Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a3a2f33342d3334203d3e20323633363532.roa
File:                     323830343a313064633a3a2f33342d3334203d3e20323633363532.roa (raw, json)
Hash identifier:          OKcVsT0G7S1grL0ar7CkelzPBpywxIrunkVKLnMa7QI=
Subject key identifier:   01:EB:0F:0B:C8:A1:F4:07:AD:B8:8E:FC:4A:3F:CD:BA:A7:23:BF:9F
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       5405D5978268C2742ED0BCAC8A35FC315EE97AAC
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a3a2f33342d3334203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:58 +0000
ROA not before:           Thu 16 Nov 2023 15:23:58 +0000
ROA not after:            Thu 14 Nov 2024 15:28:58 +0000
asID:                     263652
IP address blocks:        2804:10dc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:05:d5:97:82:68:c2:74:2e:d0:bc:ac:8a:35:fc:31:5e:e9:7a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:58 2023 GMT
            Not After : Nov 14 15:28:58 2024 GMT
        Subject: CN=01EB0F0BC8A1F407ADB88EFC4A3FCDBAA723BF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:47:02:a9:9b:fb:bd:36:59:cd:37:40:20:
                    70:41:c9:2a:ec:25:94:4e:de:30:f6:fc:bf:e1:88:
                    ac:6c:be:5c:5e:a7:f1:5c:3d:81:ff:1f:f6:43:e2:
                    ea:08:90:2b:62:e3:37:2a:53:6f:c1:72:8d:87:c9:
                    ad:52:13:8e:c5:bc:e7:63:28:f3:98:56:9c:0f:9a:
                    bd:5b:3a:5b:00:e2:8e:07:be:78:73:b4:3a:aa:62:
                    d3:8a:35:94:73:ed:73:0f:50:f8:25:46:2b:93:52:
                    47:e4:54:e5:bd:f5:7c:11:7f:59:7b:c4:5b:87:e9:
                    fa:83:bd:bc:96:f5:1b:20:30:26:66:c9:75:44:8f:
                    f5:e0:dd:85:81:55:67:48:ec:81:1e:e5:91:68:a1:
                    7c:a5:da:b7:02:83:2e:55:63:b6:db:93:04:8d:6d:
                    24:4c:5f:33:b2:11:f0:d1:e8:76:d4:37:2c:22:8c:
                    06:8a:a5:5c:cd:90:5a:d7:cd:a0:cd:b2:5b:45:bd:
                    93:59:3c:07:a1:40:2c:ff:80:82:0a:c7:79:ed:ea:
                    64:06:e0:8d:ec:c1:bc:c1:76:45:f3:76:fc:20:41:
                    06:86:dc:33:3b:10:d9:8a:17:a0:8a:4e:d1:3b:fb:
                    9c:6e:f3:0e:5e:5b:b8:37:dc:41:94:6a:5f:26:b0:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:0F:0B:C8:A1:F4:07:AD:B8:8E:FC:4A:3F:CD:BA:A7:23:BF:9F
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a3a2f33342d3334203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:bb:a5:9d:89:26:65:8d:b1:a1:f8:d0:c3:f7:8a:9e:04:
         26:70:b2:32:88:ec:14:e7:53:b3:76:12:3d:de:1f:ee:67:62:
         3c:55:42:8e:33:d2:8b:12:1e:75:c8:e3:2f:25:44:b6:7d:d2:
         22:12:da:fb:f3:bc:ce:e2:cd:ed:bd:c7:71:1d:0e:cf:14:60:
         b3:d9:ed:c9:27:a7:e2:b0:83:b0:a9:29:15:e8:e1:a4:82:81:
         34:c2:08:ff:11:16:fa:c2:d6:84:24:29:ef:34:3d:a7:d8:6f:
         e6:d1:6a:74:c5:77:f1:1b:e1:5e:83:ed:ec:f6:e2:57:29:6c:
         de:f9:53:32:a1:46:6a:1c:d4:f1:8b:8b:77:4d:4e:7e:30:98:
         f8:05:27:5a:da:2b:6b:20:d6:4e:d8:b6:8a:44:d7:7c:f9:18:
         c0:5a:be:6f:1a:af:c9:49:b2:36:ff:40:06:47:3a:9a:6d:64:
         63:70:19:36:12:c6:b3:76:da:cf:25:0c:c1:e5:18:b2:97:40:
         96:2b:14:5a:3b:f9:8e:69:df:67:4f:70:64:9b:d0:5f:58:4f:
         e1:f8:bc:ff:40:f0:4e:38:47:86:25:2d:1a:c6:15:ef:11:0c:
         b4:a6:a1:01:e3:e2:e8:2a:c2:5b:dc:81:35:9d:0e:b8:0e:7e:
         12:0b:63:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVAXVl4JownQu0LysijX8MV7peqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA3MkZCMzhCRTBGRjQwRUMxNzI5NUIxNjM1MkM0MTg0
MTA2RUZBODAeFw0yMzExMTYxNTIzNThaFw0yNDExMTQxNTI4NThaMDMxMTAvBgNV
BAMTKDAxRUIwRjBCQzhBMUY0MDdBREI4OEVGQzRBM0ZDREJBQTcyM0JGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyb0cCqZv7vTZZzTdAIHBBySrs
JZRO3jD2/L/hiKxsvlxep/FcPYH/H/ZD4uoIkCti4zcqU2/Bco2Hya1SE47FvOdj
KPOYVpwPmr1bOlsA4o4HvnhztDqqYtOKNZRz7XMPUPglRiuTUkfkVOW99XwRf1l7
xFuH6fqDvbyW9RsgMCZmyXVEj/Xg3YWBVWdI7IEe5ZFooXyl2rcCgy5VY7bbkwSN
bSRMXzOyEfDR6HbUNywijAaKpVzNkFrXzaDNsltFvZNZPAehQCz/gIIKx3nt6mQG
4I3swbzBdkXzdvwgQQaG3DM7ENmKF6CKTtE7+5xu8w5eW7g33EGUal8msLtjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAesPC8ih9AetuI78Sj/Nuqcjv58wHwYDVR0j
BBgwFoAUEHL7OL4P9A7BcpWxY1LEGEEG76gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1kzdWM1Q0xrOUhGc00yRFN3ZHRRb2hWQ1lCd1NBdDd3YlE0TVFoZWhL
OW8vMS8xMDcyRkIzOEJFMEZGNDBFQzE3Mjk1QjE2MzUyQzQxODQxMDZFRkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNzJGQjM4QkUwRkY0MEVD
MTcyOTVCMTYzNTJDNDE4NDEwNkVGQTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZM3VjNUNMazlIRnNNMkRTd2R0UW9oVkNZQndTQXQ3d2JRNE1RaGVoSzlvLzEv
MzIzODMwMzQzYTMxMzA2NDYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMz
MzYzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQQ3AAwDQYJKoZIhvcNAQELBQADggEBAB38u6Wd
iSZljbGh+NDD94qeBCZwsjKI7BTnU7N2Ej3eH+5nYjxVQo4z0osSHnXI4y8lRLZ9
0iIS2vvzvM7ize29x3EdDs8UYLPZ7cknp+Kwg7CpKRXo4aSCgTTCCP8RFvrC1oQk
Ke80PafYb+bRanTFd/Eb4V6D7ez24lcpbN75UzKhRmoc1PGLi3dNTn4wmPgFJ1ra
K2sg1k7YtopE13z5GMBavm8ar8lJsjb/QAZHOpptZGNwGTYSxrN22s8lDMHlGLKX
QJYrFFo7+Y5p32dPcGSb0F9YT+H4vP9A8E44R4YlLRrGFe8RDLSmoQHj4ugqwlvc
gTWdDrgOfhILY7I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org