Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/1/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa
File:                     323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa (raw, json)
Hash identifier:          2cXB4zG+GmOzg81GQVL6+evQkYD45Aqx9JGgVg84Wd8=
Subject key identifier:   D6:31:59:30:08:72:84:57:0B:1C:8F:BC:75:03:12:20:62:06:93:A3
Certificate issuer:       /CN=E003B4835752E2A7333124D87055216F3414D8A1
Certificate serial:       2FC8E4518B16079A77B8C971E5AA8C65D2009D80
Authority key identifier: E0:03:B4:83:57:52:E2:A7:33:31:24:D8:70:55:21:6F:34:14:D8:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E003B4835752E2A7333124D87055216F3414D8A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/1/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa
Signing time:             Thu 04 Apr 2024 02:09:35 +0000
ROA not before:           Thu 04 Apr 2024 02:04:35 +0000
ROA not after:            Thu 03 Apr 2025 02:09:35 +0000
asID:                     272438
IP address blocks:        2804:8130:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:e4:51:8b:16:07:9a:77:b8:c9:71:e5:aa:8c:65:d2:00:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E003B4835752E2A7333124D87055216F3414D8A1
        Validity
            Not Before: Apr  4 02:04:35 2024 GMT
            Not After : Apr  3 02:09:35 2025 GMT
        Subject: CN=D6315930087284570B1C8FBC75031220620693A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:6a:b1:79:b0:b7:b9:4e:a1:0c:2b:94:76:
                    14:d2:0d:b0:5e:fa:fd:b1:4c:80:e8:7e:68:54:08:
                    9c:1d:26:bc:7b:88:9b:ec:51:95:f2:23:f1:a4:87:
                    1c:6d:a7:7f:0f:bb:b3:9e:c0:53:f1:e5:87:4f:10:
                    25:28:b5:53:3b:04:af:41:6b:bd:d3:5f:c5:f6:be:
                    72:5a:45:fa:cf:53:2b:20:92:0c:f4:88:93:23:91:
                    30:30:50:c2:80:27:5e:4d:5a:a6:56:8d:38:bf:f1:
                    7c:2b:1e:f4:b6:6e:8a:77:a3:d1:77:ad:b0:bf:ac:
                    6a:54:17:01:09:f7:20:40:7b:2b:41:42:3a:c5:af:
                    a5:3c:aa:df:e8:2c:12:7c:ea:59:83:63:55:43:e9:
                    0a:68:28:39:03:c8:28:2d:53:b0:22:cb:59:c9:45:
                    29:ba:5f:5e:52:5f:f3:26:6f:51:37:34:45:fd:fb:
                    a8:db:f8:34:8e:3f:f4:d3:74:25:97:55:40:43:2f:
                    ac:15:cf:da:7e:c7:12:5a:1a:56:70:35:a6:a7:c1:
                    37:28:7d:80:78:b4:44:22:2d:30:b2:cb:bd:01:84:
                    39:ce:eb:39:b7:41:23:5a:a4:5f:fc:16:e2:cd:ad:
                    92:2a:57:b0:16:e3:aa:32:d6:f8:ec:f1:9d:32:55:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:31:59:30:08:72:84:57:0B:1C:8F:BC:75:03:12:20:62:06:93:A3
            X509v3 Authority Key Identifier:
                keyid:E0:03:B4:83:57:52:E2:A7:33:31:24:D8:70:55:21:6F:34:14:D8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/1/E003B4835752E2A7333124D87055216F3414D8A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E003B4835752E2A7333124D87055216F3414D8A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/1/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:45:75:6e:85:76:df:14:46:8d:11:5e:ef:12:60:e5:7f:ed:
         fb:13:fc:31:b6:8d:a8:25:90:43:7a:27:f2:d1:ea:32:85:ca:
         11:07:c7:e6:e1:e1:24:4a:d5:08:11:54:07:4d:29:e3:50:89:
         7a:99:f6:f5:50:b9:23:f1:ff:62:1f:6d:45:a0:77:17:26:45:
         a5:5e:b4:55:e9:f7:6c:d5:ba:fb:b4:bc:1c:42:4a:60:a4:4b:
         37:37:c2:99:a5:5f:2b:8d:4f:86:92:a4:24:9b:c1:20:bf:8b:
         4b:96:2c:64:4c:5f:70:6d:92:ce:ac:69:76:81:55:22:f1:a7:
         ee:d9:59:c8:8c:35:e6:13:82:28:7e:9a:ad:e3:16:47:d2:1f:
         fa:f1:3b:e4:ed:37:b7:f2:2a:51:ea:85:9a:43:2d:72:1e:c4:
         f4:d8:1f:be:5e:66:b4:e2:a6:3a:b6:38:9f:4c:95:c7:37:ce:
         b0:cb:65:e3:be:86:71:b0:0c:26:c2:c8:b4:42:e0:ec:54:77:
         21:19:eb:be:57:76:20:ad:82:29:0c:17:cb:85:e2:80:fc:4d:
         fe:6c:2d:bf:72:b0:7e:ea:d3:27:f0:b4:10:3a:87:d5:42:26:
         4d:d9:8e:c3:25:25:f9:ac:f3:98:2c:c6:09:70:c5:dc:8e:3d:
         7e:66:d6:19
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUL8jkUYsWB5p3uMlx5aqMZdIAnYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwM0I0ODM1NzUyRTJBNzMzMzEyNEQ4NzA1NTIxNkYz
NDE0RDhBMTAeFw0yNDA0MDQwMjA0MzVaFw0yNTA0MDMwMjA5MzVaMDMxMTAvBgNV
BAMTKEQ2MzE1OTMwMDg3Mjg0NTcwQjFDOEZCQzc1MDMxMjIwNjIwNjkzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQGqxebC3uU6hDCuUdhTSDbBe
+v2xTIDofmhUCJwdJrx7iJvsUZXyI/Gkhxxtp38Pu7OewFPx5YdPECUotVM7BK9B
a73TX8X2vnJaRfrPUysgkgz0iJMjkTAwUMKAJ15NWqZWjTi/8XwrHvS2bop3o9F3
rbC/rGpUFwEJ9yBAeytBQjrFr6U8qt/oLBJ86lmDY1VD6QpoKDkDyCgtU7Aiy1nJ
RSm6X15SX/Mmb1E3NEX9+6jb+DSOP/TTdCWXVUBDL6wVz9p+xxJaGlZwNaanwTco
fYB4tEQiLTCyy70BhDnO6zm3QSNapF/8FuLNrZIqV7AW46oy1vjs8Z0yVSzzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU1jFZMAhyhFcLHI+8dQMSIGIGk6MwHwYDVR0j
BBgwFoAU4AO0g1dS4qczMSTYcFUhbzQU2KEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNqVm1wakRKU3RWdHpZQnFuVVMyUjVRTkFHVUFzS0ZFWWdGeTZNdmFu
OHgvMS9FMDAzQjQ4MzU3NTJFMkE3MzMzMTI0RDg3MDU1MjE2RjM0MTREOEExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMDNCNDgzNTc1MkUyQTcz
MzMxMjREODcwNTUyMTZGMzQxNEQ4QTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJjalZtcGpESlN0VnR6WUJxblVTMlI1UU5BR1VBc0tGRVlnRnk2TXZhbjh4LzEv
MzIzODMwMzQzYTM4MzEzMzMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMjM0MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEgTCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCORXVuhXbfFEaNEV7vEmDlf+37E/wxto2oJZBDeify0eoyhcoRB8fm4eEk
StUIEVQHTSnjUIl6mfb1ULkj8f9iH21FoHcXJkWlXrRV6fds1br7tLwcQkpgpEs3
N8KZpV8rjU+GkqQkm8Egv4tLlixkTF9wbZLOrGl2gVUi8afu2VnIjDXmE4Iofpqt
4xZH0h/68Tvk7Te38ipR6oWaQy1yHsT02B++Xma04qY6tjifTJXHN86wy2XjvoZx
sAwmwsi0QuDsVHchGeu+V3YgrYIpDBfLheKA/E3+bC2/crB+6tMn8LQQOofVQiZN
2Y7DJSX5rPOYLMYJcMXcjj1+ZtYZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org