Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/323830343a353839383a3a2f33322d3430203d3e20323638313338.roa
File:                     323830343a353839383a3a2f33322d3430203d3e20323638313338.roa (raw, json)
Hash identifier:          t5ZMV1l81haS/5v+Ja1oUuI4TXN/+e2tyU2qFlB7EZE=
Subject key identifier:   6B:88:EB:BC:33:22:2E:A1:A6:C4:FB:7F:45:79:56:F7:99:26:74:B5
Certificate issuer:       /CN=711709BC181DF6689D366E1B328D3907419DF9AA
Certificate serial:       593E0E717671A0EFF1B040B985645CD81B927174
Authority key identifier: 71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/323830343a353839383a3a2f33322d3430203d3e20323638313338.roa
Signing time:             Tue 12 Mar 2024 14:06:20 +0000
ROA not before:           Tue 12 Mar 2024 14:01:20 +0000
ROA not after:            Tue 11 Mar 2025 14:06:20 +0000
asID:                     268138
IP address blocks:        2804:5898::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3e:0e:71:76:71:a0:ef:f1:b0:40:b9:85:64:5c:d8:1b:92:71:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711709BC181DF6689D366E1B328D3907419DF9AA
        Validity
            Not Before: Mar 12 14:01:20 2024 GMT
            Not After : Mar 11 14:06:20 2025 GMT
        Subject: CN=6B88EBBC33222EA1A6C4FB7F457956F7992674B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cb:7f:15:da:fe:75:af:42:1b:48:72:fe:f5:
                    a6:3d:54:9d:35:ea:c0:ae:c8:48:3c:dc:a7:1c:83:
                    77:49:9b:cc:c6:c7:8d:ca:16:43:64:2b:81:bb:68:
                    cb:33:10:04:5a:78:27:94:a5:bb:28:fe:30:40:87:
                    6c:a7:1c:66:e4:f7:71:a2:7e:f7:09:af:81:1a:06:
                    56:02:2b:0e:18:f2:00:5d:c4:e7:74:70:84:15:ef:
                    58:e5:f5:dd:f6:ce:8f:a7:37:1d:cc:79:d7:26:c7:
                    d7:28:d2:df:a1:6e:c3:f9:a5:3c:7a:38:9c:ff:a2:
                    d7:1a:37:b5:6e:89:e4:05:be:85:65:5d:26:0a:7d:
                    3c:48:62:72:4b:f9:cb:c5:7d:6a:51:84:1f:fe:cc:
                    a8:9c:e5:ba:40:46:3c:c3:ac:f0:37:1f:39:58:b5:
                    33:aa:17:d8:9d:32:e8:f0:ea:0a:7c:24:2b:6f:f9:
                    1c:f4:76:01:49:e0:f1:f5:48:30:c9:b2:a0:4e:d0:
                    d5:ee:77:92:4d:72:da:a1:e6:0d:d8:25:6f:71:8d:
                    f0:c7:76:e8:57:97:b8:10:9a:55:75:70:42:7e:00:
                    e1:6b:19:7f:0b:2d:4c:4c:3b:b1:96:49:d6:ba:66:
                    70:83:a4:f0:59:f4:aa:e1:65:06:37:fb:f5:00:bd:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:88:EB:BC:33:22:2E:A1:A6:C4:FB:7F:45:79:56:F7:99:26:74:B5
            X509v3 Authority Key Identifier:
                keyid:71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/323830343a353839383a3a2f33322d3430203d3e20323638313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5898::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:68:3e:06:05:57:50:ef:95:32:e2:17:ce:98:f5:74:b1:ae:
         3e:35:6e:18:7c:05:fa:f8:e6:58:17:d8:f3:31:77:a1:d2:8c:
         32:97:21:f5:0a:22:32:76:01:85:62:af:c2:9e:e3:f4:08:d5:
         54:0c:f5:b5:06:39:4f:6d:b5:5a:ad:90:40:8d:cb:93:9c:60:
         3a:14:c4:03:7a:bf:7a:e7:1b:a2:96:e2:89:ef:d2:38:99:d6:
         a5:3f:65:54:d0:cb:a7:26:1b:de:ec:61:ec:75:2d:12:99:84:
         ea:be:a1:83:de:13:28:77:50:b8:90:81:02:6f:05:ce:fd:57:
         8a:27:08:b9:5d:c3:12:d9:94:3b:59:bc:8d:3f:97:95:14:d2:
         71:4d:ba:94:dc:82:8e:86:b1:c8:34:ea:f5:13:17:f3:35:15:
         cd:81:ac:a8:c2:1a:d1:3e:da:69:d0:07:cd:c6:64:e9:1f:75:
         c7:74:4e:4c:a1:3c:6b:5a:fc:6c:20:bf:ee:c5:84:2f:15:c7:
         87:04:90:9b:48:72:4f:ba:51:ba:f9:11:97:38:95:78:4d:26:
         99:cc:0d:90:e4:31:ec:bc:e9:19:39:df:aa:6a:b0:11:8e:16:
         5b:a5:82:66:3e:9e:82:0b:74:26:24:b2:dc:74:a8:de:78:12:
         46:ca:fc:b7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWT4OcXZxoO/xsEC5hWRc2BuScXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzExNzA5QkMxODFERjY2ODlEMzY2RTFCMzI4RDM5MDc0
MTlERjlBQTAeFw0yNDAzMTIxNDAxMjBaFw0yNTAzMTExNDA2MjBaMDMxMTAvBgNV
BAMTKDZCODhFQkJDMzMyMjJFQTFBNkM0RkI3RjQ1Nzk1NkY3OTkyNjc0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyy38V2v51r0IbSHL+9aY9VJ01
6sCuyEg83Kccg3dJm8zGx43KFkNkK4G7aMszEARaeCeUpbso/jBAh2ynHGbk93Gi
fvcJr4EaBlYCKw4Y8gBdxOd0cIQV71jl9d32zo+nNx3Medcmx9co0t+hbsP5pTx6
OJz/otcaN7VuieQFvoVlXSYKfTxIYnJL+cvFfWpRhB/+zKic5bpARjzDrPA3HzlY
tTOqF9idMujw6gp8JCtv+Rz0dgFJ4PH1SDDJsqBO0NXud5JNctqh5g3YJW9xjfDH
duhXl7gQmlV1cEJ+AOFrGX8LLUxMO7GWSda6ZnCDpPBZ9KrhZQY3+/UAvVNDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUa4jrvDMiLqGmxPt/RXlW95kmdLUwHwYDVR0j
BBgwFoAUcRcJvBgd9midNm4bMo05B0Gd+aowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZaMmJHdUw0c0QyNnFEekVFSFdTaGJuMWtwaEJ5M2FSOTVmWlhBM2oy
aFMvMC83MTE3MDlCQzE4MURGNjY4OUQzNjZFMUIzMjhEMzkwNzQxOURGOUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxMTcwOUJDMTgxREY2Njg5
RDM2NkUxQjMyOEQzOTA3NDE5REY5QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2WjJiR3VMNHNEMjZxRHpFRUhXU2hibjFrcGhCeTNhUjk1ZlpYQTNqMmhTLzAv
MzIzODMwMzQzYTM1MzgzOTM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM4
MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYmDANBgkqhkiG9w0BAQsFAAOCAQEAk2g+BgVX
UO+VMuIXzpj1dLGuPjVuGHwF+vjmWBfY8zF3odKMMpch9QoiMnYBhWKvwp7j9AjV
VAz1tQY5T221Wq2QQI3Lk5xgOhTEA3q/eucbopbiie/SOJnWpT9lVNDLpyYb3uxh
7HUtEpmE6r6hg94TKHdQuJCBAm8Fzv1XiicIuV3DEtmUO1m8jT+XlRTScU26lNyC
joaxyDTq9RMX8zUVzYGsqMIa0T7aadAHzcZk6R91x3ROTKE8a1r8bCC/7sWELxXH
hwSQm0hyT7pRuvkRlziVeE0mmcwNkOQx7LzpGTnfqmqwEY4WW6WCZj6eggt0JiSy
3HSo3ngSRsr8tw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org