:2f:3c:5d:d0:b4:7b:
                    af:02:9c:31:b7:d7:6a:31:23:02:aa:c0:b9:d5:84:
                    db:4d:dc:f8:5e:6f:f5:89:fc:16:a8:3d:ae:aa:c4:
                    aa:c8:a6:2e:8f:5e:6c:87:ff:37:42:f3:cc:3f:07:
                    a9:18:57:22:06:d8:50:4f:0c:50:df:94:5e:a1:83:
                    a6:9e:65:c7:77:47:0e:d9:cd:48:46:15:f3:21:fc:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:27:F8:32:60:A2:51:04:3B:7B:F3:D8:5B:22:57:BE:D3:B0:B9
            X509v3 Authority Key Identifier:
                keyid:CB:F7:BB:C1:E6:37:F8:F0:17:C5:A0:51:A7:EF:75:CF:F8:BD:34:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3344::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:ca:cc:0c:7c:9c:16:c5:a9:91:64:4d:02:95:0f:6f:d9:23:
         eb:31:66:f9:15:45:46:40:35:7a:46:8a:c5:8f:a6:a0:18:d8:
         69:af:3a:ec:45:ab:f3:83:43:35:ab:57:a3:72:99:be:cb:61:
         86:ab:66:ee:92:69:8d:ef:0d:65:40:9a:95:38:3b:21:31:18:
         2b:fe:62:70:62:6a:1c:69:04:a3:89:60:9d:1d:a9:35:49:9e:
         d4:44:9b:e7:ef:af:94:77:3f:fa:fc:93:7b:5a:de:95:c8:b2:
         25:58:45:cb:41:5c:cb:ef:89:69:a5:07:bf:c7:9d:49:59:66:
         2b:a3:e4:f6:4b:5a:37:b1:cd:70:ef:ad:85:66:36:c2:5d:69:
         f1:bb:6a:71:88:a2:07:36:a3:92:ad:7f:e1:3a:da:f2:ea:00:
         65:4e:dd:be:9a:bc:6a:44:12:6e:02:f0:4e:e8:5b:9f:ed:7c:
         a0:cc:41:8f:de:04:76:95:c3:85:02:a0:fc:64:26:ea:9c:b1:
         45:41:cb:de:f6:6b:f9:99:33:7e:a7:8b:be:64:1a:c0:0a:18:
         87:a9:a2:1f:bc:2f:3e:dd:3c:cb:45:d4:c5:70:47:3d:ad:a4:
         32:5b:41:6f:44:2b:17:82:d2:7a:26:12:af:80:7d:29:23:68:
         18:9f:63:d1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUTqn8bxUrMtJKiYOjFroBTY/6XrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JGN0JCQzFFNjM3RjhGMDE3QzVBMDUxQTdFRjc1Q0ZG
OEJEMzRDODAeFw0yNDAxMTUyMDM2MTFaFw0yNTAxMTMyMDQxMTFaMDMxMTAvBgNV
BAMTKDQ4NEEyN0Y4MzI2MEEyNTEwNDNCN0JGM0Q4NUIyMjU3QkVEM0IwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdLYyI7LwaZn87HGCnbSHfbTw
e72bZi2xVar6kprMxN192HSbBvpsgzPD0NykxWVnUBOxnr5ce0K4w85h1+Tx4+dk
1KuFeUOx55ILMTSL9duxdxeJcazoSR8Zna9CI4G6HyP+GZp5ch9P7O0JVckByI9x
QrX9IOhGTc02StlqsMCdj4mxLLukRSHv4UpvBhMtQBT2AnWhXX7VY0EbQNdoWwgY
gtkSLFsQlIXXaC88XdC0e68CnDG312oxIwKqwLnVhNtN3Pheb/WJ/BaoPa6qxKrI
pi6PXmyH/zdC88w/B6kYVyIG2FBPDFDflF6hg6aeZcd3Rw7ZzUhGFfMh/LulAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUSEon+DJgolEEO3vz2FsiV77TsLkwHwYDVR0j
BBgwFoAUy/e7weY3+PAXxaBRp+91z/i9NMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNpNWlZeHdpQThteEtFRXpuNVNtSnFDbzdQTEJ5UmNLNFY5d2ZqN2hN
SlgvMC9DQkY3QkJDMUU2MzdGOEYwMTdDNUEwNTFBN0VGNzVDRkY4QkQzNEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCRjdCQkMxRTYzN0Y4RjAx
N0M1QTA1MUE3RUY3NUNGRjhCRDM0QzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJjaTVpWXh3aUE4bXhLRUV6bjVTbUpxQ283UExCeVJjSzRWOXdmajdoTUpYLzAv
MzIzODMwMzQzYTMzMzMzNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDNEMA0GCSqGSIb3DQEBCwUAA4IBAQC4yswM
fJwWxamRZE0ClQ9v2SPrMWb5FUVGQDV6RorFj6agGNhprzrsRavzg0M1q1ejcpm+
y2GGq2bukmmN7w1lQJqVODshMRgr/mJwYmocaQSjiWCdHak1SZ7URJvn76+Udz/6
/JN7Wt6VyLIlWEXLQVzL74lppQe/x51JWWYro+T2S1o3sc1w762FZjbCXWnxu2px
iKIHNqOSrX/hOtry6gBlTt2+mrxqRBJuAvBO6Fuf7XygzEGP3gR2lcOFAqD8ZCbq
nLFFQcve9mv5mTN+p4u+ZBrAChiHqaIfvC8+3TzLRdTFcEc9raQyW0FvRCsXgtJ6
JhKvgH0pI2gYn2PR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org