Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a3a2f33322d313238203d3e20323730333337.roa
File:                     323830343a366137343a3a2f33322d313238203d3e20323730333337.roa (raw, json)
Hash identifier:          6OPhMTfj2rVljOpvoPzRZdDCTmJWBm4w+1g0d2RqwL0=
Subject key identifier:   A1:93:62:8F:2E:86:75:DC:AC:34:EF:BA:B6:8A:31:BF:89:A2:94:CD
Certificate issuer:       /CN=DBF30B46FF13934097C6C7423BA263095C7EF8B6
Certificate serial:       43E86E137DFF6AD9CF56791B4E9BC131B5E7746D
Authority key identifier: DB:F3:0B:46:FF:13:93:40:97:C6:C7:42:3B:A2:63:09:5C:7E:F8:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBF30B46FF13934097C6C7423BA263095C7EF8B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a3a2f33322d313238203d3e20323730333337.roa
Signing time:             Wed 29 Mar 2023 22:42:52 +0000
ROA not before:           Wed 29 Mar 2023 22:37:52 +0000
ROA not after:            Wed 27 Mar 2024 22:42:52 +0000
asID:                     270337
IP address blocks:        2804:6a74::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e8:6e:13:7d:ff:6a:d9:cf:56:79:1b:4e:9b:c1:31:b5:e7:74:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF30B46FF13934097C6C7423BA263095C7EF8B6
        Validity
            Not Before: Mar 29 22:37:52 2023 GMT
            Not After : Mar 27 22:42:52 2024 GMT
        Subject: CN=A193628F2E8675DCAC34EFBAB68A31BF89A294CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:50:1e:ad:24:a6:51:fc:54:c3:0f:a4:9d:
                    d2:d4:43:3b:06:0b:46:57:fd:d5:4f:67:c6:2b:b1:
                    55:13:e7:2b:07:e2:a1:87:aa:25:97:88:49:b2:10:
                    96:f6:1e:99:0b:a4:1a:d6:fc:fe:a4:0b:5f:02:3a:
                    1d:64:7e:1f:f9:b8:a7:73:a1:4f:70:c4:24:c3:dd:
                    f1:53:e8:aa:5a:cd:29:89:06:71:e7:84:f9:3d:e8:
                    66:66:d5:6c:24:ef:e4:e0:73:41:7d:0c:60:cf:cc:
                    03:9b:99:af:7d:9a:de:ad:75:b1:3d:78:be:6e:9b:
                    4c:9c:f0:83:31:2d:07:40:2f:5c:e1:81:e5:4f:e9:
                    55:be:5d:7a:28:a2:80:34:a5:25:8e:78:1b:f3:6e:
                    c9:1f:7e:5e:65:9a:1a:06:ce:2e:3c:9b:f3:78:25:
                    49:b0:fe:30:89:8f:b5:cd:b2:db:11:3a:b4:c5:b0:
                    84:ed:7b:c7:f2:64:fe:37:da:a4:47:1e:f3:04:ce:
                    ad:30:fd:f3:67:cd:71:c0:51:0f:76:ce:ad:71:61:
                    8d:ef:06:4e:e2:16:1b:1d:9c:dd:9a:68:42:00:d0:
                    72:f2:84:49:d4:4d:6a:ed:20:8c:09:b9:fa:2d:60:
                    60:cd:4f:ba:1a:90:22:c4:22:89:99:5f:ad:7f:c6:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:93:62:8F:2E:86:75:DC:AC:34:EF:BA:B6:8A:31:BF:89:A2:94:CD
            X509v3 Authority Key Identifier:
                keyid:DB:F3:0B:46:FF:13:93:40:97:C6:C7:42:3B:A2:63:09:5C:7E:F8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/DBF30B46FF13934097C6C7423BA263095C7EF8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBF30B46FF13934097C6C7423BA263095C7EF8B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a3a2f33322d313238203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a74::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:31:dc:c7:38:15:3c:bb:15:05:b7:4e:5a:77:a4:17:fa:59:
         6f:29:94:f7:2c:1d:6f:4c:04:70:75:a9:b7:08:61:91:c2:e7:
         f1:40:bf:d8:2d:b6:d0:37:f9:db:7a:fb:08:b9:55:d9:83:bb:
         ba:68:ef:6d:58:a9:25:bd:73:ee:1f:e4:4f:72:19:6a:01:b1:
         a8:47:96:91:0c:a5:1c:fb:e5:c5:01:88:fe:fa:55:21:4a:1a:
         0c:5b:38:bd:19:45:ec:77:cb:b2:09:c3:1e:f4:bb:a5:68:b1:
         be:6c:1a:1d:91:dc:1a:af:65:61:93:4a:2c:56:f5:ae:41:0d:
         b9:5c:95:bc:a8:96:e2:da:df:1b:d6:9e:3e:e1:59:56:4c:36:
         f6:b8:db:60:a4:bf:9a:61:0f:77:64:fc:25:63:40:f6:55:25:
         3f:b1:3b:b4:89:72:e4:a9:6f:5a:0c:cd:bd:e1:b9:3e:77:23:
         63:2b:1d:92:cc:9b:f9:b3:40:5d:16:8c:d3:1d:23:91:65:c7:
         b4:1f:fa:f0:a4:1b:a0:0f:e5:fa:7d:e0:81:45:60:d9:89:dd:
         8c:9f:e8:27:a0:6c:c5:08:98:b3:91:26:00:9f:7a:e0:ca:a6:
         53:d6:0f:1a:30:69:25:66:7f:ec:c8:4e:4d:af:9e:38:59:12:
         bb:59:b2:c9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUQ+huE33/atnPVnkbTpvBMbXndG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJGMzBCNDZGRjEzOTM0MDk3QzZDNzQyM0JBMjYzMDk1
QzdFRjhCNjAeFw0yMzAzMjkyMjM3NTJaFw0yNDAzMjcyMjQyNTJaMDMxMTAvBgNV
BAMTKEExOTM2MjhGMkU4Njc1RENBQzM0RUZCQUI2OEEzMUJGODlBMjk0Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GVAerSSmUfxUww+kndLUQzsG
C0ZX/dVPZ8YrsVUT5ysH4qGHqiWXiEmyEJb2HpkLpBrW/P6kC18COh1kfh/5uKdz
oU9wxCTD3fFT6KpazSmJBnHnhPk96GZm1Wwk7+Tgc0F9DGDPzAObma99mt6tdbE9
eL5um0yc8IMxLQdAL1zhgeVP6VW+XXooooA0pSWOeBvzbskffl5lmhoGzi48m/N4
JUmw/jCJj7XNstsROrTFsITte8fyZP432qRHHvMEzq0w/fNnzXHAUQ92zq1xYY3v
Bk7iFhsdnN2aaEIA0HLyhEnUTWrtIIwJufotYGDNT7oakCLEIomZX61/xj9DAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUoZNijy6GddysNO+6tooxv4milM0wHwYDVR0j
BBgwFoAU2/MLRv8Tk0CXxsdCO6JjCVx++LYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWNkeW5jTnVwSDlhZ2M4TXNoQmRidERYN0JDM1M0UFBCU2hvVGJqU3M2
RkUvMC9EQkYzMEI0NkZGMTM5MzQwOTdDNkM3NDIzQkEyNjMwOTVDN0VGOEI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCRjMwQjQ2RkYxMzkzNDA5
N0M2Qzc0MjNCQTI2MzA5NUM3RUY4QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjZHluY051cEg5YWdjOE1zaEJkYnREWDdCQzNTNFBQQlNob1RialNzNkZFLzAv
MzIzODMwMzQzYTM2NjEzNzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzMzMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGp0MA0GCSqGSIb3DQEBCwUAA4IBAQAXMdzH
OBU8uxUFt05ad6QX+llvKZT3LB1vTARwdam3CGGRwufxQL/YLbbQN/nbevsIuVXZ
g7u6aO9tWKklvXPuH+RPchlqAbGoR5aRDKUc++XFAYj++lUhShoMWzi9GUXsd8uy
CcMe9LulaLG+bBodkdwar2Vhk0osVvWuQQ25XJW8qJbi2t8b1p4+4VlWTDb2uNtg
pL+aYQ93ZPwlY0D2VSU/sTu0iXLkqW9aDM294bk+dyNjKx2SzJv5s0BdFozTHSOR
Zce0H/rwpBugD+X6feCBRWDZid2Mn+gnoGzFCJizkSYAn3rgyqZT1g8aMGklZn/s
yE5Nr544WRK7WbLJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org