Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa
File:                     323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (raw, json)
Hash identifier:          YAtqrVV+xg88hkgL0aYqNplCb5PxWZqzL/yIr1XmROg=
Subject key identifier:   A7:C5:C9:DF:9E:63:CC:0D:8E:6A:D7:A6:6D:CE:0F:AA:E9:D4:C1:3C
Certificate issuer:       /CN=D7C29F49CD5CA0C5E396E35EC2F1D3365A704923
Certificate serial:       5B4C41BFC740669C230A29C18A360F65904699DE
Authority key identifier: D7:C2:9F:49:CD:5C:A0:C5:E3:96:E3:5E:C2:F1:D3:36:5A:70:49:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa
Signing time:             Tue 27 Feb 2024 14:07:31 +0000
ROA not before:           Tue 27 Feb 2024 14:02:31 +0000
ROA not after:            Tue 25 Feb 2025 14:07:31 +0000
asID:                     273457
IP address blocks:        2804:8ef0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4c:41:bf:c7:40:66:9c:23:0a:29:c1:8a:36:0f:65:90:46:99:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C29F49CD5CA0C5E396E35EC2F1D3365A704923
        Validity
            Not Before: Feb 27 14:02:31 2024 GMT
            Not After : Feb 25 14:07:31 2025 GMT
        Subject: CN=A7C5C9DF9E63CC0D8E6AD7A66DCE0FAAE9D4C13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:b8:af:75:c3:ef:e1:e6:64:66:24:5c:52:
                    8a:9e:b3:62:d2:37:53:2b:cf:1f:85:e7:52:d4:eb:
                    c2:be:ac:2d:f0:47:32:eb:03:35:49:42:e5:7c:43:
                    e0:c9:09:bf:8e:b0:31:e7:2f:1f:5c:5f:0a:d8:30:
                    23:91:c2:f5:9b:be:29:c5:39:91:e4:63:da:bd:c4:
                    be:e6:c3:47:68:53:03:fd:ab:ec:87:9f:76:35:f6:
                    75:92:28:36:07:a4:9d:0a:12:7a:5d:ea:51:a4:38:
                    a9:29:c0:a8:3c:bd:54:51:bb:3a:5c:9d:10:d3:8f:
                    ec:ff:ef:a5:27:9d:72:10:70:e8:96:a6:7a:fb:91:
                    41:b7:e6:be:a8:eb:08:92:ec:3f:d1:c3:4e:d7:98:
                    db:31:a0:90:58:08:9e:f8:29:e5:bc:3d:f7:cd:06:
                    f5:fe:95:7e:da:17:2e:ee:38:a0:b6:25:38:ca:84:
                    3a:12:0e:8a:43:c8:ea:e5:50:e9:92:d7:9b:47:fa:
                    ee:be:61:01:1a:22:b0:84:b0:f3:3b:7e:8d:ed:ec:
                    ae:86:a4:f9:5d:db:f3:b6:24:1b:ff:ea:29:25:e6:
                    39:66:42:cf:e1:e1:2f:0c:46:1b:f5:13:2b:14:77:
                    8d:74:5b:a7:92:43:3a:ae:c0:2d:8d:21:f2:91:26:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C5:C9:DF:9E:63:CC:0D:8E:6A:D7:A6:6D:CE:0F:AA:E9:D4:C1:3C
            X509v3 Authority Key Identifier:
                keyid:D7:C2:9F:49:CD:5C:A0:C5:E3:96:E3:5E:C2:F1:D3:36:5A:70:49:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:8d:40:4c:96:73:fe:28:93:29:0d:df:a8:be:bc:af:58:
         4b:bb:53:5c:dc:a6:87:3d:a6:32:dd:ac:c1:53:d3:99:1a:7d:
         84:ac:53:04:c9:af:19:1d:2f:5e:76:d5:f5:d4:3d:fb:09:91:
         1b:1d:33:92:f3:29:58:a1:62:d5:69:d4:95:a6:fa:59:ea:ed:
         90:6c:e8:ef:95:19:12:96:bf:e6:4e:37:fc:df:94:02:a8:ad:
         ec:76:bd:22:4e:67:d2:c1:bc:a3:39:ac:ca:7b:9a:50:a1:69:
         ec:9b:fd:6f:bc:f1:1e:1f:ba:2d:93:96:64:53:20:07:10:d6:
         e3:2a:17:b1:db:b7:20:88:31:43:97:60:c7:4c:5e:1e:c1:32:
         52:e8:4f:a0:16:88:53:e9:5b:37:02:b1:49:28:59:27:d8:c1:
         07:dc:5c:33:8c:0f:da:36:cd:6a:56:36:e5:a2:09:59:2c:8e:
         63:4a:48:fd:21:0c:9e:6b:b5:c5:08:a4:59:09:2f:07:8d:87:
         90:78:d6:56:1f:d1:5e:2b:2f:9b:6b:e3:9d:a4:9f:fb:a2:59:
         a0:4d:79:fe:67:00:d5:a3:87:89:4e:3e:0c:f1:d4:fd:f8:0a:
         90:bf:6f:ef:0e:41:66:ef:8f:57:12:e1:d4:5c:cc:cf:5e:a2:
         2b:18:ea:c4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW0xBv8dAZpwjCinBijYPZZBGmd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDMjlGNDlDRDVDQTBDNUUzOTZFMzVFQzJGMUQzMzY1
QTcwNDkyMzAeFw0yNDAyMjcxNDAyMzFaFw0yNTAyMjUxNDA3MzFaMDMxMTAvBgNV
BAMTKEE3QzVDOURGOUU2M0NDMEQ4RTZBRDdBNjZEQ0UwRkFBRTlENEMxM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCi7ivdcPv4eZkZiRcUoqes2LS
N1Mrzx+F51LU68K+rC3wRzLrAzVJQuV8Q+DJCb+OsDHnLx9cXwrYMCORwvWbvinF
OZHkY9q9xL7mw0doUwP9q+yHn3Y19nWSKDYHpJ0KEnpd6lGkOKkpwKg8vVRRuzpc
nRDTj+z/76UnnXIQcOiWpnr7kUG35r6o6wiS7D/Rw07XmNsxoJBYCJ74KeW8PffN
BvX+lX7aFy7uOKC2JTjKhDoSDopDyOrlUOmS15tH+u6+YQEaIrCEsPM7fo3t7K6G
pPld2/O2JBv/6ikl5jlmQs/h4S8MRhv1EysUd410W6eSQzquwC2NIfKRJrGVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUp8XJ355jzA2Oatembc4PqunUwTwwHwYDVR0j
BBgwFoAU18KfSc1coMXjluNewvHTNlpwSSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUy
VW0vMC9EN0MyOUY0OUNENUNBMEM1RTM5NkUzNUVDMkYxRDMzNjVBNzA0OTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3QzI5RjQ5Q0Q1Q0EwQzVF
Mzk2RTM1RUMyRjFEMzM2NUE3MDQ5MjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVkUGZ1UkVQVEJ0dE1xUW9wVHl0cG5pS2hFM0xIZEZzemF2RFpNQmM1MlVtLzAv
MzIzODMwMzQzYTM4NjU2NjMwM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNzMz
MzQzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASO8DANBgkqhkiG9w0BAQsFAAOCAQEAmpyNQEyW
c/4okykN36i+vK9YS7tTXNymhz2mMt2swVPTmRp9hKxTBMmvGR0vXnbV9dQ9+wmR
Gx0zkvMpWKFi1WnUlab6WertkGzo75UZEpa/5k43/N+UAqit7Ha9Ik5n0sG8ozms
ynuaUKFp7Jv9b7zxHh+6LZOWZFMgBxDW4yoXsdu3IIgxQ5dgx0xeHsEyUuhPoBaI
U+lbNwKxSShZJ9jBB9xcM4wP2jbNalY25aIJWSyOY0pI/SEMnmu1xQikWQkvB42H
kHjWVh/RXisvm2vjnaSf+6JZoE15/mcA1aOHiU4+DPHU/fgKkL9v7w5BZu+PVxLh
1FzMz16iKxjqxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org