Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          yQS7SbgqH+Bv1b6qA+7sAnHRqNwWYX+WGSgaTF0bPaE=
Subject key identifier:   DA:CC:7A:DA:6A:BF:3B:35:B8:C3:52:36:2E:7B:9F:C9:45:03:7F:E2
Certificate issuer:       /CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
Certificate serial:       25E0E378F1E83F52056BB4FF5C11FFFE2139982D
Authority key identifier: 99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Mon 15 Jan 2024 00:20:36 +0000
ROA not before:           Mon 15 Jan 2024 00:15:36 +0000
ROA not after:            Mon 13 Jan 2025 00:20:36 +0000
asID:                     265393
IP address blocks:        2804:3364:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e0:e3:78:f1:e8:3f:52:05:6b:b4:ff:5c:11:ff:fe:21:39:98:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
        Validity
            Not Before: Jan 15 00:15:36 2024 GMT
            Not After : Jan 13 00:20:36 2025 GMT
        Subject: CN=DACC7ADA6ABF3B35B8C352362E7B9FC945037FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:57:1c:80:38:24:98:d7:34:b6:38:d9:8d:3e:
                    65:0b:5b:2d:50:9f:2c:b1:ab:c9:db:f0:60:74:82:
                    29:50:83:78:e3:3c:b9:fe:87:6f:17:52:c7:3e:cb:
                    2c:84:61:97:79:8f:df:0d:b6:ce:6a:9b:14:63:3b:
                    87:ec:67:ab:fd:06:97:4f:6a:82:9d:b0:db:d9:9d:
                    b4:ca:19:b7:1b:39:5f:32:73:3b:a0:5f:0d:da:90:
                    1d:cc:96:e0:d3:52:76:1c:87:cd:f3:13:94:f1:25:
                    3b:d6:6d:9b:70:f6:1d:04:0b:1f:b0:3a:ac:82:49:
                    d9:f5:e8:dd:95:c6:f1:9a:f4:39:40:2a:9e:ab:fd:
                    dc:76:4f:74:71:c2:88:b3:b0:fc:18:2b:76:9b:59:
                    e9:8a:53:6e:37:4d:d0:1c:d5:77:45:d0:9d:5d:18:
                    9e:5e:b1:f1:d2:58:8f:4b:91:6c:ca:a2:00:a2:77:
                    ce:e9:c7:62:a5:85:6a:02:ff:b4:34:23:13:30:de:
                    6a:43:c5:38:c2:3e:bf:c2:c1:b9:55:21:96:cf:4f:
                    39:c4:c5:7f:5f:d4:2b:6b:f6:6f:b8:9e:a4:75:ad:
                    0e:f0:88:0e:c3:e7:96:7a:9c:3d:b2:64:e6:3e:1a:
                    d1:4e:d1:17:16:a1:e3:97:4b:96:81:b2:da:ae:1e:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CC:7A:DA:6A:BF:3B:35:B8:C3:52:36:2E:7B:9F:C9:45:03:7F:E2
            X509v3 Authority Key Identifier:
                keyid:99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:c2:30:fa:72:80:29:75:c3:d6:ca:cc:eb:0c:61:5d:98:
         c8:ba:74:f4:df:aa:d9:8d:6c:a6:26:1a:93:ec:b5:d2:af:35:
         1e:ca:3c:b8:0a:fb:e4:06:a4:cb:88:69:e3:b0:2f:02:cc:3c:
         f2:0c:b5:9c:e8:ef:14:43:42:78:04:ba:ca:92:c9:d9:61:3f:
         a1:05:b1:04:c9:e3:e4:34:cf:88:df:ef:e4:3a:9d:cf:57:03:
         4a:95:21:34:a1:d0:d9:a3:d0:75:05:5b:f8:83:86:03:47:1a:
         3e:f7:c5:d7:67:54:09:cb:a4:40:29:ea:4a:6d:1d:c6:43:d7:
         83:0c:24:bc:4e:46:0d:55:d7:06:f1:d7:b4:8f:9f:7e:6d:28:
         93:81:c9:c6:38:53:ee:75:67:81:90:70:0d:e0:fa:13:6f:b6:
         a3:bf:be:9b:1f:a7:e9:6f:20:a6:b0:46:e5:9e:87:42:51:5e:
         8b:76:71:dd:3f:e4:a5:4a:c1:09:e6:48:31:df:0f:df:68:83:
         af:c1:79:37:f1:2c:54:07:e5:7a:8d:7e:45:d5:ed:f6:21:cf:
         87:e4:82:bb:60:d1:de:8e:ff:ee:8f:e0:a5:ba:9e:8f:c2:77:
         ce:4d:39:44:1b:96:c6:df:57:1e:1f:34:9e:c0:4e:4d:d0:09:
         d2:6d:dc:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJeDjePHoP1IFa7T/XBH//iE5mC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3QzE1QzJBNDQ0NTFDREJEMkUxQTg2QkRGOEU1Q0U5
NUNDNkExQzAeFw0yNDAxMTUwMDE1MzZaFw0yNTAxMTMwMDIwMzZaMDMxMTAvBgNV
BAMTKERBQ0M3QURBNkFCRjNCMzVCOEMzNTIzNjJFN0I5RkM5NDUwMzdGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuVxyAOCSY1zS2ONmNPmULWy1Q
nyyxq8nb8GB0gilQg3jjPLn+h28XUsc+yyyEYZd5j98Nts5qmxRjO4fsZ6v9BpdP
aoKdsNvZnbTKGbcbOV8yczugXw3akB3MluDTUnYch83zE5TxJTvWbZtw9h0ECx+w
OqyCSdn16N2VxvGa9DlAKp6r/dx2T3RxwoizsPwYK3abWemKU243TdAc1XdF0J1d
GJ5esfHSWI9LkWzKogCid87px2KlhWoC/7Q0IxMw3mpDxTjCPr/CwblVIZbPTznE
xX9f1Ctr9m+4nqR1rQ7wiA7D55Z6nD2yZOY+GtFO0RcWoeOXS5aBstquHuAlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2sx62mq/OzW4w1I2LnufyUUDf+IwHwYDVR0j
BBgwFoAUmXwVwqREUc29LhqGvfjlzpXMahwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMi85OTdDMTVDMkE0NDQ1MUNEQkQyRTFBODZCREY4RTVDRTk1Q0M2QTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5N0MxNUMyQTQ0NDUxQ0RC
RDJFMUE4NkJERjhFNUNFOTVDQzZBMUMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzIv
MzIzODMwMzQzYTMzMzMzNjM0M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzUzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBDNkAjANBgkqhkiG9w0BAQsFAAOC
AQEAWM/CMPpygCl1w9bKzOsMYV2YyLp09N+q2Y1spiYak+y10q81Hso8uAr75Aak
y4hp47AvAsw88gy1nOjvFENCeAS6ypLJ2WE/oQWxBMnj5DTPiN/v5Dqdz1cDSpUh
NKHQ2aPQdQVb+IOGA0caPvfF12dUCcukQCnqSm0dxkPXgwwkvE5GDVXXBvHXtI+f
fm0ok4HJxjhT7nVngZBwDeD6E2+2o7++mx+n6W8gprBG5Z6HQlFei3Zx3T/kpUrB
CeZIMd8P32iDr8F5N/EsVAfleo1+RdXt9iHPh+SCu2DR3o7/7o/gpbqej8J3zk05
RBuWxt9XHh80nsBOTdAJ0m3ctw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org