Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a383030303a3a2f33332d3333203d3e203532353933.roa
File:                     323830343a6431303a383030303a3a2f33332d3333203d3e203532353933.roa (raw, json)
Hash identifier:          M5zisON6zabS4DjyV3lmU1vx4UNsfGzW8ts8AWpkfXA=
Subject key identifier:   A9:15:65:A5:97:DE:97:7D:F7:E7:5E:28:2F:50:EA:F0:76:22:5D:FD
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       3A32B78189261FCBA70B9636BD2D815938401784
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a383030303a3a2f33332d3333203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:20 +0000
ROA not before:           Tue 19 Sep 2023 12:47:20 +0000
ROA not after:            Tue 17 Sep 2024 12:52:20 +0000
asID:                     52593
IP address blocks:        2804:d10:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:32:b7:81:89:26:1f:cb:a7:0b:96:36:bd:2d:81:59:38:40:17:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:20 2023 GMT
            Not After : Sep 17 12:52:20 2024 GMT
        Subject: CN=A91565A597DE977DF7E75E282F50EAF076225DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:f3:0e:1e:3a:43:e3:68:30:0d:80:f9:f5:
                    b7:ff:9f:32:72:b4:6f:2d:20:ba:c3:e1:46:8c:8a:
                    10:bd:ba:9f:fc:cf:8e:2e:c3:66:82:42:20:ce:39:
                    a1:48:69:0f:9f:c1:61:24:74:66:46:25:3d:f9:94:
                    31:6e:84:e8:2e:53:6a:b1:41:f1:dc:1e:9e:e1:d5:
                    27:9d:b2:13:8c:91:50:f9:a2:62:26:10:af:24:31:
                    a6:6f:00:7b:04:92:cc:8b:72:93:a2:94:c3:7e:b7:
                    20:03:3a:90:8a:3b:41:fd:91:e7:a1:3e:f5:f1:49:
                    02:cf:a5:93:42:77:cb:67:96:64:29:61:b6:48:89:
                    ad:65:45:fc:82:1d:23:6a:37:aa:b8:2a:11:d8:cf:
                    a4:a7:33:40:fa:6b:03:5b:b1:c3:ba:ba:95:06:32:
                    70:6b:6b:87:3d:8f:10:99:f2:57:dc:99:7e:9d:c8:
                    3b:9a:6b:b7:53:f5:3e:b0:c9:b2:3f:48:52:e4:69:
                    26:94:73:ca:2d:53:46:2f:21:3b:cc:38:dc:3c:79:
                    13:eb:52:54:40:18:5d:28:f6:e7:03:af:8a:0f:c4:
                    e8:fc:89:91:8f:37:4b:4d:5e:60:4a:90:39:44:d7:
                    6f:8d:15:b6:52:08:dc:c8:41:dd:ec:41:23:31:21:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:65:A5:97:DE:97:7D:F7:E7:5E:28:2F:50:EA:F0:76:22:5D:FD
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a383030303a3a2f33332d3333203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:f3:26:04:b8:10:86:da:c6:6e:3a:9a:5e:18:49:fe:ac:35:
         9a:4a:7d:21:78:79:cc:1e:5f:b8:0a:64:b1:2c:df:64:d7:c1:
         b5:e8:af:ab:cd:0e:a2:71:17:ab:8e:5a:a7:7b:42:cf:2e:c5:
         21:49:58:32:88:3b:f6:b5:77:39:5e:50:ec:c8:c5:08:ed:0a:
         f0:00:70:13:c4:67:d8:b1:47:cf:ab:f8:0a:9a:e0:a0:72:67:
         6e:67:ef:12:8f:10:48:5e:85:a3:9b:ca:21:fe:1d:d2:92:68:
         1b:03:06:14:b1:f0:1b:5c:a7:0a:77:0d:13:f3:a5:30:c1:0d:
         bf:65:8e:90:b9:de:37:e8:09:44:09:dc:c0:5f:5d:38:ba:74:
         a6:74:cd:08:ed:b7:d2:30:46:de:8d:c5:44:4f:c8:e4:1b:8b:
         b4:0e:2a:ad:81:63:96:77:59:d3:2d:58:dd:b9:5f:63:6f:e0:
         20:e6:ba:83:cb:e1:13:07:bd:07:0c:af:b9:a4:b4:6e:70:5d:
         e7:56:38:45:39:e3:a8:8c:e7:a3:96:79:90:a7:ed:c5:96:76:
         8e:da:0a:1e:99:44:23:ae:cc:4f:96:98:ef:b6:1f:cc:85:ed:
         d1:8d:46:20:8c:8b:f6:a7:9d:62:af:bd:72:f2:c4:76:18:17:
         06:f8:02:78
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUOjK3gYkmH8unC5Y2vS2BWThAF4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MzN0ZGQ0MxRDYxNUMxNkVGMTI5OEEzNDQzNTg3RkJG
NjM2MUVFNjAeFw0yMzA5MTkxMjQ3MjBaFw0yNDA5MTcxMjUyMjBaMDMxMTAvBgNV
BAMTKEE5MTU2NUE1OTdERTk3N0RGN0U3NUUyODJGNTBFQUYwNzYyMjVERkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OfMOHjpD42gwDYD59bf/nzJy
tG8tILrD4UaMihC9up/8z44uw2aCQiDOOaFIaQ+fwWEkdGZGJT35lDFuhOguU2qx
QfHcHp7h1SedshOMkVD5omImEK8kMaZvAHsEksyLcpOilMN+tyADOpCKO0H9keeh
PvXxSQLPpZNCd8tnlmQpYbZIia1lRfyCHSNqN6q4KhHYz6SnM0D6awNbscO6upUG
MnBra4c9jxCZ8lfcmX6dyDuaa7dT9T6wybI/SFLkaSaUc8otU0YvITvMONw8eRPr
UlRAGF0o9ucDr4oPxOj8iZGPN0tNXmBKkDlE12+NFbZSCNzIQd3sQSMxIfJpAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUqRVlpZfel333514oL1Dq8HYiXf0wHwYDVR0j
BBgwFoAUfDf/zB1hXBbvEpijRDWH+/Y2HuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN
SDcvMC83QzM3RkZDQzFENjE1QzE2RUYxMjk4QTM0NDM1ODdGQkY2MzYxRUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDMzdGRkNDMUQ2MTVDMTZF
RjEyOThBMzQ0MzU4N0ZCRjYzNjFFRTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNU1ZYcTJBcG9QaVpScVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAv
MzIzODMwMzQzYTY0MzEzMDNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzNTMyMzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQNEIAwDQYJKoZIhvcNAQELBQADggEB
AB/zJgS4EIbaxm46ml4YSf6sNZpKfSF4ecweX7gKZLEs32TXwbXor6vNDqJxF6uO
Wqd7Qs8uxSFJWDKIO/a1dzleUOzIxQjtCvAAcBPEZ9ixR8+r+Aqa4KByZ25n7xKP
EEhehaObyiH+HdKSaBsDBhSx8Btcpwp3DRPzpTDBDb9ljpC53jfoCUQJ3MBfXTi6
dKZ0zQjtt9IwRt6NxURPyOQbi7QOKq2BY5Z3WdMtWN25X2Nv4CDmuoPL4RMHvQcM
r7mktG5wXedWOEU546iM56OWeZCn7cWWdo7aCh6ZRCOuzE+WmO+2H8yF7dGNRiCM
i/annWKvvXLyxHYYFwb4Ang=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org