Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa
File:                     323830343a373932303a3a2f33322d3438203d3e20323731323836.roa (raw, json)
Hash identifier:          eczpHMUFA2I4TwvLCR+BeY+1GZta4YjrgfRwbtXey9Q=
Subject key identifier:   63:B6:BE:5B:EF:EE:83:76:3F:CC:BE:91:6C:55:C2:00:60:A7:EE:4E
Certificate issuer:       /CN=4246FED7A1637B87C0A22E2F037D639E98216B05
Certificate serial:       67BDA79602113BE5FAD6F1B7A69076FE268D7D9C
Authority key identifier: 42:46:FE:D7:A1:63:7B:87:C0:A2:2E:2F:03:7D:63:9E:98:21:6B:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4246FED7A1637B87C0A22E2F037D639E98216B05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa
Signing time:             Fri 17 Nov 2023 20:15:06 +0000
ROA not before:           Fri 17 Nov 2023 20:10:06 +0000
ROA not after:            Fri 15 Nov 2024 20:15:06 +0000
asID:                     271286
IP address blocks:        2804:7920::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:a7:96:02:11:3b:e5:fa:d6:f1:b7:a6:90:76:fe:26:8d:7d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4246FED7A1637B87C0A22E2F037D639E98216B05
        Validity
            Not Before: Nov 17 20:10:06 2023 GMT
            Not After : Nov 15 20:15:06 2024 GMT
        Subject: CN=63B6BE5BEFEE83763FCCBE916C55C20060A7EE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:99:23:9d:d9:37:29:d8:59:2b:b2:54:1e:
                    ed:59:41:53:01:c0:53:bd:8a:14:30:02:a5:c4:85:
                    d1:ec:2b:10:79:39:3a:ad:c0:27:ba:94:2a:b7:2b:
                    9b:20:a4:79:c9:88:8f:4d:28:47:42:e1:0f:31:d1:
                    9f:f2:52:3e:12:44:0c:82:84:f1:06:7e:7d:44:23:
                    ec:72:dd:8c:35:9a:c5:15:97:6a:68:11:7b:b6:dd:
                    b4:cc:38:a5:8c:4c:14:5c:32:fb:7e:20:c6:11:a0:
                    c4:e1:ba:55:fa:68:25:1b:a5:66:a6:87:05:68:86:
                    ab:12:d9:d3:da:e0:47:a3:fc:c6:24:66:6d:2b:06:
                    4f:d8:7f:a2:e6:6c:32:b4:f9:6f:e1:8c:23:50:43:
                    65:75:b3:c6:60:89:e8:27:23:e0:3c:c9:27:08:8b:
                    ce:10:28:a9:a1:13:13:39:95:aa:b7:a0:a3:ca:ef:
                    4b:8d:2c:55:35:2c:39:39:85:d1:85:3b:51:af:eb:
                    ea:71:17:19:d9:a0:67:12:ce:c8:f2:a3:2d:31:2a:
                    2f:8c:9f:7d:b8:40:12:c3:dd:89:d8:63:3b:5d:f2:
                    0b:ad:78:18:e2:64:21:9d:d4:a8:a6:ca:fe:cd:2d:
                    bb:f6:58:89:51:56:19:87:c5:70:c4:db:0d:53:86:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B6:BE:5B:EF:EE:83:76:3F:CC:BE:91:6C:55:C2:00:60:A7:EE:4E
            X509v3 Authority Key Identifier:
                keyid:42:46:FE:D7:A1:63:7B:87:C0:A2:2E:2F:03:7D:63:9E:98:21:6B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/4246FED7A1637B87C0A22E2F037D639E98216B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4246FED7A1637B87C0A22E2F037D639E98216B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7920::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:09:d2:5a:1e:12:13:c0:3e:4c:67:a7:cb:1f:90:fd:1b:1d:
         34:0e:3a:63:31:42:cc:05:b6:3d:0e:c8:c9:c5:be:e7:4b:54:
         70:95:4c:cb:9e:11:d8:49:11:2b:ca:62:44:b3:da:ac:e5:5b:
         78:95:03:ff:d2:2d:2d:43:b4:97:84:bb:17:7c:0e:df:6b:2c:
         2c:23:eb:20:5d:c3:6b:41:7c:bb:13:17:57:6c:bc:36:3c:fc:
         a4:c2:80:71:55:db:be:e3:97:54:d3:a1:43:46:b6:6b:8a:78:
         25:ff:ec:f3:d3:2f:99:c0:d3:4b:15:90:71:ba:4b:d4:61:ff:
         c6:7c:8b:49:8c:bd:c4:83:57:6a:26:56:3d:44:42:88:22:af:
         8d:e3:2d:33:52:38:ef:df:12:98:11:ca:c7:3a:c8:2c:ff:f0:
         c8:75:41:bf:2f:9f:18:85:81:49:00:6d:5f:73:89:ce:3a:9f:
         54:8a:8c:fd:25:1c:e6:91:1b:b1:09:58:5a:e0:38:ee:da:0f:
         e1:d1:eb:a2:db:69:cb:45:be:09:b3:c4:10:a9:bc:90:52:69:
         b6:0a:f3:00:33:ad:ff:22:53:0f:31:c7:b2:6f:58:64:1a:00:
         8c:07:06:e6:9f:0e:91:25:cc:25:84:d6:19:ef:71:11:55:aa:
         9e:0e:0c:98
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZ72nlgIRO+X61vG3ppB2/iaNfZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI0NkZFRDdBMTYzN0I4N0MwQTIyRTJGMDM3RDYzOUU5
ODIxNkIwNTAeFw0yMzExMTcyMDEwMDZaFw0yNDExMTUyMDE1MDZaMDMxMTAvBgNV
BAMTKDYzQjZCRTVCRUZFRTgzNzYzRkNDQkU5MTZDNTVDMjAwNjBBN0VFNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSpkjndk3KdhZK7JUHu1ZQVMB
wFO9ihQwAqXEhdHsKxB5OTqtwCe6lCq3K5sgpHnJiI9NKEdC4Q8x0Z/yUj4SRAyC
hPEGfn1EI+xy3Yw1msUVl2poEXu23bTMOKWMTBRcMvt+IMYRoMThulX6aCUbpWam
hwVohqsS2dPa4Eej/MYkZm0rBk/Yf6LmbDK0+W/hjCNQQ2V1s8ZgiegnI+A8yScI
i84QKKmhExM5laq3oKPK70uNLFU1LDk5hdGFO1Gv6+pxFxnZoGcSzsjyoy0xKi+M
n324QBLD3YnYYztd8guteBjiZCGd1Kimyv7NLbv2WIlRVhmHxXDE2w1ThsOnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUY7a+W+/ug3Y/zL6RbFXCAGCn7k4wHwYDVR0j
BBgwFoAUQkb+16Fje4fAoi4vA31jnpghawUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlcza0Zidm5EUjViUlFNQUNXZnQ0enVxWGFBWDFZNHdjOHZKdHRtZDV6
c0gvMC80MjQ2RkVEN0ExNjM3Qjg3QzBBMjJFMkYwMzdENjM5RTk4MjE2QjA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyNDZGRUQ3QTE2MzdCODdD
MEEyMkUyRjAzN0Q2MzlFOTgyMTZCMDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXM2tGYnZuRFI1YlJRTUFDV2Z0NHp1cVhhQVgxWTR3Yzh2SnR0bWQ1enNILzAv
MzIzODMwMzQzYTM3MzkzMjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR5IDANBgkqhkiG9w0BAQsFAAOCAQEAhQnSWh4S
E8A+TGenyx+Q/RsdNA46YzFCzAW2PQ7IycW+50tUcJVMy54R2EkRK8piRLParOVb
eJUD/9ItLUO0l4S7F3wO32ssLCPrIF3Da0F8uxMXV2y8Njz8pMKAcVXbvuOXVNOh
Q0a2a4p4Jf/s89MvmcDTSxWQcbpL1GH/xnyLSYy9xINXaiZWPURCiCKvjeMtM1I4
798SmBHKxzrILP/wyHVBvy+fGIWBSQBtX3OJzjqfVIqM/SUc5pEbsQlYWuA47toP
4dHrottpy0W+CbPEEKm8kFJptgrzADOt/yJTDzHHsm9YZBoAjAcG5p8OkSXMJYTW
Ge9xEVWqng4MmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org