Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/323830343a336138633a3a2f33322d3332203d3e20323636303935.roa
File:                     323830343a336138633a3a2f33322d3332203d3e20323636303935.roa (raw, json)
Hash identifier:          wERJOqOD50BkmiBu/sxUre9yxaKVLGZ/DcjJCPSxcSM=
Subject key identifier:   C6:62:3C:83:64:BA:6A:88:EA:37:84:FB:E7:72:D6:F2:59:48:F1:A6
Certificate issuer:       /CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
Certificate serial:       60EC6B90D1BBB3B48771B0D995BF6686E9FCF6AF
Authority key identifier: 2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/323830343a336138633a3a2f33322d3332203d3e20323636303935.roa
Signing time:             Wed 10 Jan 2024 14:17:58 +0000
ROA not before:           Wed 10 Jan 2024 14:12:58 +0000
ROA not after:            Wed 08 Jan 2025 14:17:58 +0000
asID:                     266095
IP address blocks:        2804:3a8c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ec:6b:90:d1:bb:b3:b4:87:71:b0:d9:95:bf:66:86:e9:fc:f6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
        Validity
            Not Before: Jan 10 14:12:58 2024 GMT
            Not After : Jan  8 14:17:58 2025 GMT
        Subject: CN=C6623C8364BA6A88EA3784FBE772D6F25948F1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:1c:f4:e6:ee:15:e7:7c:ce:74:8f:e9:02:
                    31:2e:94:95:0b:35:6e:0b:8d:43:c3:da:92:d3:7c:
                    77:c1:71:39:c4:36:ae:c3:a2:64:4a:d2:a5:0f:8e:
                    ad:69:b7:dd:60:81:12:12:b1:75:e7:64:5f:b2:a0:
                    16:d8:aa:95:b4:8b:a3:07:29:7a:14:72:63:38:8d:
                    8b:cb:5b:ca:1f:ad:b8:09:d2:5c:3a:f1:cb:ca:da:
                    f8:c1:e0:35:71:09:73:47:33:06:2c:9f:c0:f0:a5:
                    23:2d:8d:41:cd:70:30:81:ad:e7:90:0d:1a:24:b1:
                    a0:6d:5a:f9:f5:3d:ec:00:f9:96:bd:11:48:c7:b3:
                    de:7f:d7:f5:eb:76:1b:e0:20:e5:22:d9:fb:09:2d:
                    1e:b5:f2:ff:de:9a:bf:6e:db:9f:82:8e:9f:95:e8:
                    1d:5d:e2:5f:3f:f8:63:c3:dc:d6:81:2a:ff:d4:64:
                    33:29:73:80:bf:2c:72:40:75:bb:55:3f:23:d5:65:
                    b7:2a:dd:ec:24:c0:6b:d4:b0:86:61:44:e4:a3:27:
                    7d:bf:ca:2d:a3:f0:18:35:6c:bc:cf:40:bf:4b:90:
                    12:c9:07:46:ce:af:25:a8:63:9e:be:42:2c:7b:ae:
                    ef:60:81:4f:82:7b:bb:44:92:94:1e:ec:aa:2e:d3:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:62:3C:83:64:BA:6A:88:EA:37:84:FB:E7:72:D6:F2:59:48:F1:A6
            X509v3 Authority Key Identifier:
                keyid:2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/323830343a336138633a3a2f33322d3332203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:3f:f9:d7:32:cc:9e:98:de:97:9d:e1:5f:f8:32:04:24:89:
         36:63:3b:7b:e0:6d:20:d7:12:47:48:21:c7:3d:83:bd:98:59:
         7c:fe:f1:d1:ff:1c:3c:9a:78:04:89:7d:79:2e:1f:d9:00:53:
         14:d9:38:e0:94:b2:58:9f:01:86:2e:0d:d9:27:a8:f0:83:22:
         bc:45:c8:cb:7f:2f:58:d8:1f:90:b3:38:38:ea:fe:e0:2d:35:
         27:60:b9:55:6b:57:30:94:f9:b9:bf:c0:5a:83:be:5c:ee:19:
         fb:64:da:08:f9:68:5b:60:16:8e:00:c6:e8:15:40:8a:4c:e8:
         c6:ee:39:82:8f:14:45:bf:9f:dd:ed:3b:27:81:c7:e0:f6:a5:
         a0:0c:4a:44:bd:cf:70:10:a5:7d:54:53:b6:b3:46:50:de:f8:
         a0:99:c4:e1:35:93:c4:77:2e:fc:df:75:a0:f7:7c:0a:22:d5:
         bd:2e:91:f1:58:03:82:f2:52:de:f4:c3:11:ff:53:de:ac:ea:
         de:b8:d5:e8:d8:47:77:fa:e3:ef:ef:70:e2:19:f5:24:9a:07:
         5c:d7:f6:9f:ea:19:78:07:40:80:9b:56:cc:bf:9c:cb:a6:5e:
         2c:0a:f8:f6:de:38:56:65:07:be:b1:95:9e:29:67:e8:eb:e4:
         7c:be:69:cb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYOxrkNG7s7SHcbDZlb9mhun89q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNDQkNFMEYwNUE5NzFCMDE3MUU4ODdCMjVFNDZBM0I5
NEEwMDMwRjAeFw0yNDAxMTAxNDEyNThaFw0yNTAxMDgxNDE3NThaMDMxMTAvBgNV
BAMTKEM2NjIzQzgzNjRCQTZBODhFQTM3ODRGQkU3NzJENkYyNTk0OEYxQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkRz05u4V53zOdI/pAjEulJUL
NW4LjUPD2pLTfHfBcTnENq7DomRK0qUPjq1pt91ggRISsXXnZF+yoBbYqpW0i6MH
KXoUcmM4jYvLW8ofrbgJ0lw68cvK2vjB4DVxCXNHMwYsn8DwpSMtjUHNcDCBreeQ
DRoksaBtWvn1PewA+Za9EUjHs95/1/XrdhvgIOUi2fsJLR618v/emr9u25+Cjp+V
6B1d4l8/+GPD3NaBKv/UZDMpc4C/LHJAdbtVPyPVZbcq3ewkwGvUsIZhROSjJ32/
yi2j8Bg1bLzPQL9LkBLJB0bOryWoY56+Qix7ru9ggU+Ce7tEkpQe7Kou01d1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxmI8g2S6aojqN4T753LW8llI8aYwHwYDVR0j
BBgwFoAULMvODwWpcbAXHoh7JeRqO5SgAw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN21NejU1UHZQdDUyN0o5Q3pYQVVoZGJHMndCa3dWOXlaUFFHYmtGSm9N
MkEvMC8yQ0NCQ0UwRjA1QTk3MUIwMTcxRTg4N0IyNUU0NkEzQjk0QTAwMzBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDQ0JDRTBGMDVBOTcxQjAx
NzFFODg3QjI1RTQ2QTNCOTRBMDAzMEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdtTXo1NVB2UHQ1MjdKOUN6WEFVaGRiRzJ3Qmt3Vjl5WlBRR2JrRkpvTTJBLzAv
MzIzODMwMzQzYTMzNjEzODYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzAzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ6jDANBgkqhkiG9w0BAQsFAAOCAQEALj/51zLM
npjel53hX/gyBCSJNmM7e+BtINcSR0ghxz2DvZhZfP7x0f8cPJp4BIl9eS4f2QBT
FNk44JSyWJ8Bhi4N2Seo8IMivEXIy38vWNgfkLM4OOr+4C01J2C5VWtXMJT5ub/A
WoO+XO4Z+2TaCPloW2AWjgDG6BVAikzoxu45go8URb+f3e07J4HH4PaloAxKRL3P
cBClfVRTtrNGUN74oJnE4TWTxHcu/N91oPd8CiLVvS6R8VgDgvJS3vTDEf9T3qzq
3rjV6NhHd/rj7+9w4hn1JJoHXNf2n+oZeAdAgJtWzL+cy6ZeLAr49t44VmUHvrGV
niln6OvkfL5pyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org