Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa
File:                     323830343a3930383a3a2f33322d313238203d3e20323633303437.roa (raw, json)
Hash identifier:          IveOIeym4gW24YXVeJ1s6bYphOp2KwTBdPpZVS9/OSs=
Subject key identifier:   1D:07:37:EF:FF:06:1F:74:4A:74:59:54:81:33:07:87:04:E3:D4:D6
Certificate issuer:       /CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
Certificate serial:       7D4D57C01EE911C769A90411B1940D7B167CFA82
Authority key identifier: C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa
Signing time:             Mon 25 Mar 2024 17:58:56 +0000
ROA not before:           Mon 25 Mar 2024 17:53:56 +0000
ROA not after:            Mon 24 Mar 2025 17:58:56 +0000
asID:                     263047
IP address blocks:        2804:908::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4d:57:c0:1e:e9:11:c7:69:a9:04:11:b1:94:0d:7b:16:7c:fa:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
        Validity
            Not Before: Mar 25 17:53:56 2024 GMT
            Not After : Mar 24 17:58:56 2025 GMT
        Subject: CN=1D0737EFFF061F744A7459548133078704E3D4D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:80:1b:d0:5f:a4:dd:7b:16:18:63:a0:87:
                    8d:88:a7:c2:0e:f1:7e:50:9c:3b:ff:f3:a7:cb:5a:
                    c1:ff:56:e1:06:61:23:36:b4:72:b4:8a:f7:76:5a:
                    1a:1b:ae:5c:9b:07:1c:fc:13:fc:40:90:43:3a:b8:
                    e9:29:e3:17:e6:eb:a9:b2:3b:39:1a:b0:84:71:25:
                    31:2a:c5:7b:35:66:f2:76:b6:95:1d:5f:cd:75:2e:
                    49:a3:e2:93:e0:87:22:e4:a7:eb:d0:f7:f9:d9:86:
                    12:16:be:34:92:ed:fb:ff:d5:19:80:b2:96:4a:ea:
                    8f:62:c6:c5:5d:3e:da:6a:d3:1a:1f:23:b3:89:5a:
                    14:d3:7b:70:f7:d6:76:96:85:e3:5d:b9:61:6e:ec:
                    b7:5d:dc:c2:41:71:61:80:b0:49:dd:a5:a8:2b:15:
                    b2:93:9f:6e:6a:c4:d8:e2:f4:63:f6:67:38:d8:39:
                    e4:ba:0d:b0:26:8e:9d:a1:08:fc:7c:1f:ce:9e:53:
                    09:57:dd:37:c7:40:42:16:ae:fb:53:69:df:e0:ba:
                    75:be:98:85:dc:74:1b:2c:37:19:67:0f:39:a6:0f:
                    ab:6b:95:3a:db:38:eb:bd:e8:91:80:4b:49:f3:49:
                    89:e6:47:f5:37:86:b9:17:73:c6:e7:26:0d:67:f9:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:07:37:EF:FF:06:1F:74:4A:74:59:54:81:33:07:87:04:E3:D4:D6
            X509v3 Authority Key Identifier:
                keyid:C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:908::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:2f:46:b0:7a:b7:f0:23:77:b2:06:6d:a1:4c:84:7e:d6:3a:
         69:12:c2:6b:a6:9e:56:af:1b:d5:44:97:79:41:48:5a:75:6d:
         22:ac:38:14:3f:ec:8c:ad:09:5f:a1:ff:60:fb:04:cf:f7:34:
         4d:e0:ea:8a:67:69:eb:1b:f5:fa:b3:5b:47:73:63:6d:96:ac:
         1c:4e:e2:4c:56:de:3a:18:b4:d8:e3:a0:77:85:b2:c1:22:ef:
         00:b9:2d:5a:e7:8d:1d:68:6d:e0:90:c9:c0:80:f5:da:52:90:
         28:83:29:31:e1:7d:ea:cd:25:85:4e:9c:48:ef:f0:7a:65:d3:
         1d:f7:38:54:75:b8:6b:3a:f3:89:04:0e:7d:6e:c6:8d:54:0f:
         a2:3e:c7:a9:b6:92:9b:92:5b:52:3d:14:e1:ff:f7:94:4a:88:
         63:c3:e9:a0:14:e9:81:a1:ea:d2:16:ce:83:5c:57:6b:de:f7:
         67:67:fa:3d:10:83:16:6a:a5:d6:75:9b:f5:b7:c7:62:0f:e3:
         d1:c6:6f:e4:a6:ec:4d:db:f6:6c:f7:db:aa:9c:e4:be:6c:d4:
         50:1e:53:5f:ee:1b:63:33:54:5b:3c:cf:95:9d:40:04:08:8a:
         ab:3c:f1:e9:d1:cc:77:3a:3d:cb:13:d4:b7:12:7e:75:2e:0d:
         d6:05:34:5d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfU1XwB7pEcdpqQQRsZQNexZ8+oIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJGODc3NDgzOEJGMTA3MkIzOEI3Mjc2RkI2Q0QyRjNC
QkZENTY0NTAeFw0yNDAzMjUxNzUzNTZaFw0yNTAzMjQxNzU4NTZaMDMxMTAvBgNV
BAMTKDFEMDczN0VGRkYwNjFGNzQ0QTc0NTk1NDgxMzMwNzg3MDRFM0Q0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtoAb0F+k3XsWGGOgh42Ip8IO
8X5QnDv/86fLWsH/VuEGYSM2tHK0ivd2WhobrlybBxz8E/xAkEM6uOkp4xfm66my
OzkasIRxJTEqxXs1ZvJ2tpUdX811Lkmj4pPghyLkp+vQ9/nZhhIWvjSS7fv/1RmA
spZK6o9ixsVdPtpq0xofI7OJWhTTe3D31naWheNduWFu7Ldd3MJBcWGAsEndpagr
FbKTn25qxNji9GP2ZzjYOeS6DbAmjp2hCPx8H86eUwlX3TfHQEIWrvtTad/gunW+
mIXcdBssNxlnDzmmD6trlTrbOOu96JGAS0nzSYnmR/U3hrkXc8bnJg1n+R/TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHQc37/8GH3RKdFlUgTMHhwTj1NYwHwYDVR0j
BBgwFoAUwvh3SDi/EHKzi3J2+2zS87v9VkUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlnYjc5RGhZMW95QW1zSFkzUXdpa2tuUUVCV2pDMUpXd3R0THhCRVM2
enUvMC9DMkY4Nzc0ODM4QkYxMDcyQjM4QjcyNzZGQjZDRDJGM0JCRkQ1NjQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyRjg3NzQ4MzhCRjEwNzJC
MzhCNzI3NkZCNkNEMkYzQkJGRDU2NDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5Z2I3OURoWTFveUFtc0hZM1F3aWtrblFFQldqQzFKV3d0dEx4QkVTNnp1LzAv
MzIzODMwMzQzYTM5MzAzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQJCDANBgkqhkiG9w0BAQsFAAOCAQEArS9GsHq3
8CN3sgZtoUyEftY6aRLCa6aeVq8b1USXeUFIWnVtIqw4FD/sjK0JX6H/YPsEz/c0
TeDqimdp6xv1+rNbR3NjbZasHE7iTFbeOhi02OOgd4WywSLvALktWueNHWht4JDJ
wID12lKQKIMpMeF96s0lhU6cSO/wemXTHfc4VHW4azrziQQOfW7GjVQPoj7HqbaS
m5JbUj0U4f/3lEqIY8PpoBTpgaHq0hbOg1xXa973Z2f6PRCDFmql1nWb9bfHYg/j
0cZv5KbsTdv2bPfbqpzkvmzUUB5TX+4bYzNUWzzPlZ1ABAiKqzzx6dHMdzo9yxPU
txJ+dS4N1gU0XQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org