Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a383030303a3a2f33342d3334203d3e20323633363633.roa
File:                     323830343a313132633a383030303a3a2f33342d3334203d3e20323633363633.roa (raw, json)
Hash identifier:          Zx9Z5NlKWsZ8UNGoWM2SxpZKP+xQraNLNXb8Xdw3MgQ=
Subject key identifier:   48:66:A3:2A:23:5B:7C:3A:AA:26:A0:C4:AB:7D:5A:52:75:21:BB:61
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       5D2D98384B757E8412339F5925A27055CA4775F2
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a383030303a3a2f33342d3334203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:17:20 +0000
ROA not before:           Mon 04 Mar 2024 16:12:20 +0000
ROA not after:            Mon 03 Mar 2025 16:17:20 +0000
asID:                     263663
IP address blocks:        2804:112c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2d:98:38:4b:75:7e:84:12:33:9f:59:25:a2:70:55:ca:47:75:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:12:20 2024 GMT
            Not After : Mar  3 16:17:20 2025 GMT
        Subject: CN=4866A32A235B7C3AAA26A0C4AB7D5A527521BB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:b4:18:6a:92:7a:c1:a3:01:f1:f5:f5:2f:
                    27:25:a8:2b:a6:54:27:68:63:97:56:fc:8f:3e:96:
                    2f:4a:66:bd:af:2a:59:1e:1b:85:74:dd:cd:08:80:
                    e6:f3:f7:d4:94:1f:06:61:42:5a:ac:70:58:96:b3:
                    b2:62:d1:06:81:6e:bf:e3:5b:99:e5:ad:3b:9c:e0:
                    4c:a2:ce:d3:6b:76:2a:1f:53:8f:c4:15:cf:ca:0a:
                    08:4e:af:ee:11:83:66:b8:28:39:05:6a:52:94:8f:
                    8f:e3:a1:e0:c6:52:df:36:66:b8:3d:69:56:34:9f:
                    73:1c:b4:2f:2e:87:0c:6f:34:fa:9d:c0:01:7a:e1:
                    0f:3a:89:48:b2:7f:04:53:64:0b:95:86:4a:42:4f:
                    16:d5:3b:93:7b:d6:f6:e9:ff:1f:9a:db:04:c1:6d:
                    fa:4f:ee:b5:ec:dd:ab:a2:0c:9a:5b:77:f3:10:e6:
                    13:e2:c4:04:df:fa:6f:82:84:37:dd:29:2a:cb:00:
                    6e:86:f7:7f:aa:8e:f8:cf:00:f9:d6:85:62:f9:d7:
                    13:90:d9:86:97:c1:42:ab:b4:24:30:ef:fe:4c:5d:
                    bf:05:27:75:91:8b:70:b4:9f:c7:8d:2c:d9:ca:b0:
                    c6:d3:7c:e5:ad:85:12:e0:23:fc:fa:a7:32:bb:cc:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:66:A3:2A:23:5B:7C:3A:AA:26:A0:C4:AB:7D:5A:52:75:21:BB:61
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a383030303a3a2f33342d3334203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:112c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:e1:38:92:0f:1c:86:2f:a9:62:ee:19:b7:cb:f3:53:ea:d6:
         07:c7:40:4e:2f:22:d7:40:73:80:b8:c7:37:b7:c7:f2:55:81:
         be:c8:b5:c0:72:03:3d:79:6d:76:44:3f:3c:c9:e2:24:e6:a4:
         02:79:01:a7:eb:6c:54:17:b6:9b:a8:92:ac:9e:5b:8e:22:d1:
         fa:d4:b9:67:6d:e5:af:1e:db:09:d8:5f:95:fb:c7:b1:95:97:
         0c:0e:62:7f:55:97:d2:57:08:58:0b:e9:78:f3:13:fc:44:87:
         b2:79:62:39:35:62:8c:90:87:b1:41:61:60:c2:14:9e:3e:c9:
         04:2a:a2:25:96:6e:16:88:e5:08:db:4a:66:4c:86:ed:28:fb:
         b2:40:54:ca:26:21:e4:44:3a:3a:ba:58:96:12:e0:31:e6:99:
         c6:bb:77:df:9d:5e:f1:20:cf:d7:63:2e:d2:f4:75:2c:2b:62:
         df:fb:4a:56:dd:45:12:02:7d:f2:5c:5e:f6:98:57:38:dd:c6:
         92:c4:b9:05:b2:40:d6:dd:17:7f:de:0a:0a:22:bf:38:aa:f6:
         3b:70:4d:c3:1a:f2:cf:ca:7a:56:32:e0:da:cb:82:8f:9f:1a:
         9e:f7:4d:05:04:92:b7:ee:ac:88:2d:54:e9:e2:61:02:22:3e:
         81:94:96:b0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXS2YOEt1foQSM59ZJaJwVcpHdfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM2REYzNEJERTJFNDlFOTY4MjU5QTVEQkFDNTRFQ0Uz
QjE1QTA3ODAeFw0yNDAzMDQxNjEyMjBaFw0yNTAzMDMxNjE3MjBaMDMxMTAvBgNV
BAMTKDQ4NjZBMzJBMjM1QjdDM0FBQTI2QTBDNEFCN0Q1QTUyNzUyMUJCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKLQYapJ6waMB8fX1LyclqCum
VCdoY5dW/I8+li9KZr2vKlkeG4V03c0IgObz99SUHwZhQlqscFiWs7Ji0QaBbr/j
W5nlrTuc4EyiztNrdiofU4/EFc/KCghOr+4Rg2a4KDkFalKUj4/joeDGUt82Zrg9
aVY0n3MctC8uhwxvNPqdwAF64Q86iUiyfwRTZAuVhkpCTxbVO5N71vbp/x+a2wTB
bfpP7rXs3auiDJpbd/MQ5hPixATf+m+ChDfdKSrLAG6G93+qjvjPAPnWhWL51xOQ
2YaXwUKrtCQw7/5MXb8FJ3WRi3C0n8eNLNnKsMbTfOWthRLgI/z6pzK7zLxjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSGajKiNbfDqqJqDEq31aUnUhu2EwHwYDVR0j
BBgwFoAULG3zS94uSeloJZpdusVOzjsVoHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29WcmNlbTFpUFhISlRjRUVxcTF0YmVEVFZYVHNzNDV4aXpMaDJyUEpl
dUMvMC8yQzZERjM0QkRFMkU0OUU5NjgyNTlBNURCQUM1NEVDRTNCMTVBMDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDNkRGMzRCREUyRTQ5RTk2
ODI1OUE1REJBQzU0RUNFM0IxNUEwNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvVnJjZW0xaVBYSEpUY0VFcXExdGJlRFRWWFRzczQ1eGl6TGgyclBKZXVDLzAv
MzIzODMwMzQzYTMxMzEzMjYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEESyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCN4TiSDxyGL6li7hm3y/NT6tYHx0BOLyLXQHOAuMc3t8fyVYG+yLXAcgM9
eW12RD88yeIk5qQCeQGn62xUF7abqJKsnluOItH61LlnbeWvHtsJ2F+V+8exlZcM
DmJ/VZfSVwhYC+l48xP8RIeyeWI5NWKMkIexQWFgwhSePskEKqIllm4WiOUI20pm
TIbtKPuyQFTKJiHkRDo6uliWEuAx5pnGu3ffnV7xIM/XYy7S9HUsK2Lf+0pW3UUS
An3yXF72mFc43caSxLkFskDW3Rd/3goKIr84qvY7cE3DGvLPynpWMuDay4KPnxqe
900FBJK37qyILVTp4mECIj6BlJaw
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org