Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/323830343a373031383a3a2f33322d3438203d3e20323730373035.roa
File:                     323830343a373031383a3a2f33322d3438203d3e20323730373035.roa (raw, json)
Hash identifier:          T7UzXN60G2QMTg5bu5LdmvoeDfrai5D1+5hYH1CYGB0=
Subject key identifier:   A1:B6:31:A9:3D:90:D5:0C:2A:34:96:D1:A5:34:1C:C7:7E:0B:60:62
Certificate issuer:       /CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
Certificate serial:       15354BCFAFFDEA982D675C14DC878C9D43E0C3E9
Authority key identifier: B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/323830343a373031383a3a2f33322d3438203d3e20323730373035.roa
Signing time:             Mon 11 Mar 2024 21:16:30 +0000
ROA not before:           Mon 11 Mar 2024 21:11:30 +0000
ROA not after:            Mon 10 Mar 2025 21:16:30 +0000
asID:                     270705
IP address blocks:        2804:7018::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:35:4b:cf:af:fd:ea:98:2d:67:5c:14:dc:87:8c:9d:43:e0:c3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
        Validity
            Not Before: Mar 11 21:11:30 2024 GMT
            Not After : Mar 10 21:16:30 2025 GMT
        Subject: CN=A1B631A93D90D50C2A3496D1A5341CC77E0B6062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:1b:d6:74:45:b6:a5:f7:b2:db:9f:34:9b:
                    11:8b:0c:1c:df:33:5f:60:22:a2:31:25:5c:e8:90:
                    a2:5b:35:3f:34:5d:e5:7d:8f:e1:3d:80:3d:75:91:
                    78:38:6e:ce:fa:f0:7d:3c:ed:20:07:a3:00:e2:92:
                    3e:51:4e:0b:d5:a4:a5:07:29:9f:e5:55:f1:b4:ee:
                    eb:0d:8b:13:d4:69:64:ff:64:c3:86:0c:eb:7c:6f:
                    38:77:ea:38:3b:6e:c9:95:f1:7b:ce:a9:5b:21:4d:
                    d0:8b:a1:0b:ea:06:6b:b5:e7:18:c0:fe:41:0f:b9:
                    70:ab:0f:b6:7c:60:b8:29:71:71:3f:54:86:73:ce:
                    53:dd:8f:1a:6c:27:2a:0c:3c:5c:ca:09:c2:a1:95:
                    52:62:ce:db:d2:fa:02:b7:a4:11:be:3d:78:a2:05:
                    7f:17:aa:51:ad:1a:d5:e5:94:37:28:de:e6:72:77:
                    1c:91:d7:d4:fb:5a:41:71:34:af:95:16:89:7c:c4:
                    6c:13:0d:16:fb:de:a1:ed:da:fe:de:93:43:58:c9:
                    f7:f2:eb:40:c6:41:7c:b9:60:cc:ca:d1:33:8d:4d:
                    42:10:f4:29:30:a8:26:cd:14:4f:92:c1:6b:fd:25:
                    f3:b6:02:da:fb:11:98:6c:2a:32:e3:e2:d7:67:ad:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:31:A9:3D:90:D5:0C:2A:34:96:D1:A5:34:1C:C7:7E:0B:60:62
            X509v3 Authority Key Identifier:
                keyid:B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/323830343a373031383a3a2f33322d3438203d3e20323730373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7018::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:e9:36:98:8e:9c:07:f9:09:49:f1:a7:4f:38:4c:79:6e:
         5e:4e:e8:61:a7:e1:ae:b7:e3:9c:bb:d1:57:98:cc:d2:9c:f6:
         10:ab:c4:99:5b:a1:d5:7e:a3:bb:aa:fc:6e:5c:71:4b:7e:63:
         db:15:df:34:b6:10:ce:8b:f5:49:d5:c4:b0:1b:32:a1:68:a9:
         79:17:69:65:a5:ea:e5:af:e0:6a:7b:b8:9c:f2:ee:f2:41:0c:
         61:7d:c0:e1:24:b3:ce:fc:ac:f4:73:a6:b3:73:cd:5d:d0:87:
         17:f7:68:cc:ae:2a:aa:d7:68:e6:fd:c3:1a:7e:12:a0:53:13:
         ab:21:df:be:42:3e:d1:80:fb:e1:8a:8f:ac:f3:99:82:ac:1d:
         df:be:9c:96:86:4f:e5:0e:f8:39:55:21:a6:66:76:5c:89:43:
         7e:57:a2:53:da:eb:61:0c:95:aa:95:9f:e6:a3:d7:59:31:27:
         f2:39:15:cf:3e:44:cb:4c:52:9b:d7:f1:2b:d5:ca:82:3c:e1:
         22:3b:63:06:c9:a1:45:0f:3f:3f:0a:4a:1d:f1:e5:49:c1:7c:
         66:1b:7b:6e:96:13:ab:74:19:40:ca:ce:f3:a5:af:fe:ce:eb:
         a8:b8:82:6b:56:c0:21:dc:d1:f1:1a:08:cc:92:57:75:8e:d2:
         a4:9f:0a:55
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFTVLz6/96pgtZ1wU3IeMnUPgw+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFNUNEMEFDMzMzQkE5QTIzNDhBQTkxMjYxM0UzMEIy
RTY5OUExQjAeFw0yNDAzMTEyMTExMzBaFw0yNTAzMTAyMTE2MzBaMDMxMTAvBgNV
BAMTKEExQjYzMUE5M0Q5MEQ1MEMyQTM0OTZEMUE1MzQxQ0M3N0UwQjYwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyRvWdEW2pfey2580mxGLDBzf
M19gIqIxJVzokKJbNT80XeV9j+E9gD11kXg4bs768H087SAHowDikj5RTgvVpKUH
KZ/lVfG07usNixPUaWT/ZMOGDOt8bzh36jg7bsmV8XvOqVshTdCLoQvqBmu15xjA
/kEPuXCrD7Z8YLgpcXE/VIZzzlPdjxpsJyoMPFzKCcKhlVJiztvS+gK3pBG+PXii
BX8XqlGtGtXllDco3uZydxyR19T7WkFxNK+VFol8xGwTDRb73qHt2v7ek0NYyffy
60DGQXy5YMzK0TONTUIQ9CkwqCbNFE+SwWv9JfO2Atr7EZhsKjLj4tdnrVJ3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUobYxqT2Q1QwqNJbRpTQcx34LYGIwHwYDVR0j
BBgwFoAUtuXNCsMzupojSKqRJhPjCy5pmhswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFNpcUtZTDFLZnBVcnhRRTIzdU5rdVVHaGY3ajNxQ2ZyMmp5NG9GWHNU
ckIvMC9CNkU1Q0QwQUMzMzNCQTlBMjM0OEFBOTEyNjEzRTMwQjJFNjk5QTFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2RTVDRDBBQzMzM0JBOUEy
MzQ4QUE5MTI2MTNFMzBCMkU2OTlBMUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhTaXFLWUwxS2ZwVXJ4UUUyM3VOa3VVR2hmN2ozcUNmcjJqeTRvRlhzVHJCLzAv
MzIzODMwMzQzYTM3MzAzMTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzczMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARwGDANBgkqhkiG9w0BAQsFAAOCAQEACNzpNpiO
nAf5CUnxp084THluXk7oYafhrrfjnLvRV5jM0pz2EKvEmVuh1X6ju6r8blxxS35j
2xXfNLYQzov1SdXEsBsyoWipeRdpZaXq5a/ganu4nPLu8kEMYX3A4SSzzvys9HOm
s3PNXdCHF/dozK4qqtdo5v3DGn4SoFMTqyHfvkI+0YD74YqPrPOZgqwd376cloZP
5Q74OVUhpmZ2XIlDfleiU9rrYQyVqpWf5qPXWTEn8jkVzz5Ey0xSm9fxK9XKgjzh
IjtjBsmhRQ8/PwpKHfHlScF8Zht7bpYTq3QZQMrO86Wv/s7rqLiCa1bAIdzR8RoI
zJJXdY7SpJ8KVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org