Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33322d3332203d3e20323732363737.roa
File:                     323830343a383666343a3a2f33322d3332203d3e20323732363737.roa (raw, json)
Hash identifier:          wj4pdhUNL5M7MBnSOUk3Tcgkt9/xWdiGTOP4w1uhAyY=
Subject key identifier:   DE:22:C4:C1:8A:B8:22:65:56:09:37:19:03:44:59:8C:CC:83:48:BA
Certificate issuer:       /CN=B58987A5DDAC06DAB91FB60D2D599C391C27D774
Certificate serial:       6DD95253221761B9A65DED6594B4F189B5E51D86
Authority key identifier: B5:89:87:A5:DD:AC:06:DA:B9:1F:B6:0D:2D:59:9C:39:1C:27:D7:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B58987A5DDAC06DAB91FB60D2D599C391C27D774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33322d3332203d3e20323732363737.roa
Signing time:             Tue 05 Sep 2023 13:12:40 +0000
ROA not before:           Tue 05 Sep 2023 13:07:40 +0000
ROA not after:            Tue 03 Sep 2024 13:12:40 +0000
asID:                     272677
IP address blocks:        2804:86f4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d9:52:53:22:17:61:b9:a6:5d:ed:65:94:b4:f1:89:b5:e5:1d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58987A5DDAC06DAB91FB60D2D599C391C27D774
        Validity
            Not Before: Sep  5 13:07:40 2023 GMT
            Not After : Sep  3 13:12:40 2024 GMT
        Subject: CN=DE22C4C18AB82265560937190344598CCC8348BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:60:d0:fa:a4:02:d5:6d:3f:5c:57:5a:97:
                    5c:6a:af:66:9b:ae:f2:a7:a7:32:c9:ce:8b:64:46:
                    4d:18:2d:3d:d3:11:66:38:8c:a1:dd:8f:af:cb:d4:
                    c5:84:2c:f7:59:79:24:c6:7f:23:50:83:5b:3a:b8:
                    a7:b9:f1:4a:26:1a:86:21:b4:82:35:8d:c5:d5:6c:
                    01:fc:8a:32:81:7d:5f:1c:f0:4c:fe:5e:07:b7:5a:
                    4b:58:e1:d6:c1:ab:35:0b:8e:76:df:bf:9c:fb:80:
                    b6:2c:1d:12:0e:60:60:f8:c3:36:40:08:d3:d6:4d:
                    41:09:9c:8d:fe:7b:af:fa:b7:ac:a4:01:dd:e2:0b:
                    c0:d9:0b:10:b8:06:66:99:da:f2:cf:18:43:91:b2:
                    14:69:87:2b:14:cd:77:94:26:d4:e6:7f:d5:2c:18:
                    c3:17:75:a2:7f:10:de:85:21:8d:ff:ce:55:fa:3b:
                    06:93:4b:ef:4f:b5:72:b7:03:e8:63:ff:fc:14:ec:
                    87:35:7d:52:21:f9:0e:a1:8b:c0:89:06:60:75:ee:
                    58:55:8f:1d:1a:c9:ac:33:10:0e:09:e6:5a:95:22:
                    52:2b:9b:51:0c:67:96:ad:a8:83:42:27:df:2c:47:
                    18:6d:d6:49:19:9a:9f:87:6b:97:0e:b8:02:be:62:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:22:C4:C1:8A:B8:22:65:56:09:37:19:03:44:59:8C:CC:83:48:BA
            X509v3 Authority Key Identifier:
                keyid:B5:89:87:A5:DD:AC:06:DA:B9:1F:B6:0D:2D:59:9C:39:1C:27:D7:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/B58987A5DDAC06DAB91FB60D2D599C391C27D774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B58987A5DDAC06DAB91FB60D2D599C391C27D774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33322d3332203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:72:51:3f:24:fd:89:df:ca:9d:53:db:ba:c0:7c:98:89:
         23:ec:bf:8e:56:da:98:f6:9c:1b:85:f4:9d:83:e4:d7:2a:b6:
         ef:a7:23:94:89:5d:4d:6c:25:75:78:2c:e5:54:b2:d2:4d:d0:
         f7:6a:6c:4c:bf:17:fc:19:9c:03:67:96:c2:d5:e0:5c:a7:fd:
         91:c6:55:16:0f:c6:24:d7:f7:2d:b3:7d:66:20:d7:5a:c7:10:
         5b:c3:54:b2:23:ed:4f:a7:a0:29:8c:41:ad:f5:a3:8c:fe:ba:
         44:eb:f0:73:60:44:98:db:c7:2f:91:fd:af:7b:6a:03:43:9d:
         7a:c4:9c:fd:70:ab:85:74:2e:27:7d:1b:a7:bb:8b:cd:c6:4f:
         77:82:d3:88:57:2a:f2:c1:91:d6:86:fe:13:b1:c9:1e:6a:55:
         bd:b4:48:74:34:2c:7a:6c:de:98:b1:d9:12:52:4e:70:4e:c9:
         88:5f:3d:dd:92:77:76:56:f2:53:e1:85:38:bc:40:2d:bd:5e:
         7b:12:6e:7a:6b:d1:3a:b2:91:51:f7:94:f2:75:f4:c4:eb:66:
         b0:fa:b7:03:f2:ca:0b:2a:86:2c:66:cd:04:28:45:5f:a4:28:
         f3:ca:4d:af:72:28:4f:0a:25:9f:de:52:be:12:04:72:a2:e9:
         22:49:1f:61
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbdlSUyIXYbmmXe1llLTxibXlHYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU4OTg3QTVEREFDMDZEQUI5MUZCNjBEMkQ1OTlDMzkx
QzI3RDc3NDAeFw0yMzA5MDUxMzA3NDBaFw0yNDA5MDMxMzEyNDBaMDMxMTAvBgNV
BAMTKERFMjJDNEMxOEFCODIyNjU1NjA5MzcxOTAzNDQ1OThDQ0M4MzQ4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYmDQ+qQC1W0/XFdal1xqr2ab
rvKnpzLJzotkRk0YLT3TEWY4jKHdj6/L1MWELPdZeSTGfyNQg1s6uKe58UomGoYh
tII1jcXVbAH8ijKBfV8c8Ez+Xge3WktY4dbBqzULjnbfv5z7gLYsHRIOYGD4wzZA
CNPWTUEJnI3+e6/6t6ykAd3iC8DZCxC4BmaZ2vLPGEORshRphysUzXeUJtTmf9Us
GMMXdaJ/EN6FIY3/zlX6OwaTS+9PtXK3A+hj//wU7Ic1fVIh+Q6hi8CJBmB17lhV
jx0ayawzEA4J5lqVIlIrm1EMZ5atqINCJ98sRxht1kkZmp+Ha5cOuAK+Yi5rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3iLEwYq4ImVWCTcZA0RZjMyDSLowHwYDVR0j
BBgwFoAUtYmHpd2sBtq5H7YNLVmcORwn13QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK
UlQvMC9CNTg5ODdBNUREQUMwNkRBQjkxRkI2MEQyRDU5OUMzOTFDMjdENzc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I1ODk4N0E1RERBQzA2REFC
OTFGQjYwRDJENTk5QzM5MUMyN0Q3NzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzAv
MzIzODMwMzQzYTM4MzY2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASG9DANBgkqhkiG9w0BAQsFAAOCAQEAWvtyUT8k
/Ynfyp1T27rAfJiJI+y/jlbamPacG4X0nYPk1yq276cjlIldTWwldXgs5VSy0k3Q
92psTL8X/BmcA2eWwtXgXKf9kcZVFg/GJNf3LbN9ZiDXWscQW8NUsiPtT6egKYxB
rfWjjP66ROvwc2BEmNvHL5H9r3tqA0OdesSc/XCrhXQuJ30bp7uLzcZPd4LTiFcq
8sGR1ob+E7HJHmpVvbRIdDQsemzemLHZElJOcE7JiF893ZJ3dlbyU+GFOLxALb1e
exJuemvROrKRUfeU8nX0xOtmsPq3A/LKCyqGLGbNBChFX6Qo88pNr3IoTwoln95S
vhIEcqLpIkkfYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org