Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d313238203d3e20323732373037.roa
File:                     323830343a383736383a3a2f33322d313238203d3e20323732373037.roa (raw, json)
Hash identifier:          a7H5cLykNUR8zLRfuYm+DK42gN6qrbhQFsVKT3Gwz+A=
Subject key identifier:   7D:A5:0B:A8:EE:EA:1D:93:FC:FE:55:B9:39:0D:AC:77:48:82:96:DD
Certificate issuer:       /CN=A242E21C32EE403B28FAC4478A2055E268EF5383
Certificate serial:       67F6B03D1B9CCBCC3BD04ADFF29FB005B60AD43B
Authority key identifier: A2:42:E2:1C:32:EE:40:3B:28:FA:C4:47:8A:20:55:E2:68:EF:53:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A242E21C32EE403B28FAC4478A2055E268EF5383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d313238203d3e20323732373037.roa
Signing time:             Wed 01 Nov 2023 18:25:19 +0000
ROA not before:           Wed 01 Nov 2023 18:20:19 +0000
ROA not after:            Wed 30 Oct 2024 18:25:19 +0000
asID:                     272707
IP address blocks:        2804:8768::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f6:b0:3d:1b:9c:cb:cc:3b:d0:4a:df:f2:9f:b0:05:b6:0a:d4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A242E21C32EE403B28FAC4478A2055E268EF5383
        Validity
            Not Before: Nov  1 18:20:19 2023 GMT
            Not After : Oct 30 18:25:19 2024 GMT
        Subject: CN=7DA50BA8EEEA1D93FCFE55B9390DAC77488296DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:b8:13:0f:3c:7d:7d:58:4e:5b:3d:00:1e:
                    94:9c:6a:c8:ef:65:c8:bd:a8:1c:3b:39:aa:f9:f7:
                    35:4f:d3:69:94:2d:70:77:da:0e:b3:24:0e:8b:0d:
                    e9:8d:18:6c:0d:6c:f5:04:cd:47:e7:e8:0a:71:76:
                    bb:01:0f:e4:69:b2:b9:53:69:1d:7d:1c:78:0c:47:
                    66:b2:75:3c:b5:30:5f:c4:93:dc:62:00:5a:b8:cb:
                    01:f0:03:58:28:2b:46:5e:12:a5:56:08:e5:e9:fb:
                    12:01:81:db:d1:98:2a:a9:71:22:96:61:61:95:0d:
                    dc:b4:4a:83:56:4d:22:20:e4:fa:00:3f:fd:1b:27:
                    d8:75:10:5e:47:c2:9f:ac:46:21:ba:df:ab:0f:23:
                    33:69:6b:06:04:01:d7:0b:18:dd:55:0a:27:f2:d1:
                    96:f4:9a:8c:90:82:42:0c:36:ba:df:a5:42:32:ef:
                    57:31:20:43:01:21:c6:55:61:55:49:01:24:fe:30:
                    7c:b4:f7:3d:dc:8a:52:8f:1a:6c:c2:dd:64:6f:2e:
                    96:46:19:a6:73:a1:e4:71:a2:1d:a1:24:b8:93:48:
                    00:27:57:37:16:b7:4e:f3:75:4a:15:d8:4b:e4:53:
                    9d:aa:f0:ee:01:96:4e:be:45:fa:5c:0c:d8:41:ec:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:0B:A8:EE:EA:1D:93:FC:FE:55:B9:39:0D:AC:77:48:82:96:DD
            X509v3 Authority Key Identifier:
                keyid:A2:42:E2:1C:32:EE:40:3B:28:FA:C4:47:8A:20:55:E2:68:EF:53:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/A242E21C32EE403B28FAC4478A2055E268EF5383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A242E21C32EE403B28FAC4478A2055E268EF5383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d313238203d3e20323732373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:8c:3b:c8:b8:58:52:72:0b:80:40:13:df:30:63:5d:59:d6:
         75:b0:e4:c7:9e:c8:92:c1:c8:7f:28:b5:c2:bc:bc:5d:93:17:
         86:8f:ea:31:0b:22:d6:9e:34:f6:88:1e:b5:cd:d4:d3:48:68:
         d7:d4:a6:63:94:83:c7:80:7b:14:c7:ea:f0:ae:75:c4:3e:f1:
         f2:d3:a8:ae:a0:4f:59:db:5e:44:cf:63:8c:10:6f:4f:ab:c6:
         33:be:61:81:74:c9:b6:7b:29:b8:bf:53:ce:de:fa:02:f4:db:
         20:70:5f:c5:0d:59:91:b3:02:c5:df:c1:72:4d:0e:62:65:c4:
         37:60:0a:4f:c7:ef:30:d1:5b:61:ac:d8:7a:92:1a:85:7e:31:
         43:76:9d:f3:e8:60:80:44:6d:19:c4:b6:bc:55:05:fa:ad:f3:
         e0:52:d3:3d:65:91:4c:e6:56:70:5b:bb:53:56:c9:23:2c:96:
         77:0c:cd:96:38:31:2c:d6:f5:ec:3d:1c:e6:73:d7:b5:60:4b:
         e2:05:70:02:92:8e:2b:2b:8d:07:2d:e2:7c:2a:36:72:68:7d:
         3f:25:d3:22:67:c3:a7:4b:97:79:02:49:ec:1e:44:89:c2:b6:
         92:72:1f:83:2d:df:cf:42:32:c5:a8:1e:71:aa:f0:a4:10:26:
         ff:51:3b:b6
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUZ/awPRucy8w70Erf8p+wBbYK1DswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI0MkUyMUMzMkVFNDAzQjI4RkFDNDQ3OEEyMDU1RTI2
OEVGNTM4MzAeFw0yMzExMDExODIwMTlaFw0yNDEwMzAxODI1MTlaMDMxMTAvBgNV
BAMTKDdEQTUwQkE4RUVFQTFEOTNGQ0ZFNTVCOTM5MERBQzc3NDg4Mjk2REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYrgTDzx9fVhOWz0AHpScasjv
Zci9qBw7Oar59zVP02mULXB32g6zJA6LDemNGGwNbPUEzUfn6ApxdrsBD+RpsrlT
aR19HHgMR2aydTy1MF/Ek9xiAFq4ywHwA1goK0ZeEqVWCOXp+xIBgdvRmCqpcSKW
YWGVDdy0SoNWTSIg5PoAP/0bJ9h1EF5Hwp+sRiG636sPIzNpawYEAdcLGN1VCify
0Zb0moyQgkIMNrrfpUIy71cxIEMBIcZVYVVJAST+MHy09z3cilKPGmzC3WRvLpZG
GaZzoeRxoh2hJLiTSAAnVzcWt07zdUoV2EvkU52q8O4Blk6+RfpcDNhB7OaxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUfaULqO7qHZP8/lW5OQ2sd0iClt0wHwYDVR0j
BBgwFoAUokLiHDLuQDso+sRHiiBV4mjvU4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzY4UDZvOUVib3hBajRRR3pDaWZYWVMxejZ0cWRhVDFmUFd2SkNldEpi
UmQvMC9BMjQyRTIxQzMyRUU0MDNCMjhGQUM0NDc4QTIwNTVFMjY4RUY1MzgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyNDJFMjFDMzJFRTQwM0Iy
OEZBQzQ0NzhBMjA1NUUyNjhFRjUzODMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2OFA2bzlFYm94QWo0UUd6Q2lmWFlTMXo2dHFkYVQxZlBXdkpDZXRKYlJkLzAv
MzIzODMwMzQzYTM4MzczNjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzNzMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIdoMA0GCSqGSIb3DQEBCwUAA4IBAQDIjDvI
uFhScguAQBPfMGNdWdZ1sOTHnsiSwch/KLXCvLxdkxeGj+oxCyLWnjT2iB61zdTT
SGjX1KZjlIPHgHsUx+rwrnXEPvHy06iuoE9Z215Ez2OMEG9Pq8YzvmGBdMm2eym4
v1PO3voC9NsgcF/FDVmRswLF38FyTQ5iZcQ3YApPx+8w0VthrNh6khqFfjFDdp3z
6GCARG0ZxLa8VQX6rfPgUtM9ZZFM5lZwW7tTVskjLJZ3DM2WODEs1vXsPRzmc9e1
YEviBXACko4rK40HLeJ8KjZyaH0/JdMiZ8OnS5d5AknsHkSJwraSch+DLd/PQjLF
qB5xqvCkECb/UTu2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org