Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3a2f34382d3438203d3e203532393737.roa
File:                     323830343a3736383a3a2f34382d3438203d3e203532393737.roa (raw, json)
Hash identifier:          OFXKFSop2KZT9zEoW1YCt8Fm1pUGUS6sXs3dUS9+zvk=
Subject key identifier:   09:32:32:C6:44:EB:A7:F6:E5:1F:73:3B:29:A7:5C:7A:9E:EB:11:87
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       6D5B430841ED86BB8A9DC2198EFE6ABD6EFAE469
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3a2f34382d3438203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:04 +0000
ROA not before:           Tue 21 Nov 2023 05:55:04 +0000
ROA not after:            Tue 19 Nov 2024 06:00:04 +0000
asID:                     52977
IP address blocks:        2804:768::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5b:43:08:41:ed:86:bb:8a:9d:c2:19:8e:fe:6a:bd:6e:fa:e4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:04 2023 GMT
            Not After : Nov 19 06:00:04 2024 GMT
        Subject: CN=093232C644EBA7F6E51F733B29A75C7A9EEB1187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:c2:82:18:75:6c:25:2c:10:96:74:89:03:
                    78:fc:df:98:4c:21:05:3f:e2:85:40:e3:e7:a3:8b:
                    65:41:2c:65:8e:01:5b:cf:a8:15:11:6e:70:28:fc:
                    04:64:b2:fa:06:2d:40:0f:b6:08:cc:1b:1a:d0:bc:
                    f8:c4:6b:87:9f:18:3a:3c:85:6b:c1:bb:27:10:bc:
                    2a:f8:6e:11:db:45:ae:f9:5a:18:ac:72:8d:a0:c7:
                    65:7d:7b:62:74:90:6a:5a:60:44:c1:bc:cb:23:fe:
                    9a:bb:f7:1d:4b:cb:e3:6d:b3:6f:8b:c8:f4:3c:09:
                    03:56:f4:62:23:0c:58:9d:5c:b6:d1:e3:f9:8e:6e:
                    a2:53:5f:37:44:66:26:55:4d:eb:c8:a1:8d:f5:23:
                    b7:c4:56:22:da:29:6c:48:a5:ba:77:3c:57:b4:31:
                    28:64:30:28:a1:0a:13:d6:9e:96:a7:56:ef:f5:6a:
                    47:98:4c:1b:dd:03:17:a8:58:f1:ab:f3:2d:37:2d:
                    e6:92:6a:a0:7b:db:6c:a3:bb:da:e5:84:c7:97:ab:
                    c0:19:2e:b2:60:10:2e:d5:2a:a2:e5:c8:7e:05:fc:
                    9b:59:49:26:ac:14:37:f9:78:1c:b8:fa:3c:ed:8d:
                    f8:7b:db:f4:ba:fb:c8:cd:99:b2:88:59:ee:74:f9:
                    73:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:32:32:C6:44:EB:A7:F6:E5:1F:73:3B:29:A7:5C:7A:9E:EB:11:87
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/323830343a3736383a3a2f34382d3438203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:2f:85:0f:f6:87:96:8b:d1:20:07:9b:f7:b2:6f:c0:b9:
         e3:39:13:df:9c:bc:f3:35:da:66:bc:7c:0d:8b:83:c0:75:73:
         46:dd:0c:f6:38:1a:a8:d8:ec:4c:2a:c2:7f:31:ac:11:f9:4c:
         fd:93:f6:d7:c7:8c:12:51:87:d9:68:82:a5:a9:96:04:d9:a2:
         64:3b:24:46:30:5d:27:6b:0e:6f:b2:53:0d:a7:f9:fe:98:b7:
         27:13:63:0f:fc:c9:88:34:a4:9e:0d:a2:fc:20:27:e6:1d:b2:
         e6:f3:29:0d:08:ae:14:9d:ca:54:dc:25:1a:c6:b2:fc:cb:f0:
         ca:a7:62:d3:69:c7:03:ef:26:52:c3:8e:35:d0:f9:c6:e4:6c:
         6e:a2:5b:4a:4c:58:77:51:18:50:64:a5:ca:d9:7d:71:94:fc:
         27:ee:b8:5c:20:64:e1:65:c3:2b:63:70:46:2b:02:14:d8:8a:
         58:0d:88:ae:6b:f9:25:3a:58:13:49:bf:aa:d4:e7:f5:37:2f:
         3c:ef:5c:d9:26:98:96:e4:2d:d8:3d:b8:bc:23:52:8b:90:17:
         97:5d:bf:e5:35:15:73:00:c2:9a:c4:36:b9:2e:55:bc:25:c1:
         11:bb:ca:7a:43:c6:2c:67:65:64:43:3c:77:68:ab:8b:97:51:
         cf:58:5a:43
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbVtDCEHthruKncIZjv5qvW765GkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRTZEQTI3QzU3ODNDQzdBQkI0M0Q2M0UwODcxNTdD
NzIyMEUzNTAeFw0yMzExMjEwNTU1MDRaFw0yNDExMTkwNjAwMDRaMDMxMTAvBgNV
BAMTKDA5MzIzMkM2NDRFQkE3RjZFNTFGNzMzQjI5QTc1QzdBOUVFQjExODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTMKCGHVsJSwQlnSJA3j835hM
IQU/4oVA4+eji2VBLGWOAVvPqBURbnAo/ARksvoGLUAPtgjMGxrQvPjEa4efGDo8
hWvBuycQvCr4bhHbRa75Whisco2gx2V9e2J0kGpaYETBvMsj/pq79x1Ly+Nts2+L
yPQ8CQNW9GIjDFidXLbR4/mObqJTXzdEZiZVTevIoY31I7fEViLaKWxIpbp3PFe0
MShkMCihChPWnpanVu/1akeYTBvdAxeoWPGr8y03LeaSaqB722yju9rlhMeXq8AZ
LrJgEC7VKqLlyH4F/JtZSSasFDf5eBy4+jztjfh72/S6+8jNmbKIWe50+XNlAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUCTIyxkTrp/blH3M7Kadcep7rEYcwHwYDVR0j
BBgwFoAUQ75tonxXg8x6u0PWPghxV8ciDjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMC80M0JFNkRBMjdDNTc4M0NDN0FCQjQzRDYzRTA4NzE1N0M3MjIwRTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQkU2REEyN0M1NzgzQ0M3
QUJCNDNENjNFMDg3MTU3QzcyMjBFMzUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzAv
MzIzODMwMzQzYTM3MzYzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzOTM3
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAoBAdoAAAwDQYJKoZIhvcNAQELBQADggEBAEleL4UP9oeW
i9EgB5v3sm/AueM5E9+cvPM12ma8fA2Lg8B1c0bdDPY4GqjY7Ewqwn8xrBH5TP2T
9tfHjBJRh9logqWplgTZomQ7JEYwXSdrDm+yUw2n+f6YtycTYw/8yYg0pJ4Novwg
J+YdsubzKQ0IrhSdylTcJRrGsvzL8MqnYtNpxwPvJlLDjjXQ+cbkbG6iW0pMWHdR
GFBkpcrZfXGU/CfuuFwgZOFlwytjcEYrAhTYilgNiK5r+SU6WBNJv6rU5/U3Lzzv
XNkmmJbkLdg9uLwjUouQF5ddv+U1FXMAwprENrkuVbwlwRG7ynpDxixnZWRDPHdo
q4uXUc9YWkM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org