Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa
File:                     323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa (raw, json)
Hash identifier:          ioMI1OM6dR1dJUBG83ICGoiXVDCi6Czz1BoaVEzCYNw=
Subject key identifier:   24:F5:70:52:D8:16:EB:9F:22:87:4E:24:96:3A:43:03:11:B2:A4:3C
Certificate issuer:       /CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
Certificate serial:       3F95D79879D0AF1AAD92A5DB0F157FCD9A48CDC7
Authority key identifier: 62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa
Signing time:             Thu 23 Nov 2023 22:15:17 +0000
ROA not before:           Thu 23 Nov 2023 22:10:17 +0000
ROA not after:            Thu 21 Nov 2024 22:15:17 +0000
asID:                     272554
IP address blocks:        2804:850c:c000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:95:d7:98:79:d0:af:1a:ad:92:a5:db:0f:15:7f:cd:9a:48:cd:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
        Validity
            Not Before: Nov 23 22:10:17 2023 GMT
            Not After : Nov 21 22:15:17 2024 GMT
        Subject: CN=24F57052D816EB9F22874E24963A430311B2A43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:46:29:82:e7:16:c3:ff:5c:53:62:09:96:f9:
                    af:b3:94:eb:91:bc:03:94:8e:1e:1e:47:a0:fe:df:
                    0b:66:03:9b:e1:60:a5:43:a9:d1:00:d2:97:06:f4:
                    7a:cb:ad:82:38:37:30:a3:42:ca:ce:8d:44:c4:f7:
                    70:65:44:39:c5:0c:1b:13:5b:28:be:f7:c0:26:76:
                    94:ed:cc:89:07:d8:2b:d4:f0:fe:55:66:2f:19:d9:
                    f3:4a:a9:ba:98:8c:d6:eb:3f:df:1f:51:a6:e4:b8:
                    0a:63:2a:a4:7b:74:75:1b:f4:bc:37:d5:6e:ae:79:
                    41:52:17:77:34:30:da:55:58:19:a2:a4:d8:f0:e3:
                    3e:5c:7d:10:57:ee:f4:24:85:c3:77:a0:06:f4:01:
                    f2:8b:9f:56:24:e3:d5:84:72:f8:dd:e9:52:fb:4d:
                    44:b8:5e:bc:fc:0f:f4:17:16:52:7d:73:f9:0b:9f:
                    a8:87:aa:23:a5:4d:e1:10:42:a6:9f:f0:ce:00:31:
                    4d:7a:80:2c:b2:4f:a3:c4:ab:3a:f5:b7:35:4b:2e:
                    74:9a:1a:40:25:a8:b3:a4:c2:88:99:67:03:9d:03:
                    95:5c:70:2b:4d:0c:3e:17:09:d0:2b:d5:f5:68:19:
                    c6:3c:a8:fe:e5:32:01:86:f5:4e:94:af:44:c8:b8:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:70:52:D8:16:EB:9F:22:87:4E:24:96:3A:43:03:11:B2:A4:3C
            X509v3 Authority Key Identifier:
                keyid:62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:4f:56:8a:bb:81:80:85:78:38:c4:ce:ef:41:19:81:ba:
         be:73:e1:2c:6e:24:5c:61:32:44:6e:40:57:fe:a3:a5:47:42:
         1c:82:b8:86:a1:72:82:c5:56:2c:f5:85:46:1d:7c:fd:ca:b7:
         e6:ea:37:d0:4f:84:d4:47:f9:65:95:38:6a:0e:43:f0:33:86:
         00:3c:59:89:82:5d:eb:46:07:69:f8:11:d8:48:ef:52:e8:9e:
         1a:c9:44:9f:e4:bf:5c:37:c6:6c:84:1b:96:13:92:5d:e3:4a:
         e8:4c:3c:a7:01:99:1c:1f:2e:aa:4b:bb:a2:c3:5c:8d:c3:7f:
         d1:17:2f:30:27:d1:9d:d8:02:d9:1c:39:67:16:19:2d:54:bd:
         43:36:df:75:6f:28:99:0d:65:18:3a:d6:c5:b7:a7:49:15:a2:
         f9:a1:83:b8:4e:8f:c3:e4:9a:4c:aa:fb:13:d4:0e:36:65:fb:
         d4:1d:80:a9:39:6d:58:bd:db:fb:7d:0e:4a:6c:58:e7:9a:6f:
         c6:34:e8:12:69:02:df:8b:cd:16:d1:45:94:e8:7a:2a:71:ae:
         e4:17:63:de:23:f1:09:00:c0:83:a0:fc:50:4d:2a:87:8c:fa:
         32:53:7b:68:11:a0:52:8e:3e:70:4b:18:f7:36:de:ee:3a:5f:
         ae:2e:61:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUP5XXmHnQrxqtkqXbDxV/zZpIzccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJDREFEQjJEN0MxOEQ0MzU0MjVGQTY1RUYxNkI4RDQ2
MzRFMENEMjAeFw0yMzExMjMyMjEwMTdaFw0yNDExMjEyMjE1MTdaMDMxMTAvBgNV
BAMTKDI0RjU3MDUyRDgxNkVCOUYyMjg3NEUyNDk2M0E0MzAzMTFCMkE0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZRimC5xbD/1xTYgmW+a+zlOuR
vAOUjh4eR6D+3wtmA5vhYKVDqdEA0pcG9HrLrYI4NzCjQsrOjUTE93BlRDnFDBsT
Wyi+98AmdpTtzIkH2CvU8P5VZi8Z2fNKqbqYjNbrP98fUabkuApjKqR7dHUb9Lw3
1W6ueUFSF3c0MNpVWBmipNjw4z5cfRBX7vQkhcN3oAb0AfKLn1Yk49WEcvjd6VL7
TUS4Xrz8D/QXFlJ9c/kLn6iHqiOlTeEQQqaf8M4AMU16gCyyT6PEqzr1tzVLLnSa
GkAlqLOkwoiZZwOdA5VccCtNDD4XCdAr1fVoGcY8qP7lMgGG9U6Ur0TIuOC1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJPVwUtgW658ih04kljpDAxGypDwwHwYDVR0j
BBgwFoAUYs2tstfBjUNUJfpl7xa41GNODNIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9WdmVTQ3FCWUoyRzM3TjNjbnQyUlcyYTdjckNrRldvSEhGSGZVWFly
ZWYvMC82MkNEQURCMkQ3QzE4RDQzNTQyNUZBNjVFRjE2QjhENDYzNEUwQ0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYyQ0RBREIyRDdDMThENDM1
NDI1RkE2NUVGMTZCOEQ0NjM0RTBDRDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvVnZlU0NxQllKMkczN04zY250MlJXMmE3Y3JDa0ZXb0hIRkhmVVhZcmVmLzAv
MzIzODMwMzQzYTM4MzUzMDYzM2E2MzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMjM1MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEhQzAMA0GCSqGSIb3DQEBCwUA
A4IBAQA7Y09WiruBgIV4OMTO70EZgbq+c+EsbiRcYTJEbkBX/qOlR0IcgriGoXKC
xVYs9YVGHXz9yrfm6jfQT4TUR/lllThqDkPwM4YAPFmJgl3rRgdp+BHYSO9S6J4a
yUSf5L9cN8ZshBuWE5Jd40roTDynAZkcHy6qS7uiw1yNw3/RFy8wJ9Gd2ALZHDln
FhktVL1DNt91byiZDWUYOtbFt6dJFaL5oYO4To/D5JpMqvsT1A42ZfvUHYCpOW1Y
vdv7fQ5KbFjnmm/GNOgSaQLfi80W0UWU6Hoqca7kF2PeI/EJAMCDoPxQTSqHjPoy
U3toEaBSjj5wSxj3Nt7uOl+uLmGd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org