Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/323830343a366364633a3a2f33322d3332203d3e20323730343937.roa
File:                     323830343a366364633a3a2f33322d3332203d3e20323730343937.roa (raw, json)
Hash identifier:          YScFqpdekZdm4xbUIsJzpGWl/k/wTWWfDwsGWIBCu9E=
Subject key identifier:   CD:AA:43:7F:13:92:3D:3A:1B:BF:B4:C7:05:DC:CC:6A:70:53:81:13
Certificate issuer:       /CN=1B48865C2ECB384BCBAAB41003FABA098EC1CFB8
Certificate serial:       2EBA36205192F68372370FFD864707E3F8030836
Authority key identifier: 1B:48:86:5C:2E:CB:38:4B:CB:AA:B4:10:03:FA:BA:09:8E:C1:CF:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/323830343a366364633a3a2f33322d3332203d3e20323730343937.roa
Signing time:             Tue 29 Nov 2022 16:51:21 +0000
ROA not before:           Tue 29 Nov 2022 16:46:21 +0000
ROA not after:            Tue 28 Nov 2023 16:51:21 +0000
asID:                     270497
IP address blocks:        2804:6cdc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ba:36:20:51:92:f6:83:72:37:0f:fd:86:47:07:e3:f8:03:08:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B48865C2ECB384BCBAAB41003FABA098EC1CFB8
        Validity
            Not Before: Nov 29 16:46:21 2022 GMT
            Not After : Nov 28 16:51:21 2023 GMT
        Subject: CN=CDAA437F13923D3A1BBFB4C705DCCC6A70538113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:48:42:e0:b6:db:76:86:bb:9a:d4:fa:cc:
                    93:70:ed:13:d1:ca:6c:73:be:41:67:3b:76:61:06:
                    eb:99:80:0d:fa:22:dc:df:09:82:c4:c0:93:8e:f9:
                    75:39:88:79:ba:7d:0a:59:c6:8d:93:27:1a:6c:24:
                    e6:88:ad:a1:6d:51:c9:e3:41:3b:9e:97:5d:97:f9:
                    4c:f9:6c:e0:92:99:3f:a8:f4:8a:05:5a:e6:63:92:
                    e0:f5:6d:b8:43:c2:97:e5:75:ac:9f:f3:72:55:d8:
                    cd:93:8d:73:a0:bc:7c:2a:1f:c1:b2:f0:0c:c1:2e:
                    28:94:1d:77:d3:c4:53:87:84:5f:b2:8b:9c:49:a2:
                    cf:48:f9:ec:91:a6:eb:37:90:e0:be:e6:48:d9:19:
                    66:75:28:be:ee:5d:35:f1:89:ac:92:fe:da:f6:59:
                    dd:7e:6b:2b:76:c9:c5:e5:1d:95:07:18:2d:d6:af:
                    af:fa:b8:f5:ca:64:58:a1:7a:84:af:60:d2:01:5f:
                    ab:e9:01:cc:12:d2:df:58:6c:ab:a8:0e:a2:74:59:
                    c6:36:2f:bd:30:a2:20:16:9f:7e:b3:56:a7:4d:ab:
                    a6:a7:6a:f7:3c:74:a2:9c:93:79:91:de:3f:de:43:
                    43:92:07:43:bb:41:03:3f:0c:4c:a9:9d:c3:6a:a9:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AA:43:7F:13:92:3D:3A:1B:BF:B4:C7:05:DC:CC:6A:70:53:81:13
            X509v3 Authority Key Identifier:
                keyid:1B:48:86:5C:2E:CB:38:4B:CB:AA:B4:10:03:FA:BA:09:8E:C1:CF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/323830343a366364633a3a2f33322d3332203d3e20323730343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:21:3a:ff:f7:04:51:24:8d:f5:1c:29:0c:62:49:e3:c3:9a:
         b0:8a:37:1b:95:08:e8:9b:73:e0:66:6a:ab:92:6b:c4:3b:09:
         28:ab:5f:44:7f:f3:c3:f3:85:ad:a0:f8:d0:9f:a1:64:59:3b:
         d3:34:a0:af:62:fe:d3:c4:d8:81:66:be:39:3a:60:9e:d0:75:
         16:f2:1a:c6:7c:e8:7d:05:0d:47:be:c8:c3:70:b1:09:dc:37:
         b1:62:70:4a:23:71:a4:80:5d:70:f5:49:92:cf:e6:48:3d:7d:
         54:3e:15:1d:a4:79:c7:75:2f:5b:2a:c0:54:bd:59:25:21:86:
         7d:79:11:6c:c3:eb:69:42:0d:a4:64:a7:0d:60:98:f7:ab:29:
         37:43:66:cd:3c:2a:90:59:d2:23:90:bb:f6:a9:f3:9f:b0:f6:
         f6:1f:40:10:80:db:9a:66:3e:20:a5:bd:db:e5:f4:9e:cb:48:
         fc:bf:b5:98:58:4e:0c:29:19:f6:bd:6c:f6:28:93:de:5b:c4:
         e4:7e:db:af:c4:7b:ba:4c:42:21:4c:a5:8f:b7:6f:d6:98:fb:
         de:07:8d:61:29:2f:97:9e:47:26:fe:2b:5e:f0:24:0e:0c:9d:
         eb:fe:17:94:b7:06:cc:b5:5e:54:27:80:f4:ff:6c:36:1e:91:
         50:a7:43:99
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULro2IFGS9oNyNw/9hkcH4/gDCDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0ODg2NUMyRUNCMzg0QkNCQUFCNDEwMDNGQUJBMDk4
RUMxQ0ZCODAeFw0yMjExMjkxNjQ2MjFaFw0yMzExMjgxNjUxMjFaMDMxMTAvBgNV
BAMTKENEQUE0MzdGMTM5MjNEM0ExQkJGQjRDNzA1RENDQzZBNzA1MzgxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGEhC4Lbbdoa7mtT6zJNw7RPR
ymxzvkFnO3ZhBuuZgA36ItzfCYLEwJOO+XU5iHm6fQpZxo2TJxpsJOaIraFtUcnj
QTuel12X+Uz5bOCSmT+o9IoFWuZjkuD1bbhDwpfldayf83JV2M2TjXOgvHwqH8Gy
8AzBLiiUHXfTxFOHhF+yi5xJos9I+eyRpus3kOC+5kjZGWZ1KL7uXTXxiayS/tr2
Wd1+ayt2ycXlHZUHGC3Wr6/6uPXKZFiheoSvYNIBX6vpAcwS0t9YbKuoDqJ0WcY2
L70woiAWn36zVqdNq6anavc8dKKck3mR3j/eQ0OSB0O7QQM/DEypncNqqeVpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzapDfxOSPTobv7THBdzManBTgRMwHwYDVR0j
BBgwFoAUG0iGXC7LOEvLqrQQA/q6CY7Bz7gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXZvcjVhQTREYjl6YkJUaUhYYTMyNWNCd0tKa0U2ZE1DQWhvWEpGTTlT
dW0vMC8xQjQ4ODY1QzJFQ0IzODRCQ0JBQUI0MTAwM0ZBQkEwOThFQzFDRkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCNDg4NjVDMkVDQjM4NEJD
QkFBQjQxMDAzRkFCQTA5OEVDMUNGQjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl2b3I1YUE0RGI5emJCVGlIWGEzMjVjQndLSmtFNmRNQ0Fob1hKRk05U3VtLzAv
MzIzODMwMzQzYTM2NjM2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARs3DANBgkqhkiG9w0BAQsFAAOCAQEAASE6//cE
USSN9RwpDGJJ48OasIo3G5UI6Jtz4GZqq5JrxDsJKKtfRH/zw/OFraD40J+hZFk7
0zSgr2L+08TYgWa+OTpgntB1FvIaxnzofQUNR77Iw3CxCdw3sWJwSiNxpIBdcPVJ
ks/mSD19VD4VHaR5x3UvWyrAVL1ZJSGGfXkRbMPraUINpGSnDWCY96spN0NmzTwq
kFnSI5C79qnzn7D29h9AEIDbmmY+IKW92+X0nstI/L+1mFhODCkZ9r1s9iiT3lvE
5H7br8R7ukxCIUylj7dv1pj73geNYSkvl55HJv4rXvAkDgyd6/4XlLcGzLVeVCeA
9P9sNh6RUKdDmQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org