Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a3a2f33322d3438203d3e20323634323937.roa
File:                     323830343a323562343a3a2f33322d3438203d3e20323634323937.roa (raw, json)
Hash identifier:          +n4SxEuIbvkaxXIHlGdIIKbaipJflL8HvEUU6w38XWY=
Subject key identifier:   BB:1E:1B:76:F1:44:86:7B:AF:AD:89:A1:3E:F1:12:B1:12:D9:FF:1A
Certificate issuer:       /CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Certificate serial:       78A5FA098F99873DBBCD403343C6036FB50E4743
Authority key identifier: 07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a3a2f33322d3438203d3e20323634323937.roa
Signing time:             Thu 31 Aug 2023 19:07:38 +0000
ROA not before:           Thu 31 Aug 2023 19:02:38 +0000
ROA not after:            Thu 29 Aug 2024 19:07:38 +0000
asID:                     264297
IP address blocks:        2804:25b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:fa:09:8f:99:87:3d:bb:cd:40:33:43:c6:03:6f:b5:0e:47:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070B1B3AB7E59C42A791E094D81229555D5D0146
        Validity
            Not Before: Aug 31 19:02:38 2023 GMT
            Not After : Aug 29 19:07:38 2024 GMT
        Subject: CN=BB1E1B76F144867BAFAD89A13EF112B112D9FF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b2:32:26:6d:37:34:e4:8f:ba:66:67:bf:93:
                    ed:44:fc:f9:e3:dc:5f:aa:99:82:96:99:3f:65:07:
                    20:cb:86:c8:13:c0:7c:ae:e5:81:0e:6b:87:26:5d:
                    1a:bb:36:8c:a8:f6:be:15:4d:61:11:3d:28:2f:31:
                    75:d3:19:4b:1d:e7:59:a5:ab:8c:b2:ee:88:4b:ca:
                    23:00:47:42:9f:45:1a:9f:cf:cd:f0:d4:07:40:e2:
                    a6:8a:eb:f4:7d:9b:10:fc:7e:ad:3c:89:3a:82:85:
                    8e:59:83:7b:67:4c:c4:d1:d7:ab:97:96:ae:ff:8b:
                    65:74:12:cd:03:f1:2e:35:60:33:66:d2:c6:89:9f:
                    0b:76:d3:39:8c:8c:bc:9e:a9:9f:01:0e:7e:6f:b8:
                    76:5b:65:b9:6a:74:c7:ae:6b:39:d6:63:70:ef:67:
                    6f:af:fd:da:47:95:57:37:00:bf:25:9e:03:d3:e9:
                    5a:a2:41:ea:f3:68:fd:e3:37:73:d2:83:9a:78:3c:
                    d1:9f:a6:88:b2:0d:ca:39:7b:ec:0d:76:1f:97:64:
                    bf:c7:77:24:16:5d:e2:b4:f7:d6:18:60:7b:c0:b6:
                    7c:78:e4:15:64:87:24:37:99:ab:b1:85:fb:29:75:
                    8a:ce:53:a6:0d:88:ba:d9:f1:dd:3c:ae:e8:d1:02:
                    bc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1E:1B:76:F1:44:86:7B:AF:AD:89:A1:3E:F1:12:B1:12:D9:FF:1A
            X509v3 Authority Key Identifier:
                keyid:07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/070B1B3AB7E59C42A791E094D81229555D5D0146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a3a2f33322d3438203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:e8:a0:d8:73:76:54:c0:11:29:d4:bb:d3:0f:b9:44:eb:4c:
         81:c9:95:9b:ea:9b:ea:b1:6e:aa:86:73:d1:b6:1a:bc:7f:42:
         dd:2a:51:0c:7e:b4:97:32:e7:48:da:7e:34:94:cd:55:f6:3b:
         b2:65:37:d4:f5:83:1b:c8:36:c4:fb:9d:01:49:99:1d:0e:14:
         58:7a:19:4a:6b:cc:fa:55:72:19:de:f9:49:86:25:b4:56:c6:
         d6:61:71:6d:17:b6:78:ef:b9:0c:4f:32:18:d5:cf:e5:cd:aa:
         37:07:93:7b:d6:80:59:02:23:a4:8b:9c:8d:08:45:5c:56:d2:
         7f:0c:d4:fc:ae:1d:8a:f3:ef:35:c3:3f:65:b3:49:ca:a0:ca:
         b4:bb:2b:63:24:95:18:5e:a8:85:e5:eb:bf:ac:0a:39:e0:d6:
         47:67:af:6a:f3:de:a9:31:24:53:12:1b:36:76:63:39:51:e1:
         99:f5:0f:9e:39:fc:9a:28:b6:75:d4:2d:31:d8:2e:15:20:55:
         52:2d:ef:a9:24:8d:de:d9:b8:7e:12:71:29:44:18:d3:3f:e6:
         90:34:c8:f5:0a:11:4d:a0:77:37:05:29:77:43:dc:c6:21:82:
         aa:e9:0a:05:d0:f7:a3:18:b3:ed:a4:77:6d:09:1b:71:d6:7d:
         ec:f3:e9:c4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeKX6CY+Zhz27zUAzQ8YDb7UOR0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcwQjFCM0FCN0U1OUM0MkE3OTFFMDk0RDgxMjI5NTU1
RDVEMDE0NjAeFw0yMzA4MzExOTAyMzhaFw0yNDA4MjkxOTA3MzhaMDMxMTAvBgNV
BAMTKEJCMUUxQjc2RjE0NDg2N0JBRkFEODlBMTNFRjExMkIxMTJEOUZGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsjImbTc05I+6Zme/k+1E/Pnj
3F+qmYKWmT9lByDLhsgTwHyu5YEOa4cmXRq7Noyo9r4VTWERPSgvMXXTGUsd51ml
q4yy7ohLyiMAR0KfRRqfz83w1AdA4qaK6/R9mxD8fq08iTqChY5Zg3tnTMTR16uX
lq7/i2V0Es0D8S41YDNm0saJnwt20zmMjLyeqZ8BDn5vuHZbZblqdMeuaznWY3Dv
Z2+v/dpHlVc3AL8lngPT6VqiQerzaP3jN3PSg5p4PNGfpoiyDco5e+wNdh+XZL/H
dyQWXeK099YYYHvAtnx45BVkhyQ3mauxhfspdYrOU6YNiLrZ8d08rujRArwdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUux4bdvFEhnuvrYmhPvESsRLZ/xowHwYDVR0j
BBgwFoAUBwsbOrflnEKnkeCU2BIpVV1dAUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn
eHUvMC8wNzBCMUIzQUI3RTU5QzQyQTc5MUUwOTREODEyMjk1NTVENUQwMTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3MEIxQjNBQjdFNTlDNDJB
NzkxRTA5NEQ4MTIyOTU1NUQ1RDAxNDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzAv
MzIzODMwMzQzYTMyMzU2MjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzIzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQltDANBgkqhkiG9w0BAQsFAAOCAQEANOig2HN2
VMARKdS70w+5ROtMgcmVm+qb6rFuqoZz0bYavH9C3SpRDH60lzLnSNp+NJTNVfY7
smU31PWDG8g2xPudAUmZHQ4UWHoZSmvM+lVyGd75SYYltFbG1mFxbRe2eO+5DE8y
GNXP5c2qNweTe9aAWQIjpIucjQhFXFbSfwzU/K4divPvNcM/ZbNJyqDKtLsrYySV
GF6oheXrv6wKOeDWR2evavPeqTEkUxIbNnZjOVHhmfUPnjn8mii2ddQtMdguFSBV
Ui3vqSSN3tm4fhJxKUQY0z/mkDTI9QoRTaB3NwUpd0PcxiGCqukKBdD3oxiz7aR3
bQkbcdZ97PPpxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org