Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3730303a3a2f34302d3430203d3e20323636343837.roa
File:                     323830343a333839343a3730303a3a2f34302d3430203d3e20323636343837.roa (raw, json)
Hash identifier:          MepDl6WU2BQYvbvDpC3IP5xmtYDzDY034q5vh8VIA6s=
Subject key identifier:   DC:BD:C7:4E:3A:02:3B:34:50:AF:A0:13:E6:F0:9A:1F:82:72:13:D2
Certificate issuer:       /CN=CDCCA6CF47779DC345EBD61C034E72D95E0C644C
Certificate serial:       10EA36B619BFED19A9C17115F909B6AA14C629A3
Authority key identifier: CD:CC:A6:CF:47:77:9D:C3:45:EB:D6:1C:03:4E:72:D9:5E:0C:64:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDCCA6CF47779DC345EBD61C034E72D95E0C644C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3730303a3a2f34302d3430203d3e20323636343837.roa
Signing time:             Wed 26 Apr 2023 01:13:26 +0000
ROA not before:           Wed 26 Apr 2023 01:08:26 +0000
ROA not after:            Wed 24 Apr 2024 01:13:26 +0000
asID:                     266487
IP address blocks:        2804:3894:700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ea:36:b6:19:bf:ed:19:a9:c1:71:15:f9:09:b6:aa:14:c6:29:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCCA6CF47779DC345EBD61C034E72D95E0C644C
        Validity
            Not Before: Apr 26 01:08:26 2023 GMT
            Not After : Apr 24 01:13:26 2024 GMT
        Subject: CN=DCBDC74E3A023B3450AFA013E6F09A1F827213D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:70:bd:3b:2b:cb:90:56:b0:99:39:9e:f7:
                    34:15:a6:8a:2e:df:8d:0e:f3:37:9b:de:42:63:15:
                    c7:35:37:9e:0a:9a:af:37:d4:b2:bf:cc:1c:0a:5d:
                    98:d2:bb:b2:54:8f:a3:a6:90:52:1c:b4:ba:ff:44:
                    d5:c4:da:1d:7c:bd:43:9c:12:21:d9:c1:fc:71:d7:
                    6e:79:e4:c3:38:70:b3:32:0b:b3:43:64:01:8b:f0:
                    ce:b2:6b:8d:71:73:c7:19:b3:d1:83:ab:6d:22:27:
                    30:59:44:f6:88:8b:97:33:fa:a9:2e:52:c7:d5:f7:
                    c7:1d:a7:d5:a8:eb:ba:d4:52:30:46:b9:a5:9d:57:
                    27:93:4c:77:20:ec:18:20:84:1f:be:cc:fe:85:d1:
                    a1:d4:30:76:a5:96:e1:db:dd:c8:c5:80:1c:fd:da:
                    7f:fb:e1:94:88:ad:41:58:5a:5b:fa:7c:32:90:2c:
                    2f:a0:eb:f5:64:78:1b:e7:01:86:00:a2:49:f4:26:
                    37:01:b7:0d:e4:f0:ef:9f:bb:c5:ae:90:91:8d:99:
                    b9:ca:7b:c0:cb:86:06:a2:02:f8:53:30:a6:65:0e:
                    7f:15:ee:d1:41:fd:53:e3:06:f7:e1:06:59:df:ba:
                    76:a1:6f:39:26:84:16:e6:58:12:b5:f0:dc:05:a7:
                    4d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BD:C7:4E:3A:02:3B:34:50:AF:A0:13:E6:F0:9A:1F:82:72:13:D2
            X509v3 Authority Key Identifier:
                keyid:CD:CC:A6:CF:47:77:9D:C3:45:EB:D6:1C:03:4E:72:D9:5E:0C:64:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/CDCCA6CF47779DC345EBD61C034E72D95E0C644C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDCCA6CF47779DC345EBD61C034E72D95E0C644C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3730303a3a2f34302d3430203d3e20323636343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3894:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:a2:eb:d0:7a:9e:90:9a:a8:b7:f0:5b:68:05:5b:fc:2e:a3:
         8c:c6:ae:14:8f:84:ca:d0:fb:c9:d6:b2:0f:5f:01:47:89:41:
         a9:32:d3:a2:5b:1e:49:e1:cc:38:c1:98:04:41:d6:cf:e0:0f:
         dc:7b:85:02:1b:18:62:23:10:91:f3:95:c8:7a:97:9a:df:cb:
         37:a7:42:7d:57:d7:35:e7:6d:48:c2:51:a9:24:eb:a4:3a:b5:
         ce:1e:af:ea:0f:aa:68:e3:7e:38:fa:da:f3:3d:b6:4e:88:79:
         11:0a:8a:a4:ff:6d:68:96:53:5c:a1:26:0b:48:cb:6b:62:b3:
         c7:a7:f5:7d:b2:28:c6:09:ee:94:d2:60:88:82:b4:45:5f:2b:
         4e:62:99:53:f2:75:14:b1:a4:60:dc:62:69:1d:e9:ed:48:1d:
         0f:1e:f9:30:c4:24:08:ba:b0:fc:72:9f:c4:de:52:e2:b3:e9:
         5c:19:ea:c0:aa:c0:c2:04:5b:01:30:c2:0c:8b:a0:32:fc:5a:
         06:02:96:61:6f:29:d6:77:85:dc:e1:5b:62:16:86:9e:4f:dc:
         73:66:29:6f:bf:2e:d0:36:e9:05:2e:e1:ba:e2:7e:10:9e:74:
         6c:44:d8:ca:1f:f6:65:9c:a5:b3:85:e0:59:f5:c6:ab:2f:50:
         25:66:3f:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEOo2thm/7RmpwXEV+Qm2qhTGKaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDQ0E2Q0Y0Nzc3OURDMzQ1RUJENjFDMDM0RTcyRDk1
RTBDNjQ0QzAeFw0yMzA0MjYwMTA4MjZaFw0yNDA0MjQwMTEzMjZaMDMxMTAvBgNV
BAMTKERDQkRDNzRFM0EwMjNCMzQ1MEFGQTAxM0U2RjA5QTFGODI3MjEzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QXC9OyvLkFawmTme9zQVpoou
340O8zeb3kJjFcc1N54Kmq831LK/zBwKXZjSu7JUj6OmkFIctLr/RNXE2h18vUOc
EiHZwfxx12555MM4cLMyC7NDZAGL8M6ya41xc8cZs9GDq20iJzBZRPaIi5cz+qku
UsfV98cdp9Wo67rUUjBGuaWdVyeTTHcg7BgghB++zP6F0aHUMHalluHb3cjFgBz9
2n/74ZSIrUFYWlv6fDKQLC+g6/VkeBvnAYYAokn0JjcBtw3k8O+fu8WukJGNmbnK
e8DLhgaiAvhTMKZlDn8V7tFB/VPjBvfhBlnfunahbzkmhBbmWBK18NwFp031AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3L3HTjoCOzRQr6AT5vCaH4JyE9IwHwYDVR0j
BBgwFoAUzcymz0d3ncNF69YcA05y2V4MZEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFjWUZibWRnaXQzYnlITHZFZ24xRzJSQ3FMYXZtQ1NINFdRZXVGRHk3
cFUvMC9DRENDQTZDRjQ3Nzc5REMzNDVFQkQ2MUMwMzRFNzJEOTVFMEM2NDRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NEQ0NBNkNGNDc3NzlEQzM0
NUVCRDYxQzAzNEU3MkQ5NUUwQzY0NEMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxY1lGYm1kZ2l0M2J5SEx2RWduMUcyUkNxTGF2bUNTSDRXUWV1RkR5N3BVLzAv
MzIzODMwMzQzYTMzMzgzOTM0M2EzNzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzYzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBDiUBzANBgkqhkiG9w0BAQsFAAOC
AQEARaLr0HqekJqot/BbaAVb/C6jjMauFI+EytD7ydayD18BR4lBqTLTolseSeHM
OMGYBEHWz+AP3HuFAhsYYiMQkfOVyHqXmt/LN6dCfVfXNedtSMJRqSTrpDq1zh6v
6g+qaON+OPra8z22Toh5EQqKpP9taJZTXKEmC0jLa2Kzx6f1fbIoxgnulNJgiIK0
RV8rTmKZU/J1FLGkYNxiaR3p7UgdDx75MMQkCLqw/HKfxN5S4rPpXBnqwKrAwgRb
ATDCDIugMvxaBgKWYW8p1neF3OFbYhaGnk/cc2Ypb78u0DbpBS7huuJ+EJ50bETY
yh/2ZZyls4XgWfXGqy9QJWY/CQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org