Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/323830343a313934633a3a2f33322d3438203d3e203631373835.roa
File:                     323830343a313934633a3a2f33322d3438203d3e203631373835.roa (raw, json)
Hash identifier:          xiqYGBlzj+Sp5Y/LrTaJPW7Nf8c59SOZw1dH6uprRG0=
Subject key identifier:   90:3E:4B:B2:F5:05:E2:C0:56:58:D0:4E:FE:6A:4C:DD:FF:60:00:F8
Certificate issuer:       /CN=317B2083DA24C1BA69201702A19EDCA376FA0379
Certificate serial:       568D006D887B3EB94A9D00D0E1AD28D3EE72DF19
Authority key identifier: 31:7B:20:83:DA:24:C1:BA:69:20:17:02:A1:9E:DC:A3:76:FA:03:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317B2083DA24C1BA69201702A19EDCA376FA0379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/323830343a313934633a3a2f33322d3438203d3e203631373835.roa
Signing time:             Thu 04 Apr 2024 10:05:15 +0000
ROA not before:           Thu 04 Apr 2024 10:00:15 +0000
ROA not after:            Thu 03 Apr 2025 10:05:15 +0000
asID:                     61785
IP address blocks:        2804:194c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8d:00:6d:88:7b:3e:b9:4a:9d:00:d0:e1:ad:28:d3:ee:72:df:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317B2083DA24C1BA69201702A19EDCA376FA0379
        Validity
            Not Before: Apr  4 10:00:15 2024 GMT
            Not After : Apr  3 10:05:15 2025 GMT
        Subject: CN=903E4BB2F505E2C05658D04EFE6A4CDDFF6000F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:ff:c0:ee:6c:52:c6:65:a7:d2:23:b8:9b:
                    68:af:ec:d7:ed:5a:85:24:75:f8:ee:3d:80:7f:04:
                    48:07:bf:11:c1:47:94:98:f5:d3:d4:e7:e4:62:6c:
                    bf:29:28:89:3a:84:f3:d6:23:74:3c:98:c2:6d:fc:
                    a8:81:18:34:1c:c7:69:c8:49:8c:72:be:95:82:33:
                    b6:74:71:6e:b3:6b:ae:cc:33:71:1a:de:a0:b1:e2:
                    77:f9:42:c8:30:78:aa:d1:f7:cb:64:98:40:ab:45:
                    40:c3:4c:7a:bf:11:7f:f3:0c:95:7a:a5:cb:71:9f:
                    ab:56:05:6b:ef:26:a7:32:16:a0:d3:9c:0e:74:c2:
                    a0:f1:d4:7a:04:62:c5:ae:31:c8:ba:dc:78:ce:dc:
                    c4:47:9b:a7:d6:4b:cf:49:bb:0a:e4:32:7b:3f:7a:
                    93:fe:c1:12:f1:8b:3e:41:42:a7:8b:4b:33:86:b7:
                    78:1e:3a:6c:ce:d9:2b:ea:65:7a:cb:0f:79:8c:45:
                    13:94:fd:7a:6d:6f:8b:b8:c4:bc:44:23:f6:1c:36:
                    0b:89:0d:43:a8:cf:33:59:06:5b:a3:54:8b:a4:f3:
                    dd:ff:3e:92:6e:19:2c:cc:d4:b7:aa:69:80:cf:fd:
                    1c:1b:4c:e5:a3:fd:75:29:d8:2e:b7:ae:3c:28:b1:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:4B:B2:F5:05:E2:C0:56:58:D0:4E:FE:6A:4C:DD:FF:60:00:F8
            X509v3 Authority Key Identifier:
                keyid:31:7B:20:83:DA:24:C1:BA:69:20:17:02:A1:9E:DC:A3:76:FA:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/317B2083DA24C1BA69201702A19EDCA376FA0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317B2083DA24C1BA69201702A19EDCA376FA0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/323830343a313934633a3a2f33322d3438203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:194c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:9c:4f:bf:ed:a4:c6:dd:f4:ff:d0:78:68:f2:55:53:dd:e9:
         30:91:8f:e1:a0:de:e0:f1:9c:13:35:da:30:7e:1a:c3:b1:4b:
         20:53:f5:3d:09:84:f1:c5:e5:04:67:f8:23:77:3a:0b:1d:61:
         a5:01:f9:5e:96:8b:50:c0:36:2b:b3:a8:f4:71:5a:2f:7e:4f:
         12:3a:56:f8:bb:a5:ac:20:ae:3a:41:bc:54:1f:37:7f:5d:71:
         46:fe:b7:c1:58:55:e9:d1:bb:9b:25:92:30:a5:f1:9d:e0:f7:
         bb:2c:16:64:73:6f:79:b9:79:8b:92:a7:8a:ba:b7:da:ea:23:
         fa:59:20:29:74:25:51:1b:73:59:c9:24:0a:60:98:d5:81:67:
         29:4f:21:0a:71:44:cd:67:a8:31:f9:eb:5b:e3:b0:77:69:1d:
         b8:1b:0d:85:1c:ef:55:03:5b:11:ae:1e:83:44:62:95:fe:a0:
         cf:e1:63:ea:16:34:a5:56:20:56:67:11:2c:a0:a8:66:0e:ee:
         3f:69:68:40:d1:85:52:7f:ad:b1:bb:fe:1e:1f:a4:f0:1f:b6:
         b7:bb:6c:dd:c5:f7:d5:56:78:ca:b4:40:f8:c3:c0:cf:8f:80:
         57:d4:62:bc:11:4b:aa:c0:5b:0a:38:33:b1:6b:45:4c:3f:09:
         b1:e6:bc:7b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVo0AbYh7PrlKnQDQ4a0o0+5y3xkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE3QjIwODNEQTI0QzFCQTY5MjAxNzAyQTE5RURDQTM3
NkZBMDM3OTAeFw0yNDA0MDQxMDAwMTVaFw0yNTA0MDMxMDA1MTVaMDMxMTAvBgNV
BAMTKDkwM0U0QkIyRjUwNUUyQzA1NjU4RDA0RUZFNkE0Q0RERkY2MDAwRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzP/A7mxSxmWn0iO4m2iv7Nft
WoUkdfjuPYB/BEgHvxHBR5SY9dPU5+RibL8pKIk6hPPWI3Q8mMJt/KiBGDQcx2nI
SYxyvpWCM7Z0cW6za67MM3Ea3qCx4nf5QsgweKrR98tkmECrRUDDTHq/EX/zDJV6
pctxn6tWBWvvJqcyFqDTnA50wqDx1HoEYsWuMci63HjO3MRHm6fWS89JuwrkMns/
epP+wRLxiz5BQqeLSzOGt3geOmzO2SvqZXrLD3mMRROU/Xptb4u4xLxEI/YcNguJ
DUOozzNZBlujVIuk893/PpJuGSzM1LeqaYDP/RwbTOWj/XUp2C63rjwosVwJAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUkD5LsvUF4sBWWNBO/mpM3f9gAPgwHwYDVR0j
BBgwFoAUMXsgg9okwbppIBcCoZ7co3b6A3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRyUE5CWDdzcEt3OVZFRkd0czViR3JnTWhnWWdtcFEzUzZRVWZkTjd2
NDUvMS8zMTdCMjA4M0RBMjRDMUJBNjkyMDE3MDJBMTlFRENBMzc2RkEwMzc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxN0IyMDgzREEyNEMxQkE2
OTIwMTcwMkExOUVEQ0EzNzZGQTAzNzkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0clBOQlg3c3BLdzlWRUZHdHM1YkdyZ01oZ1lnbXBRM1M2UVVmZE43djQ1LzEv
MzIzODMwMzQzYTMxMzkzNDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM3
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGUwwDQYJKoZIhvcNAQELBQADggEBAH6cT7/tpMbd
9P/QeGjyVVPd6TCRj+Gg3uDxnBM12jB+GsOxSyBT9T0JhPHF5QRn+CN3OgsdYaUB
+V6Wi1DANiuzqPRxWi9+TxI6Vvi7pawgrjpBvFQfN39dcUb+t8FYVenRu5slkjCl
8Z3g97ssFmRzb3m5eYuSp4q6t9rqI/pZICl0JVEbc1nJJApgmNWBZylPIQpxRM1n
qDH561vjsHdpHbgbDYUc71UDWxGuHoNEYpX+oM/hY+oWNKVWIFZnESygqGYO7j9p
aEDRhVJ/rbG7/h4fpPAftre7bN3F99VWeMq0QPjDwM+PgFfUYrwRS6rAWwo4M7Fr
RUw/CbHmvHs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org