Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a633030303a3a2f33342d3334203d3e20323635303431.roa
File:                     323830343a333164633a633030303a3a2f33342d3334203d3e20323635303431.roa (raw, json)
Hash identifier:          R+60HyI+czhH2NIEKIwczP/xESJhGp/2OcxyY37ZN94=
Subject key identifier:   9D:69:1B:41:58:42:90:39:B4:46:A4:93:0A:DF:F5:FF:C5:60:F9:C8
Certificate issuer:       /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial:       0265E036AD7654A788DF7E6B61B294DC8E6CAEEF
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a633030303a3a2f33342d3334203d3e20323635303431.roa
Signing time:             Wed 25 Oct 2023 19:27:48 +0000
ROA not before:           Wed 25 Oct 2023 19:22:48 +0000
ROA not after:            Wed 23 Oct 2024 19:27:48 +0000
asID:                     265041
IP address blocks:        2804:31dc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:65:e0:36:ad:76:54:a7:88:df:7e:6b:61:b2:94:dc:8e:6c:ae:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Validity
            Not Before: Oct 25 19:22:48 2023 GMT
            Not After : Oct 23 19:27:48 2024 GMT
        Subject: CN=9D691B4158429039B446A4930ADFF5FFC560F9C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:b4:c6:93:2c:c0:bc:16:45:a0:55:42:d9:
                    12:af:cd:95:cd:59:44:7d:69:9a:b8:f7:c4:49:e1:
                    2b:67:25:34:53:b7:8d:0a:d7:69:27:e3:c2:27:4e:
                    a7:4c:17:bb:21:50:57:de:75:e0:c3:07:9f:24:da:
                    7b:76:f3:6f:0f:9b:0a:ba:99:77:7a:48:54:d1:1d:
                    9f:65:7c:d7:a7:a0:c1:bd:a0:84:58:7f:aa:74:06:
                    c1:02:f4:84:c4:5f:8f:68:ae:ec:4c:04:8b:c1:58:
                    d2:d4:80:d7:31:a8:60:44:a8:2f:32:89:57:aa:68:
                    a0:a2:86:af:eb:8a:84:cf:16:2f:a9:9d:08:8f:04:
                    12:9b:d6:5f:0f:78:b6:d5:25:d4:3e:18:46:b4:91:
                    5d:1e:75:75:ec:cc:68:d7:d0:56:c1:7a:47:5d:32:
                    1c:8d:e1:1e:68:c6:05:9e:0d:42:71:bf:4d:80:9f:
                    d2:18:e3:b8:73:4f:03:1a:d1:62:bd:2a:55:46:24:
                    84:09:d9:e3:bb:8c:51:c5:9c:52:a8:36:cd:b7:d5:
                    8e:16:50:f5:84:2f:77:1b:6f:b1:5a:0f:bb:bf:b2:
                    90:dc:61:f2:ce:cc:4c:20:de:19:bf:1a:81:be:f2:
                    ea:3e:be:fe:97:56:fc:63:50:d4:2a:df:60:a1:1c:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:69:1B:41:58:42:90:39:B4:46:A4:93:0A:DF:F5:FF:C5:60:F9:C8
            X509v3 Authority Key Identifier:
                keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a633030303a3a2f33342d3334203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:b3:ad:7b:80:47:49:89:77:82:0f:68:da:f5:0f:3f:42:b6:
         51:29:a4:8e:61:5f:ec:45:6a:ca:b8:d1:52:ec:89:24:24:39:
         91:9b:ca:45:be:d4:13:c7:79:74:9f:99:d0:27:45:5d:b2:fd:
         45:38:c1:3f:31:96:4d:06:9b:10:b4:7f:d2:1c:89:11:05:67:
         5c:b1:cc:4e:6f:ac:01:d0:89:42:ef:30:5a:37:e4:6b:52:1a:
         84:0f:29:b9:6a:f6:91:ad:45:e3:1b:cd:2f:d0:67:7a:31:32:
         4f:e8:2a:41:85:ba:17:22:9e:10:11:df:87:85:06:dd:5a:50:
         20:34:7c:95:8e:6b:79:19:c3:97:ad:65:d1:8c:a7:97:a4:e9:
         d3:b1:2c:c1:78:b8:20:31:a0:bf:2b:9b:14:86:20:b8:23:ae:
         98:47:d1:60:31:d1:bb:e6:e7:f9:41:08:1c:88:98:6f:42:84:
         4a:2d:75:85:e7:f1:eb:66:3c:4e:ff:b3:da:4c:4c:77:59:14:
         03:85:38:02:98:dc:8b:af:94:bd:8d:3c:fc:8a:f3:74:b7:71:
         a0:62:65:ca:04:29:7c:a2:89:85:02:9f:72:26:d5:62:ff:4f:
         70:29:98:77:44:98:9d:2a:c1:50:ab:71:d2:f2:1e:d2:a8:97:
         b2:c4:10:f7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAmXgNq12VKeI335rYbKU3I5sru8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc4MzQ1NDVBMzg4OTJDM0ZGMUI3MTQxMTI2MDg0NzMw
QTEyQjdBQzAeFw0yMzEwMjUxOTIyNDhaFw0yNDEwMjMxOTI3NDhaMDMxMTAvBgNV
BAMTKDlENjkxQjQxNTg0MjkwMzlCNDQ2QTQ5MzBBREZGNUZGQzU2MEY5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lLTGkyzAvBZFoFVC2RKvzZXN
WUR9aZq498RJ4StnJTRTt40K12kn48InTqdMF7shUFfedeDDB58k2nt2828Pmwq6
mXd6SFTRHZ9lfNenoMG9oIRYf6p0BsEC9ITEX49oruxMBIvBWNLUgNcxqGBEqC8y
iVeqaKCihq/rioTPFi+pnQiPBBKb1l8PeLbVJdQ+GEa0kV0edXXszGjX0FbBekdd
MhyN4R5oxgWeDUJxv02An9IY47hzTwMa0WK9KlVGJIQJ2eO7jFHFnFKoNs231Y4W
UPWEL3cbb7FaD7u/spDcYfLOzEwg3hm/GoG+8uo+vv6XVvxjUNQq32ChHEOZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnWkbQVhCkDm0RqSTCt/1/8Vg+cgwHwYDVR0j
BBgwFoAUN4NFRaOIksP/G3FBEmCEcwoSt6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJTcEtGZERzNTlyUkJYZGVKeGFXRHNDNzN5WnBQZmNzZWN6WlNlaVJB
Yk4vMC8zNzgzNDU0NUEzODg5MkMzRkYxQjcxNDExMjYwODQ3MzBBMTJCN0FDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3ODM0NTQ1QTM4ODkyQzNG
RjFCNzE0MTEyNjA4NDczMEExMkI3QUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCU3BLRmREczU5clJCWGRlSnhhV0RzQzczeVpwUGZjc2VjelpTZWlSQWJOLzAv
MzIzODMwMzQzYTMzMzE2NDYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTMwMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMdzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAKs617gEdJiXeCD2ja9Q8/QrZRKaSOYV/sRWrKuNFS7IkkJDmRm8pFvtQT
x3l0n5nQJ0Vdsv1FOME/MZZNBpsQtH/SHIkRBWdcscxOb6wB0IlC7zBaN+RrUhqE
Dym5avaRrUXjG80v0Gd6MTJP6CpBhboXIp4QEd+HhQbdWlAgNHyVjmt5GcOXrWXR
jKeXpOnTsSzBeLggMaC/K5sUhiC4I66YR9FgMdG75uf5QQgciJhvQoRKLXWF5/Hr
ZjxO/7PaTEx3WRQDhTgCmNyLr5S9jTz8ivN0t3GgYmXKBCl8oomFAp9yJtVi/09w
KZh3RJidKsFQq3HS8h7SqJeyxBD3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org