Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/323830343a366635303a3a2f33322d3332203d3e20323730363532.roa
File:                     323830343a366635303a3a2f33322d3332203d3e20323730363532.roa (raw, json)
Hash identifier:          6kgN3qGos+jEsHMdfAn5QZUg/C6cYYZI6GiuFqOIDd4=
Subject key identifier:   3E:4F:4A:E3:92:A4:1B:D2:E9:00:A1:B4:51:23:DE:AA:D0:07:6E:C5
Certificate issuer:       /CN=D892296CC5D537587815493CE7B655C9469444D7
Certificate serial:       0BAFF31AC7E49CDA7097271C8AA611108800F220
Authority key identifier: D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/323830343a366635303a3a2f33322d3332203d3e20323730363532.roa
Signing time:             Sat 16 Dec 2023 09:36:51 +0000
ROA not before:           Sat 16 Dec 2023 09:31:51 +0000
ROA not after:            Sat 14 Dec 2024 09:36:51 +0000
asID:                     270652
IP address blocks:        2804:6f50::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:af:f3:1a:c7:e4:9c:da:70:97:27:1c:8a:a6:11:10:88:00:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D892296CC5D537587815493CE7B655C9469444D7
        Validity
            Not Before: Dec 16 09:31:51 2023 GMT
            Not After : Dec 14 09:36:51 2024 GMT
        Subject: CN=3E4F4AE392A41BD2E900A1B45123DEAAD0076EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:7c:79:2f:ad:96:80:1d:50:93:a8:53:94:
                    3b:5b:9e:10:95:51:ae:3c:2b:53:43:cc:06:5f:cf:
                    5c:06:aa:c0:98:86:41:14:c2:56:fc:79:4a:47:83:
                    23:19:e1:2e:6c:77:d3:04:7f:b1:78:ce:04:eb:74:
                    17:40:70:99:af:8d:a9:5c:e3:39:17:28:df:1e:de:
                    24:51:33:9a:10:2c:ab:af:ce:ce:79:ec:7f:67:e9:
                    bc:db:1e:90:c2:e3:8a:6e:74:10:c0:c3:67:2f:95:
                    9b:94:89:12:27:92:c4:5e:12:72:61:4b:24:5e:aa:
                    f6:b7:78:d4:c3:c6:8f:f3:b4:3e:00:b4:b5:9c:b0:
                    56:15:f7:10:49:18:4c:e2:e7:fd:b5:6d:0e:44:7d:
                    04:09:49:5c:4d:c1:92:b4:20:d0:ce:e6:e1:b6:a7:
                    e3:fc:1b:8b:2f:e5:9c:4d:6f:f8:c1:6a:65:ab:86:
                    33:01:48:b4:ac:e2:be:2e:3d:e1:c4:bc:a1:08:e3:
                    81:41:f8:b0:0c:46:0c:85:1f:4c:18:ef:a4:b3:95:
                    85:b1:25:eb:71:62:dc:cf:f9:bf:c7:9c:d9:45:ec:
                    fa:6c:40:2f:42:fe:0d:ca:f6:b5:2b:09:d5:d0:22:
                    d0:58:c8:01:93:24:c6:af:73:99:9d:f6:56:8a:a3:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4F:4A:E3:92:A4:1B:D2:E9:00:A1:B4:51:23:DE:AA:D0:07:6E:C5
            X509v3 Authority Key Identifier:
                keyid:D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/D892296CC5D537587815493CE7B655C9469444D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/323830343a366635303a3a2f33322d3332203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:82:f2:9c:60:7d:9b:fd:2a:61:19:61:fb:af:4b:23:af:fd:
         b5:94:2e:f9:db:76:7e:77:56:a2:10:c4:59:9d:5a:16:56:cb:
         d1:50:e5:0f:8b:76:70:1b:02:ff:52:e0:d6:38:96:99:83:1d:
         dd:fd:af:26:fd:02:f5:76:11:33:3b:8b:a6:59:38:9c:1d:2e:
         26:50:86:d5:93:36:ae:5f:ee:84:40:3d:aa:0a:e8:f9:9e:ff:
         8c:5d:95:33:ea:70:04:89:44:e2:9b:a0:a7:8c:77:a5:5f:0d:
         1d:de:b2:4b:80:38:d0:d5:4e:b8:f9:64:88:34:28:b5:d4:ca:
         be:9f:4b:33:61:cc:68:ff:be:a3:89:34:29:ba:b0:b9:d4:2b:
         53:88:2f:9a:d2:60:b2:16:1d:04:58:26:03:f2:1f:88:d1:a9:
         e9:ad:a5:30:df:71:81:38:76:9c:47:86:e1:a4:19:4e:6f:49:
         c3:e4:0f:32:c3:01:35:b9:3d:80:4f:15:f4:7c:6d:f8:af:a3:
         d4:33:d1:90:4e:e7:82:1d:18:68:68:d2:52:45:b9:46:c9:12:
         32:b8:ad:93:92:ad:9c:f8:ac:7f:4e:d5:e4:40:88:04:14:12:
         d3:74:33:ff:b7:04:95:75:7a:d1:49:64:a7:64:00:49:e1:26:
         2e:09:5b:4e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUC6/zGsfknNpwlycciqYREIgA8iAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg5MjI5NkNDNUQ1Mzc1ODc4MTU0OTNDRTdCNjU1Qzk0
Njk0NDRENzAeFw0yMzEyMTYwOTMxNTFaFw0yNDEyMTQwOTM2NTFaMDMxMTAvBgNV
BAMTKDNFNEY0QUUzOTJBNDFCRDJFOTAwQTFCNDUxMjNERUFBRDAwNzZFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8G3x5L62WgB1Qk6hTlDtbnhCV
Ua48K1NDzAZfz1wGqsCYhkEUwlb8eUpHgyMZ4S5sd9MEf7F4zgTrdBdAcJmvjalc
4zkXKN8e3iRRM5oQLKuvzs557H9n6bzbHpDC44pudBDAw2cvlZuUiRInksReEnJh
SyReqva3eNTDxo/ztD4AtLWcsFYV9xBJGEzi5/21bQ5EfQQJSVxNwZK0INDO5uG2
p+P8G4sv5ZxNb/jBamWrhjMBSLSs4r4uPeHEvKEI44FB+LAMRgyFH0wY76SzlYWx
JetxYtzP+b/HnNlF7PpsQC9C/g3K9rUrCdXQItBYyAGTJMavc5md9laKo2GnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPk9K45KkG9LpAKG0USPeqtAHbsUwHwYDVR0j
BBgwFoAU2JIpbMXVN1h4FUk857ZVyUaURNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnpvaUxNWmduVlhaVWRkUjloQ1JVY2tWaWtMaFA4ZWhFVTVoeFJlTFk3
bkMvMC9EODkyMjk2Q0M1RDUzNzU4NzgxNTQ5M0NFN0I2NTVDOTQ2OTQ0NEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4OTIyOTZDQzVENTM3NTg3
ODE1NDkzQ0U3QjY1NUM5NDY5NDQ0RDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ6b2lMTVpnblZYWlVkZFI5aENSVWNrVmlrTGhQOGVoRVU1aHhSZUxZN25DLzAv
MzIzODMwMzQzYTM2NjYzNTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzYzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARvUDANBgkqhkiG9w0BAQsFAAOCAQEAoYLynGB9
m/0qYRlh+69LI6/9tZQu+dt2fndWohDEWZ1aFlbL0VDlD4t2cBsC/1Lg1jiWmYMd
3f2vJv0C9XYRMzuLplk4nB0uJlCG1ZM2rl/uhEA9qgro+Z7/jF2VM+pwBIlE4pug
p4x3pV8NHd6yS4A40NVOuPlkiDQotdTKvp9LM2HMaP++o4k0KbqwudQrU4gvmtJg
shYdBFgmA/IfiNGp6a2lMN9xgTh2nEeG4aQZTm9Jw+QPMsMBNbk9gE8V9Hxt+K+j
1DPRkE7ngh0YaGjSUkW5RskSMritk5KtnPisf07V5ECIBBQS03Qz/7cElXV60Ulk
p2QASeEmLglbTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org