Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/323830343a343864343a3a2f33322d3438203d3e20323637313437.roa
File:                     323830343a343864343a3a2f33322d3438203d3e20323637313437.roa (raw, json)
Hash identifier:          QAoF11iqPo9OrZ24v/keZXg5sbKSZ8FvQDRj7fVSnJY=
Subject key identifier:   2C:35:84:60:73:D7:15:9A:FD:99:A5:37:03:8E:7E:EA:2F:18:62:B7
Certificate issuer:       /CN=8F69EC4070CE7658D3059640F9268DDF17E8B1A8
Certificate serial:       707CCA7FD66E70898887B56C49B26572C2CA4EBE
Authority key identifier: 8F:69:EC:40:70:CE:76:58:D3:05:96:40:F9:26:8D:DF:17:E8:B1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/323830343a343864343a3a2f33322d3438203d3e20323637313437.roa
Signing time:             Fri 05 Apr 2024 02:38:16 +0000
ROA not before:           Fri 05 Apr 2024 02:33:16 +0000
ROA not after:            Fri 04 Apr 2025 02:38:16 +0000
asID:                     267147
IP address blocks:        2804:48d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7c:ca:7f:d6:6e:70:89:88:87:b5:6c:49:b2:65:72:c2:ca:4e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F69EC4070CE7658D3059640F9268DDF17E8B1A8
        Validity
            Not Before: Apr  5 02:33:16 2024 GMT
            Not After : Apr  4 02:38:16 2025 GMT
        Subject: CN=2C35846073D7159AFD99A537038E7EEA2F1862B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:91:2c:b8:b1:6d:cd:76:6a:c1:6d:8e:19:
                    15:3a:03:4c:e1:a5:24:17:5c:70:e0:75:aa:c5:60:
                    d8:b4:10:5c:89:dd:b6:1f:18:f3:a8:20:3c:6c:31:
                    e2:5e:f5:0f:da:86:72:02:53:f4:4f:fa:44:62:a6:
                    cf:da:08:9f:27:2d:f2:d1:a1:29:25:d8:ab:ae:8c:
                    9b:bd:b8:82:e4:68:73:85:59:de:15:b6:67:49:f6:
                    66:2e:54:83:a8:de:ba:1e:fd:e9:31:bd:08:67:ad:
                    4a:53:05:b4:8e:40:a4:37:19:a1:e8:61:1d:8c:dc:
                    5d:32:7e:ae:18:14:44:8e:0d:4a:6c:be:66:fc:5e:
                    85:e2:1f:40:0c:06:c5:89:c7:bd:b4:b5:a1:9e:a9:
                    61:29:8d:9e:20:e2:cf:94:3c:96:2a:e1:94:b3:82:
                    80:64:b7:28:4a:e6:f0:62:0d:4d:3a:a5:c7:63:87:
                    6c:d3:d9:bb:83:40:5b:f9:c5:86:8a:e2:90:e6:23:
                    b3:20:39:99:99:1f:cf:ef:ea:df:18:10:36:64:28:
                    44:0f:46:95:da:ad:e2:d8:95:53:5e:b5:15:f6:22:
                    9b:4a:4e:99:dd:84:00:35:7a:ec:42:1a:fc:fe:bf:
                    29:65:e6:13:74:df:dd:a2:58:d8:98:be:cb:cf:7e:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:84:60:73:D7:15:9A:FD:99:A5:37:03:8E:7E:EA:2F:18:62:B7
            X509v3 Authority Key Identifier:
                keyid:8F:69:EC:40:70:CE:76:58:D3:05:96:40:F9:26:8D:DF:17:E8:B1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/323830343a343864343a3a2f33322d3438203d3e20323637313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:1d:fd:1b:df:49:0f:e1:06:2b:56:fc:82:4e:d4:0b:19:
         9c:aa:f8:ce:8f:a7:2d:db:d6:f7:3a:86:5d:07:95:cf:e0:d0:
         9c:b6:f8:d3:39:b2:65:2d:b2:f5:0f:16:c6:ab:8f:c4:96:ac:
         8f:20:02:e5:27:c0:4f:80:b3:ac:44:b3:19:94:a7:11:73:f4:
         de:99:22:69:9b:e6:20:d2:76:f2:0b:4b:d5:4b:71:52:92:31:
         ca:4a:eb:53:58:95:d3:89:c1:b7:02:fd:1f:3a:35:fe:22:33:
         a6:8f:a4:7c:2a:71:4e:bb:36:68:a6:08:75:41:54:0d:3f:83:
         77:22:a8:03:99:ea:cf:8e:d2:1f:7c:fe:3e:e0:cd:8e:20:98:
         2f:c6:e7:39:54:e9:e6:30:e8:8f:17:dc:65:f8:86:a2:e2:78:
         75:90:87:7f:25:b5:99:3d:9d:f4:95:81:de:84:c3:70:17:ce:
         6f:cb:b3:0a:1e:46:d2:10:81:af:6d:e1:6a:9c:d2:c4:92:4c:
         63:77:59:09:2c:36:f7:b3:19:87:e6:2d:4d:58:13:48:53:84:
         5f:1a:3a:1a:5e:8b:7c:ed:5e:95:39:b8:8f:28:a8:95:4a:99:
         d3:a5:8e:ef:22:1a:6c:3c:4b:0f:ce:86:76:63:83:20:78:00:
         86:57:29:72
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcHzKf9ZucImIh7VsSbJlcsLKTr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY2OUVDNDA3MENFNzY1OEQzMDU5NjQwRjkyNjhEREYx
N0U4QjFBODAeFw0yNDA0MDUwMjMzMTZaFw0yNTA0MDQwMjM4MTZaMDMxMTAvBgNV
BAMTKDJDMzU4NDYwNzNENzE1OUFGRDk5QTUzNzAzOEU3RUVBMkYxODYyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDpEsuLFtzXZqwW2OGRU6A0zh
pSQXXHDgdarFYNi0EFyJ3bYfGPOoIDxsMeJe9Q/ahnICU/RP+kRips/aCJ8nLfLR
oSkl2KuujJu9uILkaHOFWd4VtmdJ9mYuVIOo3roe/ekxvQhnrUpTBbSOQKQ3GaHo
YR2M3F0yfq4YFESODUpsvmb8XoXiH0AMBsWJx720taGeqWEpjZ4g4s+UPJYq4ZSz
goBktyhK5vBiDU06pcdjh2zT2buDQFv5xYaK4pDmI7MgOZmZH8/v6t8YEDZkKEQP
RpXareLYlVNetRX2IptKTpndhAA1euxCGvz+vyll5hN0392iWNiYvsvPfvAdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULDWEYHPXFZr9maU3A45+6i8YYrcwHwYDVR0j
BBgwFoAUj2nsQHDOdljTBZZA+SaN3xfosagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlFRZ1F2Qk5EV2dERnZielUxMlZzcVhhV2V1dHJvTnZlOHhTd1Rmc2pC
eWkvMS84RjY5RUM0MDcwQ0U3NjU4RDMwNTk2NDBGOTI2OERERjE3RThCMUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNjlFQzQwNzBDRTc2NThE
MzA1OTY0MEY5MjY4RERGMTdFOEIxQTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRUWdRdkJORFdnREZ2YnpVMTJWc3FYYVdldXRyb052ZTh4U3dUZnNqQnlpLzEv
MzIzODMwMzQzYTM0Mzg2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARI1DANBgkqhkiG9w0BAQsFAAOCAQEAMa4d/Rvf
SQ/hBitW/IJO1AsZnKr4zo+nLdvW9zqGXQeVz+DQnLb40zmyZS2y9Q8WxquPxJas
jyAC5SfAT4CzrESzGZSnEXP03pkiaZvmINJ28gtL1UtxUpIxykrrU1iV04nBtwL9
Hzo1/iIzpo+kfCpxTrs2aKYIdUFUDT+DdyKoA5nqz47SH3z+PuDNjiCYL8bnOVTp
5jDojxfcZfiGouJ4dZCHfyW1mT2d9JWB3oTDcBfOb8uzCh5G0hCBr23hapzSxJJM
Y3dZCSw297MZh+YtTVgTSFOEXxo6Gl6LfO1elTm4jyiolUqZ06WO7yIabDxLD86G
dmODIHgAhlcpcg==
-----END CERTIFICATE-----
Generated at Thu Sep 12 16:40:42 2024 by rpki-client on console-fra.rpki-client.org