Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383930303a3a2f34302d3430203d3e203631363738.roa
File:                     323830343a316364343a383930303a3a2f34302d3430203d3e203631363738.roa (raw, json)
Hash identifier:          gHkdVFXeYnqSgUsjNLmTEig70qEbN9+ELlfLR1Se4z0=
Subject key identifier:   AD:9B:56:CE:39:17:39:70:17:F7:90:F7:EE:56:58:0A:3F:4B:92:23
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       1F48C0F9949116C0808A019DB4A6FCA4D4791620
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383930303a3a2f34302d3430203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        2804:1cd4:8900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:48:c0:f9:94:91:16:c0:80:8a:01:9d:b4:a6:fc:a4:d4:79:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=AD9B56CE3917397017F790F7EE56580A3F4B9223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:33:e9:ae:90:3b:1e:d0:01:ea:0d:a9:f5:
                    eb:e1:e5:0b:5d:b8:52:fa:29:85:8b:04:0a:4d:a3:
                    81:f9:06:80:b9:58:af:8b:04:3d:ce:ad:f3:a2:79:
                    ba:a1:5d:db:23:da:34:74:04:85:88:bc:4f:c5:05:
                    2c:1a:6b:46:a0:9c:f1:18:65:98:00:e8:74:69:90:
                    90:bb:ee:4c:b9:02:97:28:f9:41:5b:d2:77:bd:cd:
                    9c:f3:87:0d:70:70:4f:83:5f:4c:7e:81:3c:a2:11:
                    d8:89:91:ad:08:ce:56:8a:9d:70:72:d9:96:3d:09:
                    62:a4:a3:64:ff:cb:6d:1e:51:82:26:d8:0a:b9:43:
                    05:56:d1:21:81:5a:60:2d:15:9b:4d:74:3c:e4:84:
                    46:89:e2:07:62:ef:80:51:77:a5:1e:dc:55:0f:b1:
                    6b:b9:ed:54:07:b7:e3:f0:95:a3:65:20:17:33:58:
                    a3:3f:f2:ab:11:26:39:b6:68:56:e0:34:a4:11:e2:
                    cf:cc:7e:7c:a0:ea:77:6b:3c:e9:4c:75:c4:92:b8:
                    d5:a5:9d:ba:64:53:07:5d:cb:22:62:7d:23:6a:98:
                    85:89:08:5c:75:89:99:0f:72:37:48:e3:5c:99:b8:
                    62:49:76:b6:4a:90:1a:a0:7d:fe:cc:35:9e:5e:81:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:56:CE:39:17:39:70:17:F7:90:F7:EE:56:58:0A:3F:4B:92:23
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383930303a3a2f34302d3430203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:e9:d3:c3:64:38:b5:ad:62:31:1a:45:c0:6f:e1:9f:20:
         91:93:8e:b2:2b:6f:67:d0:bb:87:db:00:25:9b:98:c8:a8:51:
         9f:49:fa:fc:f1:a8:e1:98:7b:f1:9d:bd:43:38:51:5d:39:4e:
         80:ff:cb:46:f7:0a:28:ab:37:63:98:8d:2b:f9:73:06:6a:b9:
         e3:f1:01:af:fc:4a:54:fb:92:11:11:88:ca:d2:3e:19:83:f4:
         05:e5:c8:26:2e:07:7a:21:19:14:c0:e8:8e:0d:ae:cc:62:8d:
         36:08:c8:d1:48:6b:fa:6b:55:3a:f9:38:83:f9:a0:67:af:9d:
         9e:f3:8d:67:91:00:98:77:6f:31:03:91:07:aa:16:43:82:d9:
         a1:aa:a6:54:ef:fc:10:90:65:c4:c3:59:9b:e4:ff:6e:7c:30:
         00:fd:92:ec:15:19:2e:cd:7f:ce:26:e4:c3:09:d2:a8:7e:f0:
         f6:8b:14:05:c6:32:53:38:15:c5:39:47:90:21:9a:cd:c6:61:
         6d:d9:a5:51:92:44:16:f7:2c:67:7f:e9:84:8f:37:a2:35:9b:
         07:43:9c:7e:16:04:e7:31:30:a6:43:d6:3a:d9:36:a8:97:82:
         86:b2:48:c5:9b:aa:db:6a:0d:3c:35:cd:89:07:c9:01:dc:99:
         17:ad:55:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH0jA+ZSRFsCAigGdtKb8pNR5FiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgwNTIyQjQ3MkY3MTIwNUJCQTRCMzI5NzUyNjg1ODE4
MTg2OTI4MTAeFw0yNDA0MDMyMTQxMTZaFw0yNTA0MDIyMTQ2MTZaMDMxMTAvBgNV
BAMTKEFEOUI1NkNFMzkxNzM5NzAxN0Y3OTBGN0VFNTY1ODBBM0Y0QjkyMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftzPprpA7HtAB6g2p9evh5Qtd
uFL6KYWLBApNo4H5BoC5WK+LBD3OrfOiebqhXdsj2jR0BIWIvE/FBSwaa0agnPEY
ZZgA6HRpkJC77ky5Apco+UFb0ne9zZzzhw1wcE+DX0x+gTyiEdiJka0IzlaKnXBy
2ZY9CWKko2T/y20eUYIm2Aq5QwVW0SGBWmAtFZtNdDzkhEaJ4gdi74BRd6Ue3FUP
sWu57VQHt+PwlaNlIBczWKM/8qsRJjm2aFbgNKQR4s/Mfnyg6ndrPOlMdcSSuNWl
nbpkUwddyyJifSNqmIWJCFx1iZkPcjdI41yZuGJJdrZKkBqgff7MNZ5egU21AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrZtWzjkXOXAX95D37lZYCj9LkiMwHwYDVR0j
BBgwFoAUeAUitHL3EgW7pLMpdSaFgYGGkoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMS83ODA1MjJCNDcyRjcxMjA1QkJBNEIzMjk3NTI2ODU4MTgxODY5MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MDUyMkI0NzJGNzEyMDVC
QkE0QjMyOTc1MjY4NTgxODE4NjkyODEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzEv
MzIzODMwMzQzYTMxNjM2NDM0M2EzODM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM2MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBzUiTANBgkqhkiG9w0BAQsFAAOC
AQEAXiXp08NkOLWtYjEaRcBv4Z8gkZOOsitvZ9C7h9sAJZuYyKhRn0n6/PGo4Zh7
8Z29QzhRXTlOgP/LRvcKKKs3Y5iNK/lzBmq54/EBr/xKVPuSERGIytI+GYP0BeXI
Ji4HeiEZFMDojg2uzGKNNgjI0Uhr+mtVOvk4g/mgZ6+dnvONZ5EAmHdvMQORB6oW
Q4LZoaqmVO/8EJBlxMNZm+T/bnwwAP2S7BUZLs1/zibkwwnSqH7w9osUBcYyUzgV
xTlHkCGazcZhbdmlUZJEFvcsZ3/phI83ojWbB0OcfhYE5zEwpkPWOtk2qJeChrJI
xZuq22oNPDXNiQfJAdyZF61VJA==
-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org