Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/323830343a313433633a3a2f33322d3438203d3e20323633333230.roa
File:                     323830343a313433633a3a2f33322d3438203d3e20323633333230.roa (raw, json)
Hash identifier:          veqRC0Gn6DfX1toaf+NKaklP88bAPQeBuL5Hgm7J2XQ=
Subject key identifier:   BF:FE:31:C0:90:F7:74:76:0F:5B:D6:D8:A7:FB:4D:B0:29:C0:5D:F5
Certificate issuer:       /CN=717DC8BA5F820F9C596A4EBA29C7518024CE28CB
Certificate serial:       58933EF39F54C95B3981F563F7058F6655F0EDC2
Authority key identifier: 71:7D:C8:BA:5F:82:0F:9C:59:6A:4E:BA:29:C7:51:80:24:CE:28:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/323830343a313433633a3a2f33322d3438203d3e20323633333230.roa
Signing time:             Thu 04 Apr 2024 10:46:52 +0000
ROA not before:           Thu 04 Apr 2024 10:41:52 +0000
ROA not after:            Thu 03 Apr 2025 10:46:52 +0000
asID:                     263320
IP address blocks:        2804:143c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:93:3e:f3:9f:54:c9:5b:39:81:f5:63:f7:05:8f:66:55:f0:ed:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717DC8BA5F820F9C596A4EBA29C7518024CE28CB
        Validity
            Not Before: Apr  4 10:41:52 2024 GMT
            Not After : Apr  3 10:46:52 2025 GMT
        Subject: CN=BFFE31C090F774760F5BD6D8A7FB4DB029C05DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:8f:a0:9b:3f:02:66:a3:8e:7a:28:61:8d:
                    5d:09:5e:5d:32:0d:f5:cc:13:3f:5f:ab:56:ba:89:
                    d0:16:2a:ca:09:69:e6:65:a0:02:cc:f1:7c:ce:92:
                    8a:63:68:a0:39:42:c8:64:c2:d2:c9:e4:a9:93:8d:
                    12:b8:b2:c8:ee:df:a5:0a:18:12:93:7a:35:95:b4:
                    c1:25:05:a7:8b:e2:96:2e:36:2a:c6:3c:fb:42:90:
                    f9:3f:88:cd:30:a7:41:c1:c7:40:cd:7c:ba:16:76:
                    1f:4f:c2:c6:51:91:4b:07:1f:79:48:f2:d9:92:a2:
                    c6:fc:ea:5c:cc:a0:05:f8:0a:1d:20:ed:37:26:f3:
                    2f:f1:19:2e:be:e3:2f:3d:4a:21:38:72:55:04:30:
                    e6:14:85:4d:3b:61:b1:58:c2:e0:3b:97:da:a8:b9:
                    a3:6c:bd:c8:d9:15:dc:b6:bf:5e:90:6e:c4:c3:9a:
                    1b:45:85:3b:6d:1e:71:6f:12:86:c6:62:10:cf:40:
                    e5:b4:0d:95:ce:53:77:a1:6a:e6:81:5c:24:bf:21:
                    a5:d6:e5:67:17:80:63:3c:65:eb:f2:bd:b8:3e:b0:
                    d1:f6:b5:f1:5f:f9:f1:ef:43:57:61:89:11:06:7e:
                    5e:8f:f6:99:af:f6:4d:7c:68:1f:87:6a:5b:2f:ed:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FE:31:C0:90:F7:74:76:0F:5B:D6:D8:A7:FB:4D:B0:29:C0:5D:F5
            X509v3 Authority Key Identifier:
                keyid:71:7D:C8:BA:5F:82:0F:9C:59:6A:4E:BA:29:C7:51:80:24:CE:28:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/323830343a313433633a3a2f33322d3438203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:143c::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:29:4f:b3:fd:49:3f:1a:4f:a8:4d:b7:09:a2:ed:d2:0f:e4:
         45:46:48:9e:09:50:da:28:c6:1a:6f:8e:d0:d1:6e:f3:4c:6a:
         ce:6c:7b:3e:15:12:28:11:c8:76:b3:bf:40:5d:86:72:40:9a:
         27:a5:e1:ae:4e:85:74:b8:3f:e4:09:1c:ff:5a:b9:90:2c:dc:
         40:10:c2:b1:2e:16:33:a8:d2:f2:8f:26:e2:29:b0:09:38:56:
         47:01:06:4a:88:15:46:5a:f7:3a:56:b7:06:01:d1:13:51:73:
         fa:cc:76:7b:ad:ae:f0:64:0a:21:e3:11:bf:f7:81:23:0a:8e:
         19:de:57:3b:70:c3:c7:90:a7:d5:a7:8d:4a:36:7e:2e:b1:df:
         ef:bb:ac:7c:b5:d5:ec:1a:e0:1a:3d:06:59:e9:8a:95:c6:87:
         26:3e:51:34:a6:31:93:36:f8:12:cb:fb:7f:74:a8:4d:d3:62:
         a4:68:8b:a5:70:d1:a6:03:fb:1f:08:9d:4f:f8:83:58:1e:72:
         74:02:26:3c:d2:b4:9c:9b:91:54:72:af:ec:f8:e6:a6:b6:6e:
         4d:b0:2b:24:b2:21:a5:9c:93:b8:9f:e3:89:47:15:de:47:2f:
         d6:30:b3:6b:ab:09:8a:66:a5:36:38:1e:b3:12:cb:dc:a8:3a:
         87:96:20:02
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWJM+859UyVs5gfVj9wWPZlXw7cIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3REM4QkE1RjgyMEY5QzU5NkE0RUJBMjlDNzUxODAy
NENFMjhDQjAeFw0yNDA0MDQxMDQxNTJaFw0yNTA0MDMxMDQ2NTJaMDMxMTAvBgNV
BAMTKEJGRkUzMUMwOTBGNzc0NzYwRjVCRDZEOEE3RkI0REIwMjlDMDVERjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNI+gmz8CZqOOeihhjV0JXl0y
DfXMEz9fq1a6idAWKsoJaeZloALM8XzOkopjaKA5QshkwtLJ5KmTjRK4ssju36UK
GBKTejWVtMElBaeL4pYuNirGPPtCkPk/iM0wp0HBx0DNfLoWdh9PwsZRkUsHH3lI
8tmSosb86lzMoAX4Ch0g7Tcm8y/xGS6+4y89SiE4clUEMOYUhU07YbFYwuA7l9qo
uaNsvcjZFdy2v16QbsTDmhtFhTttHnFvEobGYhDPQOW0DZXOU3ehauaBXCS/IaXW
5WcXgGM8Zevyvbg+sNH2tfFf+fHvQ1dhiREGfl6P9pmv9k18aB+Halsv7aifAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUv/4xwJD3dHYPW9bYp/tNsCnAXfUwHwYDVR0j
BBgwFoAUcX3Iul+CD5xZak66KcdRgCTOKMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0IySkxkREVzQ01pYXczemtWa1lBTlhMN0NEeGJhTnpqV0duYjYyajhL
azcvMS83MTdEQzhCQTVGODIwRjlDNTk2QTRFQkEyOUM3NTE4MDI0Q0UyOENCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxN0RDOEJBNUY4MjBGOUM1
OTZBNEVCQTI5Qzc1MTgwMjRDRTI4Q0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdCMkpMZERFc0NNaWF3M3prVmtZQU5YTDdDRHhiYU56aldHbmI2Mmo4S2s3LzEv
MzIzODMwMzQzYTMxMzQzMzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUPDANBgkqhkiG9w0BAQsFAAOCAQEAgSlPs/1J
PxpPqE23CaLt0g/kRUZInglQ2ijGGm+O0NFu80xqzmx7PhUSKBHIdrO/QF2GckCa
J6Xhrk6FdLg/5Akc/1q5kCzcQBDCsS4WM6jS8o8m4imwCThWRwEGSogVRlr3Ola3
BgHRE1Fz+sx2e62u8GQKIeMRv/eBIwqOGd5XO3DDx5Cn1aeNSjZ+LrHf77usfLXV
7BrgGj0GWemKlcaHJj5RNKYxkzb4Esv7f3SoTdNipGiLpXDRpgP7HwidT/iDWB5y
dAImPNK0nJuRVHKv7PjmprZuTbArJLIhpZyTuJ/jiUcV3kcv1jCza6sJimalNjge
sxLL3Kg6h5YgAg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org