Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a323030303a3a2f33352d3335203d3e20323731333735.roa
File:                     323830343a376138303a323030303a3a2f33352d3335203d3e20323731333735.roa (raw, json)
Hash identifier:          dql+BdjSe01d2Ya4YJVknKZffV98SWY3hl21wW5vqRo=
Subject key identifier:   96:7A:CC:CA:04:41:E9:AC:52:07:B7:00:94:FA:A8:75:76:DC:2A:03
Certificate issuer:       /CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
Certificate serial:       5D14A61E0EC4EF81B0063683C68FDEE5B17F32B8
Authority key identifier: D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a323030303a3a2f33352d3335203d3e20323731333735.roa
Signing time:             Tue 29 Mar 2022 19:37:56 +0000
ROA not before:           Tue 29 Mar 2022 19:32:56 +0000
ROA not after:            Tue 28 Mar 2023 19:37:56 +0000
asID:                     271375
IP address blocks:        2804:7a80:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:14:a6:1e:0e:c4:ef:81:b0:06:36:83:c6:8f:de:e5:b1:7f:32:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
        Validity
            Not Before: Mar 29 19:32:56 2022 GMT
            Not After : Mar 28 19:37:56 2023 GMT
        Subject: CN=967ACCCA0441E9AC5207B70094FAA87576DC2A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:e7:40:a4:c5:8c:5e:f9:24:99:d5:61:94:
                    29:20:09:47:f1:29:ee:51:b9:27:dc:61:6b:79:9b:
                    ad:27:c7:93:ef:68:ac:01:e7:d6:5c:b0:ff:7d:02:
                    f6:f1:34:5a:a2:f6:94:cd:43:51:32:a9:f1:57:5a:
                    c1:49:71:0e:1c:14:a9:3f:fd:6a:70:81:c2:9a:1c:
                    4b:91:a3:c4:42:a6:41:86:56:c1:28:11:63:fc:1c:
                    a9:d8:96:0c:42:b0:b8:1b:d5:8c:6e:5f:ec:1e:c9:
                    db:09:89:2d:25:3e:d4:b7:12:fd:46:44:ac:d4:a0:
                    65:07:c9:d0:8e:a5:0b:2c:e7:fc:54:04:47:2c:71:
                    3a:9a:17:18:e0:f4:d8:36:25:ff:74:fa:35:bf:f7:
                    c7:01:fa:ac:07:f1:fd:28:6e:6e:84:66:8e:2c:40:
                    81:c2:4a:80:36:a1:eb:e1:9a:25:3d:33:8c:da:50:
                    52:55:51:71:41:0e:c9:62:25:e4:38:f8:97:87:af:
                    be:a1:16:cd:aa:3f:8c:50:38:7d:7c:6b:5f:a0:d1:
                    b8:d5:9f:bd:b1:6d:5c:fe:7c:aa:49:50:cb:98:7e:
                    ca:0c:2c:30:40:bb:30:38:a8:c9:36:33:41:d8:cc:
                    c5:22:7d:86:20:e5:e8:b4:06:4e:14:49:80:2d:31:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:CC:CA:04:41:E9:AC:52:07:B7:00:94:FA:A8:75:76:DC:2A:03
            X509v3 Authority Key Identifier:
                keyid:D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a323030303a3a2f33352d3335203d3e20323731333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a80:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         41:64:93:96:e6:84:89:cd:70:a8:ee:dc:1b:61:fd:00:d7:c6:
         94:8d:d1:0e:20:9e:d4:0e:42:f5:7f:c4:bf:ff:90:c0:5b:c4:
         ba:c5:61:43:90:8e:a9:01:33:e1:f5:ef:28:12:58:03:01:43:
         27:e7:d1:64:76:96:cb:77:73:de:0c:0c:69:d9:d9:26:e2:ec:
         d3:ba:46:e1:30:ee:ca:1e:ee:51:9a:87:a7:15:81:c3:66:49:
         30:d3:4e:6a:ba:d2:a3:3c:08:96:95:55:56:58:20:36:fc:aa:
         b7:95:b3:3c:fd:65:8c:cd:96:47:ec:2d:67:44:0a:fe:e9:16:
         39:e0:18:55:4a:50:bf:c6:3e:74:20:a3:28:50:db:07:af:93:
         62:e0:ef:8f:66:ab:f1:ef:90:f0:8b:93:af:96:6b:6b:ad:7f:
         60:9e:a7:c6:d3:67:43:30:ed:45:a9:45:67:f4:bf:9e:c8:33:
         33:58:8e:ea:dd:d0:5d:04:31:46:7f:02:54:9d:43:08:59:dc:
         fc:05:36:18:ee:38:ab:64:dc:3b:f1:b7:9f:ca:45:32:8a:8c:
         ea:3a:ff:d4:a2:0e:96:35:3e:ab:d5:89:2c:fb:79:dc:58:ab:
         e2:ed:09:97:ec:1c:88:28:5c:48:6d:7c:d9:c5:4a:b8:91:85:
         d0:6f:a9:08
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXRSmHg7E74GwBjaDxo/e5bF/MrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU1Q0M2OTQ4OThBQzAyNDI3NkJEMDY0RUZENzdCRDUy
RENEQjc2RDAeFw0yMjAzMjkxOTMyNTZaFw0yMzAzMjgxOTM3NTZaMDMxMTAvBgNV
BAMTKDk2N0FDQ0NBMDQ0MUU5QUM1MjA3QjcwMDk0RkFBODc1NzZEQzJBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fudApMWMXvkkmdVhlCkgCUfx
Ke5RuSfcYWt5m60nx5PvaKwB59ZcsP99AvbxNFqi9pTNQ1EyqfFXWsFJcQ4cFKk/
/WpwgcKaHEuRo8RCpkGGVsEoEWP8HKnYlgxCsLgb1YxuX+weydsJiS0lPtS3Ev1G
RKzUoGUHydCOpQss5/xUBEcscTqaFxjg9Ng2Jf90+jW/98cB+qwH8f0obm6EZo4s
QIHCSoA2oevhmiU9M4zaUFJVUXFBDsliJeQ4+JeHr76hFs2qP4xQOH18a1+g0bjV
n72xbVz+fKpJUMuYfsoMLDBAuzA4qMk2M0HYzMUifYYg5ei0Bk4USYAtMRtdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlnrMygRB6axSB7cAlPqodXbcKgMwHwYDVR0j
BBgwFoAU1VzGlImKwCQna9Bk79d71S3Nt20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFwVVg3MnZwVnhYOGZHVUFiZHE0QU5WRDVjRWlXY3RYbmdjS0dma21S
MjYvMC9ENTVDQzY5NDg5OEFDMDI0Mjc2QkQwNjRFRkQ3N0JENTJEQ0RCNzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1NUNDNjk0ODk4QUMwMjQy
NzZCRDA2NEVGRDc3QkQ1MkRDREI3NkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhcFVYNzJ2cFZ4WDhmR1VBYmRxNEFOVkQ1Y0VpV2N0WG5nY0tHZmttUjI2LzAv
MzIzODMwMzQzYTM3NjEzODMwM2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzczMTMzMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEeoAgMA0GCSqGSIb3DQEBCwUA
A4IBAQBBZJOW5oSJzXCo7twbYf0A18aUjdEOIJ7UDkL1f8S//5DAW8S6xWFDkI6p
ATPh9e8oElgDAUMn59FkdpbLd3PeDAxp2dkm4uzTukbhMO7KHu5RmoenFYHDZkkw
005qutKjPAiWlVVWWCA2/Kq3lbM8/WWMzZZH7C1nRAr+6RY54BhVSlC/xj50IKMo
UNsHr5Ni4O+PZqvx75Dwi5OvlmtrrX9gnqfG02dDMO1FqUVn9L+eyDMzWI7q3dBd
BDFGfwJUnUMIWdz8BTYY7jirZNw78befykUyiozqOv/Uog6WNT6r1Yks+3ncWKvi
7QmX7ByIKFxIbXzZxUq4kYXQb6kI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org