Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/323830343a373632303a3a2f33322d3430203d3e20323731303931.roa
File:                     323830343a373632303a3a2f33322d3430203d3e20323731303931.roa (raw, json)
Hash identifier:          sF5vsF5BnThVw99hoQnhMBV5sRzzYbCwx9eCF0ql3HI=
Subject key identifier:   3E:02:B0:C8:93:FB:47:B2:87:34:E3:E1:3D:C9:3B:D2:E5:FB:54:13
Certificate issuer:       /CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
Certificate serial:       6974D4FE9728861E26771D6356DE81948302CAED
Authority key identifier: CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/323830343a373632303a3a2f33322d3430203d3e20323731303931.roa
Signing time:             Wed 17 May 2023 16:47:20 +0000
ROA not before:           Wed 17 May 2023 16:42:20 +0000
ROA not after:            Wed 15 May 2024 16:47:20 +0000
asID:                     271091
IP address blocks:        2804:7620::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:74:d4:fe:97:28:86:1e:26:77:1d:63:56:de:81:94:83:02:ca:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
        Validity
            Not Before: May 17 16:42:20 2023 GMT
            Not After : May 15 16:47:20 2024 GMT
        Subject: CN=3E02B0C893FB47B28734E3E13DC93BD2E5FB5413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:da:c8:2c:84:23:97:0d:b4:b8:37:9e:84:84:
                    09:f9:59:32:31:06:88:94:d2:b1:cd:70:43:c7:39:
                    61:4e:37:39:48:1a:92:b4:8f:6c:12:a2:f7:d8:92:
                    57:b9:eb:38:6c:a6:16:2e:c7:15:35:bc:71:5e:a8:
                    dc:17:68:a5:43:76:4e:b2:4e:64:ef:6a:00:1b:23:
                    39:f8:be:24:6d:5d:67:77:4b:7d:15:24:a4:c9:69:
                    91:e5:15:72:4e:5d:b6:e9:29:ae:b8:21:b7:51:51:
                    e9:2d:21:b0:eb:d4:3f:52:7d:59:ae:92:3d:4c:8f:
                    5e:d4:d1:5b:cd:3b:9d:bb:86:ae:14:cc:1f:c6:ce:
                    2a:79:25:2a:a2:f2:5c:4f:1c:7a:27:2c:d6:7b:82:
                    77:5c:2d:e5:51:e3:91:be:c1:89:96:22:38:06:d8:
                    2b:22:9e:bf:b8:87:b1:64:98:5c:46:e1:4f:ea:93:
                    15:aa:fa:4b:80:90:67:c6:c6:46:00:35:fd:51:aa:
                    0d:74:26:48:fa:d7:7a:93:31:1b:ac:be:28:8a:21:
                    db:8f:e9:b0:57:19:fc:2e:dc:db:d3:b8:99:da:91:
                    86:f6:ee:9e:d9:e8:9d:a6:74:ae:91:e1:75:3c:9b:
                    de:82:d6:c9:8a:67:45:51:da:d5:77:2e:e7:a1:c2:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:02:B0:C8:93:FB:47:B2:87:34:E3:E1:3D:C9:3B:D2:E5:FB:54:13
            X509v3 Authority Key Identifier:
                keyid:CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/323830343a373632303a3a2f33322d3430203d3e20323731303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7620::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:4a:50:46:90:ad:ba:1e:a9:8c:89:86:02:1f:5f:89:72:60:
         09:88:d0:1d:d0:bf:f2:13:b8:22:2f:61:19:06:71:b2:3a:66:
         9a:28:50:d8:04:8d:b2:15:c7:df:81:68:e7:87:5d:5c:f0:33:
         b1:f0:9b:58:7f:66:73:9e:1b:e6:4b:e0:69:16:40:ca:90:3a:
         5d:3f:d1:25:90:76:2e:3f:c6:54:ab:48:4b:a0:c8:95:f2:d2:
         60:20:56:f0:d5:06:39:f4:d3:6d:77:f4:03:28:3c:60:1b:75:
         4c:7d:60:a9:9b:5b:56:06:37:9f:3f:51:51:1a:36:65:bb:8a:
         42:9f:26:a8:24:9d:a2:41:80:7f:a7:55:90:a5:52:7d:8f:c9:
         89:c0:83:5e:77:c9:d7:9b:44:db:04:95:4e:eb:57:b1:ce:fa:
         8a:be:d9:61:86:bf:ab:6e:ad:5b:66:33:35:aa:fc:66:37:00:
         c0:3a:3f:33:12:97:c1:14:2d:7a:dc:32:a5:23:21:89:c4:58:
         9f:51:2a:9e:b2:04:7d:99:25:37:e4:53:2c:e4:a7:37:ad:bc:
         b9:25:03:08:08:6a:da:c7:b0:f0:16:9b:ac:3a:67:a7:64:8b:
         a2:e9:cb:3b:c2:5d:7f:a1:f3:99:f4:ea:b3:72:85:fd:c6:0f:
         ed:10:d4:10
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaXTU/pcohh4mdx1jVt6BlIMCyu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y3NjVBRjczRURDQTMyMEQzNzc5MkZEMTlCNzMwMjVE
MURCRERFMzAeFw0yMzA1MTcxNjQyMjBaFw0yNDA1MTUxNjQ3MjBaMDMxMTAvBgNV
BAMTKDNFMDJCMEM4OTNGQjQ3QjI4NzM0RTNFMTNEQzkzQkQyRTVGQjU0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2sgshCOXDbS4N56EhAn5WTIx
BoiU0rHNcEPHOWFONzlIGpK0j2wSovfYkle56zhsphYuxxU1vHFeqNwXaKVDdk6y
TmTvagAbIzn4viRtXWd3S30VJKTJaZHlFXJOXbbpKa64IbdRUektIbDr1D9SfVmu
kj1Mj17U0VvNO527hq4UzB/Gzip5JSqi8lxPHHonLNZ7gndcLeVR45G+wYmWIjgG
2Csinr+4h7FkmFxG4U/qkxWq+kuAkGfGxkYANf1Rqg10Jkj613qTMRusviiKIduP
6bBXGfwu3NvTuJnakYb27p7Z6J2mdK6R4XU8m96C1smKZ0VR2tV3LuehwogzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPgKwyJP7R7KHNOPhPck70uX7VBMwHwYDVR0j
BBgwFoAUz3Za9z7coyDTd5L9GbcwJdHb3eMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRHbU5zaHNpMTRzOFNueVFXUWhjZkc1UmlZZGZjQlRrd0RNWXhpUWRW
RDkvMC9DRjc2NUFGNzNFRENBMzIwRDM3NzkyRkQxOUI3MzAyNUQxREJEREUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGNzY1QUY3M0VEQ0EzMjBE
Mzc3OTJGRDE5QjczMDI1RDFEQkRERTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkR21Oc2hzaTE0czhTbnlRV1FoY2ZHNVJpWWRmY0JUa3dETVl4aVFkVkQ5LzAv
MzIzODMwMzQzYTM3MzYzMjMwM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNzMx
MzAzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR2IDANBgkqhkiG9w0BAQsFAAOCAQEAUUpQRpCt
uh6pjImGAh9fiXJgCYjQHdC/8hO4Ii9hGQZxsjpmmihQ2ASNshXH34Fo54ddXPAz
sfCbWH9mc54b5kvgaRZAypA6XT/RJZB2Lj/GVKtIS6DIlfLSYCBW8NUGOfTTbXf0
Ayg8YBt1TH1gqZtbVgY3nz9RURo2ZbuKQp8mqCSdokGAf6dVkKVSfY/JicCDXnfJ
15tE2wSVTutXsc76ir7ZYYa/q26tW2YzNar8ZjcAwDo/MxKXwRQtetwypSMhicRY
n1EqnrIEfZklN+RTLOSnN628uSUDCAhq2sew8BabrDpnp2SLounLO8Jdf6HzmfTq
s3KF/cYP7RDUEA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org