Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3332203d3e20323639303037.roa
File:                     323830343a356530383a3a2f33322d3332203d3e20323639303037.roa (raw, json)
Hash identifier:          AJc+SPVfZD4QTrwr/YkR12vSt9kRt/7r4IKkXpbtKqY=
Subject key identifier:   A7:30:DE:1E:50:D8:18:9A:4C:40:EF:2D:C5:C0:14:3F:B3:84:A8:D1
Certificate issuer:       /CN=DE52C578BC0F9A7B70A231782F69295C2543D000
Certificate serial:       6B4D5234608B5298341D667F8377E952873FB5E1
Authority key identifier: DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3332203d3e20323639303037.roa
Signing time:             Sat 22 Jan 2022 23:31:40 +0000
ROA not before:           Sat 22 Jan 2022 23:26:40 +0000
ROA not after:            Sat 21 Jan 2023 23:31:40 +0000
asID:                     269007
IP address blocks:        2804:5e08::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4d:52:34:60:8b:52:98:34:1d:66:7f:83:77:e9:52:87:3f:b5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52C578BC0F9A7B70A231782F69295C2543D000
        Validity
            Not Before: Jan 22 23:26:40 2022 GMT
            Not After : Jan 21 23:31:40 2023 GMT
        Subject: CN=A730DE1E50D8189A4C40EF2DC5C0143FB384A8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:a7:cd:f7:da:87:63:90:60:c0:6f:be:82:
                    e8:09:a4:1a:2a:b0:92:4b:cc:73:ff:98:d5:57:55:
                    b3:0e:84:3b:49:e9:6d:4a:1f:8b:81:1d:d2:8f:1d:
                    e0:2f:1b:c9:8f:d9:00:79:6d:4c:88:21:ae:66:69:
                    f7:ca:21:08:70:e5:7d:5c:71:13:8a:19:e4:18:10:
                    df:f2:7a:27:b0:a1:f7:fd:74:a6:38:dc:11:67:ff:
                    68:48:f4:06:75:4e:aa:b7:0d:64:c9:87:60:93:39:
                    2d:46:99:e1:88:cb:d2:ed:fb:99:20:58:62:51:d0:
                    96:90:56:30:f1:ea:6e:07:18:c9:b5:3d:89:ae:73:
                    c3:f9:4c:24:84:7f:aa:a5:3f:74:5e:c9:16:b4:84:
                    b3:b4:3b:e8:d7:de:89:ad:02:7e:a1:6a:3a:fc:6c:
                    2e:af:2e:16:78:b6:53:a2:67:6c:b1:cb:99:2f:29:
                    f6:d1:82:19:ee:dc:e0:2f:2f:92:47:ea:7a:33:1b:
                    f0:96:f0:8f:1b:56:5e:f2:62:33:cd:0e:bb:38:3b:
                    59:6a:49:6e:1c:77:42:24:a0:19:d8:b8:ef:fb:b7:
                    ef:e1:cd:f6:81:fb:a5:d7:48:07:67:71:d0:85:90:
                    b5:56:cd:96:8c:32:42:79:cd:f5:ce:3d:c7:9d:56:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:30:DE:1E:50:D8:18:9A:4C:40:EF:2D:C5:C0:14:3F:B3:84:A8:D1
            X509v3 Authority Key Identifier:
                keyid:DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3332203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:97:02:38:63:6a:e6:96:31:b6:97:26:2a:2b:6b:98:56:64:
         c7:ac:17:43:a9:bb:33:b2:58:b4:99:af:d0:e7:34:99:f2:0e:
         4e:e4:de:77:37:d0:a0:9b:bc:38:f8:9d:f3:82:61:1d:74:9f:
         34:af:98:fc:b9:52:4c:ff:59:41:32:2a:f8:02:dc:13:3b:c4:
         d6:a1:3f:a4:8a:81:3f:86:8a:c6:49:48:98:ad:35:41:fa:e0:
         16:50:29:af:cc:42:e2:63:5e:69:e7:a3:7c:d7:39:06:b2:a4:
         45:c3:f3:46:fe:1e:e9:b9:0e:e3:0c:c9:48:a5:74:8b:8e:d6:
         31:42:30:6f:a3:fe:5d:26:12:cb:ac:19:1c:d8:8b:34:81:9a:
         4d:12:3d:81:27:ba:38:f7:e4:34:67:df:f9:e6:a7:a2:0c:0b:
         ac:14:0d:02:5b:7f:8b:2d:cc:3b:8e:8f:04:07:d0:45:0f:b3:
         2d:5c:ee:b2:bc:a1:e1:4a:b5:c0:e8:25:a5:de:dd:b4:fb:a8:
         af:c4:a0:a8:c4:42:4f:1a:5b:9e:a3:9f:73:3d:0e:c7:14:db:
         e8:79:b6:90:ec:65:19:08:96:9f:29:f0:5a:d4:ea:a3:eb:09:
         69:f5:02:d7:4b:a7:14:f7:84:e7:d9:cf:03:b1:ad:80:11:34:
         bd:3e:29:32
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUa01SNGCLUpg0HWZ/g3fpUoc/teEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU1MkM1NzhCQzBGOUE3QjcwQTIzMTc4MkY2OTI5NUMy
NTQzRDAwMDAeFw0yMjAxMjIyMzI2NDBaFw0yMzAxMjEyMzMxNDBaMDMxMTAvBgNV
BAMTKEE3MzBERTFFNTBEODE4OUE0QzQwRUYyREM1QzAxNDNGQjM4NEE4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aafN99qHY5BgwG++gugJpBoq
sJJLzHP/mNVXVbMOhDtJ6W1KH4uBHdKPHeAvG8mP2QB5bUyIIa5maffKIQhw5X1c
cROKGeQYEN/yeiewoff9dKY43BFn/2hI9AZ1Tqq3DWTJh2CTOS1GmeGIy9Lt+5kg
WGJR0JaQVjDx6m4HGMm1PYmuc8P5TCSEf6qlP3ReyRa0hLO0O+jX3omtAn6hajr8
bC6vLhZ4tlOiZ2yxy5kvKfbRghnu3OAvL5JH6nozG/CW8I8bVl7yYjPNDrs4O1lq
SW4cd0IkoBnYuO/7t+/hzfaB+6XXSAdncdCFkLVWzZaMMkJ5zfXOPcedVtavAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUpzDeHlDYGJpMQO8txcAUP7OEqNEwHwYDVR0j
BBgwFoAU3lLFeLwPmntwojF4L2kpXCVD0AAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2o2NXFaSnFyQUpEZVJFODl4RW5VNkVxM1REZkZVTkFrZ0cyaHdwWkVy
QUUvMC9ERTUyQzU3OEJDMEY5QTdCNzBBMjMxNzgyRjY5Mjk1QzI1NDNEMDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFNTJDNTc4QkMwRjlBN0I3
MEEyMzE3ODJGNjkyOTVDMjU0M0QwMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNqNjVxWkpxckFKRGVSRTg5eEVuVTZFcTNURGZGVU5Ba2dHMmh3cFpFckFFLzAv
MzIzODMwMzQzYTM1NjUzMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzAzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAReCDANBgkqhkiG9w0BAQsFAAOCAQEANpcCOGNq
5pYxtpcmKitrmFZkx6wXQ6m7M7JYtJmv0Oc0mfIOTuTedzfQoJu8OPid84JhHXSf
NK+Y/LlSTP9ZQTIq+ALcEzvE1qE/pIqBP4aKxklImK01QfrgFlApr8xC4mNeaeej
fNc5BrKkRcPzRv4e6bkO4wzJSKV0i47WMUIwb6P+XSYSy6wZHNiLNIGaTRI9gSe6
OPfkNGff+eanogwLrBQNAlt/iy3MO46PBAfQRQ+zLVzusryh4Uq1wOglpd7dtPuo
r8SgqMRCTxpbnqOfcz0OxxTb6Hm2kOxlGQiWnynwWtTqo+sJafUC10unFPeE59nP
A7GtgBE0vT4pMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org