Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33342d3334203d3e20323733343132.roa
File:                     323830343a386533633a3a2f33342d3334203d3e20323733343132.roa (raw, json)
Hash identifier:          gio0+srqL+2BfWmcoCP54bA3CMXudA4jfHGC6n3pIU8=
Subject key identifier:   4B:B5:8B:34:B0:34:81:DE:E5:65:1B:C5:48:BB:3B:E0:46:77:38:66
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       417237D98BBB90DD93E468D729D93E80B1D8DCA2
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33342d3334203d3e20323733343132.roa
Signing time:             Mon 22 Jan 2024 14:54:26 +0000
ROA not before:           Mon 22 Jan 2024 14:49:26 +0000
ROA not after:            Mon 20 Jan 2025 14:54:26 +0000
asID:                     273412
IP address blocks:        2804:8e3c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:72:37:d9:8b:bb:90:dd:93:e4:68:d7:29:d9:3e:80:b1:d8:dc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 22 14:49:26 2024 GMT
            Not After : Jan 20 14:54:26 2025 GMT
        Subject: CN=4BB58B34B03481DEE5651BC548BB3BE046773866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:10:38:51:ce:56:19:e0:4a:42:ce:bf:e4:
                    90:22:3b:64:74:ce:20:cc:27:86:af:97:6f:97:97:
                    06:4d:93:a9:27:03:93:7d:f0:f3:0f:59:31:3f:56:
                    0c:33:14:2e:a4:7a:97:d6:cb:f6:61:b3:dc:1a:05:
                    09:81:43:17:a7:77:7c:c5:98:99:7e:e0:b0:49:ab:
                    81:89:44:53:90:58:a2:16:65:18:ac:7e:66:e5:7e:
                    4e:44:05:b0:cb:d4:94:6e:9f:38:c6:c8:54:30:49:
                    83:c6:79:19:2a:a6:76:37:7a:13:ce:a7:d6:2c:84:
                    24:1d:17:78:26:97:89:20:a8:ba:ab:7e:c2:72:76:
                    8e:ee:59:7a:dd:63:5e:b8:67:b4:aa:ae:24:63:83:
                    7e:df:b9:b3:e6:af:db:2c:0b:1a:d2:09:aa:92:b6:
                    9e:7f:98:76:b0:66:d1:10:fb:5d:05:67:bd:f1:9c:
                    7b:dd:39:14:5c:e4:6c:60:4d:c2:9d:93:5f:f1:21:
                    bf:4b:bc:87:04:fa:39:80:14:4f:de:0e:03:02:d1:
                    c9:21:22:4b:25:b9:ba:90:0f:fc:86:be:67:ae:2d:
                    2e:31:8b:d0:ad:13:58:ca:07:11:28:ee:e2:89:8a:
                    22:1b:04:2a:05:b9:dc:7b:ee:e2:15:3f:88:71:e4:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B5:8B:34:B0:34:81:DE:E5:65:1B:C5:48:BB:3B:E0:46:77:38:66
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33342d3334203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c::/34

    Signature Algorithm: sha256WithRSAEncryption
         91:09:d4:10:e7:33:08:15:7d:1b:7e:28:6a:38:b2:6b:3b:f7:
         74:a3:28:a9:1e:92:d6:46:c1:c5:65:06:08:13:d1:81:a6:c4:
         58:5d:d0:b0:13:57:2e:77:12:e2:b9:48:9d:0d:79:8a:78:00:
         24:d0:82:e1:73:9f:d8:46:30:32:c1:b6:74:31:4b:8e:12:a4:
         dd:33:34:8b:4b:f5:fa:9c:9e:23:37:34:22:0e:bd:fb:f7:e7:
         1b:a0:e5:dd:8a:a1:58:05:19:ae:51:92:ce:f1:c6:cd:e3:56:
         31:71:18:0f:94:79:7a:64:c7:af:09:52:d4:ad:30:f8:4e:4c:
         34:b9:9a:bf:49:42:5f:3b:88:8d:d2:e0:e3:b9:1c:b2:29:fd:
         87:96:ac:b2:79:df:35:db:ec:92:f1:c9:97:29:13:1d:47:53:
         af:fc:5a:7c:47:75:19:fc:ba:d5:80:c4:ac:46:74:a1:c0:0e:
         0e:ee:a8:dc:24:dd:1d:b5:97:07:4f:ba:f1:39:c3:24:1e:93:
         c7:0c:89:da:7d:00:0e:5d:50:a2:02:2c:4f:ab:bb:23:ec:15:
         d1:e4:a2:a3:be:7f:22:f2:0e:5c:e4:40:66:77:df:27:8c:1f:
         22:cb:7d:2c:cd:1a:2b:1f:ec:d8:52:27:b1:92:a8:f3:5b:ec:
         22:01:de:ff
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQXI32Yu7kN2T5GjXKdk+gLHY3KIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGNzg0NTVERUI3QzVDQjY3QUMxQTFBNEYzRTVFRkRE
NzYwOUE1RTAeFw0yNDAxMjIxNDQ5MjZaFw0yNTAxMjAxNDU0MjZaMDMxMTAvBgNV
BAMTKDRCQjU4QjM0QjAzNDgxREVFNTY1MUJDNTQ4QkIzQkUwNDY3NzM4NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2BA4Uc5WGeBKQs6/5JAiO2R0
ziDMJ4avl2+XlwZNk6knA5N98PMPWTE/VgwzFC6kepfWy/Zhs9waBQmBQxend3zF
mJl+4LBJq4GJRFOQWKIWZRisfmblfk5EBbDL1JRunzjGyFQwSYPGeRkqpnY3ehPO
p9YshCQdF3gml4kgqLqrfsJydo7uWXrdY164Z7SqriRjg37fubPmr9ssCxrSCaqS
tp5/mHawZtEQ+10FZ73xnHvdORRc5GxgTcKdk1/xIb9LvIcE+jmAFE/eDgMC0ckh
IkslubqQD/yGvmeuLS4xi9CtE1jKBxEo7uKJiiIbBCoFudx77uIVP4hx5LmBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUS7WLNLA0gd7lZRvFSLs74EZ3OGYwHwYDVR0j
BBgwFoAUzveEVd63xctnrBoaTz5e/ddgml4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkI4Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BW
djEvMC9DRUY3ODQ1NURFQjdDNUNCNjdBQzFBMUE0RjNFNUVGREQ3NjA5QTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFRjc4NDU1REVCN0M1Q0I2
N0FDMUExQTRGM0U1RUZERDc2MDlBNUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCOGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzAv
MzIzODMwMzQzYTM4NjUzMzYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMz
MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKASOPAAwDQYJKoZIhvcNAQELBQADggEBAJEJ1BDn
MwgVfRt+KGo4sms793SjKKkektZGwcVlBggT0YGmxFhd0LATVy53EuK5SJ0NeYp4
ACTQguFzn9hGMDLBtnQxS44SpN0zNItL9fqcniM3NCIOvfv35xug5d2KoVgFGa5R
ks7xxs3jVjFxGA+UeXpkx68JUtStMPhOTDS5mr9JQl87iI3S4OO5HLIp/YeWrLJ5
3zXb7JLxyZcpEx1HU6/8WnxHdRn8utWAxKxGdKHADg7uqNwk3R21lwdPuvE5wyQe
k8cMidp9AA5dUKICLE+ruyPsFdHkoqO+fyLyDlzkQGZ33yeMHyLLfSzNGisf7NhS
J7GSqPNb7CIB3v8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org