Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a383030303a3a2f33352d3335203d3e20323635343835.roa
File:                     323830343a333464633a383030303a3a2f33352d3335203d3e20323635343835.roa (raw, json)
Hash identifier:          AOoJDEu9E0+T328rfpBmSGaFcbS5mVBzPhId0XU6F2s=
Subject key identifier:   1D:A9:D7:DC:EF:9E:36:49:94:24:4B:25:C6:29:3E:0D:D7:73:02:5E
Certificate issuer:       /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial:       1CE909366FCBD7B5FE2029E68DE731A80BFFE1C4
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a383030303a3a2f33352d3335203d3e20323635343835.roa
Signing time:             Fri 23 Feb 2024 23:41:00 +0000
ROA not before:           Fri 23 Feb 2024 23:36:00 +0000
ROA not after:            Fri 21 Feb 2025 23:41:00 +0000
asID:                     265485
IP address blocks:        2804:34dc:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e9:09:36:6f:cb:d7:b5:fe:20:29:e6:8d:e7:31:a8:0b:ff:e1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
        Validity
            Not Before: Feb 23 23:36:00 2024 GMT
            Not After : Feb 21 23:41:00 2025 GMT
        Subject: CN=1DA9D7DCEF9E364994244B25C6293E0DD773025E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9e:0b:81:91:86:e0:b1:37:19:ce:e6:7e:b9:
                    d3:a0:c1:a0:b1:2b:ad:21:27:d9:79:15:ab:44:59:
                    47:ae:79:7e:20:77:2e:0d:92:43:19:97:4d:71:22:
                    a0:3d:fa:bb:1b:30:2a:4e:e6:90:bf:4b:f3:ca:13:
                    5e:31:cb:3a:23:a2:a2:89:33:b8:52:74:2c:c0:21:
                    b8:a4:58:4d:55:e2:a8:2d:68:5c:7a:b1:a9:ec:cc:
                    7d:41:03:d2:e0:9a:08:b8:b1:c0:7b:fc:a1:a6:a2:
                    90:78:cb:98:be:38:a8:11:0d:8d:7b:2f:3a:09:70:
                    77:04:a2:2c:79:fa:69:ea:42:38:2c:30:03:da:48:
                    34:f4:b1:a7:12:93:fd:2d:32:a5:72:9d:b4:c9:2c:
                    7c:e6:45:6a:f1:99:97:0f:a0:b8:45:d7:7e:ee:55:
                    d7:fb:61:d6:c3:da:65:c5:2e:2b:74:24:77:23:fa:
                    66:0c:0e:8b:22:56:06:d4:b3:42:47:29:5e:bf:d3:
                    ea:32:6d:12:ce:66:5c:1e:c6:19:3f:01:6b:4a:2c:
                    a8:d6:34:7a:9d:0b:0a:72:5f:e1:a6:17:19:18:60:
                    a0:27:bb:eb:c0:e7:98:8b:16:6d:a2:18:45:55:0c:
                    a1:c6:03:75:71:0a:de:e8:21:fd:6d:a0:28:4c:a0:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A9:D7:DC:EF:9E:36:49:94:24:4B:25:C6:29:3E:0D:D7:73:02:5E
            X509v3 Authority Key Identifier:
                keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a383030303a3a2f33352d3335203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34dc:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:7f:49:8b:04:46:37:f6:eb:c2:d7:62:20:73:8a:2d:d8:
         f8:e8:36:e0:78:66:5b:a6:c7:e7:b0:33:99:26:26:f6:0c:0c:
         e6:6d:72:3c:8c:6a:96:5c:e5:0f:d9:84:ef:40:47:67:4f:75:
         1d:b5:fc:35:1b:de:f2:16:e4:b1:63:aa:9e:6a:81:8e:bc:d8:
         36:8a:79:1e:80:f8:69:02:79:8a:ca:c0:45:a5:42:74:16:8d:
         73:49:3c:d5:68:02:54:af:95:ee:36:55:92:58:fa:75:18:3a:
         80:63:e4:c4:b7:09:99:09:e0:e9:d9:77:03:14:3c:a9:28:f8:
         90:75:1a:e5:88:92:c9:cd:96:1b:eb:41:13:a5:e1:cc:61:72:
         22:bf:dc:2d:73:61:cb:0c:cd:0e:32:bf:cb:21:b4:05:a8:24:
         16:16:08:d9:d4:fc:17:65:ff:ed:a0:52:5c:3b:3a:e0:78:20:
         7b:72:9a:80:ac:cf:4b:2f:ec:dd:a8:17:1a:a2:8c:f6:ba:57:
         3f:0c:2f:57:c0:04:81:14:90:b7:ac:a8:2c:dc:7e:4c:a8:ae:
         ca:3f:30:fb:37:74:96:34:55:57:23:3d:df:93:81:2a:5f:be:
         9c:be:17:ee:f1:ec:31:bc:77:01:ff:8b:52:65:9a:92:4e:c1:
         01:f9:fa:bc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUHOkJNm/L17X+ICnmjecxqAv/4cQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZB
NjZCNkQ0NDAeFw0yNDAyMjMyMzM2MDBaFw0yNTAyMjEyMzQxMDBaMDMxMTAvBgNV
BAMTKDFEQTlEN0RDRUY5RTM2NDk5NDI0NEIyNUM2MjkzRTBERDc3MzAyNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnguBkYbgsTcZzuZ+udOgwaCx
K60hJ9l5FatEWUeueX4gdy4NkkMZl01xIqA9+rsbMCpO5pC/S/PKE14xyzojoqKJ
M7hSdCzAIbikWE1V4qgtaFx6sanszH1BA9Lgmgi4scB7/KGmopB4y5i+OKgRDY17
LzoJcHcEoix5+mnqQjgsMAPaSDT0sacSk/0tMqVynbTJLHzmRWrxmZcPoLhF137u
Vdf7YdbD2mXFLit0JHcj+mYMDosiVgbUs0JHKV6/0+oybRLOZlwexhk/AWtKLKjW
NHqdCwpyX+GmFxkYYKAnu+vA55iLFm2iGEVVDKHGA3VxCt7oIf1toChMoBWZAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUHanX3O+eNkmUJEslxik+DddzAl4wHwYDVR0j
BBgwFoAU20d1/xOHJluPS0MLcDUTFqZrbUQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzAvREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZBNjZCNkQ0NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjQ3NzVGRjEzODcyNjVCOEY0
QjQzMEI3MDM1MTMxNkE2NkI2RDQ0LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzAvMzIz
ODMwMzQzYTMzMzQ2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNkM2Uy
MDMyMzYzNTM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgENNyAMA0GCSqGSIb3DQEBCwUAA4IB
AQBcv39JiwRGN/brwtdiIHOKLdj46DbgeGZbpsfnsDOZJib2DAzmbXI8jGqWXOUP
2YTvQEdnT3Udtfw1G97yFuSxY6qeaoGOvNg2inkegPhpAnmKysBFpUJ0Fo1zSTzV
aAJUr5XuNlWSWPp1GDqAY+TEtwmZCeDp2XcDFDypKPiQdRrliJLJzZYb60ETpeHM
YXIiv9wtc2HLDM0OMr/LIbQFqCQWFgjZ1PwXZf/toFJcOzrgeCB7cpqArM9LL+zd
qBcaooz2ulc/DC9XwASBFJC3rKgs3H5MqK7KPzD7N3SWNFVXIz3fk4EqX76cvhfu
8ewxvHcB/4tSZZqSTsEB+fq8
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org