Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3335203d3e20323634393438.roa
File:                     323830343a333036343a3a2f33322d3335203d3e20323634393438.roa (raw, json)
Hash identifier:          pXXIbrsCFF0/O/bM1zJTWIxB+ZIJezVuynABodYf8mM=
Subject key identifier:   E1:B3:95:7D:8D:05:FD:10:C7:A4:3B:3D:69:91:56:84:70:7B:D7:90
Certificate issuer:       /CN=1029030DE1C966D8C8F63A122B446774ADE861DC
Certificate serial:       0D5773BF69173E3D5441289D49DCF94DF352A4EB
Authority key identifier: 10:29:03:0D:E1:C9:66:D8:C8:F6:3A:12:2B:44:67:74:AD:E8:61:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1029030DE1C966D8C8F63A122B446774ADE861DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3335203d3e20323634393438.roa
Signing time:             Thu 09 Nov 2023 15:20:11 +0000
ROA not before:           Thu 09 Nov 2023 15:15:11 +0000
ROA not after:            Thu 07 Nov 2024 15:20:11 +0000
asID:                     264948
IP address blocks:        2804:3064::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:57:73:bf:69:17:3e:3d:54:41:28:9d:49:dc:f9:4d:f3:52:a4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1029030DE1C966D8C8F63A122B446774ADE861DC
        Validity
            Not Before: Nov  9 15:15:11 2023 GMT
            Not After : Nov  7 15:20:11 2024 GMT
        Subject: CN=E1B3957D8D05FD10C7A43B3D69915684707BD790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:fa:d8:8e:b1:cb:d6:5f:19:ad:d4:2b:0a:
                    1f:79:18:c8:16:c5:7a:86:9a:45:a3:30:2e:f7:9b:
                    51:22:c3:c6:2b:20:89:25:4b:49:b8:fd:5e:b9:63:
                    23:77:ef:8d:37:7b:64:47:33:c2:f0:ba:3f:1e:b1:
                    11:0b:19:93:50:f5:e1:42:27:4e:0e:9f:29:ab:b2:
                    27:92:ec:f7:45:21:95:03:0c:38:c2:63:42:64:25:
                    cf:3b:b1:a0:f2:53:34:63:b9:16:fa:75:d0:80:f8:
                    ff:c9:fa:78:25:34:11:d5:fb:dc:16:0f:b8:4d:37:
                    48:84:c1:6d:97:97:f1:c8:7e:11:92:b3:85:8d:97:
                    64:4c:c8:38:b3:ac:44:aa:50:55:93:a9:5c:c7:5b:
                    85:ea:aa:3e:6a:1e:cc:55:27:0c:21:9b:d7:dd:a7:
                    ab:d9:ee:b4:81:ea:7b:b9:ec:14:0b:0a:35:73:fb:
                    cf:77:76:c6:bc:93:1e:7d:6f:f9:b9:2c:8e:17:2f:
                    2f:62:cd:6c:25:93:2b:5c:d9:07:ee:27:1b:08:6f:
                    d2:ed:f6:1e:02:4b:ac:c2:fc:db:d9:47:2e:48:3d:
                    c3:d7:93:73:60:59:c0:7f:50:de:8e:4e:6c:90:7f:
                    8c:ed:d7:c1:7a:b4:3e:f8:30:cd:98:04:31:3b:01:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B3:95:7D:8D:05:FD:10:C7:A4:3B:3D:69:91:56:84:70:7B:D7:90
            X509v3 Authority Key Identifier:
                keyid:10:29:03:0D:E1:C9:66:D8:C8:F6:3A:12:2B:44:67:74:AD:E8:61:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/1029030DE1C966D8C8F63A122B446774ADE861DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1029030DE1C966D8C8F63A122B446774ADE861DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3335203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3064::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:f7:a8:a2:3c:a4:69:ca:8d:a4:21:cc:a3:89:45:f8:cf:
         b2:a7:99:04:08:00:1e:a7:ee:94:32:0b:98:b2:23:5f:68:2c:
         27:dc:96:13:49:34:b3:6f:e6:ba:5b:80:cc:72:f4:e5:3f:8d:
         0f:74:f2:19:5e:4e:ac:cd:e2:a4:91:a1:f0:7f:ee:22:de:1e:
         b7:d5:89:53:a5:63:16:e6:4d:81:84:e0:8e:9b:73:6f:3c:1d:
         65:56:09:fd:ed:22:18:f9:18:d7:1e:d4:69:3a:0b:40:18:f7:
         ad:a4:3b:78:c9:af:55:06:99:2e:fb:f3:3b:93:46:5a:8b:3e:
         e9:51:f1:7b:d0:dd:36:75:5d:a6:40:01:1a:22:48:b7:b0:8f:
         60:da:4c:a7:20:46:1b:9e:dd:9d:77:6b:6e:80:eb:ca:46:80:
         b0:2f:a2:ee:37:3b:0d:35:1e:58:ac:21:87:ae:c3:ab:38:bf:
         7c:49:d9:a7:ae:36:4c:a1:53:a0:9f:7d:32:f3:d8:21:17:9a:
         15:a7:d0:fe:59:28:ef:7c:3c:03:ab:92:b8:b0:20:87:84:c8:
         51:6c:09:14:63:cc:2c:5c:94:30:32:fd:88:c5:2d:08:be:50:
         52:32:16:65:bb:dc:57:ce:b2:44:ce:cb:b9:a8:59:b0:43:6e:
         1b:ba:ce:40
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDVdzv2kXPj1UQSidSdz5TfNSpOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAyOTAzMERFMUM5NjZEOEM4RjYzQTEyMkI0NDY3NzRB
REU4NjFEQzAeFw0yMzExMDkxNTE1MTFaFw0yNDExMDcxNTIwMTFaMDMxMTAvBgNV
BAMTKEUxQjM5NTdEOEQwNUZEMTBDN0E0M0IzRDY5OTE1Njg0NzA3QkQ3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlvrYjrHL1l8ZrdQrCh95GMgW
xXqGmkWjMC73m1Eiw8YrIIklS0m4/V65YyN37403e2RHM8Lwuj8esRELGZNQ9eFC
J04OnymrsieS7PdFIZUDDDjCY0JkJc87saDyUzRjuRb6ddCA+P/J+nglNBHV+9wW
D7hNN0iEwW2Xl/HIfhGSs4WNl2RMyDizrESqUFWTqVzHW4Xqqj5qHsxVJwwhm9fd
p6vZ7rSB6nu57BQLCjVz+893dsa8kx59b/m5LI4XLy9izWwlkytc2QfuJxsIb9Lt
9h4CS6zC/NvZRy5IPcPXk3NgWcB/UN6OTmyQf4zt18F6tD74MM2YBDE7AdMjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4bOVfY0F/RDHpDs9aZFWhHB715AwHwYDVR0j
BBgwFoAUECkDDeHJZtjI9joSK0RndK3oYdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8xMDI5MDMwREUxQzk2NkQ4QzhGNjNBMTIyQjQ0Njc3NEFERTg2MURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwMjkwMzBERTFDOTY2RDhD
OEY2M0ExMjJCNDQ2Nzc0QURFODYxREMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv
MzIzODMwMzQzYTMzMzAzNjM0M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM0
MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwZDANBgkqhkiG9w0BAQsFAAOCAQEAUz33qKI8
pGnKjaQhzKOJRfjPsqeZBAgAHqfulDILmLIjX2gsJ9yWE0k0s2/muluAzHL05T+N
D3TyGV5OrM3ipJGh8H/uIt4et9WJU6VjFuZNgYTgjptzbzwdZVYJ/e0iGPkY1x7U
aToLQBj3raQ7eMmvVQaZLvvzO5NGWos+6VHxe9DdNnVdpkABGiJIt7CPYNpMpyBG
G57dnXdrboDrykaAsC+i7jc7DTUeWKwhh67Dqzi/fEnZp642TKFToJ99MvPYIRea
FafQ/lko73w8A6uSuLAgh4TIUWwJFGPMLFyUMDL9iMUtCL5QUjIWZbvcV86yRM7L
uahZsENuG7rOQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org