Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3239303a3a2f33322d3536203d3e203238363639.roa
File:                     323830343a3239303a3a2f33322d3536203d3e203238363639.roa (raw, json)
Hash identifier:          ZLSflF7/04ZrJEMKWqoFvcMMRNkv19db18O4S0d6BdQ=
Subject key identifier:   EC:2B:E1:2E:5C:BE:20:B5:C8:7E:03:DA:A2:5C:58:78:56:55:11:9A
Certificate issuer:       /CN=7ABB6B59054A649CACCC9CEA32D96A4D579F1370
Certificate serial:       28A10003433117CFC30E2F0357704C9D190237B2
Authority key identifier: 7A:BB:6B:59:05:4A:64:9C:AC:CC:9C:EA:32:D9:6A:4D:57:9F:13:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3239303a3a2f33322d3536203d3e203238363639.roa
Signing time:             Thu 01 Jun 2023 17:49:01 +0000
ROA not before:           Thu 01 Jun 2023 17:44:01 +0000
ROA not after:            Thu 30 May 2024 17:49:01 +0000
asID:                     28669
IP address blocks:        2804:290::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a1:00:03:43:31:17:cf:c3:0e:2f:03:57:70:4c:9d:19:02:37:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABB6B59054A649CACCC9CEA32D96A4D579F1370
        Validity
            Not Before: Jun  1 17:44:01 2023 GMT
            Not After : May 30 17:49:01 2024 GMT
        Subject: CN=EC2BE12E5CBE20B5C87E03DAA25C58785655119A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:68:1a:88:6f:db:4f:2f:24:7a:03:34:64:
                    a3:48:cf:75:1a:27:1b:b5:2c:5c:8d:c2:22:ba:b0:
                    0f:7b:54:5d:c1:db:3b:60:96:09:2e:c2:b8:67:cb:
                    22:a1:cf:2f:77:0a:01:fd:24:50:4e:da:e1:b6:51:
                    dd:65:fb:1b:17:83:09:75:e7:00:f1:30:aa:f0:f6:
                    f2:6e:73:b6:c8:65:2c:98:68:ec:c7:c2:c8:01:fc:
                    47:bf:06:f4:e3:6a:b4:8b:b6:24:4b:ac:ea:52:5c:
                    e9:fe:52:2b:b6:d6:a9:3b:ff:39:3a:58:4a:0f:90:
                    49:9b:f9:c1:ff:c8:5d:7e:8d:8a:52:b0:e4:8d:e8:
                    91:37:31:d1:32:eb:f8:f3:24:f6:81:79:25:12:60:
                    e7:73:35:c8:63:18:fd:e4:da:50:41:67:13:b8:cf:
                    4f:bc:ca:36:c7:3f:13:23:b9:e4:95:1f:93:97:1e:
                    95:b2:42:03:a3:d6:1f:11:e5:6f:0a:d8:d5:25:9d:
                    5d:3a:f3:16:66:19:11:62:e8:c7:fc:9d:61:a2:7f:
                    14:4a:c8:f5:e0:a3:22:3d:51:09:0a:33:3d:b3:00:
                    0e:bd:a1:21:e6:22:93:fc:87:be:3c:01:37:92:79:
                    86:5f:02:68:68:4d:ff:7a:05:0e:72:df:b5:51:f4:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2B:E1:2E:5C:BE:20:B5:C8:7E:03:DA:A2:5C:58:78:56:55:11:9A
            X509v3 Authority Key Identifier:
                keyid:7A:BB:6B:59:05:4A:64:9C:AC:CC:9C:EA:32:D9:6A:4D:57:9F:13:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3239303a3a2f33322d3536203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:290::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:1e:dc:f0:d8:0c:ba:c6:42:c6:16:c3:6b:f7:bc:3f:4b:9b:
         93:b2:28:08:88:cd:b5:a9:8a:c2:ae:11:1d:33:f0:09:33:48:
         5e:ed:6f:ae:5d:7e:87:af:af:db:7c:9c:67:da:ee:5f:af:ee:
         78:71:51:85:e0:46:98:39:e1:ae:64:46:64:6f:fd:b5:22:a9:
         dc:47:a9:44:52:82:aa:87:47:40:73:96:b4:74:eb:2b:32:57:
         50:11:ba:12:94:f8:55:e8:be:87:35:d0:e0:40:41:4e:50:82:
         23:6c:b2:85:65:ff:b3:73:3c:27:c4:ff:56:b0:bd:c7:cb:e4:
         4f:81:0a:24:91:4b:46:75:35:23:a5:e1:85:29:19:ee:9c:5a:
         85:c9:29:f9:2a:2f:2f:99:4b:c9:00:82:78:b1:aa:0a:68:07:
         60:82:e4:34:51:ce:9d:e0:9e:37:91:a2:05:77:9c:ef:f1:7a:
         29:df:8a:90:10:01:61:6d:1c:91:ae:e7:33:9f:de:2a:c3:2c:
         c4:0d:d3:5d:cf:01:11:9f:83:4a:41:43:c8:48:b6:84:14:21:
         28:f1:73:51:7e:d6:f1:90:67:a4:f4:84:79:80:59:6c:d3:7a:
         f4:58:1b:22:e2:8d:d2:b0:3d:20:e4:20:0b:e6:96:b1:3e:32:
         aa:b6:ae:1c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUKKEAA0MxF8/DDi8DV3BMnRkCN7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCQjZCNTkwNTRBNjQ5Q0FDQ0M5Q0VBMzJEOTZBNEQ1
NzlGMTM3MDAeFw0yMzA2MDExNzQ0MDFaFw0yNDA1MzAxNzQ5MDFaMDMxMTAvBgNV
BAMTKEVDMkJFMTJFNUNCRTIwQjVDODdFMDNEQUEyNUM1ODc4NTY1NTExOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI2gaiG/bTy8kegM0ZKNIz3Ua
Jxu1LFyNwiK6sA97VF3B2ztglgkuwrhnyyKhzy93CgH9JFBO2uG2Ud1l+xsXgwl1
5wDxMKrw9vJuc7bIZSyYaOzHwsgB/Ee/BvTjarSLtiRLrOpSXOn+Uiu21qk7/zk6
WEoPkEmb+cH/yF1+jYpSsOSN6JE3MdEy6/jzJPaBeSUSYOdzNchjGP3k2lBBZxO4
z0+8yjbHPxMjueSVH5OXHpWyQgOj1h8R5W8K2NUlnV068xZmGRFi6Mf8nWGifxRK
yPXgoyI9UQkKMz2zAA69oSHmIpP8h748ATeSeYZfAmhoTf96BQ5y37VR9M/VAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU7CvhLly+ILXIfgPaolxYeFZVEZowHwYDVR0j
BBgwFoAUertrWQVKZJyszJzqMtlqTVefE3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMS83QUJCNkI1OTA1NEE2NDlDQUNDQzlDRUEzMkQ5NkE0RDU3OUYxMzcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBQkI2QjU5MDU0QTY0OUNB
Q0NDOUNFQTMyRDk2QTRENTc5RjEzNzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzEv
MzIzODMwMzQzYTMyMzkzMDNhM2EyZjMzMzIyZDM1MzYyMDNkM2UyMDMyMzgzNjM2
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAKQMA0GCSqGSIb3DQEBCwUAA4IBAQA3Htzw2Ay6xkLG
FsNr97w/S5uTsigIiM21qYrCrhEdM/AJM0he7W+uXX6Hr6/bfJxn2u5fr+54cVGF
4EaYOeGuZEZkb/21IqncR6lEUoKqh0dAc5a0dOsrMldQEboSlPhV6L6HNdDgQEFO
UIIjbLKFZf+zczwnxP9WsL3Hy+RPgQokkUtGdTUjpeGFKRnunFqFySn5Ki8vmUvJ
AIJ4saoKaAdgguQ0Uc6d4J43kaIFd5zv8Xop34qQEAFhbRyRruczn94qwyzEDdNd
zwERn4NKQUPISLaEFCEo8XNRftbxkGek9IR5gFls03r0WBsi4o3SsD0g5CAL5pax
PjKqtq4c
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org