Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/323830343a353630303a3a2f33322d3332203d3e20323637393730.roa
File:                     323830343a353630303a3a2f33322d3332203d3e20323637393730.roa (raw, json)
Hash identifier:          7AEkot+LGK5vBWZNUPNqcXuoXf1HrsSP+/5mnfzRG/E=
Subject key identifier:   77:03:28:00:44:48:5D:38:47:3D:0C:76:24:1F:9C:73:98:1E:66:8F
Certificate issuer:       /CN=EA1EB7F3673C6292D8181310BC3E5FBDDAB524A7
Certificate serial:       1DBF6BFC0C42AE1C23EC7776039F67D62FCED339
Authority key identifier: EA:1E:B7:F3:67:3C:62:92:D8:18:13:10:BC:3E:5F:BD:DA:B5:24:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA1EB7F3673C6292D8181310BC3E5FBDDAB524A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/323830343a353630303a3a2f33322d3332203d3e20323637393730.roa
Signing time:             Wed 06 Sep 2023 12:35:26 +0000
ROA not before:           Wed 06 Sep 2023 12:30:26 +0000
ROA not after:            Wed 04 Sep 2024 12:35:26 +0000
asID:                     267970
IP address blocks:        2804:5600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bf:6b:fc:0c:42:ae:1c:23:ec:77:76:03:9f:67:d6:2f:ce:d3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1EB7F3673C6292D8181310BC3E5FBDDAB524A7
        Validity
            Not Before: Sep  6 12:30:26 2023 GMT
            Not After : Sep  4 12:35:26 2024 GMT
        Subject: CN=7703280044485D38473D0C76241F9C73981E668F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:40:a9:66:e4:52:8f:6d:e9:f3:83:14:71:
                    5d:97:21:07:43:f5:0e:b5:89:3f:3e:b2:bd:35:45:
                    b1:80:cf:3a:ef:14:23:0e:04:d9:09:8c:dd:fe:4a:
                    27:c1:03:4b:36:56:16:32:70:b3:cd:ea:f3:f3:e7:
                    c0:b0:db:bb:dd:be:8a:94:80:76:9f:28:bc:7b:82:
                    a4:c9:c9:20:28:bf:be:20:46:4e:52:b7:34:fd:6f:
                    08:fa:81:63:f5:25:76:4c:37:01:47:34:c6:d2:d4:
                    9d:96:a7:8d:f3:0b:34:11:38:14:8b:ab:d0:6e:dd:
                    31:d9:13:0b:f2:c8:98:30:9c:cf:40:ce:89:78:07:
                    ae:3f:84:43:41:17:bd:ba:f9:65:de:1f:e9:20:95:
                    f2:19:ce:9c:0f:f7:fb:0d:04:01:ff:d8:65:b1:99:
                    cc:6a:ab:de:be:70:b5:a8:8c:eb:af:b6:d7:05:02:
                    c7:d0:42:9e:80:3a:03:d8:18:91:f9:01:e1:0a:6d:
                    ff:6e:b2:ed:68:91:17:90:68:4f:ea:b3:06:84:46:
                    c3:c6:53:04:77:f0:d8:af:df:1d:1b:37:60:fe:45:
                    f8:81:e7:d0:ed:f1:0d:b5:2a:d0:74:db:8a:b8:97:
                    a7:c7:d3:45:6f:da:e1:7d:0c:d5:0d:6e:5b:05:11:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:03:28:00:44:48:5D:38:47:3D:0C:76:24:1F:9C:73:98:1E:66:8F
            X509v3 Authority Key Identifier:
                keyid:EA:1E:B7:F3:67:3C:62:92:D8:18:13:10:BC:3E:5F:BD:DA:B5:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/EA1EB7F3673C6292D8181310BC3E5FBDDAB524A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA1EB7F3673C6292D8181310BC3E5FBDDAB524A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/323830343a353630303a3a2f33322d3332203d3e20323637393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5600::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:a4:bf:97:ef:8e:bd:5e:56:d7:b7:28:10:79:ea:00:00:
         52:74:6d:80:e4:92:2e:ef:db:73:8a:f4:b7:56:61:ca:db:55:
         1c:e5:98:bc:a5:51:d9:14:af:d8:5d:a4:08:2f:42:b4:d5:a2:
         db:b1:f3:b6:fb:75:74:80:37:14:a7:95:c0:0e:ae:f2:56:3e:
         2a:d9:ae:2e:19:a7:56:43:bc:f6:26:19:04:0f:65:9f:f6:b7:
         69:09:a4:99:8e:53:cd:d6:ca:a4:85:4a:a1:9f:1c:40:63:98:
         3e:11:49:9f:d2:76:e3:8d:0a:9c:bf:91:84:1f:ab:e2:54:ec:
         2e:fe:79:02:c5:04:fa:23:ca:18:93:d7:d6:bd:43:a7:f7:77:
         69:16:a0:a4:00:6d:0d:82:e6:a9:01:f8:b5:58:6b:d8:cf:99:
         0b:ce:d0:41:ff:a4:34:fd:09:3f:ca:fd:8b:83:ae:bd:b2:3b:
         f5:c5:c8:c9:a2:98:9b:f3:e9:fe:82:42:a5:0d:69:40:4e:37:
         f7:cb:fb:52:f0:6c:34:bc:40:7f:08:a1:4a:dc:96:3f:cd:e8:
         5a:86:39:c0:7b:ee:fb:bb:19:f2:6b:12:73:be:1a:84:3d:5c:
         eb:a8:87:91:3c:5a:76:93:6d:1d:b7:bf:d2:a4:95:68:3a:e8:
         f7:95:82:3b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHb9r/AxCrhwj7Hd2A59n1i/O0zkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExRUI3RjM2NzNDNjI5MkQ4MTgxMzEwQkMzRTVGQkRE
QUI1MjRBNzAeFw0yMzA5MDYxMjMwMjZaFw0yNDA5MDQxMjM1MjZaMDMxMTAvBgNV
BAMTKDc3MDMyODAwNDQ0ODVEMzg0NzNEMEM3NjI0MUY5QzczOTgxRTY2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBUCpZuRSj23p84MUcV2XIQdD
9Q61iT8+sr01RbGAzzrvFCMOBNkJjN3+SifBA0s2VhYycLPN6vPz58Cw27vdvoqU
gHafKLx7gqTJySAov74gRk5StzT9bwj6gWP1JXZMNwFHNMbS1J2Wp43zCzQROBSL
q9Bu3THZEwvyyJgwnM9Azol4B64/hENBF726+WXeH+kglfIZzpwP9/sNBAH/2GWx
mcxqq96+cLWojOuvttcFAsfQQp6AOgPYGJH5AeEKbf9usu1okReQaE/qswaERsPG
UwR38Niv3x0bN2D+RfiB59Dt8Q21KtB024q4l6fH00Vv2uF9DNUNblsFETJjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdwMoAERIXThHPQx2JB+cc5geZo8wHwYDVR0j
BBgwFoAU6h6382c8YpLYGBMQvD5fvdq1JKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmZjU0dEdXJGdTZ2eXRLWDdHR0xBRFBhOEREUmVUZ2d6a3oxU3JuR2VI
WnQvMC9FQTFFQjdGMzY3M0M2MjkyRDgxODEzMTBCQzNFNUZCRERBQjUyNEE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBMUVCN0YzNjczQzYyOTJE
ODE4MTMxMEJDM0U1RkJEREFCNTI0QTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZmY1NHRHVyRnU2dnl0S1g3R0dMQURQYThERFJlVGdnemt6MVNybkdlSFp0LzAv
MzIzODMwMzQzYTM1MzYzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWADANBgkqhkiG9w0BAQsFAAOCAQEAH6ekv5fv
jr1eVte3KBB56gAAUnRtgOSSLu/bc4r0t1ZhyttVHOWYvKVR2RSv2F2kCC9CtNWi
27Hztvt1dIA3FKeVwA6u8lY+KtmuLhmnVkO89iYZBA9ln/a3aQmkmY5TzdbKpIVK
oZ8cQGOYPhFJn9J2440KnL+RhB+r4lTsLv55AsUE+iPKGJPX1r1Dp/d3aRagpABt
DYLmqQH4tVhr2M+ZC87QQf+kNP0JP8r9i4OuvbI79cXIyaKYm/Pp/oJCpQ1pQE43
98v7UvBsNLxAfwihStyWP83oWoY5wHvu+7sZ8msSc74ahD1c66iHkTxadpNtHbe/
0qSVaDro95WCOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org