Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/323830343a316163343a3a2f33322d3438203d3e203631383834.roa
File:                     323830343a316163343a3a2f33322d3438203d3e203631383834.roa (raw, json)
Hash identifier:          SObENV3XyuNfKG31mXeVrEnMf6UpbhxMHEjvZzoo0AQ=
Subject key identifier:   CA:ED:DA:0B:D5:97:C4:D2:F7:A2:7D:A8:34:E7:5F:61:C0:49:BB:A7
Certificate issuer:       /CN=869F06292831A01521243CA24882F2D83807942B
Certificate serial:       09D0C40B435EA797B9D3605F62084090E9ADF1BB
Authority key identifier: 86:9F:06:29:28:31:A0:15:21:24:3C:A2:48:82:F2:D8:38:07:94:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/869F06292831A01521243CA24882F2D83807942B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/323830343a316163343a3a2f33322d3438203d3e203631383834.roa
Signing time:             Fri 27 Oct 2023 13:42:10 +0000
ROA not before:           Fri 27 Oct 2023 13:37:10 +0000
ROA not after:            Fri 25 Oct 2024 13:42:10 +0000
asID:                     61884
IP address blocks:        2804:1ac4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d0:c4:0b:43:5e:a7:97:b9:d3:60:5f:62:08:40:90:e9:ad:f1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869F06292831A01521243CA24882F2D83807942B
        Validity
            Not Before: Oct 27 13:37:10 2023 GMT
            Not After : Oct 25 13:42:10 2024 GMT
        Subject: CN=CAEDDA0BD597C4D2F7A27DA834E75F61C049BBA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:39:41:4e:66:d2:3b:ea:8c:9c:73:fd:8f:c8:
                    1a:f8:54:ae:b3:67:57:fb:17:14:dc:49:1e:c7:4d:
                    d9:db:b5:62:4e:a3:61:79:80:42:3c:c0:33:ff:21:
                    ad:39:5f:3f:16:54:28:5a:88:f2:3a:10:f8:1e:02:
                    46:7b:20:d2:a4:b7:5d:72:b2:c1:2d:78:f0:45:84:
                    2d:87:f6:c5:25:dc:45:6e:36:2a:9f:15:c4:bb:f5:
                    68:09:19:77:eb:d6:22:09:b2:ce:a7:7e:b8:9e:4c:
                    35:89:38:da:5a:07:68:a4:37:a5:a1:7d:b6:e6:52:
                    0d:5c:f6:59:17:4b:d4:d2:be:18:d1:a5:a4:60:c7:
                    a1:6e:6a:27:83:9d:7a:ba:48:eb:3b:7b:11:f2:9b:
                    77:70:67:19:23:41:98:54:8d:24:6e:f0:e6:0f:26:
                    7f:d9:ae:dc:cc:25:2a:80:c3:71:36:9f:f6:e9:6a:
                    ff:6a:2f:15:ef:9c:bb:0c:62:a2:8f:41:da:51:5e:
                    b1:22:09:5e:94:f3:9c:04:38:b3:53:4c:4e:b3:2c:
                    05:14:5e:a2:44:0a:eb:1c:c2:ad:f6:84:a8:5c:e0:
                    17:23:3f:67:70:4d:09:6e:a6:0a:58:df:31:34:90:
                    f2:1b:9b:d7:ef:6f:df:26:57:d2:ec:5a:37:7d:86:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:ED:DA:0B:D5:97:C4:D2:F7:A2:7D:A8:34:E7:5F:61:C0:49:BB:A7
            X509v3 Authority Key Identifier:
                keyid:86:9F:06:29:28:31:A0:15:21:24:3C:A2:48:82:F2:D8:38:07:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/869F06292831A01521243CA24882F2D83807942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/869F06292831A01521243CA24882F2D83807942B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/323830343a316163343a3a2f33322d3438203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:f8:5e:d1:7f:e6:60:f8:65:80:38:28:14:e8:9d:33:0e:
         ef:25:85:62:8f:5f:6f:e3:e6:f6:a6:5f:e1:09:a1:27:4c:d3:
         86:15:5e:c3:59:59:e9:4c:c6:42:7e:01:e2:c3:c3:c5:1d:38:
         36:3c:36:8f:95:3d:97:4d:8e:be:c2:26:1d:a2:73:2b:ac:5b:
         97:3a:a1:c7:6f:46:54:a3:7e:ce:92:60:b4:4d:45:ff:11:f0:
         70:a0:5d:ee:bb:b5:36:a4:f8:81:20:29:e7:c5:f5:1f:42:64:
         1f:0f:b8:ef:5c:1d:3c:ef:ef:24:2d:4e:7b:4d:7e:8d:e2:bd:
         21:ec:16:12:90:73:a9:8b:34:97:ef:79:57:40:da:09:cc:55:
         ac:29:7e:51:87:4e:fa:ab:bf:e2:a4:0d:18:8e:5d:fb:50:0d:
         f1:74:21:90:ff:9c:5c:3b:76:77:25:f1:c0:c6:35:50:77:a4:
         43:e9:5f:fd:d3:2f:78:da:9a:83:de:b2:db:62:32:35:d6:22:
         66:80:53:78:0a:e2:b6:a7:33:9d:8f:b3:78:7d:1e:c9:98:b2:
         bf:f8:e2:ea:4c:eb:6c:2d:5f:30:f0:7e:b5:bb:3a:0e:00:a0:
         8a:62:ca:0a:31:64:3e:05:17:6b:73:88:ac:a4:0f:b1:e4:05:
         69:89:2e:01
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCdDEC0Nep5e502BfYghAkOmt8bswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY5RjA2MjkyODMxQTAxNTIxMjQzQ0EyNDg4MkYyRDgz
ODA3OTQyQjAeFw0yMzEwMjcxMzM3MTBaFw0yNDEwMjUxMzQyMTBaMDMxMTAvBgNV
BAMTKENBRUREQTBCRDU5N0M0RDJGN0EyN0RBODM0RTc1RjYxQzA0OUJCQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtOUFOZtI76oycc/2PyBr4VK6z
Z1f7FxTcSR7HTdnbtWJOo2F5gEI8wDP/Ia05Xz8WVChaiPI6EPgeAkZ7INKkt11y
ssEtePBFhC2H9sUl3EVuNiqfFcS79WgJGXfr1iIJss6nfrieTDWJONpaB2ikN6Wh
fbbmUg1c9lkXS9TSvhjRpaRgx6FuaieDnXq6SOs7exHym3dwZxkjQZhUjSRu8OYP
Jn/ZrtzMJSqAw3E2n/bpav9qLxXvnLsMYqKPQdpRXrEiCV6U85wEOLNTTE6zLAUU
XqJECuscwq32hKhc4BcjP2dwTQlupgpY3zE0kPIbm9fvb98mV9LsWjd9hrxfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUyu3aC9WXxNL3on2oNOdfYcBJu6cwHwYDVR0j
BBgwFoAUhp8GKSgxoBUhJDyiSILy2DgHlCswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTgzemdnNUZSYm5FOFJqWHlrVTg5R1QxQmVrS2ZuUTJpU2VCc3VQUzFD
OUEvMC84NjlGMDYyOTI4MzFBMDE1MjEyNDNDQTI0ODgyRjJEODM4MDc5NDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg2OUYwNjI5MjgzMUEwMTUy
MTI0M0NBMjQ4ODJGMkQ4MzgwNzk0MkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk4M3pnZzVGUmJuRThSalh5a1U4OUdUMUJla0tmblEyaVNlQnN1UFMxQzlBLzAv
MzIzODMwMzQzYTMxNjE2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGsQwDQYJKoZIhvcNAQELBQADggEBABga+F7Rf+Zg
+GWAOCgU6J0zDu8lhWKPX2/j5vamX+EJoSdM04YVXsNZWelMxkJ+AeLDw8UdODY8
No+VPZdNjr7CJh2icyusW5c6ocdvRlSjfs6SYLRNRf8R8HCgXe67tTak+IEgKefF
9R9CZB8PuO9cHTzv7yQtTntNfo3ivSHsFhKQc6mLNJfveVdA2gnMVawpflGHTvqr
v+KkDRiOXftQDfF0IZD/nFw7dncl8cDGNVB3pEPpX/3TL3jamoPesttiMjXWImaA
U3gK4ranM52Ps3h9HsmYsr/44upM62wtXzDwfrW7Og4AoIpiygoxZD4FF2tziKyk
D7HkBWmJLgE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org