Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/323830343a326166383a3a2f33322d3438203d3e20323635313238.roa
File:                     323830343a326166383a3a2f33322d3438203d3e20323635313238.roa (raw, json)
Hash identifier:          +hOQ2uKrmegWSfceNWmFjCMRI3UNL/F4vpzxSY2bgCE=
Subject key identifier:   52:A9:DD:D1:AF:9A:31:9A:6C:2D:A8:F9:01:3F:CD:72:EB:D1:F5:6F
Certificate issuer:       /CN=B935CB53DB7E745249F1AF9043A9E01F3DC62EAC
Certificate serial:       72B548F1A3C5616B1516333790616B49983C557B
Authority key identifier: B9:35:CB:53:DB:7E:74:52:49:F1:AF:90:43:A9:E0:1F:3D:C6:2E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/323830343a326166383a3a2f33322d3438203d3e20323635313238.roa
Signing time:             Fri 14 Jul 2023 01:32:49 +0000
ROA not before:           Fri 14 Jul 2023 01:27:49 +0000
ROA not after:            Fri 12 Jul 2024 01:32:49 +0000
asID:                     265128
IP address blocks:        2804:2af8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b5:48:f1:a3:c5:61:6b:15:16:33:37:90:61:6b:49:98:3c:55:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B935CB53DB7E745249F1AF9043A9E01F3DC62EAC
        Validity
            Not Before: Jul 14 01:27:49 2023 GMT
            Not After : Jul 12 01:32:49 2024 GMT
        Subject: CN=52A9DDD1AF9A319A6C2DA8F9013FCD72EBD1F56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:af:59:5a:9e:2b:aa:fe:39:e6:53:01:03:
                    bf:ac:b6:68:0f:fa:db:3a:40:ec:95:7d:fc:7c:7e:
                    bb:7f:a5:7a:32:ae:38:b3:10:6a:76:bc:6f:17:dc:
                    5c:85:63:50:03:66:be:b5:16:23:39:fb:79:90:56:
                    4c:39:69:b8:9f:23:a7:c8:be:93:1d:87:37:0c:07:
                    a2:44:c7:46:8e:c7:f0:47:ed:56:41:51:0a:25:c6:
                    d6:40:1e:70:b9:67:67:66:be:83:b8:5c:6b:5b:d4:
                    07:72:a9:38:a5:8f:c4:4a:c5:04:d4:66:ca:62:7e:
                    4f:c3:2a:71:31:0e:0c:98:82:e0:92:5f:d1:f6:79:
                    db:a6:1b:49:f3:04:57:8c:bd:3d:a1:7e:46:3e:ac:
                    df:68:3e:3e:f7:d6:f6:b0:3c:60:f8:37:bb:a9:7b:
                    b1:78:fc:fc:56:49:81:b6:21:17:aa:ed:90:e4:4d:
                    2e:08:8a:77:37:c0:77:e5:1f:27:f3:5d:ac:f9:a2:
                    9e:8a:c2:32:27:b8:0d:d5:e2:d9:53:d4:8b:c4:ab:
                    44:63:02:f1:b6:7d:68:d5:37:8b:a2:39:84:ad:7a:
                    bd:33:19:1e:6f:19:4c:5a:e6:4a:fc:98:d6:71:f5:
                    13:72:b2:19:0a:91:7e:44:31:50:0d:b3:03:0c:94:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:DD:D1:AF:9A:31:9A:6C:2D:A8:F9:01:3F:CD:72:EB:D1:F5:6F
            X509v3 Authority Key Identifier:
                keyid:B9:35:CB:53:DB:7E:74:52:49:F1:AF:90:43:A9:E0:1F:3D:C6:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B935CB53DB7E745249F1AF9043A9E01F3DC62EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QgBtXKwEXrrr6QVearG7FUgmhWwxb9UGpq33Leorfc9/0/323830343a326166383a3a2f33322d3438203d3e20323635313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:9d:e5:2b:26:a6:8e:3a:eb:5a:69:a9:23:da:8d:bd:ee:ba:
         c0:c0:9c:72:8a:03:33:01:a3:1a:4d:32:6c:35:4f:aa:28:f6:
         78:4f:8b:25:67:39:26:1d:e1:59:03:a9:36:b1:a1:52:c2:38:
         8a:17:ef:31:15:01:14:d1:b7:ea:8c:76:0e:1e:dc:5a:04:7c:
         07:94:df:32:38:4a:13:00:28:e3:a5:88:3f:97:5b:24:10:ff:
         b0:dc:b1:45:63:c5:ad:be:4b:d2:7d:3f:84:41:a2:ff:fa:06:
         c6:b8:95:f8:59:94:8d:f1:42:c7:85:24:ca:f3:cd:1c:21:34:
         6d:14:51:f4:f3:cc:db:b6:41:b5:87:ce:3b:a2:a5:50:9c:88:
         36:a3:15:97:65:f8:7e:a0:92:c4:7a:a0:c3:d1:28:e6:7f:3a:
         5a:37:c9:aa:3e:80:94:e1:41:ed:62:c9:20:29:c6:13:ce:54:
         80:ea:4a:8b:11:9b:45:46:94:4c:9d:af:c1:5a:4e:2a:bb:ac:
         7d:8a:54:e6:fa:93:a2:8c:7c:ca:b5:30:14:4f:32:4d:e8:95:
         74:ec:13:9f:2f:18:3e:5d:fb:75:ee:3d:b5:3d:5e:14:65:ae:
         52:92:1c:6b:9c:c9:37:f9:d4:31:d9:e2:59:0d:6d:2a:32:3a:
         1e:18:05:60
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcrVI8aPFYWsVFjM3kGFrSZg8VXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkzNUNCNTNEQjdFNzQ1MjQ5RjFBRjkwNDNBOUUwMUYz
REM2MkVBQzAeFw0yMzA3MTQwMTI3NDlaFw0yNDA3MTIwMTMyNDlaMDMxMTAvBgNV
BAMTKDUyQTlEREQxQUY5QTMxOUE2QzJEQThGOTAxM0ZDRDcyRUJEMUY1NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWa9ZWp4rqv455lMBA7+stmgP
+ts6QOyVffx8frt/pXoyrjizEGp2vG8X3FyFY1ADZr61FiM5+3mQVkw5abifI6fI
vpMdhzcMB6JEx0aOx/BH7VZBUQolxtZAHnC5Z2dmvoO4XGtb1AdyqTilj8RKxQTU
Zspifk/DKnExDgyYguCSX9H2edumG0nzBFeMvT2hfkY+rN9oPj731vawPGD4N7up
e7F4/PxWSYG2IReq7ZDkTS4Iinc3wHflHyfzXaz5op6KwjInuA3V4tlT1IvEq0Rj
AvG2fWjVN4uiOYSter0zGR5vGUxa5kr8mNZx9RNyshkKkX5EMVANswMMlAGRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUqnd0a+aMZpsLaj5AT/NcuvR9W8wHwYDVR0j
BBgwFoAUuTXLU9t+dFJJ8a+QQ6ngHz3GLqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FnQnRYS3dFWHJycjZRVmVhckc3RlVnbWhXd3hiOVVHcHEzM0xlb3Jm
YzkvMC9COTM1Q0I1M0RCN0U3NDUyNDlGMUFGOTA0M0E5RTAxRjNEQzYyRUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5MzVDQjUzREI3RTc0NTI0
OUYxQUY5MDQzQTlFMDFGM0RDNjJFQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRZ0J0WEt3RVhycnI2UVZlYXJHN0ZVZ21oV3d4YjlVR3BxMzNMZW9yZmM5LzAv
MzIzODMwMzQzYTMyNjE2NjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQq+DANBgkqhkiG9w0BAQsFAAOCAQEAQp3lKyam
jjrrWmmpI9qNve66wMCccooDMwGjGk0ybDVPqij2eE+LJWc5Jh3hWQOpNrGhUsI4
ihfvMRUBFNG36ox2Dh7cWgR8B5TfMjhKEwAo46WIP5dbJBD/sNyxRWPFrb5L0n0/
hEGi//oGxriV+FmUjfFCx4UkyvPNHCE0bRRR9PPM27ZBtYfOO6KlUJyINqMVl2X4
fqCSxHqgw9Eo5n86WjfJqj6AlOFB7WLJICnGE85UgOpKixGbRUaUTJ2vwVpOKrus
fYpU5vqToox8yrUwFE8yTeiVdOwTny8YPl37de49tT1eFGWuUpIca5zJN/nUMdni
WQ1tKjI6HhgFYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org