Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a383030303a3a2f33332d3333203d3e20323634353632.roa
File:                     323830343a323139303a383030303a3a2f33332d3333203d3e20323634353632.roa (raw, json)
Hash identifier:          LNcU9nAiYusPKe3BLLVIVlc3Lv33xlHb1h4as4qYc5E=
Subject key identifier:   DD:20:4D:22:4A:2A:B5:86:9F:8D:5E:2C:0F:8E:51:4E:3A:AD:73:B7
Certificate issuer:       /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial:       143FA20E00B89D3469A539D2CFE2A4D0B5F17C69
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a383030303a3a2f33332d3333203d3e20323634353632.roa
Signing time:             Fri 26 Apr 2024 19:28:45 +0000
ROA not before:           Fri 26 Apr 2024 19:23:45 +0000
ROA not after:            Fri 25 Apr 2025 19:28:45 +0000
asID:                     264562
IP address blocks:        2804:2190:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3f:a2:0e:00:b8:9d:34:69:a5:39:d2:cf:e2:a4:d0:b5:f1:7c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
        Validity
            Not Before: Apr 26 19:23:45 2024 GMT
            Not After : Apr 25 19:28:45 2025 GMT
        Subject: CN=DD204D224A2AB5869F8D5E2C0F8E514E3AAD73B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:aa:d1:9e:2d:13:17:91:b9:fb:37:83:ff:
                    96:27:f5:aa:a5:f8:09:65:d9:2b:c9:48:31:ac:bd:
                    ec:d8:a7:23:5d:88:ec:48:dc:f9:38:53:6b:41:08:
                    b2:8c:b0:52:a0:32:4c:d4:7a:98:3c:8a:ac:96:78:
                    d5:6c:b1:b3:0a:34:ca:56:2e:c8:b0:0b:14:2f:fc:
                    d5:b0:67:56:e3:5a:17:c2:9c:67:a4:70:c8:3e:8a:
                    ef:b2:0b:71:95:a4:e6:8a:d2:b3:7b:b1:e8:17:b0:
                    87:bc:49:7c:9e:0d:eb:50:83:f7:cb:37:47:64:68:
                    cf:14:2f:f0:c5:14:21:79:fb:d1:ea:07:8d:62:8c:
                    88:bf:7e:ab:5a:d8:8e:cc:1e:ca:03:ae:20:4a:77:
                    ce:60:02:9b:0c:64:76:89:a6:3a:a5:e4:36:fc:90:
                    de:ae:e5:54:62:27:5d:f7:53:a0:9d:1a:b1:1a:1b:
                    ab:7a:28:06:e9:dc:81:f0:c2:85:cc:9e:8b:69:0d:
                    c1:dc:0d:fd:96:0b:2a:eb:bb:08:4f:8b:13:80:94:
                    8d:b3:a2:33:8d:79:53:77:bf:07:9b:78:d8:44:9d:
                    5b:db:f3:3e:8b:90:5e:fd:6b:30:05:f4:23:e7:e5:
                    81:e7:eb:6e:20:04:6f:73:0b:51:d7:c9:8e:24:94:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:4D:22:4A:2A:B5:86:9F:8D:5E:2C:0F:8E:51:4E:3A:AD:73:B7
            X509v3 Authority Key Identifier:
                keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a383030303a3a2f33332d3333203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:19:e3:67:16:d3:13:d1:c9:cf:6f:69:6c:af:11:69:66:68:
         ad:34:b1:11:7f:36:7f:1f:04:0a:e5:74:66:ca:5e:c4:a6:94:
         85:4b:b4:f1:0d:e0:2a:ae:77:7a:2b:19:83:45:ad:d7:80:0d:
         15:d7:84:1d:7c:c2:16:f0:c4:ea:cf:f9:bd:df:e8:c6:cb:4d:
         a2:00:ee:f2:14:24:ff:68:ae:e3:79:41:1f:79:dc:54:cc:82:
         2d:a1:e9:fa:03:97:59:c5:9b:3e:f9:6c:53:31:44:a9:48:55:
         34:66:d9:01:59:e0:09:86:4c:e0:eb:55:00:17:50:01:c6:ec:
         02:48:e1:c7:d7:6b:a0:71:d4:12:03:72:63:37:3a:11:fa:89:
         19:81:ef:bd:c5:67:7a:25:1d:17:48:8e:8f:2e:a2:ac:06:be:
         d4:f7:54:5c:7a:15:33:f2:39:86:67:71:d5:77:b5:75:59:fc:
         08:a1:cc:99:06:7f:6a:70:4f:a3:ed:b6:14:6f:d4:6f:95:e5:
         30:f2:c2:b4:e5:7a:d3:0b:8e:cc:d1:68:b9:7c:79:b9:d8:3f:
         7f:6f:f9:29:c9:0c:ae:46:72:18:91:55:39:c6:1b:70:07:85:
         e9:4c:88:83:6f:72:e2:97:52:23:73:40:1f:8a:80:0c:32:cd:
         77:65:c6:a8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFD+iDgC4nTRppTnSz+Kk0LXxfGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGRUI4MzMzRTRBQTExMzQ0RTc3OUJCNzQ5RTg1NzBC
MjdGQkNDRDAeFw0yNDA0MjYxOTIzNDVaFw0yNTA0MjUxOTI4NDVaMDMxMTAvBgNV
BAMTKEREMjA0RDIyNEEyQUI1ODY5RjhENUUyQzBGOEU1MTRFM0FBRDczQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8qrRni0TF5G5+zeD/5Yn9aql
+All2SvJSDGsvezYpyNdiOxI3Pk4U2tBCLKMsFKgMkzUepg8iqyWeNVssbMKNMpW
LsiwCxQv/NWwZ1bjWhfCnGekcMg+iu+yC3GVpOaK0rN7segXsIe8SXyeDetQg/fL
N0dkaM8UL/DFFCF5+9HqB41ijIi/fqta2I7MHsoDriBKd85gApsMZHaJpjql5Db8
kN6u5VRiJ133U6CdGrEaG6t6KAbp3IHwwoXMnotpDcHcDf2WCyrruwhPixOAlI2z
ojONeVN3vwebeNhEnVvb8z6LkF79azAF9CPn5YHn624gBG9zC1HXyY4klL8ZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3SBNIkoqtYafjV4sD45RTjqtc7cwHwYDVR0j
BBgwFoAU1/64Mz5KoRNE53m7dJ6FcLJ/vM0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMS9EN0ZFQjgzMzNFNEFBMTEzNDRFNzc5QkI3NDlFODU3MEIyN0ZCQ0NELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RkVCODMzM0U0QUExMTM0
NEU3NzlCQjc0OUU4NTcwQjI3RkJDQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzEv
MzIzODMwMzQzYTMyMzEzOTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDM1MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEIZCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAYGeNnFtMT0cnPb2lsrxFpZmitNLERfzZ/HwQK5XRmyl7EppSFS7TxDeAq
rnd6KxmDRa3XgA0V14QdfMIW8MTqz/m93+jGy02iAO7yFCT/aK7jeUEfedxUzIIt
oen6A5dZxZs++WxTMUSpSFU0ZtkBWeAJhkzg61UAF1ABxuwCSOHH12ugcdQSA3Jj
NzoR+okZge+9xWd6JR0XSI6PLqKsBr7U91RcehUz8jmGZ3HVd7V1WfwIocyZBn9q
cE+j7bYUb9RvleUw8sK05XrTC47M0Wi5fHm52D9/b/kpyQyuRnIYkVU5xhtwB4Xp
TIiDb3Lil1Ijc0AfioAMMs13Zcao
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org