Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa
File:                     323830343a323162343a3a2f33322d3438203d3e20323634353638.roa (raw, json)
Hash identifier:          xxnuHbY5NtdHG+AAwVdj3bYCzL72uF4nM5LdL8Taujg=
Subject key identifier:   B2:AA:CE:E4:A5:27:D0:BB:F8:73:0D:21:72:8A:42:E6:69:12:3E:4A
Certificate issuer:       /CN=DDE07C11A82DA02165ECBCEE4DE1C444375895E4
Certificate serial:       2CBFC931C46B547B61E574CD6A7B346FBE15D24C
Authority key identifier: DD:E0:7C:11:A8:2D:A0:21:65:EC:BC:EE:4D:E1:C4:44:37:58:95:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa
Signing time:             Tue 13 Feb 2024 19:28:48 +0000
ROA not before:           Tue 13 Feb 2024 19:23:48 +0000
ROA not after:            Tue 11 Feb 2025 19:28:48 +0000
asID:                     264568
IP address blocks:        2804:21b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bf:c9:31:c4:6b:54:7b:61:e5:74:cd:6a:7b:34:6f:be:15:d2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE07C11A82DA02165ECBCEE4DE1C444375895E4
        Validity
            Not Before: Feb 13 19:23:48 2024 GMT
            Not After : Feb 11 19:28:48 2025 GMT
        Subject: CN=B2AACEE4A527D0BBF8730D21728A42E669123E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:8b:8e:64:36:6e:f4:00:06:e6:db:1c:28:
                    cd:f2:4e:e1:53:b3:c8:cd:b1:9a:16:9c:d7:ce:c4:
                    19:7d:e1:81:34:05:cb:e6:17:9d:88:70:45:da:84:
                    0d:d0:36:54:98:34:10:2b:29:49:60:a8:37:da:84:
                    57:72:bb:e3:12:5e:27:cc:f5:30:fc:33:ce:4a:69:
                    a2:49:0a:70:cf:6a:2f:fc:76:d2:dc:80:66:5e:cf:
                    23:57:0e:3e:b8:e3:57:ce:72:6d:10:8c:66:f5:2c:
                    78:00:1a:d5:b8:43:0f:a0:c8:8a:c7:87:df:7a:37:
                    97:1a:e3:8d:6d:40:8c:18:23:16:99:87:9d:8f:a1:
                    e1:27:b6:e7:19:b0:58:70:cf:e3:59:a8:55:db:a3:
                    04:33:3f:5e:84:18:5e:d4:5a:6e:93:c0:ae:6a:f4:
                    0f:52:93:3b:e8:13:3f:f1:8c:44:cf:07:ce:e3:4e:
                    90:2c:35:54:8d:e1:14:3c:34:2d:cc:2a:a5:df:b0:
                    43:6a:de:bb:ae:e1:c2:4a:d6:12:3b:2c:5a:d2:1f:
                    d5:a2:aa:9c:3b:20:b7:09:1c:8c:72:1e:b4:79:98:
                    b5:77:4f:8c:8e:78:de:fc:3a:77:33:51:f8:d4:e8:
                    ca:7f:97:d3:98:43:ca:14:79:3d:fc:7c:12:72:62:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AA:CE:E4:A5:27:D0:BB:F8:73:0D:21:72:8A:42:E6:69:12:3E:4A
            X509v3 Authority Key Identifier:
                keyid:DD:E0:7C:11:A8:2D:A0:21:65:EC:BC:EE:4D:E1:C4:44:37:58:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:e7:03:0e:ab:f1:2d:53:b8:2e:f2:53:10:5e:58:ad:b9:93:
         fc:16:ed:87:d8:2a:73:ff:49:c0:53:14:cd:43:1d:73:5c:86:
         37:bf:eb:46:bc:fd:ea:88:5e:60:b5:a7:a7:e4:fc:6c:c6:07:
         90:b3:ab:69:db:c1:4e:22:3e:07:17:2e:23:94:4b:5b:4f:bc:
         42:82:87:e6:6f:86:dd:a1:f3:74:cf:1b:d6:03:a0:3d:db:f3:
         a4:53:8d:20:f3:69:d4:80:74:1f:03:7a:00:ac:a3:35:fc:8a:
         4c:cc:35:fe:e0:7e:30:1b:de:32:df:84:87:42:e7:4d:c3:a9:
         50:7c:da:bb:ec:0e:cd:cc:88:58:6c:25:81:e8:c9:25:8f:78:
         f3:d8:f5:7c:17:48:d3:a5:fd:77:b9:b7:e1:32:23:30:79:cd:
         eb:c1:1d:55:72:63:63:b7:88:9e:4b:82:f1:c1:0e:33:38:f1:
         a1:7b:b1:13:9c:96:08:31:d4:4a:bf:42:b6:ba:29:3e:90:6b:
         79:82:c5:0b:55:8a:8b:fa:74:dd:f3:01:25:0a:98:28:30:3a:
         21:57:1c:92:ed:79:2a:4e:93:8c:ed:87:9e:eb:79:93:a4:69:
         bf:68:5b:ce:62:9e:92:2e:2b:27:b4:bd:bc:bc:d7:0a:85:34:
         61:6a:8a:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULL/JMcRrVHth5XTNans0b74V0kwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERFMDdDMTFBODJEQTAyMTY1RUNCQ0VFNERFMUM0NDQz
NzU4OTVFNDAeFw0yNDAyMTMxOTIzNDhaFw0yNTAyMTExOTI4NDhaMDMxMTAvBgNV
BAMTKEIyQUFDRUU0QTUyN0QwQkJGODczMEQyMTcyOEE0MkU2NjkxMjNFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AouOZDZu9AAG5tscKM3yTuFT
s8jNsZoWnNfOxBl94YE0BcvmF52IcEXahA3QNlSYNBArKUlgqDfahFdyu+MSXifM
9TD8M85KaaJJCnDPai/8dtLcgGZezyNXDj6441fOcm0QjGb1LHgAGtW4Qw+gyIrH
h996N5ca441tQIwYIxaZh52PoeEntucZsFhwz+NZqFXbowQzP16EGF7UWm6TwK5q
9A9SkzvoEz/xjETPB87jTpAsNVSN4RQ8NC3MKqXfsENq3ruu4cJK1hI7LFrSH9Wi
qpw7ILcJHIxyHrR5mLV3T4yOeN78OnczUfjU6Mp/l9OYQ8oUeT38fBJyYqCVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsqrO5KUn0Lv4cw0hcopC5mkSPkowHwYDVR0j
BBgwFoAU3eB8EagtoCFl7LzuTeHERDdYleQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEg4MW5jMUZYUnJtMzdtNkhqdERCSEJDRks2RDd1Tm1FZHRlbVBNYzVQ
cG8vMC9EREUwN0MxMUE4MkRBMDIxNjVFQ0JDRUU0REUxQzQ0NDM3NTg5NUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RERTA3QzExQTgyREEwMjE2
NUVDQkNFRTRERTFDNDQ0Mzc1ODk1RTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhIODFuYzFGWFJybTM3bTZIanREQkhCQ0ZLNkQ3dU5tRWR0ZW1QTWM1UHBvLzAv
MzIzODMwMzQzYTMyMzE2MjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzUzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQhtDANBgkqhkiG9w0BAQsFAAOCAQEAQucDDqvx
LVO4LvJTEF5YrbmT/Bbth9gqc/9JwFMUzUMdc1yGN7/rRrz96oheYLWnp+T8bMYH
kLOradvBTiI+BxcuI5RLW0+8QoKH5m+G3aHzdM8b1gOgPdvzpFONIPNp1IB0HwN6
AKyjNfyKTMw1/uB+MBveMt+Eh0LnTcOpUHzau+wOzcyIWGwlgejJJY9489j1fBdI
06X9d7m34TIjMHnN68EdVXJjY7eInkuC8cEOMzjxoXuxE5yWCDHUSr9CtropPpBr
eYLFC1WKi/p03fMBJQqYKDA6IVccku15Kk6TjO2Hnut5k6Rpv2hbzmKeki4rJ7S9
vLzXCoU0YWqKuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org