Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/0/323830343a383934303a3a2f33322d3332203d3e20323733353932.roa
File:                     323830343a383934303a3a2f33322d3332203d3e20323733353932.roa (raw, json)
Hash identifier:          exUQsEodE16lZR7NPHBbLmefG96p0jQ8Z2N2LaADoLs=
Subject key identifier:   8D:CB:45:C9:5F:CA:F3:CB:49:07:04:D4:93:4D:AF:02:20:AF:46:F1
Certificate issuer:       /CN=C51A96C322A9D2DFEE731A38DDBA652AD067691E
Certificate serial:       4574FCB4CF8715A5D5AD1C59F982AAE04B188638
Authority key identifier: C5:1A:96:C3:22:A9:D2:DF:EE:73:1A:38:DD:BA:65:2A:D0:67:69:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51A96C322A9D2DFEE731A38DDBA652AD067691E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/0/323830343a383934303a3a2f33322d3332203d3e20323733353932.roa
Signing time:             Thu 31 Aug 2023 11:52:46 +0000
ROA not before:           Thu 31 Aug 2023 11:47:46 +0000
ROA not after:            Thu 29 Aug 2024 11:52:46 +0000
asID:                     273592
IP address blocks:        2804:8940::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:74:fc:b4:cf:87:15:a5:d5:ad:1c:59:f9:82:aa:e0:4b:18:86:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C51A96C322A9D2DFEE731A38DDBA652AD067691E
        Validity
            Not Before: Aug 31 11:47:46 2023 GMT
            Not After : Aug 29 11:52:46 2024 GMT
        Subject: CN=8DCB45C95FCAF3CB490704D4934DAF0220AF46F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:28:27:58:05:77:26:ef:d4:1e:ec:5b:31:
                    af:10:6c:bd:b2:b7:79:be:a7:2d:48:7c:2b:0a:23:
                    31:81:44:c3:19:86:f4:3e:58:f8:6a:62:d3:54:0a:
                    14:3c:e1:d0:5c:dc:77:13:75:6d:70:af:99:08:cd:
                    cc:a5:f2:eb:84:c9:f0:9f:23:d2:fb:b2:25:e2:4e:
                    44:d1:78:95:8d:b6:50:a9:0d:72:31:3e:a9:40:22:
                    fa:1b:3a:90:2e:7b:2f:84:0d:96:90:fe:5b:6b:c8:
                    d1:45:97:21:ae:f9:57:59:5b:83:28:f9:08:c4:9e:
                    a8:e3:b2:33:82:9f:9e:a5:3a:a4:fa:51:7c:e9:75:
                    9f:c3:a2:89:45:48:43:16:b2:94:d0:64:c3:80:10:
                    d0:29:4f:b4:d8:69:f7:2a:16:b1:b0:04:1c:4b:a7:
                    cb:a6:ad:2a:34:77:4f:e2:93:06:37:6d:d5:6c:e7:
                    13:98:75:b6:06:8e:56:0e:10:de:23:bc:c7:a2:6b:
                    01:1d:c2:91:72:8b:dc:e9:e5:06:85:d0:1c:b8:79:
                    de:a0:8c:58:8c:74:3e:7c:48:b9:95:33:ee:5d:0d:
                    71:29:fd:22:c5:d7:3c:4f:34:a8:35:08:41:d3:43:
                    96:53:74:24:e0:40:0a:e5:44:52:fd:e9:0d:95:b9:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CB:45:C9:5F:CA:F3:CB:49:07:04:D4:93:4D:AF:02:20:AF:46:F1
            X509v3 Authority Key Identifier:
                keyid:C5:1A:96:C3:22:A9:D2:DF:EE:73:1A:38:DD:BA:65:2A:D0:67:69:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/0/C51A96C322A9D2DFEE731A38DDBA652AD067691E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51A96C322A9D2DFEE731A38DDBA652AD067691E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/0/323830343a383934303a3a2f33322d3332203d3e20323733353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8940::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:76:06:91:c2:f6:52:f6:ec:a7:f3:58:02:52:bd:bf:f7:79:
         d8:df:d3:e2:db:d2:11:57:05:14:e9:15:9d:70:d0:58:2a:c5:
         76:f1:7b:49:05:5b:1f:28:bf:d9:e6:89:a5:c6:15:f1:5f:35:
         ba:00:81:12:0a:b6:ba:c6:b1:7d:bf:52:6c:28:6e:bd:de:51:
         86:af:69:10:d0:31:33:7c:29:a0:c4:de:60:ae:6d:9d:74:e0:
         b2:d8:e8:16:fe:5b:ba:ab:1e:33:19:7a:80:db:7f:ca:dd:51:
         1b:15:6e:13:7f:08:dd:91:58:9e:43:78:43:e8:bc:6f:07:12:
         60:e4:53:8e:38:02:7d:bf:6a:35:9d:86:86:0f:09:5d:7b:d8:
         c0:c7:ea:be:6c:9e:dc:66:50:10:e4:a0:0d:0a:3a:ae:c9:4e:
         f5:fe:80:a8:e4:ac:1a:83:1e:08:17:63:88:e4:d1:b0:57:7f:
         3c:27:c8:62:a0:15:73:74:ed:dc:ab:60:95:5f:d1:5d:3d:45:
         07:0a:79:5a:2b:a0:38:b2:b3:97:1c:0c:6e:0b:3e:d3:af:4f:
         e4:3a:0f:8f:f3:e9:62:bd:42:66:8b:cc:5b:de:dc:e3:81:a3:
         a2:09:a1:9e:83:b8:88:4a:6a:e1:dd:32:2c:0b:37:76:65:44:
         9b:cb:d5:75
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURXT8tM+HFaXVrRxZ+YKq4EsYhjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxQTk2QzMyMkE5RDJERkVFNzMxQTM4RERCQTY1MkFE
MDY3NjkxRTAeFw0yMzA4MzExMTQ3NDZaFw0yNDA4MjkxMTUyNDZaMDMxMTAvBgNV
BAMTKDhEQ0I0NUM5NUZDQUYzQ0I0OTA3MDRENDkzNERBRjAyMjBBRjQ2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPSgnWAV3Ju/UHuxbMa8QbL2y
t3m+py1IfCsKIzGBRMMZhvQ+WPhqYtNUChQ84dBc3HcTdW1wr5kIzcyl8uuEyfCf
I9L7siXiTkTReJWNtlCpDXIxPqlAIvobOpAuey+EDZaQ/ltryNFFlyGu+VdZW4Mo
+QjEnqjjsjOCn56lOqT6UXzpdZ/DoolFSEMWspTQZMOAENApT7TYafcqFrGwBBxL
p8umrSo0d0/ikwY3bdVs5xOYdbYGjlYOEN4jvMeiawEdwpFyi9zp5QaF0By4ed6g
jFiMdD58SLmVM+5dDXEp/SLF1zxPNKg1CEHTQ5ZTdCTgQArlRFL96Q2Vue1/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjctFyV/K88tJBwTUk02vAiCvRvEwHwYDVR0j
BBgwFoAUxRqWwyKp0t/ucxo43bplKtBnaR4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzgzOWJpZkFEY05VaFB6dmtaTnNkQnpuTVBiWVlzUjFXUkNNTHRnbndY
MVMvMC9DNTFBOTZDMzIyQTlEMkRGRUU3MzFBMzhEREJBNjUyQUQwNjc2OTFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MUE5NkMzMjJBOUQyREZF
RTczMUEzOEREQkE2NTJBRDA2NzY5MUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc4MzliaWZBRGNOVWhQenZrWk5zZEJ6bk1QYllZc1IxV1JDTUx0Z253WDFTLzAv
MzIzODMwMzQzYTM4MzkzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASJQDANBgkqhkiG9w0BAQsFAAOCAQEABXYGkcL2
Uvbsp/NYAlK9v/d52N/T4tvSEVcFFOkVnXDQWCrFdvF7SQVbHyi/2eaJpcYV8V81
ugCBEgq2usaxfb9SbChuvd5Rhq9pENAxM3wpoMTeYK5tnXTgstjoFv5buqseMxl6
gNt/yt1RGxVuE38I3ZFYnkN4Q+i8bwcSYORTjjgCfb9qNZ2Ghg8JXXvYwMfqvmye
3GZQEOSgDQo6rslO9f6AqOSsGoMeCBdjiOTRsFd/PCfIYqAVc3Tt3KtglV/RXT1F
Bwp5WiugOLKzlxwMbgs+069P5DoPj/PpYr1CZovMW97c44GjogmhnoO4iEpq4d0y
LAs3dmVEm8vVdQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org