Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a353a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a353a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          +2ghsfHgNLOe8NjR7H9HUXeKwSee4fRth4KXCiDWqq0=
Subject key identifier:   A1:66:5B:5A:09:46:41:D2:72:65:8C:41:A2:BA:0B:E5:46:CB:EF:B3
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       2A9F106CAE25862B152940271CD675ED95BD6880
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a353a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:24:34 +0000
ROA not before:           Thu 20 Jul 2023 14:19:34 +0000
ROA not after:            Thu 18 Jul 2024 14:24:34 +0000
asID:                     52706
IP address blocks:        2804:c70:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9f:10:6c:ae:25:86:2b:15:29:40:27:1c:d6:75:ed:95:bd:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:19:34 2023 GMT
            Not After : Jul 18 14:24:34 2024 GMT
        Subject: CN=A1665B5A094641D272658C41A2BA0BE546CBEFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:31:65:12:fd:13:61:19:13:31:ba:18:1a:
                    82:ba:f6:91:23:d0:f4:d7:db:19:7d:69:b7:d7:b1:
                    2e:7c:00:34:70:ec:0b:55:fe:75:31:36:5a:1a:bb:
                    56:1a:19:e6:2c:0b:66:1c:f7:92:54:76:cd:af:b0:
                    07:08:9a:a6:b4:5d:9d:75:67:77:2a:aa:5b:3c:d1:
                    3b:43:7e:6c:8a:bd:fa:f8:0b:c9:03:0b:ea:07:20:
                    b1:99:57:21:22:b6:ff:87:fb:3a:4a:4f:37:03:0d:
                    e5:db:89:3e:8e:db:53:e1:39:a3:43:5e:1b:75:58:
                    6c:c3:58:dd:a2:97:57:22:0f:63:3c:0d:a1:fc:8e:
                    56:86:97:1b:95:59:59:87:e6:f8:07:36:84:56:25:
                    1e:fc:eb:62:d1:60:5e:83:f8:e6:d4:de:2e:c0:28:
                    64:17:ed:a3:b3:f2:42:dd:f7:00:79:a5:e8:37:9e:
                    eb:8c:2b:e1:b6:54:c9:12:64:86:d5:f1:13:94:34:
                    a3:6f:9b:45:4c:73:98:4d:18:6b:95:ca:56:bc:cf:
                    33:dd:b3:32:b0:0d:fb:b5:bc:63:22:52:dd:d0:44:
                    1d:be:bc:29:0a:a6:bc:47:5b:13:83:3e:0a:66:6c:
                    e6:41:6c:2c:1d:72:1b:e2:fc:85:f0:8e:05:1f:24:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:66:5B:5A:09:46:41:D2:72:65:8C:41:A2:BA:0B:E5:46:CB:EF:B3
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a353a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:0c:80:e1:67:8d:a7:85:e9:ef:f9:93:6a:9a:4b:fc:0e:f2:
         28:2b:4c:3e:78:92:af:b1:aa:5a:a6:65:4c:c1:20:ef:9d:cf:
         4c:22:d5:10:f6:3c:79:67:92:f9:34:79:da:e2:ce:cc:fd:79:
         f3:00:5c:bc:54:cc:20:35:d1:ac:36:e1:89:90:73:eb:1b:4a:
         24:5f:a8:ce:42:41:73:72:67:9f:a9:81:89:5a:87:d1:2c:70:
         67:3e:15:c9:b5:4c:bc:20:a8:ef:e0:6e:23:cb:e2:3f:d9:b7:
         44:87:4a:c9:32:9a:59:2a:d1:4b:38:c5:41:a4:32:59:10:6d:
         4d:8d:bd:0b:1d:94:1a:b6:31:f7:d1:41:16:d9:8e:dc:cd:2b:
         b5:04:ae:53:dd:02:66:a1:06:a9:9f:44:9f:3f:f8:8b:0d:82:
         09:6d:7c:37:d3:83:d8:d2:94:33:df:de:2d:9a:3e:13:dd:e2:
         21:dc:e9:2c:50:2c:8e:82:a4:69:0b:dd:b2:51:61:6d:37:4e:
         2c:60:88:96:d0:51:92:65:73:9d:6d:b0:ba:94:e5:9d:71:63:
         27:06:d9:e0:bb:f3:eb:11:5e:2c:cd:7f:ba:1c:39:10:ed:dd:
         21:1b:30:36:74:a7:8b:23:9f:35:0a:29:57:a4:db:e7:f6:e7:
         4b:bd:46:57
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKp8QbK4lhisVKUAnHNZ17ZW9aIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxNDE5MzRaFw0yNDA3MTgxNDI0MzRaMDMxMTAvBgNV
BAMTKEExNjY1QjVBMDk0NjQxRDI3MjY1OEM0MUEyQkEwQkU1NDZDQkVGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgjFlEv0TYRkTMboYGoK69pEj
0PTX2xl9abfXsS58ADRw7AtV/nUxNloau1YaGeYsC2Yc95JUds2vsAcImqa0XZ11
Z3cqqls80TtDfmyKvfr4C8kDC+oHILGZVyEitv+H+zpKTzcDDeXbiT6O21PhOaND
Xht1WGzDWN2il1ciD2M8DaH8jlaGlxuVWVmH5vgHNoRWJR7862LRYF6D+ObU3i7A
KGQX7aOz8kLd9wB5peg3nuuMK+G2VMkSZIbV8ROUNKNvm0VMc5hNGGuVyla8zzPd
szKwDfu1vGMiUt3QRB2+vCkKprxHWxODPgpmbOZBbCwdchvi/IXwjgUfJCrTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUoWZbWglGQdJyZYxBoroL5UbL77MwHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKAQMcAAFMA0GCSqGSIb3DQEBCwUAA4IBAQA4DIDh
Z42nhenv+ZNqmkv8DvIoK0w+eJKvsapapmVMwSDvnc9MItUQ9jx5Z5L5NHna4s7M
/XnzAFy8VMwgNdGsNuGJkHPrG0okX6jOQkFzcmefqYGJWofRLHBnPhXJtUy8IKjv
4G4jy+I/2bdEh0rJMppZKtFLOMVBpDJZEG1Njb0LHZQatjH30UEW2Y7czSu1BK5T
3QJmoQapn0SfP/iLDYIJbXw304PY0pQz394tmj4T3eIh3OksUCyOgqRpC92yUWFt
N04sYIiW0FGSZXOdbbC6lOWdcWMnBtngu/PrEV4szX+6HDkQ7d0hGzA2dKeLI581
CilXpNvn9udLvUZX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org