Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33342d3334203d3e20323634353532.roa
File:                     323830343a323136343a3a2f33342d3334203d3e20323634353532.roa (raw, json)
Hash identifier:          wEpCyzK567worGxuFjxlZzb+cISQx3n0g97lTGeDl5w=
Subject key identifier:   EB:5E:FC:D6:39:77:1B:37:5E:5A:92:2D:41:F9:07:28:21:AB:AE:90
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       0DF94564D66078607284C725729332EED068CD5D
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33342d3334203d3e20323634353532.roa
Signing time:             Thu 23 Mar 2023 13:23:58 +0000
ROA not before:           Thu 23 Mar 2023 13:18:58 +0000
ROA not after:            Thu 21 Mar 2024 13:23:58 +0000
asID:                     264552
IP address blocks:        2804:2164::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f9:45:64:d6:60:78:60:72:84:c7:25:72:93:32:ee:d0:68:cd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Mar 23 13:18:58 2023 GMT
            Not After : Mar 21 13:23:58 2024 GMT
        Subject: CN=EB5EFCD639771B375E5A922D41F9072821ABAE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:ef:db:b9:63:9a:99:ed:b1:0c:d9:b5:76:
                    02:ca:0d:97:0b:cb:30:07:f0:80:21:b8:0c:01:ee:
                    1c:3b:aa:6f:82:0d:41:7c:8c:e5:86:ab:35:7f:29:
                    b4:eb:30:50:6d:f6:fa:e4:3c:a0:d7:64:d6:44:0d:
                    27:cf:f0:19:f9:40:6e:a9:c5:4a:d1:42:e1:32:d4:
                    88:63:b9:9a:1e:82:79:8f:9e:5b:3a:dd:e3:f3:ca:
                    8c:d6:5f:fe:fc:c3:43:f5:3f:da:fa:8a:55:7d:66:
                    86:34:33:c5:b3:c0:93:97:d9:46:70:ee:73:cd:e3:
                    0c:34:74:3e:78:46:ae:ad:31:be:f7:d8:e6:33:01:
                    7e:c4:60:79:98:db:8a:36:84:67:d6:e2:1d:23:13:
                    f7:48:12:e5:eb:0e:59:be:56:60:f8:20:d6:ca:37:
                    d6:8b:50:29:1e:60:4c:e5:eb:e9:f1:ef:dd:72:3a:
                    9f:87:dd:0a:9b:c1:4d:9b:8a:c6:91:02:36:f3:04:
                    13:27:01:c6:39:05:a2:4a:8f:a2:c0:e2:eb:a7:71:
                    cb:77:f9:8d:d5:9f:63:51:54:17:69:f5:e8:df:91:
                    cc:70:1b:c6:60:84:6e:d8:70:f2:ac:7e:ac:cd:eb:
                    e8:94:86:51:18:7f:d2:fd:c3:c6:61:7f:0b:06:f5:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:FC:D6:39:77:1B:37:5E:5A:92:2D:41:F9:07:28:21:AB:AE:90
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33342d3334203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2164::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:1f:3b:ad:2c:22:af:2e:6b:80:e2:70:03:12:61:21:d3:
         36:f8:11:85:4a:37:2b:07:e0:2e:ab:ba:61:db:80:2c:2f:ce:
         da:b2:cb:38:c8:56:67:54:62:8c:51:fc:c2:cc:f7:97:28:d9:
         9b:de:88:0f:ef:24:04:62:d1:97:cd:ba:17:c3:9d:69:52:cc:
         29:b7:a1:77:75:fc:58:a3:6b:44:d9:cf:a9:97:c0:d5:49:aa:
         3e:76:5e:6a:01:bf:85:81:05:c9:b9:81:dd:60:fe:f0:85:77:
         04:ba:25:78:ee:3c:fe:72:b7:a3:7a:27:6c:1b:77:61:3a:b8:
         40:b8:05:1f:74:56:4e:4c:bb:34:07:aa:20:78:23:ba:3f:48:
         12:ce:8f:c5:79:6c:9f:bf:3f:d2:07:60:e7:b2:20:a5:1a:1e:
         88:3b:7d:78:59:e0:32:0d:3e:63:e0:71:35:de:74:5a:e6:6a:
         f5:3a:53:41:9a:5b:c6:09:e3:3c:55:d6:b7:62:35:02:d4:80:
         04:a7:e5:b4:e7:75:24:e6:46:4b:ea:7e:26:35:fd:c3:86:45:
         28:61:39:b1:e2:3e:d0:d2:11:e1:e8:8e:55:72:69:fd:8b:2b:
         2a:39:1b:82:5c:0e:f3:df:b1:2d:f0:f1:59:f3:9c:54:af:8b:
         5b:8e:5f:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDflFZNZgeGByhMclcpMy7tBozV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1NzkxQUJDREY4OUU0REQ2RTNCM0IwRTFCQzYxQTE0
QTE0N0MyMzAeFw0yMzAzMjMxMzE4NThaFw0yNDAzMjExMzIzNThaMDMxMTAvBgNV
BAMTKEVCNUVGQ0Q2Mzk3NzFCMzc1RTVBOTIyRDQxRjkwNzI4MjFBQkFFOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZTe/buWOame2xDNm1dgLKDZcL
yzAH8IAhuAwB7hw7qm+CDUF8jOWGqzV/KbTrMFBt9vrkPKDXZNZEDSfP8Bn5QG6p
xUrRQuEy1IhjuZoegnmPnls63ePzyozWX/78w0P1P9r6ilV9ZoY0M8WzwJOX2UZw
7nPN4ww0dD54Rq6tMb732OYzAX7EYHmY24o2hGfW4h0jE/dIEuXrDlm+VmD4INbK
N9aLUCkeYEzl6+nx791yOp+H3QqbwU2bisaRAjbzBBMnAcY5BaJKj6LA4uuncct3
+Y3Vn2NRVBdp9ejfkcxwG8ZghG7YcPKsfqzN6+iUhlEYf9L9w8ZhfwsG9R79AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU61781jl3GzdeWpItQfkHKCGrrpAwHwYDVR0j
BBgwFoAULVeRq834nk3W47Ow4bxhoUoUfCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZORWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRK
d1YvMC8yRDU3OTFBQkNERjg5RTRERDZFM0IzQjBFMUJDNjFBMTRBMTQ3QzIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENTc5MUFCQ0RGODlFNERE
NkUzQjNCMEUxQkM2MUExNEExNDdDMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2TkVrTkVuV3d6cVhmalRvOWluUno4eHkzWlRGblhUczFqMlBpdDFkSndWLzAv
MzIzODMwMzQzYTMyMzEzNjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM0
MzUzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQhZAAwDQYJKoZIhvcNAQELBQADggEBAAGoHzut
LCKvLmuA4nADEmEh0zb4EYVKNysH4C6rumHbgCwvztqyyzjIVmdUYoxR/MLM95co
2ZveiA/vJARi0ZfNuhfDnWlSzCm3oXd1/Fija0TZz6mXwNVJqj52XmoBv4WBBcm5
gd1g/vCFdwS6JXjuPP5yt6N6J2wbd2E6uEC4BR90Vk5MuzQHqiB4I7o/SBLOj8V5
bJ+/P9IHYOeyIKUaHog7fXhZ4DINPmPgcTXedFrmavU6U0GaW8YJ4zxV1rdiNQLU
gASn5bTndSTmRkvqfiY1/cOGRShhObHiPtDSEeHojlVyaf2LKyo5G4JcDvPfsS3w
8VnznFSvi1uOXws=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org