Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/323830343a323930633a3a2f33322d3332203d3e20323633393934.roa
File:                     323830343a323930633a3a2f33322d3332203d3e20323633393934.roa (raw, json)
Hash identifier:          5LpSeh/KDcfMRmufYdt1PCPK6KNE8ytLNwxs7C48Jlc=
Subject key identifier:   0A:5E:D4:2D:A4:6B:C1:46:35:40:75:80:FE:85:D6:4A:E1:2E:A4:81
Certificate issuer:       /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial:       7C10355F2909154969755874FEB8DF1044761AE6
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/323830343a323930633a3a2f33322d3332203d3e20323633393934.roa
Signing time:             Tue 05 Dec 2023 23:00:00 +0000
ROA not before:           Tue 05 Dec 2023 22:55:00 +0000
ROA not after:            Tue 03 Dec 2024 23:00:00 +0000
asID:                     263994
IP address blocks:        2804:290c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:10:35:5f:29:09:15:49:69:75:58:74:fe:b8:df:10:44:76:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Validity
            Not Before: Dec  5 22:55:00 2023 GMT
            Not After : Dec  3 23:00:00 2024 GMT
        Subject: CN=0A5ED42DA46BC14635407580FE85D64AE12EA481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:e0:ef:fe:85:cb:37:b9:a7:ec:60:b6:03:
                    98:53:14:8c:68:43:e5:ee:24:76:b4:f6:3a:35:82:
                    6f:3f:89:dc:9a:fc:ef:24:3a:20:2a:fc:da:f5:be:
                    9c:a0:01:c0:2a:a3:33:74:9e:8a:d4:17:b1:d8:2e:
                    be:c3:7b:31:27:63:7e:f1:66:da:2a:f8:6d:7b:ad:
                    1a:b5:94:54:ef:78:d7:8b:a5:0c:3b:0f:3d:54:8c:
                    4a:25:65:bd:6c:2a:96:f3:0d:89:2f:31:08:ff:fa:
                    74:a8:9d:bc:4e:e2:13:8f:98:6c:97:65:9f:b2:19:
                    72:04:23:15:b3:2a:b9:8f:b8:76:d7:2d:58:f3:3c:
                    f9:c0:7c:6e:47:49:92:db:06:42:86:60:5f:a6:40:
                    d6:85:5c:69:62:10:f9:d7:3c:6b:3e:be:c6:1e:e4:
                    23:f2:51:7d:e3:a5:b8:56:3b:6c:f0:94:54:ff:31:
                    52:ce:28:73:67:71:8f:cf:d8:33:89:9d:50:10:d4:
                    e5:5c:c2:2a:28:d1:ff:c0:8c:bc:cc:85:68:07:71:
                    0a:71:a7:ba:07:b2:55:ac:a7:4e:7b:77:e9:88:da:
                    06:6c:06:4e:be:bd:17:ed:f9:2e:72:19:39:a8:18:
                    21:3b:06:3a:77:d3:5b:e1:9c:ea:95:8d:3d:1a:c6:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:D4:2D:A4:6B:C1:46:35:40:75:80:FE:85:D6:4A:E1:2E:A4:81
            X509v3 Authority Key Identifier:
                keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/323830343a323930633a3a2f33322d3332203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:290c::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:f0:6a:c2:0b:76:36:a3:c8:d1:22:34:4e:69:69:04:48:d0:
         64:dc:df:90:11:bd:a9:7d:53:7a:dd:04:43:8f:05:6e:41:17:
         f4:73:a1:aa:50:4a:73:cb:f5:1b:8e:8c:d9:6f:ad:50:ad:4a:
         2f:ff:69:27:85:cb:68:65:8c:1e:41:71:d2:1f:44:0d:62:9b:
         a3:75:2b:53:22:72:7a:c0:3f:ac:03:cc:bf:c5:f2:8e:c9:05:
         d4:58:ae:6a:35:46:d1:3f:27:c7:dd:c4:24:79:f0:13:77:c3:
         9b:a7:eb:51:9b:37:b1:97:18:72:30:33:bb:5a:55:3f:f3:a9:
         95:0a:2a:3d:04:53:9e:61:65:cd:ec:a9:6d:16:14:9b:eb:4e:
         b2:bb:ad:af:bf:7d:c6:4c:65:3e:5b:83:e1:19:7e:40:7c:bf:
         99:95:30:6f:c1:f8:ef:1e:d6:5f:02:43:a6:8b:fa:da:fe:34:
         66:e5:93:c6:dc:bf:eb:cd:7c:01:84:85:cf:ee:75:ff:74:ae:
         f4:66:9d:78:68:9a:2b:e7:79:86:3f:81:74:49:63:c9:6c:1c:
         f6:22:f0:af:c8:6c:8a:7e:71:9d:8b:46:aa:47:9c:1d:3f:71:
         68:6c:ba:bc:bb:a2:43:f7:ab:16:19:f9:10:9c:10:29:37:a7:
         ed:cd:f5:ab
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfBA1XykJFUlpdVh0/rjfEER2GuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2RURGNzE1NDQ1RTI3NDNGNjM3NkMxOTNCQTVDNjdE
OTgxMkRFODAeFw0yMzEyMDUyMjU1MDBaFw0yNDEyMDMyMzAwMDBaMDMxMTAvBgNV
BAMTKDBBNUVENDJEQTQ2QkMxNDYzNTQwNzU4MEZFODVENjRBRTEyRUE0ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/eDv/oXLN7mn7GC2A5hTFIxo
Q+XuJHa09jo1gm8/idya/O8kOiAq/Nr1vpygAcAqozN0norUF7HYLr7DezEnY37x
Ztoq+G17rRq1lFTveNeLpQw7Dz1UjEolZb1sKpbzDYkvMQj/+nSonbxO4hOPmGyX
ZZ+yGXIEIxWzKrmPuHbXLVjzPPnAfG5HSZLbBkKGYF+mQNaFXGliEPnXPGs+vsYe
5CPyUX3jpbhWO2zwlFT/MVLOKHNncY/P2DOJnVAQ1OVcwioo0f/AjLzMhWgHcQpx
p7oHslWsp057d+mI2gZsBk6+vRft+S5yGTmoGCE7Bjp301vhnOqVjT0axpkdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUCl7ULaRrwUY1QHWA/oXWSuEupIEwHwYDVR0j
BBgwFoAUzW7fcVRF4nQ/Y3bBk7pcZ9mBLegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWhjU1ZnQTdHVUg0cWtBc2tzanJDYlhGdUdOeFdTZmtDTVFaNUxVVTZ4
dmkvMC9DRDZFREY3MTU0NDVFMjc0M0Y2Mzc2QzE5M0JBNUM2N0Q5ODEyREU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkVERjcxNTQ0NUUyNzQz
RjYzNzZDMTkzQkE1QzY3RDk4MTJERTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FoY1NWZ0E3R1VINHFrQXNrc2pyQ2JYRnVHTnhXU2ZrQ01RWjVMVVU2eHZpLzAv
MzIzODMwMzQzYTMyMzkzMDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQpDDANBgkqhkiG9w0BAQsFAAOCAQEAgvBqwgt2
NqPI0SI0TmlpBEjQZNzfkBG9qX1Tet0EQ48FbkEX9HOhqlBKc8v1G46M2W+tUK1K
L/9pJ4XLaGWMHkFx0h9EDWKbo3UrUyJyesA/rAPMv8XyjskF1FiuajVG0T8nx93E
JHnwE3fDm6frUZs3sZcYcjAzu1pVP/OplQoqPQRTnmFlzeypbRYUm+tOsrutr799
xkxlPluD4Rl+QHy/mZUwb8H47x7WXwJDpov62v40ZuWTxty/6818AYSFz+51/3Su
9GadeGiaK+d5hj+BdEljyWwc9iLwr8hsin5xnYtGqkecHT9xaGy6vLuiQ/erFhn5
EJwQKTen7c31qw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org