Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316330313a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a316330313a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          8aENjwuNM8KwA6iLyiBh6qq0l8kJ+07iE8+AKBuVREs=
Subject key identifier:   0D:7D:26:12:32:89:11:4A:83:82:78:34:3C:36:D9:41:B0:83:B1:4F
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       0B2AA724ABE41CACDBEC7181E52B9FFF4BB1BF5E
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316330313a3a2f34382d3438203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1c01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2a:a7:24:ab:e4:1c:ac:db:ec:71:81:e5:2b:9f:ff:4b:b1:bf:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=0D7D26123289114A838278343C36D941B083B14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:b3:9e:ec:4e:65:63:53:c6:05:31:c5:a9:
                    fc:46:b1:ad:8c:ea:73:f7:6d:58:94:b5:63:6f:25:
                    b0:02:c5:39:6f:c2:e2:90:98:b2:a1:1f:66:f5:43:
                    40:3d:75:ac:78:d3:f6:43:99:f2:42:c4:46:cc:ec:
                    c5:a7:f9:4c:4e:4f:9e:e3:af:ed:ab:fb:4d:6d:01:
                    17:86:d4:9a:d1:7e:cf:04:fd:65:e8:2f:1a:45:33:
                    4d:e2:9c:5f:66:df:3d:dc:8c:aa:16:fd:ff:b8:82:
                    a4:c6:ad:87:b7:3c:bf:b3:b6:0a:d6:35:d0:6c:a6:
                    ea:db:77:a9:8f:78:db:66:c5:42:57:ab:cc:da:0f:
                    05:59:27:a8:3e:87:22:f5:05:85:66:72:1d:b0:e1:
                    73:5c:5e:54:6a:c8:2f:57:45:e7:6a:0f:74:26:43:
                    68:cb:89:83:fa:00:1e:ed:a7:94:24:b5:a2:5f:5c:
                    f0:b1:51:a8:51:ed:a3:8f:bb:2c:8e:ce:f9:9e:31:
                    f9:d4:9d:6f:8f:4d:8e:9f:7e:7d:79:b4:45:86:b4:
                    4e:4d:28:45:21:6d:18:53:b5:7a:d0:0b:7c:eb:bd:
                    05:31:81:a1:ee:64:fb:59:66:ba:2f:0d:6e:f1:ee:
                    3a:d8:6a:9b:5b:3f:74:d9:fb:71:2b:0c:96:06:5e:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7D:26:12:32:89:11:4A:83:82:78:34:3C:36:D9:41:B0:83:B1:4F
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316330313a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:a8:72:ea:8b:fe:ed:38:47:97:b4:59:ec:6c:5a:de:87:b5:
         11:b2:9a:10:f1:68:ed:1a:24:ca:20:c5:21:9a:ca:54:df:00:
         b0:14:3d:2f:c4:2a:36:fa:5a:17:17:2d:90:21:fe:48:bc:3a:
         be:1d:2a:b8:bd:72:a5:47:76:6d:6a:bf:26:fe:05:07:d4:14:
         f4:2d:15:43:76:90:57:ba:1c:12:69:50:15:f7:9d:bc:62:d8:
         cf:a0:7d:fb:51:50:f9:17:3f:37:02:c8:67:3e:aa:8d:6f:ce:
         b6:30:81:69:33:b1:ef:fb:5e:88:5a:a0:85:cf:f9:b5:3a:25:
         50:e8:29:cd:65:8a:ad:f8:87:d4:2d:6d:5b:8c:0b:f3:3d:b3:
         33:5f:d8:f9:a9:03:21:cc:f5:cd:fa:2b:6f:2e:a5:5c:c1:a6:
         a8:6c:27:ff:92:c2:6f:6c:7f:e5:25:c9:8d:11:3a:35:f7:0e:
         db:b4:e5:cf:c0:6c:c4:1c:cf:35:83:fd:91:9d:55:29:8a:a6:
         13:69:5b:4a:fa:4d:62:41:18:66:3c:d3:d0:7e:fc:38:4b:05:
         77:8d:4e:7d:91:db:a5:e4:65:32:74:3a:b4:d8:9f:07:79:18:
         94:e5:aa:8a:e5:e9:58:ce:e6:14:90:43:92:8a:18:f4:2f:24:
         8b:ff:50:0c
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUCyqnJKvkHKzb7HGB5Suf/0uxv14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgwNTIyQjQ3MkY3MTIwNUJCQTRCMzI5NzUyNjg1ODE4
MTg2OTI4MTAeFw0yNDA0MDMyMTQxMTZaFw0yNTA0MDIyMTQ2MTZaMDMxMTAvBgNV
BAMTKDBEN0QyNjEyMzI4OTExNEE4MzgyNzgzNDNDMzZEOTQxQjA4M0IxNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBe7Oe7E5lY1PGBTHFqfxGsa2M
6nP3bViUtWNvJbACxTlvwuKQmLKhH2b1Q0A9dax40/ZDmfJCxEbM7MWn+UxOT57j
r+2r+01tAReG1JrRfs8E/WXoLxpFM03inF9m3z3cjKoW/f+4gqTGrYe3PL+ztgrW
NdBspurbd6mPeNtmxUJXq8zaDwVZJ6g+hyL1BYVmch2w4XNcXlRqyC9XRedqD3Qm
Q2jLiYP6AB7tp5QktaJfXPCxUahR7aOPuyyOzvmeMfnUnW+PTY6ffn15tEWGtE5N
KEUhbRhTtXrQC3zrvQUxgaHuZPtZZrovDW7x7jrYaptbP3TZ+3ErDJYGXh8zAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUDX0mEjKJEUqDgng0PDbZQbCDsU8wHwYDVR0j
BBgwFoAUeAUitHL3EgW7pLMpdSaFgYGGkoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMS83ODA1MjJCNDcyRjcxMjA1QkJBNEIzMjk3NTI2ODU4MTgxODY5MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MDUyMkI0NzJGNzEyMDVC
QkE0QjMyOTc1MjY4NTgxODE4NjkyODEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzEv
MzIzODMwMzQzYTMxNjM2NDM0M2EzMTYzMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBBzUHAEwDQYJKoZIhvcNAQELBQAD
ggEBALCocuqL/u04R5e0WexsWt6HtRGymhDxaO0aJMogxSGaylTfALAUPS/EKjb6
WhcXLZAh/ki8Or4dKri9cqVHdm1qvyb+BQfUFPQtFUN2kFe6HBJpUBX3nbxi2M+g
fftRUPkXPzcCyGc+qo1vzrYwgWkzse/7XohaoIXP+bU6JVDoKc1liq34h9QtbVuM
C/M9szNf2PmpAyHM9c36K28upVzBpqhsJ/+Swm9sf+UlyY0ROjX3Dtu05c/AbMQc
zzWD/ZGdVSmKphNpW0r6TWJBGGY809B+/DhLBXeNTn2R26XkZTJ0OrTYnwd5GJTl
qorl6VjO5hSQQ5KKGPQvJIv/UAw=
-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org