Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33332d3333203d3e20323639353538.roa
File:                     323830343a363637303a3a2f33332d3333203d3e20323639353538.roa (raw, json)
Hash identifier:          4Qiz/DLp8pABNlanILz0qmtjiY6JWEhJoJ/kXr4AwdI=
Subject key identifier:   39:7B:D7:A5:87:04:0D:7F:64:D1:D2:45:21:DA:AE:E2:1D:C6:F4:E5
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       5AFBCA806D5073CDDC339F3FD91A8C1FAA9F6B75
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33332d3333203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:04 +0000
ROA not before:           Wed 29 Mar 2023 02:25:04 +0000
ROA not after:            Wed 27 Mar 2024 02:30:04 +0000
asID:                     269558
IP address blocks:        2804:6670::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fb:ca:80:6d:50:73:cd:dc:33:9f:3f:d9:1a:8c:1f:aa:9f:6b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:04 2023 GMT
            Not After : Mar 27 02:30:04 2024 GMT
        Subject: CN=397BD7A587040D7F64D1D24521DAAEE21DC6F4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:f6:77:04:44:04:ea:66:03:c9:44:f5:1f:
                    ac:d9:aa:97:bb:4d:fa:66:5d:d5:5b:db:c1:c7:38:
                    41:f5:71:98:54:4c:f9:ec:cf:f9:7e:54:ec:1a:b3:
                    f8:ca:b5:c0:9e:e2:8b:ab:21:c2:34:aa:c8:da:b3:
                    54:a4:09:03:c5:5e:d0:52:99:19:9d:b7:d1:72:5c:
                    72:50:f8:17:c3:98:aa:48:32:5d:3d:88:ee:26:31:
                    0c:ac:f1:0e:f5:88:68:aa:79:db:34:c6:47:0a:f6:
                    77:44:a6:12:fb:d0:28:c3:3d:0d:61:ab:29:fb:2a:
                    0d:7e:3b:62:3f:07:b2:6f:a8:d4:49:db:fc:2f:3b:
                    91:df:d3:ba:df:56:32:4f:04:7c:74:3f:65:18:84:
                    cc:7c:7b:2e:7c:0c:d4:40:27:77:c9:c3:c5:f7:6c:
                    22:ae:cd:e0:69:c0:47:bd:fd:6a:01:bd:8b:00:dd:
                    61:7b:73:3e:c6:f9:f4:d7:28:45:47:67:58:ce:a6:
                    c0:86:d5:27:41:94:44:b6:e6:05:bf:ea:f1:d0:82:
                    9b:13:d5:01:d3:57:92:2c:93:52:40:e4:bc:ee:2c:
                    d2:af:c4:fd:b0:c2:ab:14:f4:69:0f:ed:04:e8:5d:
                    43:ae:7d:06:4f:0f:77:17:de:4d:aa:5c:7b:ae:b9:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7B:D7:A5:87:04:0D:7F:64:D1:D2:45:21:DA:AE:E2:1D:C6:F4:E5
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33332d3333203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6670::/33

    Signature Algorithm: sha256WithRSAEncryption
         87:77:22:8b:12:b0:15:c2:87:66:b6:d7:6f:d1:a4:7d:b5:fd:
         12:57:a3:d1:84:74:81:d5:14:96:ce:f8:55:83:3c:2b:e0:06:
         67:f1:ee:06:28:c4:c0:e9:15:0d:f0:e0:03:56:b0:fd:1b:1d:
         c8:6b:e7:2a:44:30:b0:a9:c2:74:a2:38:9f:6f:0a:f2:4c:9a:
         1a:db:ea:a9:aa:42:d8:fc:1f:67:6e:8e:e8:b4:22:76:e7:6f:
         28:cb:b3:d7:98:03:f7:aa:cd:5a:bd:bd:70:d4:d2:b8:da:7f:
         0a:8e:cf:75:d4:d4:66:b9:47:02:7b:4b:65:35:04:81:20:18:
         c7:97:5d:b4:df:96:17:9a:f9:3a:1f:f5:b3:c8:99:2f:bc:d8:
         c7:ca:87:0e:3e:d8:d7:36:08:00:a5:37:43:7c:7c:3a:b6:48:
         ac:b7:93:55:6e:89:dd:c6:b4:86:18:00:91:e8:78:63:7e:9c:
         c9:d8:0e:ed:1e:14:93:5e:84:97:55:b1:8d:7a:85:5e:cf:bb:
         2a:aa:51:4f:e2:32:43:0f:83:54:67:19:95:f9:14:84:69:5b:
         df:76:b6:96:26:27:9e:a7:35:7e:83:d9:31:f9:69:37:e7:c5:
         ec:62:f1:50:72:8b:f5:06:66:cc:8d:b5:bf:78:66:da:26:b4:
         14:d1:cb:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWvvKgG1Qc83cM58/2RqMH6qfa3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNFM0M3NzBFNjBFNzUyNkI4MzQ3NzU1OEY1RTdBRThC
RTk5QjBBQzAeFw0yMzAzMjkwMjI1MDRaFw0yNDAzMjcwMjMwMDRaMDMxMTAvBgNV
BAMTKDM5N0JEN0E1ODcwNDBEN0Y2NEQxRDI0NTIxREFBRUUyMURDNkY0RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJovZ3BEQE6mYDyUT1H6zZqpe7
TfpmXdVb28HHOEH1cZhUTPnsz/l+VOwas/jKtcCe4ourIcI0qsjas1SkCQPFXtBS
mRmdt9FyXHJQ+BfDmKpIMl09iO4mMQys8Q71iGiqeds0xkcK9ndEphL70CjDPQ1h
qyn7Kg1+O2I/B7JvqNRJ2/wvO5Hf07rfVjJPBHx0P2UYhMx8ey58DNRAJ3fJw8X3
bCKuzeBpwEe9/WoBvYsA3WF7cz7G+fTXKEVHZ1jOpsCG1SdBlES25gW/6vHQgpsT
1QHTV5Isk1JA5LzuLNKvxP2wwqsU9GkP7QToXUOufQZPD3cX3k2qXHuuuQR7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOXvXpYcEDX9k0dJFIdqu4h3G9OUwHwYDVR0j
BBgwFoAUvOPHcOYOdSa4NHdVj1566L6ZsKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3diRHRxMVJrV3c0U0xhenNBRk5xVE5BS3g4Y1VydmFrQnVDaVM1VjlR
NlkvMC9CQ0UzQzc3MEU2MEU3NTI2QjgzNDc3NTU4RjVFN0FFOEJFOTlCMEFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDRTNDNzcwRTYwRTc1MjZC
ODM0Nzc1NThGNUU3QUU4QkU5OUIwQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3YkR0cTFSa1d3NFNMYXpzQUZOcVROQUt4OGNVcnZha0J1Q2lTNVY5UTZZLzAv
MzIzODMwMzQzYTM2MzYzNzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzUzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARmcAAwDQYJKoZIhvcNAQELBQADggEBAId3IosS
sBXCh2a212/RpH21/RJXo9GEdIHVFJbO+FWDPCvgBmfx7gYoxMDpFQ3w4ANWsP0b
Hchr5ypEMLCpwnSiOJ9vCvJMmhrb6qmqQtj8H2dujui0InbnbyjLs9eYA/eqzVq9
vXDU0rjafwqOz3XU1Ga5RwJ7S2U1BIEgGMeXXbTflhea+Tof9bPImS+82MfKhw4+
2Nc2CAClN0N8fDq2SKy3k1Vuid3GtIYYAJHoeGN+nMnYDu0eFJNehJdVsY16hV7P
uyqqUU/iMkMPg1RnGZX5FIRpW992tpYmJ56nNX6D2TH5aTfnxexi8VByi/UGZsyN
tb94ZtomtBTRyzY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org