Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a323730333a3a2f34382d3438203d3e20323730333538.roa
File:                     323830343a366163383a323730333a3a2f34382d3438203d3e20323730333538.roa (raw, json)
Hash identifier:          IY9yZfOdM+0Xk9mrfkKmLmxwFgzs9Hw23/9ScdfbgXM=
Subject key identifier:   D2:DE:8B:42:26:72:29:4D:65:99:D0:96:64:3D:94:94:31:D7:69:49
Certificate issuer:       /CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Certificate serial:       7EB732F64F246BB058727486ABE26008116CAF09
Authority key identifier: 61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a323730333a3a2f34382d3438203d3e20323730333538.roa
Signing time:             Fri 24 Mar 2023 01:47:12 +0000
ROA not before:           Fri 24 Mar 2023 01:42:12 +0000
ROA not after:            Fri 22 Mar 2024 01:47:12 +0000
asID:                     270358
IP address blocks:        2804:6ac8:2703::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b7:32:f6:4f:24:6b:b0:58:72:74:86:ab:e2:60:08:11:6c:af:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
        Validity
            Not Before: Mar 24 01:42:12 2023 GMT
            Not After : Mar 22 01:47:12 2024 GMT
        Subject: CN=D2DE8B422672294D6599D096643D949431D76949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:bd:30:ef:36:8c:59:d5:da:3d:e2:93:45:
                    f2:00:9a:12:c2:66:b9:97:3f:b2:b2:35:6d:f1:93:
                    77:ae:0e:8d:c1:a3:e2:d2:f1:69:24:34:2f:e6:11:
                    f4:62:8f:42:b2:e5:bb:be:24:d0:47:66:f2:7f:3d:
                    00:4e:52:46:70:06:a7:b1:c5:01:2f:d7:8c:df:f6:
                    92:d1:da:7a:57:6a:54:b5:f3:78:b7:e1:55:32:07:
                    e5:0f:79:4c:f1:bf:ba:9a:b5:38:3e:ff:f4:e9:c3:
                    43:79:ba:73:40:a8:48:ba:51:95:8e:38:39:73:5d:
                    a0:5c:da:3f:d4:e8:11:74:51:85:21:ed:df:57:43:
                    3b:42:17:b0:f0:19:60:a1:de:9c:d4:43:d6:48:b3:
                    fd:20:2c:97:f4:b3:8d:61:0a:7e:0d:f2:b5:8e:d0:
                    8d:f6:8d:41:b3:77:33:24:4e:d9:b6:87:0e:02:9b:
                    bb:aa:95:64:96:f1:de:14:78:ec:54:8b:76:64:10:
                    ef:d9:99:60:53:d6:5c:88:32:83:6a:3a:5d:75:62:
                    76:30:57:f3:b8:41:98:b8:22:9c:b7:62:85:ab:e7:
                    e9:89:8e:72:8e:7b:4f:a5:ea:31:1b:47:87:8d:36:
                    93:1a:09:1d:69:ec:df:32:ff:de:2e:7e:b0:04:e3:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DE:8B:42:26:72:29:4D:65:99:D0:96:64:3D:94:94:31:D7:69:49
            X509v3 Authority Key Identifier:
                keyid:61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a323730333a3a2f34382d3438203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac8:2703::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:2a:d3:7c:72:eb:db:dc:4e:54:b0:c9:fb:f0:81:5f:62:f7:
         48:ea:ab:0d:85:ef:6f:05:81:9b:d7:88:7c:ae:46:cd:97:33:
         7b:82:3d:50:ef:93:56:b4:ce:29:62:9a:0e:63:28:2b:94:6a:
         30:a0:3f:d4:db:1c:53:37:c4:df:0e:29:4d:e8:b4:78:be:ed:
         9b:ab:4d:02:2b:75:87:09:93:60:08:8c:f7:e4:77:67:35:46:
         75:12:12:b2:67:d8:50:b3:a1:da:33:7d:72:4d:b7:2e:42:9c:
         2e:5d:42:bc:b3:49:43:de:17:0e:ef:71:19:8e:41:95:8f:5f:
         75:89:8f:e4:67:6e:41:24:4a:d6:4a:fb:c1:62:4a:67:a8:be:
         14:d2:17:68:7e:90:db:e9:da:61:5a:d2:e3:2e:68:78:5f:58:
         0f:bb:fa:dc:97:6e:9f:6f:d7:55:8d:24:31:b3:bf:cb:f6:e2:
         33:2b:d3:2f:53:11:21:4a:95:95:0d:9b:7c:72:bd:c9:75:71:
         62:16:fc:cf:87:5f:e6:e7:0a:c6:93:9d:c7:9f:37:e5:df:11:
         a6:f9:69:77:9f:cf:5b:f6:5b:86:0b:c2:5e:68:52:82:c0:02:
         53:46:89:05:fa:b2:b4:b8:a2:28:2e:b6:51:e4:73:15:cf:e2:
         c2:4f:24:c1
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUfrcy9k8ka7BYcnSGq+JgCBFsrwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFGNDg3NEU2NDc0QThFNUNFMjQyQkQxRkI3ODU0RkEx
NTI5N0Q4NTAeFw0yMzAzMjQwMTQyMTJaFw0yNDAzMjIwMTQ3MTJaMDMxMTAvBgNV
BAMTKEQyREU4QjQyMjY3MjI5NEQ2NTk5RDA5NjY0M0Q5NDk0MzFENzY5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8b0w7zaMWdXaPeKTRfIAmhLC
ZrmXP7KyNW3xk3euDo3Bo+LS8WkkNC/mEfRij0Ky5bu+JNBHZvJ/PQBOUkZwBqex
xQEv14zf9pLR2npXalS183i34VUyB+UPeUzxv7qatTg+//Tpw0N5unNAqEi6UZWO
ODlzXaBc2j/U6BF0UYUh7d9XQztCF7DwGWCh3pzUQ9ZIs/0gLJf0s41hCn4N8rWO
0I32jUGzdzMkTtm2hw4Cm7uqlWSW8d4UeOxUi3ZkEO/ZmWBT1lyIMoNqOl11YnYw
V/O4QZi4Ipy3YoWr5+mJjnKOe0+l6jEbR4eNNpMaCR1p7N8y/94ufrAE4xTZAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU0t6LQiZyKU1lmdCWZD2UlDHXaUkwHwYDVR0j
BBgwFoAUYfSHTmR0qOXOJCvR+3hU+hUpfYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENjVjhZSkc5NDFhTTZWc1dycFRUVUQxb3dxbUF3aVhDMmZMVzlhYjJn
QUgvMC82MUY0ODc0RTY0NzRBOEU1Q0UyNDJCRDFGQjc4NTRGQTE1Mjk3RDg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxRjQ4NzRFNjQ3NEE4RTVD
RTI0MkJEMUZCNzg1NEZBMTUyOTdEODUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDY1Y4WUpHOTQxYU02VnNXcnBUVFVEMW93cW1Bd2lYQzJmTFc5YWIyZ0FILzAv
MzIzODMwMzQzYTM2NjE2MzM4M2EzMjM3MzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDMzMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEasgnAzANBgkqhkiG9w0BAQsF
AAOCAQEAtyrTfHLr29xOVLDJ+/CBX2L3SOqrDYXvbwWBm9eIfK5GzZcze4I9UO+T
VrTOKWKaDmMoK5RqMKA/1NscUzfE3w4pTei0eL7tm6tNAit1hwmTYAiM9+R3ZzVG
dRISsmfYULOh2jN9ck23LkKcLl1CvLNJQ94XDu9xGY5BlY9fdYmP5GduQSRK1kr7
wWJKZ6i+FNIXaH6Q2+naYVrS4y5oeF9YD7v63Jdun2/XVY0kMbO/y/biMyvTL1MR
IUqVlQ2bfHK9yXVxYhb8z4df5ucKxpOdx5835d8Rpvlpd5/PW/ZbhgvCXmhSgsAC
U0aJBfqytLiiKC62UeRzFc/iwk8kwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org