Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa
File:                     323830343a343034633a3a2f33322d3332203d3e20323635393530.roa (raw, json)
Hash identifier:          3p8KOWfasujW6TPp5k4r8wrcR6rGRTEg5OM7k3ItoJM=
Subject key identifier:   B8:6C:43:B7:CB:AA:63:9B:2C:9F:BE:CF:C2:98:9E:C6:89:3E:B1:B4
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       3E8FBDC1BB4793ECD9EA9E12ADBAE4B9CC74C1A3
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa
Signing time:             Sun 24 Sep 2023 21:58:52 +0000
ROA not before:           Sun 24 Sep 2023 21:53:52 +0000
ROA not after:            Sun 22 Sep 2024 21:58:52 +0000
asID:                     265950
IP address blocks:        2804:404c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8f:bd:c1:bb:47:93:ec:d9:ea:9e:12:ad:ba:e4:b9:cc:74:c1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:52 2023 GMT
            Not After : Sep 22 21:58:52 2024 GMT
        Subject: CN=B86C43B7CBAA639B2C9FBECFC2989EC6893EB1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:61:5c:e1:62:8f:ad:7b:0d:5f:f7:36:be:
                    04:03:d8:69:28:d1:20:ae:2f:f4:49:26:63:21:bd:
                    f5:9d:ec:c8:e8:3e:36:00:04:e1:f8:1f:1a:66:3c:
                    d4:8e:de:d0:58:a7:95:67:5f:39:3f:16:47:7c:3f:
                    78:89:a8:94:4c:dc:cb:9f:65:2d:65:1f:6b:14:a8:
                    9a:08:17:9f:e8:4d:dd:92:0a:4d:54:0b:b9:b3:17:
                    ac:a1:4f:cb:97:c3:58:24:c0:00:b8:94:48:01:75:
                    6e:6d:7e:bb:d6:f2:24:1f:2f:fc:6a:ee:64:f7:7e:
                    e9:a0:ca:52:62:4d:9f:c6:d5:1c:4e:fc:9e:66:e4:
                    c4:c9:ef:1d:0d:68:05:82:b1:ac:77:22:64:b7:73:
                    03:da:e3:88:25:13:01:90:da:3f:6f:e9:d9:09:5c:
                    50:4e:5c:ec:12:1e:fd:46:08:e6:76:30:b9:a0:02:
                    79:28:a4:3f:22:3f:62:6d:66:00:69:b6:8b:db:af:
                    da:39:c0:56:63:ed:b8:eb:99:5b:58:17:ce:a3:e4:
                    cb:80:37:5c:67:02:c0:82:62:59:02:20:7d:00:4b:
                    12:60:db:35:71:ab:75:53:b2:53:96:07:c7:e7:0b:
                    ee:9b:e2:fe:b3:2d:a4:16:30:00:a8:72:dc:6c:6e:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6C:43:B7:CB:AA:63:9B:2C:9F:BE:CF:C2:98:9E:C6:89:3E:B1:B4
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3a2f33322d3332203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:d3:a8:e1:6d:61:2e:c3:06:f4:d3:b7:f5:25:db:20:0c:ca:
         d5:20:d5:61:c4:6d:c7:fd:96:d7:73:03:37:fc:ba:e2:ff:ad:
         84:9f:0c:96:d8:8b:9f:1e:43:23:0e:b1:ee:64:c3:a9:71:ee:
         ea:30:53:b0:20:14:65:3b:88:9c:e4:63:39:40:fa:4b:64:6e:
         9b:63:15:c3:f3:d1:98:cd:ff:52:4c:cf:9b:7a:ad:73:c3:d4:
         bc:56:55:2a:7a:13:1d:e4:a9:d6:02:03:2a:96:d2:6a:51:d8:
         08:8e:92:70:0a:81:b8:89:78:f8:4a:30:5f:77:a5:c3:ac:a0:
         e4:dd:da:47:31:f7:91:3e:6a:90:f2:31:23:c8:c3:70:0b:2a:
         fc:ae:71:d6:c3:49:c7:2d:e5:00:0a:bd:94:53:42:b8:ea:ed:
         45:91:1e:98:8f:39:09:4f:b6:c5:ea:8f:85:a5:a0:f2:57:98:
         b0:01:1c:ef:db:93:e4:bb:3a:28:ad:14:2c:e1:a3:19:7a:01:
         aa:d1:38:56:7d:34:31:c1:f0:3e:a9:e8:88:56:1f:6e:65:83:
         37:8b:b9:ee:95:72:96:3a:67:e9:88:01:08:80:d4:58:27:32:
         ca:f6:d9:49:c4:f3:65:9f:64:1c:37:b0:88:a9:c8:95:a8:13:
         f2:48:40:25
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPo+9wbtHk+zZ6p4Srbrkucx0waMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURBNTg2QzJCMkREMEE3RjBENDQ2OEMzN0IzMjQ2NDIw
M0I0QzAwNzAeFw0yMzA5MjQyMTUzNTJaFw0yNDA5MjIyMTU4NTJaMDMxMTAvBgNV
BAMTKEI4NkM0M0I3Q0JBQTYzOUIyQzlGQkVDRkMyOTg5RUM2ODkzRUIxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZaWFc4WKPrXsNX/c2vgQD2Gko
0SCuL/RJJmMhvfWd7MjoPjYABOH4HxpmPNSO3tBYp5VnXzk/Fkd8P3iJqJRM3Muf
ZS1lH2sUqJoIF5/oTd2SCk1UC7mzF6yhT8uXw1gkwAC4lEgBdW5tfrvW8iQfL/xq
7mT3fumgylJiTZ/G1RxO/J5m5MTJ7x0NaAWCsax3ImS3cwPa44glEwGQ2j9v6dkJ
XFBOXOwSHv1GCOZ2MLmgAnkopD8iP2JtZgBptovbr9o5wFZj7bjrmVtYF86j5MuA
N1xnAsCCYlkCIH0ASxJg2zVxq3VTslOWB8fnC+6b4v6zLaQWMACoctxsbgRdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuGxDt8uqY5ssn77Pwpiexok+sbQwHwYDVR0j
BBgwFoAUHaWGwrLdCn8NRGjDezJGQgO0wAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMC8xREE1ODZDMkIyREQwQTdGMEQ0NDY4QzM3QjMyNDY0MjAzQjRDMDA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFEQTU4NkMyQjJERDBBN0Yw
RDQ0NjhDMzdCMzI0NjQyMDNCNEMwMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzAv
MzIzODMwMzQzYTM0MzAzNDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzkzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARATDANBgkqhkiG9w0BAQsFAAOCAQEAldOo4W1h
LsMG9NO39SXbIAzK1SDVYcRtx/2W13MDN/y64v+thJ8MltiLnx5DIw6x7mTDqXHu
6jBTsCAUZTuInORjOUD6S2Rum2MVw/PRmM3/UkzPm3qtc8PUvFZVKnoTHeSp1gID
KpbSalHYCI6ScAqBuIl4+EowX3elw6yg5N3aRzH3kT5qkPIxI8jDcAsq/K5x1sNJ
xy3lAAq9lFNCuOrtRZEemI85CU+2xeqPhaWg8leYsAEc79uT5Ls6KK0ULOGjGXoB
qtE4Vn00McHwPqnoiFYfbmWDN4u57pVyljpn6YgBCIDUWCcyyvbZScTzZZ9kHDew
iKnIlagT8khAJQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org