Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          0Oa9kmr9NfgswjmiQISVayQcTm4VIc6lcZwzIGbsD+M=
Subject key identifier:   89:1B:A3:CA:B6:36:59:B5:5D:88:02:5C:88:C2:FE:91:73:8A:9A:C9
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       5781DF25F34A3B2A7C8559C4C002D12DD4FBD198
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:22:53 +0000
ROA not before:           Thu 20 Jul 2023 14:17:53 +0000
ROA not after:            Thu 18 Jul 2024 14:22:53 +0000
asID:                     52706
IP address blocks:        2804:c70:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:81:df:25:f3:4a:3b:2a:7c:85:59:c4:c0:02:d1:2d:d4:fb:d1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:17:53 2023 GMT
            Not After : Jul 18 14:22:53 2024 GMT
        Subject: CN=891BA3CAB63659B55D88025C88C2FE91738A9AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:bb:bb:82:02:8e:30:0d:2d:18:3d:0c:ae:
                    45:03:18:55:9f:25:bb:d8:b5:bc:59:d2:27:15:af:
                    e0:46:a7:ae:dc:1d:82:4d:bb:e4:07:b6:49:3d:3c:
                    19:15:0c:e7:2b:5a:e2:9a:8f:2e:77:97:5a:e2:2c:
                    dc:b9:5b:c8:bf:ed:aa:b5:c7:6f:a7:2f:97:cc:ec:
                    62:d5:82:9a:f5:b3:61:5a:d1:5a:39:9d:17:9a:50:
                    64:a2:6d:95:c1:33:d9:10:ed:24:a7:d3:88:0e:e4:
                    93:66:40:6a:79:30:3e:cb:27:75:28:ac:a8:69:8f:
                    07:3d:c5:05:61:4c:c4:69:b0:be:fe:c7:e1:98:47:
                    38:94:46:c9:4a:a6:15:e1:e1:c9:39:f7:34:1c:dd:
                    1d:ef:27:2f:80:93:9e:41:e5:8c:b5:8c:5c:fb:5a:
                    90:04:31:84:80:7c:06:6c:5b:63:1c:cf:ea:be:a3:
                    62:74:b5:ac:6d:0c:a3:d2:0d:a6:75:7a:35:56:ea:
                    60:ed:8d:f1:65:ef:e7:ee:6c:1d:49:41:2c:ea:c2:
                    84:45:48:2a:24:54:c6:30:e4:37:3a:e0:b7:e2:6c:
                    0c:88:60:2e:3b:f1:dc:71:f7:be:83:f8:d0:f3:c7:
                    ac:56:09:a1:73:a0:c2:f0:30:4e:98:b9:85:a0:b6:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1B:A3:CA:B6:36:59:B5:5D:88:02:5C:88:C2:FE:91:73:8A:9A:C9
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:31:8e:be:ae:25:ce:c7:80:9e:ed:10:23:6d:11:8b:8c:
         64:da:48:22:75:d0:02:d6:9f:26:ba:ab:57:0b:af:b8:7a:ec:
         4a:62:d9:5c:e7:68:5f:19:50:ea:65:bb:6b:20:88:73:07:e4:
         fd:b5:d8:72:ee:73:3f:57:9e:31:f3:4d:0f:ce:a4:07:36:fe:
         68:f2:88:e0:07:2a:e7:87:f6:f1:1f:73:eb:46:e2:48:32:89:
         7c:49:6f:86:b8:75:aa:2d:de:9d:a4:99:ff:86:aa:1d:94:32:
         5c:a0:2b:42:e5:d4:39:9a:f9:d9:9c:5d:6c:65:94:10:b8:1d:
         60:a7:da:71:13:d2:15:e4:8d:01:eb:fa:dc:78:aa:cb:1b:85:
         69:a2:a6:ec:5f:3d:64:72:0d:68:5c:c7:a4:a4:1d:9f:70:4d:
         3e:01:d7:54:5e:72:e5:e4:0f:27:80:e0:42:82:cf:51:35:7e:
         e2:1e:16:ab:e8:92:75:57:23:d2:db:2e:dd:8b:57:68:21:cf:
         b3:41:19:fd:ef:49:3c:00:c9:19:5b:34:58:c1:21:72:83:a4:
         c1:65:a7:fe:0f:82:86:5e:c3:ef:31:62:2e:48:0f:5d:a7:b5:
         03:36:97:3e:86:7b:36:4b:84:e9:b2:2b:de:56:af:56:f1:a2:
         01:0f:37:b3
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUV4HfJfNKOyp8hVnEwALRLdT70ZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxNDE3NTNaFw0yNDA3MTgxNDIyNTNaMDMxMTAvBgNV
BAMTKDg5MUJBM0NBQjYzNjU5QjU1RDg4MDI1Qzg4QzJGRTkxNzM4QTlBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUru7ggKOMA0tGD0MrkUDGFWf
JbvYtbxZ0icVr+BGp67cHYJNu+QHtkk9PBkVDOcrWuKajy53l1riLNy5W8i/7aq1
x2+nL5fM7GLVgpr1s2Fa0Vo5nReaUGSibZXBM9kQ7SSn04gO5JNmQGp5MD7LJ3Uo
rKhpjwc9xQVhTMRpsL7+x+GYRziURslKphXh4ck59zQc3R3vJy+Ak55B5Yy1jFz7
WpAEMYSAfAZsW2Mcz+q+o2J0taxtDKPSDaZ1ejVW6mDtjfFl7+fubB1JQSzqwoRF
SCokVMYw5Dc64LfibAyIYC478dxx976D+NDzx6xWCaFzoMLwME6YuYWgttK1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUiRujyrY2WbVdiAJciML+kXOKmskwHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKAQMcAADMA0GCSqGSIb3DQEBCwUAA4IBAQAC+DGO
vq4lzseAnu0QI20Ri4xk2kgiddAC1p8muqtXC6+4euxKYtlc52hfGVDqZbtrIIhz
B+T9tdhy7nM/V54x800PzqQHNv5o8ojgByrnh/bxH3PrRuJIMol8SW+GuHWqLd6d
pJn/hqodlDJcoCtC5dQ5mvnZnF1sZZQQuB1gp9pxE9IV5I0B6/rceKrLG4Vpoqbs
Xz1kcg1oXMekpB2fcE0+AddUXnLl5A8ngOBCgs9RNX7iHhar6JJ1VyPS2y7di1do
Ic+zQRn970k8AMkZWzRYwSFyg6TBZaf+D4KGXsPvMWIuSA9dp7UDNpc+hns2S4Tp
siveVq9W8aIBDzez
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org