Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a353030303a3a2f33362d3336203d3e20323731333735.roa
File:                     323830343a376138303a353030303a3a2f33362d3336203d3e20323731333735.roa (raw, json)
Hash identifier:          oPB/woJtUA4Ir7OTaeYNJoCMao/vUlqaOqs4PKHyVmE=
Subject key identifier:   A2:FE:11:B9:51:7A:F6:A2:27:68:AD:A3:2F:98:35:EB:8D:E2:D0:7F
Certificate issuer:       /CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
Certificate serial:       02FF7BC0C1BE767265B5CFDA329F76C5B7416489
Authority key identifier: D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a353030303a3a2f33362d3336203d3e20323731333735.roa
Signing time:             Tue 29 Mar 2022 19:38:31 +0000
ROA not before:           Tue 29 Mar 2022 19:33:31 +0000
ROA not after:            Tue 28 Mar 2023 19:38:31 +0000
asID:                     271375
IP address blocks:        2804:7a80:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ff:7b:c0:c1:be:76:72:65:b5:cf:da:32:9f:76:c5:b7:41:64:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
        Validity
            Not Before: Mar 29 19:33:31 2022 GMT
            Not After : Mar 28 19:38:31 2023 GMT
        Subject: CN=A2FE11B9517AF6A22768ADA32F9835EB8DE2D07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:d8:c0:68:a1:a5:c4:17:4e:98:ce:3d:d9:
                    89:d2:c7:35:a7:b6:fb:5d:6f:91:13:d7:4c:8d:8a:
                    62:8f:0b:b3:8e:6a:03:34:b0:59:86:30:ad:45:02:
                    22:1a:b6:98:00:ae:2f:f6:7f:6b:b5:a2:f8:c0:ec:
                    87:ac:c3:4f:de:86:0f:64:cb:7e:27:37:07:3a:01:
                    16:38:50:76:80:e8:cb:30:50:b3:5f:43:e4:80:6d:
                    75:3e:1e:1a:8d:14:f6:89:77:d8:c7:93:5d:26:6f:
                    f4:33:28:3e:94:0e:97:09:ac:d1:e5:88:b0:4c:3a:
                    c5:12:b9:80:81:44:13:d6:b3:bf:1c:cb:03:b1:ab:
                    75:52:f1:12:f8:11:d2:e8:c1:05:83:0d:39:9c:96:
                    5f:d4:9e:cd:90:fd:eb:a3:11:b6:d2:89:3a:1d:5c:
                    f1:a2:d8:5c:7c:17:ed:3d:79:96:c0:34:35:bd:83:
                    fc:4e:1b:4c:5a:6d:bb:4a:24:bb:04:51:e7:2a:4e:
                    bc:24:01:3d:e4:56:48:e3:f6:08:24:e4:da:17:f1:
                    7b:99:24:1d:d6:ec:05:55:98:9d:7e:a4:af:5e:5f:
                    c3:c7:91:7a:bd:1a:8a:82:20:05:26:bd:d3:3b:e4:
                    a9:e8:3a:d8:29:2e:7f:ae:eb:86:bc:12:20:e4:1c:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FE:11:B9:51:7A:F6:A2:27:68:AD:A3:2F:98:35:EB:8D:E2:D0:7F
            X509v3 Authority Key Identifier:
                keyid:D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a353030303a3a2f33362d3336203d3e20323731333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a80:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:57:73:20:51:39:47:72:8b:ce:e6:88:27:ee:4c:fa:fb:64:
         93:9d:53:c7:0c:74:f0:80:11:90:a5:9d:11:4f:3e:35:13:f2:
         9f:06:49:67:d5:e4:5f:cd:5e:1a:05:a4:f5:d5:26:a1:f3:c1:
         a0:2e:fd:ac:24:6a:5a:66:cb:c3:b2:f9:68:b3:2c:44:6c:4e:
         ff:ec:5d:64:27:0d:fc:0e:e8:fc:1a:ee:ef:7e:fe:e7:3e:ce:
         ff:ff:3b:57:23:68:8e:9f:c0:ca:22:ff:c8:df:85:67:c6:17:
         de:a1:ad:d9:f6:5b:75:27:91:d6:15:3f:34:5d:45:a4:da:ec:
         35:b0:9b:68:c3:7e:5e:37:ea:0a:e7:b0:35:ab:c1:4a:2b:31:
         d6:16:2a:e9:c8:4c:9e:91:c2:43:84:63:a3:69:a7:06:f2:76:
         9a:75:52:fa:42:72:40:04:6e:b7:4a:78:e2:76:18:da:b7:d7:
         7d:e3:ce:38:c6:d1:2a:80:2b:d7:f3:b6:87:d6:b6:b8:45:e7:
         ae:b5:74:6c:58:76:ff:cc:6a:bb:8a:f3:f2:52:ff:cc:27:96:
         5d:d6:2d:0c:68:d4:f5:1a:fb:73:63:c2:0d:58:1c:de:0d:02:
         31:df:87:7a:bf:bc:c8:f7:6f:9a:f5:20:6a:7e:07:09:fc:55:
         1b:c6:c1:f1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAv97wMG+dnJltc/aMp92xbdBZIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU1Q0M2OTQ4OThBQzAyNDI3NkJEMDY0RUZENzdCRDUy
RENEQjc2RDAeFw0yMjAzMjkxOTMzMzFaFw0yMzAzMjgxOTM4MzFaMDMxMTAvBgNV
BAMTKEEyRkUxMUI5NTE3QUY2QTIyNzY4QURBMzJGOTgzNUVCOERFMkQwN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz29jAaKGlxBdOmM492YnSxzWn
tvtdb5ET10yNimKPC7OOagM0sFmGMK1FAiIatpgAri/2f2u1ovjA7Iesw0/ehg9k
y34nNwc6ARY4UHaA6MswULNfQ+SAbXU+HhqNFPaJd9jHk10mb/QzKD6UDpcJrNHl
iLBMOsUSuYCBRBPWs78cywOxq3VS8RL4EdLowQWDDTmcll/Uns2Q/eujEbbSiTod
XPGi2Fx8F+09eZbANDW9g/xOG0xabbtKJLsEUecqTrwkAT3kVkjj9ggk5NoX8XuZ
JB3W7AVVmJ1+pK9eX8PHkXq9GoqCIAUmvdM75KnoOtgpLn+u64a8EiDkHG8BAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUov4RuVF69qInaK2jL5g1643i0H8wHwYDVR0j
BBgwFoAU1VzGlImKwCQna9Bk79d71S3Nt20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFwVVg3MnZwVnhYOGZHVUFiZHE0QU5WRDVjRWlXY3RYbmdjS0dma21S
MjYvMC9ENTVDQzY5NDg5OEFDMDI0Mjc2QkQwNjRFRkQ3N0JENTJEQ0RCNzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1NUNDNjk0ODk4QUMwMjQy
NzZCRDA2NEVGRDc3QkQ1MkRDREI3NkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhcFVYNzJ2cFZ4WDhmR1VBYmRxNEFOVkQ1Y0VpV2N0WG5nY0tHZmttUjI2LzAv
MzIzODMwMzQzYTM3NjEzODMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTMzMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEeoBQMA0GCSqGSIb3DQEBCwUA
A4IBAQBCV3MgUTlHcovO5ogn7kz6+2STnVPHDHTwgBGQpZ0RTz41E/KfBkln1eRf
zV4aBaT11Sah88GgLv2sJGpaZsvDsvlosyxEbE7/7F1kJw38Duj8Gu7vfv7nPs7/
/ztXI2iOn8DKIv/I34Vnxhfeoa3Z9lt1J5HWFT80XUWk2uw1sJtow35eN+oK57A1
q8FKKzHWFirpyEyekcJDhGOjaacG8naadVL6QnJABG63Snjidhjat9d94844xtEq
gCvX87aH1ra4ReeutXRsWHb/zGq7ivPyUv/MJ5Zd1i0MaNT1GvtzY8INWBzeDQIx
34d6v7zI92+a9SBqfgcJ/FUbxsHx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org