Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3332203d3e203532373036.roa
File:                     323830343a6337303a3a2f33322d3332203d3e203532373036.roa (raw, json)
Hash identifier:          1Lg6ZyLxAXw0JbH8zoZf34hqOdvoa+lnbk65RxrylXw=
Subject key identifier:   9F:FD:A9:34:CE:51:80:E6:1A:21:FC:6D:42:70:22:39:92:F3:6D:CC
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       31A4FD0A076D646E128BD09991CDB9DCC6854FF1
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3332203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:19:15 +0000
ROA not before:           Thu 20 Jul 2023 14:14:15 +0000
ROA not after:            Thu 18 Jul 2024 14:19:15 +0000
asID:                     52706
IP address blocks:        2804:c70::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a4:fd:0a:07:6d:64:6e:12:8b:d0:99:91:cd:b9:dc:c6:85:4f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:14:15 2023 GMT
            Not After : Jul 18 14:19:15 2024 GMT
        Subject: CN=9FFDA934CE5180E61A21FC6D4270223992F36DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:7c:c7:08:1e:a1:81:fd:a4:a6:d7:b6:d0:
                    59:8c:92:a5:3e:19:eb:80:cd:e1:83:d3:e7:db:45:
                    84:c6:92:0c:e7:72:ea:7a:81:9a:9b:13:af:30:10:
                    fa:39:23:38:c4:32:20:9d:9d:05:43:60:de:00:99:
                    cd:3b:b2:c8:66:71:17:e5:4b:94:64:cb:8a:73:9d:
                    1e:11:49:9b:a4:2a:77:80:a0:9a:a8:5b:03:8b:47:
                    92:76:52:d9:c0:27:1b:5e:84:84:e6:4c:8d:7b:34:
                    7f:83:63:bd:f1:da:bc:33:f0:fd:ed:51:b2:96:0c:
                    28:43:c2:e2:21:86:90:51:03:be:66:9b:fc:31:5d:
                    33:cc:28:10:d8:8e:82:b8:b0:f8:9c:3d:5e:4a:16:
                    33:bc:ee:76:35:d7:de:15:90:46:aa:b4:29:ee:77:
                    4b:a7:fe:42:7a:fa:a0:3f:41:c3:c3:bc:0c:fc:b7:
                    2c:c7:e4:72:cd:bd:85:0e:38:79:8c:4e:9f:87:bf:
                    7b:b0:e9:37:e0:16:fb:9a:25:77:9c:ef:f4:6b:6e:
                    d7:68:c3:21:ee:78:11:10:f3:83:4b:29:65:ec:df:
                    df:7b:96:58:f7:e4:b5:db:df:a2:3b:98:f3:9d:b9:
                    66:48:3e:36:ca:45:12:03:ef:1f:57:94:9c:0a:55:
                    34:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:A9:34:CE:51:80:E6:1A:21:FC:6D:42:70:22:39:92:F3:6D:CC
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3332203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:b5:56:82:bc:31:7e:ec:e6:1c:dd:c6:07:66:1c:71:9b:52:
         d8:05:e9:42:36:20:23:06:4a:19:3d:fb:d9:3b:ba:cf:38:ec:
         c1:1a:94:d5:2c:a6:8b:c9:38:15:72:6c:a8:69:08:24:1e:0c:
         11:0e:46:c5:57:43:ec:c8:d4:0a:80:a2:d8:a1:b1:c2:b9:fd:
         29:e2:1d:f6:58:30:e7:d7:2d:5d:82:17:8a:2b:16:1f:9c:fd:
         f1:fb:92:b5:23:b0:21:b3:1b:9a:ad:81:27:78:f7:b5:38:4c:
         c4:b0:a2:f6:96:e1:7f:ee:f0:f9:5c:8d:83:34:c4:17:7a:ea:
         92:70:80:85:bc:85:32:8b:d2:0a:b2:82:7f:6b:50:da:09:05:
         3a:5d:36:29:2b:95:9d:1a:91:25:76:08:78:3e:b1:6c:47:e3:
         b0:f0:d8:97:33:83:fb:84:b9:21:ea:77:63:86:48:7f:69:21:
         75:5c:1d:d1:fc:d1:d5:c3:49:34:78:54:38:d7:da:3e:69:3d:
         6f:e4:fa:db:cb:76:1b:75:37:7b:02:19:b4:54:4f:48:22:f2:
         74:c9:47:52:ea:c9:f4:dc:9c:8e:20:39:47:1b:7e:93:87:d8:
         ac:64:e0:91:65:7c:db:15:70:42:0e:25:db:ee:7f:e3:4a:37:
         49:94:97:f5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUMaT9CgdtZG4Si9CZkc253MaFT/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxNDE0MTVaFw0yNDA3MTgxNDE5MTVaMDMxMTAvBgNV
BAMTKDlGRkRBOTM0Q0U1MTgwRTYxQTIxRkM2RDQyNzAyMjM5OTJGMzZEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVT3zHCB6hgf2kpte20FmMkqU+
GeuAzeGD0+fbRYTGkgzncup6gZqbE68wEPo5IzjEMiCdnQVDYN4Amc07sshmcRfl
S5Rky4pznR4RSZukKneAoJqoWwOLR5J2UtnAJxtehITmTI17NH+DY73x2rwz8P3t
UbKWDChDwuIhhpBRA75mm/wxXTPMKBDYjoK4sPicPV5KFjO87nY1194VkEaqtCnu
d0un/kJ6+qA/QcPDvAz8tyzH5HLNvYUOOHmMTp+Hv3uw6TfgFvuaJXec7/Rrbtdo
wyHueBEQ84NLKWXs3997llj35LXb36I7mPOduWZIPjbKRRID7x9XlJwKVTSlAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUn/2pNM5RgOYaIfxtQnAiOZLzbcwwHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNzMw
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAxwMA0GCSqGSIb3DQEBCwUAA4IBAQCztVaCvDF+7OYc
3cYHZhxxm1LYBelCNiAjBkoZPfvZO7rPOOzBGpTVLKaLyTgVcmyoaQgkHgwRDkbF
V0PsyNQKgKLYobHCuf0p4h32WDDn1y1dgheKKxYfnP3x+5K1I7AhsxuarYEnePe1
OEzEsKL2luF/7vD5XI2DNMQXeuqScICFvIUyi9IKsoJ/a1DaCQU6XTYpK5WdGpEl
dgh4PrFsR+Ow8NiXM4P7hLkh6ndjhkh/aSF1XB3R/NHVw0k0eFQ419o+aT1v5Prb
y3YbdTd7Ahm0VE9IIvJ0yUdS6sn03JyOIDlHG36Th9isZOCRZXzbFXBCDiXb7n/j
SjdJlJf1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org