Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/1/323830343a3337633a3a2f33322d3634203d3e203532393831.roa
File:                     323830343a3337633a3a2f33322d3634203d3e203532393831.roa (raw, json)
Hash identifier:          +x1o46FyBNYAEsYC0b7zjHLNHYt71bw3+yoATqUW2FM=
Subject key identifier:   CD:C1:17:68:ED:2C:E8:4F:61:86:2D:21:B2:60:79:27:1D:54:25:EA
Certificate issuer:       /CN=7B5186D8E21CE9278C3288A467DBDF33622342CD
Certificate serial:       197C03140CB0525C366B596A714772D4349E63B8
Authority key identifier: 7B:51:86:D8:E2:1C:E9:27:8C:32:88:A4:67:DB:DF:33:62:23:42:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5186D8E21CE9278C3288A467DBDF33622342CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/1/323830343a3337633a3a2f33322d3634203d3e203532393831.roa
Signing time:             Sat 11 May 2024 21:36:45 +0000
ROA not before:           Sat 11 May 2024 21:31:45 +0000
ROA not after:            Sat 10 May 2025 21:36:45 +0000
asID:                     52981
IP address blocks:        2804:37c::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7c:03:14:0c:b0:52:5c:36:6b:59:6a:71:47:72:d4:34:9e:63:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5186D8E21CE9278C3288A467DBDF33622342CD
        Validity
            Not Before: May 11 21:31:45 2024 GMT
            Not After : May 10 21:36:45 2025 GMT
        Subject: CN=CDC11768ED2CE84F61862D21B26079271D5425EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:a8:30:25:17:34:95:1e:17:ec:e2:f0:1e:
                    5e:f5:78:49:7e:63:56:fa:c9:05:84:be:18:f8:17:
                    ed:6b:6b:c9:43:03:f8:00:a1:a5:32:36:e9:17:f3:
                    b5:83:f2:47:19:52:22:1b:68:f2:0b:9f:4b:f1:fb:
                    b1:46:f0:90:46:9e:10:22:87:99:03:01:e4:20:07:
                    ff:ac:db:30:58:0f:b2:5a:06:d8:93:25:15:af:7e:
                    76:95:f4:10:34:e4:04:4d:63:3d:4c:c0:f9:78:9f:
                    f9:56:ee:32:44:80:6e:4a:43:d4:b7:fe:a3:1e:90:
                    53:db:03:c5:6c:10:af:c8:d0:2b:c7:39:12:96:16:
                    c9:f5:9c:bb:65:4e:eb:50:5c:c3:75:1e:cb:1a:65:
                    af:02:81:44:a6:bd:3a:ce:93:0d:0b:89:e9:35:9f:
                    db:90:56:67:96:98:25:f2:f2:93:22:5b:bb:cb:c9:
                    89:d7:dd:eb:97:2f:d5:52:32:7c:b5:23:24:3a:b5:
                    06:2b:62:08:a3:25:e4:c5:3e:ea:ec:4e:b7:fe:a9:
                    39:c3:fb:a9:23:2a:fd:49:95:7d:65:58:64:9d:fd:
                    2e:48:c3:c9:64:59:04:ec:5d:6d:9d:9d:64:21:6b:
                    99:98:aa:9a:b9:f3:d5:2f:11:fb:8a:62:fc:8b:c8:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:17:68:ED:2C:E8:4F:61:86:2D:21:B2:60:79:27:1D:54:25:EA
            X509v3 Authority Key Identifier:
                keyid:7B:51:86:D8:E2:1C:E9:27:8C:32:88:A4:67:DB:DF:33:62:23:42:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/1/7B5186D8E21CE9278C3288A467DBDF33622342CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5186D8E21CE9278C3288A467DBDF33622342CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/1/323830343a3337633a3a2f33322d3634203d3e203532393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:93:3e:ea:77:f2:cc:b3:7f:f2:52:ea:c5:36:dd:09:24:c9:
         4e:4c:99:3b:f1:56:55:10:37:67:4d:99:e0:aa:52:c0:6d:89:
         18:4d:c2:1e:13:b4:e4:4d:80:38:65:55:c8:1a:c8:be:09:f4:
         d6:76:e2:e0:93:09:da:32:43:e8:a1:38:97:ef:2a:54:8a:ca:
         a1:db:77:3c:83:ac:e0:1b:3a:3c:25:cc:35:54:69:85:5f:09:
         9d:bf:ff:95:50:16:71:82:4a:da:61:86:ac:ce:eb:41:68:63:
         1a:bb:a4:4f:9c:94:69:84:e1:b4:24:e6:be:0a:8d:d7:a3:2d:
         43:49:42:08:68:9b:a4:ad:d2:cb:44:33:83:cd:1d:e8:97:58:
         8b:a4:4d:57:39:da:ea:d7:a5:8c:c2:40:6b:70:6b:fa:cb:c4:
         55:14:8d:9d:4b:de:27:34:4a:2d:21:50:bc:c9:b3:7f:a9:94:
         77:0b:20:3c:78:e1:7a:00:d4:e8:95:ef:fa:e1:37:8c:5b:95:
         bc:8f:1c:28:fb:6b:b8:ed:f2:6c:b6:c8:44:aa:38:bc:8b:dc:
         0e:fa:bf:72:d2:85:e7:e2:0a:f1:03:17:b6:aa:ae:d3:78:98:
         61:05:37:a0:3c:f4:5b:d2:a9:a6:e8:69:75:b7:c8:48:14:93:
         ed:70:03:44
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUGXwDFAywUlw2a1lqcUdy1DSeY7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1MTg2RDhFMjFDRTkyNzhDMzI4OEE0NjdEQkRGMzM2
MjIzNDJDRDAeFw0yNDA1MTEyMTMxNDVaFw0yNTA1MTAyMTM2NDVaMDMxMTAvBgNV
BAMTKENEQzExNzY4RUQyQ0U4NEY2MTg2MkQyMUIyNjA3OTI3MUQ1NDI1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5agwJRc0lR4X7OLwHl71eEl+
Y1b6yQWEvhj4F+1ra8lDA/gAoaUyNukX87WD8kcZUiIbaPILn0vx+7FG8JBGnhAi
h5kDAeQgB/+s2zBYD7JaBtiTJRWvfnaV9BA05ARNYz1MwPl4n/lW7jJEgG5KQ9S3
/qMekFPbA8VsEK/I0CvHORKWFsn1nLtlTutQXMN1HssaZa8CgUSmvTrOkw0Liek1
n9uQVmeWmCXy8pMiW7vLyYnX3euXL9VSMny1IyQ6tQYrYgijJeTFPursTrf+qTnD
+6kjKv1JlX1lWGSd/S5Iw8lkWQTsXW2dnWQha5mYqpq589UvEfuKYvyLyNR3AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUzcEXaO0s6E9hhi0hsmB5Jx1UJeowHwYDVR0j
BBgwFoAUe1GG2OIc6SeMMoikZ9vfM2IjQs0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVrTUxkemQ4UEFoRjJ4Tmo1Y1JnbmFONFZCamRMZG50a3BiTm50RTN0
UUovMS83QjUxODZEOEUyMUNFOTI3OEMzMjg4QTQ2N0RCREYzMzYyMjM0MkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNTE4NkQ4RTIxQ0U5Mjc4
QzMyODhBNDY3REJERjMzNjIyMzQyQ0QuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVa01MZHpkOFBBaEYyeE5qNWNSZ25hTjRWQmpkTGRudGtwYk5udEUzdFFKLzEv
MzIzODMwMzQzYTMzMzc2MzNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDM1MzIzOTM4
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAN8MA0GCSqGSIb3DQEBCwUAA4IBAQBikz7qd/LMs3/y
UurFNt0JJMlOTJk78VZVEDdnTZngqlLAbYkYTcIeE7TkTYA4ZVXIGsi+CfTWduLg
kwnaMkPooTiX7ypUisqh23c8g6zgGzo8Jcw1VGmFXwmdv/+VUBZxgkraYYaszutB
aGMau6RPnJRphOG0JOa+Co3Xoy1DSUIIaJukrdLLRDODzR3ol1iLpE1XOdrq16WM
wkBrcGv6y8RVFI2dS94nNEotIVC8ybN/qZR3CyA8eOF6ANTole/64TeMW5W8jxwo
+2u47fJstshEqji8i9wO+r9y0oXn4grxAxe2qq7TeJhhBTegPPRb0qmm6Gl1t8hI
FJPtcANE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org