Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa
File:                     323830343a3762633a3a2f33332d3333203d3e203532383631.roa (raw, json)
Hash identifier:          38tFyn2Hdk2EJ1oTMlkEfImUCflUraR1MtuLiwIjBYM=
Subject key identifier:   AA:8A:EA:2F:AF:97:42:BF:F1:9F:BC:0B:F4:AB:15:67:35:89:CB:8F
Certificate issuer:       /CN=836BA4893066A2B7B112A0DB316F1611FD005A58
Certificate serial:       753B97A266A9DB911677A9346AE34AD31B16A2E0
Authority key identifier: 83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa
Signing time:             Fri 01 Mar 2024 14:20:37 +0000
ROA not before:           Fri 01 Mar 2024 14:15:37 +0000
ROA not after:            Fri 28 Feb 2025 14:20:37 +0000
asID:                     52861
IP address blocks:        2804:7bc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3b:97:a2:66:a9:db:91:16:77:a9:34:6a:e3:4a:d3:1b:16:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836BA4893066A2B7B112A0DB316F1611FD005A58
        Validity
            Not Before: Mar  1 14:15:37 2024 GMT
            Not After : Feb 28 14:20:37 2025 GMT
        Subject: CN=AA8AEA2FAF9742BFF19FBC0BF4AB15673589CB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:21:60:bb:71:6c:7e:19:61:8d:cb:a8:67:56:
                    e7:44:3f:de:ee:29:32:d0:c7:cf:37:e6:ac:17:54:
                    3b:99:3e:c6:70:56:aa:c6:a0:44:d0:1f:eb:53:9f:
                    54:b0:f8:ac:d0:f8:be:db:0d:f4:bf:90:f1:1b:30:
                    23:7e:85:50:cc:37:cb:47:b6:52:83:39:f6:95:84:
                    d4:e5:70:59:3b:e0:a2:df:ac:37:e8:26:db:ad:ef:
                    f2:f1:e3:4b:8d:1c:ef:b4:70:81:b4:91:40:13:70:
                    e8:49:c7:b3:b2:34:ed:99:68:f6:0d:79:11:d4:0a:
                    ce:70:3d:4b:38:5d:69:2e:09:87:e9:13:49:ea:97:
                    6d:4b:72:9b:46:7b:f5:86:3c:53:15:49:e7:d3:39:
                    d8:82:09:0c:f1:07:ca:79:48:ca:7f:b1:54:db:5f:
                    3a:fc:27:b3:b0:33:dd:ef:89:b3:d6:5b:97:cf:ce:
                    cd:85:97:d9:ec:88:5c:97:bd:d6:58:53:59:09:ea:
                    db:0b:d2:31:73:7d:2a:fb:41:30:92:49:b0:9f:47:
                    83:2f:a1:99:5e:b9:ed:f1:37:a2:9b:5f:90:f8:57:
                    fc:23:8f:da:80:21:6b:a0:0e:21:29:49:34:98:85:
                    f3:ed:a9:02:28:93:84:e2:b2:28:7f:74:0b:2a:96:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:EA:2F:AF:97:42:BF:F1:9F:BC:0B:F4:AB:15:67:35:89:CB:8F
            X509v3 Authority Key Identifier:
                keyid:83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/836BA4893066A2B7B112A0DB316F1611FD005A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:8e:43:9e:be:59:15:f3:99:63:36:61:8b:e3:33:b2:ea:e9:
         02:b1:5b:7c:bd:ab:bf:23:b2:4f:7a:6a:89:d2:03:f4:12:08:
         de:df:0e:cc:a8:31:61:86:44:b5:e1:a6:27:89:98:df:78:06:
         19:c2:8e:1f:ac:6c:5a:45:f8:af:54:3e:9e:b8:57:1d:e3:3d:
         f9:20:e6:12:48:ff:fc:e2:53:c3:09:2d:76:85:94:97:1c:73:
         aa:8d:e5:5c:ba:6d:e0:7c:23:97:93:80:e5:35:86:19:2a:32:
         d9:c0:a2:3d:0e:f3:16:e2:cc:be:e1:64:a1:34:79:4c:e5:30:
         70:5d:c0:3e:4c:85:50:9d:b6:c9:c3:a6:f5:67:a7:c7:6b:3c:
         e8:d9:e0:9b:e4:de:ee:77:c1:41:ee:cd:44:1b:86:86:a1:3d:
         73:d3:db:5f:f8:83:89:29:f5:0f:12:35:bf:ac:d1:f1:b5:bb:
         3c:7a:ac:92:7c:6c:40:4a:f9:4e:4d:ab:42:07:95:0a:be:b6:
         7b:75:c6:f3:82:b9:4f:fc:2e:7d:aa:48:5c:b4:2e:5b:09:d2:
         2e:7c:42:51:2c:95:96:58:9a:ac:6a:5f:2c:4f:d8:1b:a5:09:
         87:c7:ab:9a:fa:af:3f:3d:63:d0:4c:67:47:e5:85:5f:fc:28:
         57:16:e5:56
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdTuXomap25EWd6k0auNK0xsWouAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM2QkE0ODkzMDY2QTJCN0IxMTJBMERCMzE2RjE2MTFG
RDAwNUE1ODAeFw0yNDAzMDExNDE1MzdaFw0yNTAyMjgxNDIwMzdaMDMxMTAvBgNV
BAMTKEFBOEFFQTJGQUY5NzQyQkZGMTlGQkMwQkY0QUIxNTY3MzU4OUNCOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIWC7cWx+GWGNy6hnVudEP97u
KTLQx8835qwXVDuZPsZwVqrGoETQH+tTn1Sw+KzQ+L7bDfS/kPEbMCN+hVDMN8tH
tlKDOfaVhNTlcFk74KLfrDfoJtut7/Lx40uNHO+0cIG0kUATcOhJx7OyNO2ZaPYN
eRHUCs5wPUs4XWkuCYfpE0nql21LcptGe/WGPFMVSefTOdiCCQzxB8p5SMp/sVTb
Xzr8J7OwM93vibPWW5fPzs2Fl9nsiFyXvdZYU1kJ6tsL0jFzfSr7QTCSSbCfR4Mv
oZleue3xN6KbX5D4V/wjj9qAIWugDiEpSTSYhfPtqQIok4Tisih/dAsqlkFbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqorqL6+XQr/xn7wL9KsVZzWJy48wHwYDVR0j
BBgwFoAUg2ukiTBmorexEqDbMW8WEf0AWlgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjF1VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhB
S1gvMC84MzZCQTQ4OTMwNjZBMkI3QjExMkEwREIzMTZGMTYxMUZEMDA1QTU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgzNkJBNDg5MzA2NkEyQjdC
MTEyQTBEQjMxNkYxNjExRkQwMDVBNTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IxdVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzAv
MzIzODMwMzQzYTM3NjI2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDM1MzIzODM2
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgcoBAe8ADANBgkqhkiG9w0BAQsFAAOCAQEAfo5Dnr5ZFfOZ
YzZhi+MzsurpArFbfL2rvyOyT3pqidID9BII3t8OzKgxYYZEteGmJ4mY33gGGcKO
H6xsWkX4r1Q+nrhXHeM9+SDmEkj//OJTwwktdoWUlxxzqo3lXLpt4Hwjl5OA5TWG
GSoy2cCiPQ7zFuLMvuFkoTR5TOUwcF3APkyFUJ22ycOm9Wenx2s86Nngm+Te7nfB
Qe7NRBuGhqE9c9PbX/iDiSn1DxI1v6zR8bW7PHqsknxsQEr5Tk2rQgeVCr62e3XG
84K5T/wufapIXLQuWwnSLnxCUSyVlliarGpfLE/YG6UJh8ermvqvPz1j0ExnR+WF
X/woVxblVg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org