Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3336203d3e203238363130.roa
File:                     323830343a6463303a3a2f33322d3336203d3e203238363130.roa (raw, json)
Hash identifier:          kNpv2WLtcFCqbxd+MQLzA427JFTm8UiKS6q7QFNOoRQ=
Subject key identifier:   75:D4:D1:C9:CF:4A:7E:3C:57:66:AD:55:6D:39:02:47:FD:3D:2D:30
Certificate issuer:       /CN=97417F3E236E218F6CACD83DB7C3A791582C6461
Certificate serial:       01C660F218B485ADB88171634CC3159B2F5FD0BD
Authority key identifier: 97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3336203d3e203238363130.roa
Signing time:             Mon 11 Mar 2024 17:14:34 +0000
ROA not before:           Mon 11 Mar 2024 17:09:34 +0000
ROA not after:            Mon 10 Mar 2025 17:14:34 +0000
asID:                     28610
IP address blocks:        2804:dc0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c6:60:f2:18:b4:85:ad:b8:81:71:63:4c:c3:15:9b:2f:5f:d0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97417F3E236E218F6CACD83DB7C3A791582C6461
        Validity
            Not Before: Mar 11 17:09:34 2024 GMT
            Not After : Mar 10 17:14:34 2025 GMT
        Subject: CN=75D4D1C9CF4A7E3C5766AD556D390247FD3D2D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:36:e4:12:d9:c3:8c:6c:37:b4:a4:79:18:
                    0f:bf:b4:e2:ad:e4:92:e9:4f:d8:e9:33:a6:29:51:
                    8f:8e:ef:52:9d:37:74:59:50:f1:cf:0b:dd:e9:b9:
                    07:6e:e7:c7:3b:1b:48:6d:62:40:03:fe:28:e0:02:
                    1f:4b:36:83:f3:b2:8f:c8:2a:1b:d0:66:bf:7b:1e:
                    7f:ba:19:2d:5b:60:76:38:61:b1:b7:cc:1f:f4:26:
                    49:36:58:98:31:7d:2d:6c:c1:fe:16:0d:4b:57:b4:
                    02:c5:90:31:5f:ba:9e:d8:64:0b:51:59:61:81:c2:
                    02:90:18:34:25:67:ea:3c:88:3b:21:21:e2:90:11:
                    d8:b6:78:89:49:92:d5:98:a3:8f:01:ba:a6:45:60:
                    35:f6:c7:80:9f:2a:e7:a4:21:0d:65:e0:2d:1c:ed:
                    06:28:c4:4f:7b:fe:bf:4e:0b:f9:80:61:cd:f3:6e:
                    0b:2d:76:4b:5a:31:f4:7f:b3:bc:b4:b8:07:14:8b:
                    55:f1:0a:2a:10:b0:44:c3:9f:7a:ad:a1:49:28:63:
                    78:a2:07:8b:a3:a3:e2:ea:07:dc:e8:a3:e9:04:5a:
                    34:11:47:b8:fb:44:85:20:51:c6:88:1f:6e:29:ec:
                    eb:e9:e3:45:f1:21:9f:97:2e:03:aa:e4:e5:e0:1c:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D4:D1:C9:CF:4A:7E:3C:57:66:AD:55:6D:39:02:47:FD:3D:2D:30
            X509v3 Authority Key Identifier:
                keyid:97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3336203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:e0:ad:7a:ed:b1:46:c7:b4:82:17:5f:c0:26:b6:39:fc:41:
         a7:e0:44:4d:47:37:1b:9d:ae:2b:22:7c:4b:97:36:10:50:b5:
         03:ec:58:1e:7e:d0:b9:bb:a6:06:fd:a4:ff:23:34:5a:b7:62:
         e8:f7:e5:dc:f5:19:80:7d:dd:be:38:81:ab:2b:c9:f1:78:21:
         78:7a:a2:4e:cf:2b:46:fd:ce:83:68:b8:04:71:c3:76:f4:5b:
         40:e5:87:3d:6c:14:af:96:a1:a8:5d:42:36:ea:00:2c:ed:c2:
         f9:01:3b:2d:08:f8:86:10:ff:64:c2:dc:0c:81:c6:ac:5d:2d:
         76:35:2a:04:54:96:ec:45:8d:79:66:ca:ef:6e:ab:b1:59:26:
         b6:81:ce:af:49:f2:40:4d:53:aa:1a:4a:3c:43:6a:4b:a5:c3:
         99:9b:6b:c1:e3:c5:29:3c:20:87:60:25:4d:47:1e:dd:38:11:
         fd:4b:00:8d:d1:9a:83:02:93:5a:eb:d8:78:22:65:92:e2:eb:
         18:75:6d:c3:92:ba:d7:25:82:18:c9:a1:5e:98:7d:47:dd:3f:
         72:4f:57:0a:3c:92:c1:bb:0f:2b:6f:8f:37:8b:8f:a2:60:1b:
         e6:78:7a:ce:ae:df:26:68:9b:ff:6c:ad:ce:5b:70:f2:3f:2c:
         c6:a7:75:52
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUAcZg8hi0ha24gXFjTMMVmy9f0L0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0MTdGM0UyMzZFMjE4RjZDQUNEODNEQjdDM0E3OTE1
ODJDNjQ2MTAeFw0yNDAzMTExNzA5MzRaFw0yNTAzMTAxNzE0MzRaMDMxMTAvBgNV
BAMTKDc1RDREMUM5Q0Y0QTdFM0M1NzY2QUQ1NTZEMzkwMjQ3RkQzRDJEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofjbkEtnDjGw3tKR5GA+/tOKt
5JLpT9jpM6YpUY+O71KdN3RZUPHPC93puQdu58c7G0htYkAD/ijgAh9LNoPzso/I
KhvQZr97Hn+6GS1bYHY4YbG3zB/0Jkk2WJgxfS1swf4WDUtXtALFkDFfup7YZAtR
WWGBwgKQGDQlZ+o8iDshIeKQEdi2eIlJktWYo48BuqZFYDX2x4CfKuekIQ1l4C0c
7QYoxE97/r9OC/mAYc3zbgstdktaMfR/s7y0uAcUi1XxCioQsETDn3qtoUkoY3ii
B4ujo+LqB9zoo+kEWjQRR7j7RIUgUcaIH24p7Ovp40XxIZ+XLgOq5OXgHCxVAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUddTRyc9KfjxXZq1VbTkCR/09LTAwHwYDVR0j
BBgwFoAUl0F/PiNuIY9srNg9t8OnkVgsZGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmYyd2tGOXdYWWFEcEZKYkJaaWZSMjVrRkdVNkVEa0NZNUdLZGk4Nmda
a0gvMC85NzQxN0YzRTIzNkUyMThGNkNBQ0Q4M0RCN0MzQTc5MTU4MkM2NDYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3NDE3RjNFMjM2RTIxOEY2
Q0FDRDgzREI3QzNBNzkxNTgyQzY0NjEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmMndrRjl3WFlhRHBGSmJCWmlmUjI1a0ZHVTZFRGtDWTVHS2RpODZnWmtILzAv
MzIzODMwMzQzYTY0NjMzMDNhM2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzgzNjMx
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA3AMA0GCSqGSIb3DQEBCwUAA4IBAQAv4K167bFGx7SC
F1/AJrY5/EGn4ERNRzcbna4rInxLlzYQULUD7FgeftC5u6YG/aT/IzRat2Lo9+Xc
9RmAfd2+OIGrK8nxeCF4eqJOzytG/c6DaLgEccN29FtA5Yc9bBSvlqGoXUI26gAs
7cL5ATstCPiGEP9kwtwMgcasXS12NSoEVJbsRY15ZsrvbquxWSa2gc6vSfJATVOq
Gko8Q2pLpcOZm2vB48UpPCCHYCVNRx7dOBH9SwCN0ZqDApNa69h4ImWS4usYdW3D
krrXJYIYyaFemH1H3T9yT1cKPJLBuw8rb483i4+iYBvmeHrOrt8maJv/bK3OW3Dy
PyzGp3VS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org