Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/323830343a316463343a3a2f33322d3335203d3e20323634333932.roa
File:                     323830343a316463343a3a2f33322d3335203d3e20323634333932.roa (raw, json)
Hash identifier:          PRRDFwApD25ZiPs2R7DqpxjLWr2c/F1xqSz6Wz8oDCI=
Subject key identifier:   E4:E8:6C:5A:77:BF:BE:D8:C2:82:3E:BF:D2:15:7F:1B:63:40:61:36
Certificate issuer:       /CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
Certificate serial:       03DAB538B4E4B8A10ACD071BB0BE3A09E67079D4
Authority key identifier: 13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/323830343a316463343a3a2f33322d3335203d3e20323634333932.roa
Signing time:             Tue 07 Nov 2023 15:19:12 +0000
ROA not before:           Tue 07 Nov 2023 15:14:12 +0000
ROA not after:            Tue 05 Nov 2024 15:19:12 +0000
asID:                     264392
IP address blocks:        2804:1dc4::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:da:b5:38:b4:e4:b8:a1:0a:cd:07:1b:b0:be:3a:09:e6:70:79:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
        Validity
            Not Before: Nov  7 15:14:12 2023 GMT
            Not After : Nov  5 15:19:12 2024 GMT
        Subject: CN=E4E86C5A77BFBED8C2823EBFD2157F1B63406136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:34:14:65:ee:12:31:19:b2:3c:5b:50:bb:
                    b0:79:81:b0:ca:a4:b3:86:0a:5b:ac:fb:99:27:fd:
                    16:64:bf:89:09:67:fe:a7:b7:6f:87:11:d2:82:b6:
                    4c:a7:2b:82:02:52:af:de:bd:48:86:8f:74:00:7c:
                    ef:dc:bf:5d:4c:28:15:e8:11:57:5f:31:2c:e0:f4:
                    3a:41:27:7d:17:ff:9e:ae:cb:39:c4:58:b1:1d:36:
                    98:82:11:d9:8e:0e:e9:cb:88:a6:77:10:8a:b5:e7:
                    79:09:7a:32:a7:01:3c:4c:07:02:02:73:e0:2c:60:
                    ee:b9:fc:82:18:84:53:f8:5b:0e:bb:57:d1:bd:49:
                    ca:17:92:09:d1:ad:50:fb:5f:9d:2b:72:6a:c6:38:
                    fa:a9:35:76:71:3a:78:1f:79:f0:c1:a2:95:4c:57:
                    fd:6d:8b:7f:c6:e4:c0:44:9d:d1:df:ea:a7:e4:49:
                    4f:7f:38:a8:bd:eb:e1:6e:63:7f:80:45:5f:ff:ce:
                    11:5e:cb:c0:e4:ce:7d:12:60:8b:b3:05:ec:96:b0:
                    a6:2c:29:84:d7:6f:27:57:84:80:57:f5:33:c2:32:
                    71:d2:2f:68:12:87:57:9f:87:1c:02:54:36:f4:6a:
                    c3:f3:c3:b9:19:d2:ae:13:c0:91:2f:e0:db:e5:e8:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E8:6C:5A:77:BF:BE:D8:C2:82:3E:BF:D2:15:7F:1B:63:40:61:36
            X509v3 Authority Key Identifier:
                keyid:13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/323830343a316463343a3a2f33322d3335203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:19:cc:62:47:aa:c9:93:98:51:dc:d3:23:16:7d:20:11:
         03:6c:9c:d7:f2:cb:22:06:4b:e3:d5:f5:a3:7b:e9:10:f7:d4:
         78:61:0f:5e:33:da:3d:48:9a:31:ab:47:f2:9d:b2:57:d3:a1:
         a0:1e:2e:cf:e6:02:29:cb:66:ec:c1:3f:fb:e6:19:28:53:3d:
         39:4c:8a:6d:e0:11:28:bf:b9:60:92:0d:06:e8:d4:33:c3:2a:
         ec:4e:27:84:7d:66:de:ca:79:ba:9c:7f:c3:1f:5a:e9:d6:60:
         4a:96:11:7e:16:62:f6:26:e0:12:36:cc:53:88:7d:df:b3:f7:
         55:a3:17:b0:4b:0e:94:b8:99:15:90:47:b0:87:3f:b7:3b:b2:
         19:2d:70:2a:80:64:39:87:be:ba:e2:70:10:da:b4:0c:1b:a1:
         74:a3:19:1f:70:71:d3:d7:48:ec:f1:45:d7:a9:1a:0d:f6:dd:
         0a:a0:30:98:e0:b5:c2:24:51:64:e1:f5:f1:7b:5d:da:4c:d4:
         5c:a3:b4:6b:d8:1d:19:c4:2f:7d:e3:18:53:40:4d:2e:e0:30:
         2f:7c:8e:56:1f:e8:07:ef:af:01:00:c1:34:51:45:fa:f5:4c:
         af:9d:89:77:50:3c:50:b5:36:57:bd:58:1b:3e:3b:49:8a:de:
         03:66:a6:9f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUA9q1OLTkuKEKzQcbsL46CeZwedQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwQjk2OEIxRURDMzI5RTQ2MEM1NTAwNkNDQjVBOUQz
OTZGRUYyOTAeFw0yMzExMDcxNTE0MTJaFw0yNDExMDUxNTE5MTJaMDMxMTAvBgNV
BAMTKEU0RTg2QzVBNzdCRkJFRDhDMjgyM0VCRkQyMTU3RjFCNjM0MDYxMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEjQUZe4SMRmyPFtQu7B5gbDK
pLOGClus+5kn/RZkv4kJZ/6nt2+HEdKCtkynK4ICUq/evUiGj3QAfO/cv11MKBXo
EVdfMSzg9DpBJ30X/56uyznEWLEdNpiCEdmODunLiKZ3EIq153kJejKnATxMBwIC
c+AsYO65/IIYhFP4Ww67V9G9ScoXkgnRrVD7X50rcmrGOPqpNXZxOngfefDBopVM
V/1ti3/G5MBEndHf6qfkSU9/OKi96+FuY3+ARV//zhFey8Dkzn0SYIuzBeyWsKYs
KYTXbydXhIBX9TPCMnHSL2gSh1efhxwCVDb0asPzw7kZ0q4TwJEv4Nvl6CetAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5OhsWne/vtjCgj6/0hV/G2NAYTYwHwYDVR0j
BBgwFoAUEwuWix7cMp5GDFUAbMtanTlv7ykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VuVFZCem5tMkh1SE1wV2c4aFNFUmdxaWRmTGplODNOWEd2WndkNjZ6
REYvMC8xMzBCOTY4QjFFREMzMjlFNDYwQzU1MDA2Q0NCNUE5RDM5NkZFRjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzMEI5NjhCMUVEQzMyOUU0
NjBDNTUwMDZDQ0I1QTlEMzk2RkVGMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd1blRWQnpubTJIdUhNcFdnOGhTRVJncWlkZkxqZTgzTlhHdlp3ZDY2ekRGLzAv
MzIzODMwMzQzYTMxNjQ2MzM0M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM0
MzMzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQdxDANBgkqhkiG9w0BAQsFAAOCAQEAXT8ZzGJH
qsmTmFHc0yMWfSARA2yc1/LLIgZL49X1o3vpEPfUeGEPXjPaPUiaMatH8p2yV9Oh
oB4uz+YCKctm7ME/++YZKFM9OUyKbeARKL+5YJINBujUM8Mq7E4nhH1m3sp5upx/
wx9a6dZgSpYRfhZi9ibgEjbMU4h937P3VaMXsEsOlLiZFZBHsIc/tzuyGS1wKoBk
OYe+uuJwENq0DBuhdKMZH3Bx09dI7PFF16kaDfbdCqAwmOC1wiRRZOH18Xtd2kzU
XKO0a9gdGcQvfeMYU0BNLuAwL3yOVh/oB++vAQDBNFFF+vVMr52Jd1A8ULU2V71Y
Gz47SYreA2amnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org