Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a3a2f33332d3333203d3e20323637333031.roa
File:                     323830343a346235633a3a2f33332d3333203d3e20323637333031.roa (raw, json)
Hash identifier:          5BG844sIdtJe7rSgpwho5XV55XLDqCml9c17vMbRqj4=
Subject key identifier:   90:38:CB:C7:CE:98:2E:CB:58:78:8D:83:C2:F7:A8:A4:A1:ED:9C:B3
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       5128FA1D3FD0BD8747767197F87130BB5C1CE7D9
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a3a2f33332d3333203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:01:56 +0000
ROA not before:           Mon 15 May 2023 20:56:56 +0000
ROA not after:            Mon 13 May 2024 21:01:56 +0000
asID:                     267301
IP address blocks:        2804:4b5c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:28:fa:1d:3f:d0:bd:87:47:76:71:97:f8:71:30:bb:5c:1c:e7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:56:56 2023 GMT
            Not After : May 13 21:01:56 2024 GMT
        Subject: CN=9038CBC7CE982ECB58788D83C2F7A8A4A1ED9CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:03:74:95:b4:ee:65:d4:60:39:47:8e:f1:24:
                    1a:8a:ea:1f:5d:4b:4d:2c:b4:53:57:69:7d:4c:2f:
                    c8:0b:4f:b6:90:13:6d:3c:11:fa:9a:27:fa:62:27:
                    5b:2c:96:c6:d1:29:ee:68:15:d3:f0:47:7d:b1:0c:
                    ca:f0:b2:e2:b6:e0:ce:8a:5b:2b:d8:d5:f5:72:bb:
                    13:fa:67:05:a8:68:45:0c:bd:f8:a9:98:a6:02:f0:
                    9c:04:ab:d9:f4:2b:98:7c:42:06:ef:bb:30:7e:92:
                    74:b0:40:ec:f2:59:ec:00:9c:f8:13:e1:96:f7:cf:
                    4a:38:c8:9d:8b:4e:23:eb:2a:db:23:2c:84:d5:87:
                    7e:b1:a8:1b:15:3e:c1:a7:c6:c9:af:7a:81:96:ac:
                    3e:d4:fb:cf:6c:61:fa:57:fc:7f:85:44:82:49:a0:
                    8b:6d:8d:da:7e:98:81:8d:29:34:72:ea:dc:89:a1:
                    a9:40:4c:c5:1f:0c:b8:34:cc:96:e2:07:2c:30:84:
                    80:16:fc:6e:bc:6c:bd:3d:cd:0c:b2:c1:60:fc:29:
                    37:68:c7:29:9f:f6:42:c7:e9:0f:e6:00:31:0a:93:
                    6d:06:7a:fb:ee:24:fd:7f:39:6a:65:4c:08:8d:73:
                    07:4b:fa:02:fd:49:43:0e:a0:d3:2a:56:4d:aa:7a:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:38:CB:C7:CE:98:2E:CB:58:78:8D:83:C2:F7:A8:A4:A1:ED:9C:B3
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a3a2f33332d3333203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b5c::/33

    Signature Algorithm: sha256WithRSAEncryption
         17:15:67:12:4a:de:38:23:33:d3:21:67:fb:ab:c2:9a:09:b6:
         5b:e2:69:eb:f1:70:10:45:ee:52:10:44:0f:d3:6d:54:f8:a9:
         0b:98:53:83:bd:c0:e4:9b:50:b5:f0:dc:fd:71:ef:04:a4:65:
         35:1c:7f:84:cc:41:23:e6:84:17:23:cd:c5:2a:7e:2d:56:8b:
         ad:53:63:53:41:2e:23:25:6a:aa:40:a5:f2:19:ec:2a:80:f7:
         c7:be:c8:49:19:5d:76:a6:68:35:9e:7a:d1:0b:38:95:3b:41:
         70:34:1b:6a:24:ff:d1:f1:4e:e4:ad:11:c2:d7:48:cf:06:77:
         21:10:04:d5:f6:39:d1:55:08:6b:c3:f4:d9:db:87:82:ff:5e:
         36:2d:74:c6:be:71:72:5f:70:44:d0:01:26:11:c2:d9:97:0a:
         fb:fe:8b:6a:17:71:70:2c:ef:6b:9a:f0:b9:dd:03:b3:ca:92:
         c7:cf:25:1f:96:1e:f7:2f:05:a1:ef:19:6b:af:2f:a3:3a:2e:
         52:80:78:b1:37:76:3d:28:c4:9d:e6:2b:ef:f0:a6:8d:63:32:
         c2:7e:d1:48:71:db:e7:8d:c9:5f:fd:15:19:3f:d5:f7:e3:ba:
         f9:00:2c:44:92:0c:0f:c2:e5:c0:48:95:5e:43:a2:7c:08:ce:
         4f:fe:65:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUSj6HT/QvYdHdnGX+HEwu1wc59kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0MTAxQTMzRDk2MEUyRTQ2OEVGRThEMkUyRTcwMUU4
QTA3MzI2MTAeFw0yMzA1MTUyMDU2NTZaFw0yNDA1MTMyMTAxNTZaMDMxMTAvBgNV
BAMTKDkwMzhDQkM3Q0U5ODJFQ0I1ODc4OEQ4M0MyRjdBOEE0QTFFRDlDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8A3SVtO5l1GA5R47xJBqK6h9d
S00stFNXaX1ML8gLT7aQE208EfqaJ/piJ1sslsbRKe5oFdPwR32xDMrwsuK24M6K
WyvY1fVyuxP6ZwWoaEUMvfipmKYC8JwEq9n0K5h8QgbvuzB+knSwQOzyWewAnPgT
4Zb3z0o4yJ2LTiPrKtsjLITVh36xqBsVPsGnxsmveoGWrD7U+89sYfpX/H+FRIJJ
oIttjdp+mIGNKTRy6tyJoalATMUfDLg0zJbiBywwhIAW/G68bL09zQyywWD8KTdo
xymf9kLH6Q/mADEKk20GevvuJP1/OWplTAiNcwdL+gL9SUMOoNMqVk2qeqIxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkDjLx86YLstYeI2DwveopKHtnLMwHwYDVR0j
BBgwFoAUGUEBoz2WDi5Gjv6NLi5wHooHMmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRhZnFGWDl6RDljRHV5dHRETFNydjUyTXZTeXBEUU44eEpMVHdoSlRV
cm8vMC8xOTQxMDFBMzNEOTYwRTJFNDY4RUZFOEQyRTJFNzAxRThBMDczMjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5NDEwMUEzM0Q5NjBFMkU0
NjhFRkU4RDJFMkU3MDFFOEEwNzMyNjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkYWZxRlg5ekQ5Y0R1eXR0RExTcnY1Mk12U3lwRFFOOHhKTFR3aEpUVXJvLzAv
MzIzODMwMzQzYTM0NjIzNTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARLXAAwDQYJKoZIhvcNAQELBQADggEBABcVZxJK
3jgjM9MhZ/urwpoJtlviaevxcBBF7lIQRA/TbVT4qQuYU4O9wOSbULXw3P1x7wSk
ZTUcf4TMQSPmhBcjzcUqfi1Wi61TY1NBLiMlaqpApfIZ7CqA98e+yEkZXXamaDWe
etELOJU7QXA0G2ok/9HxTuStEcLXSM8GdyEQBNX2OdFVCGvD9Nnbh4L/XjYtdMa+
cXJfcETQASYRwtmXCvv+i2oXcXAs72ua8LndA7PKksfPJR+WHvcvBaHvGWuvL6M6
LlKAeLE3dj0oxJ3mK+/wpo1jMsJ+0Uhx2+eNyV/9FRk/1ffjuvkALESSDA/C5cBI
lV5DonwIzk/+ZeU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org