Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33332d3333203d3e203238323235.roa
File:                     323830343a363230633a3a2f33332d3333203d3e203238323235.roa (raw, json)
Hash identifier:          ELzWoS0c04q9N21J15ZQjo9ayJk4fgfMW8TJcihMsn0=
Subject key identifier:   F2:82:5C:A0:58:0C:9F:62:CC:AD:59:8B:98:9E:29:57:B5:83:AB:3A
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       47B04FD4B1EE553DB3C6361E8555D399974089FB
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33332d3333203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:19 +0000
ROA not before:           Tue 09 Jan 2024 12:51:19 +0000
ROA not after:            Tue 07 Jan 2025 12:56:19 +0000
asID:                     28225
IP address blocks:        2804:620c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b0:4f:d4:b1:ee:55:3d:b3:c6:36:1e:85:55:d3:99:97:40:89:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:19 2024 GMT
            Not After : Jan  7 12:56:19 2025 GMT
        Subject: CN=F2825CA0580C9F62CCAD598B989E2957B583AB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:26:d8:ad:d7:d5:27:17:7f:59:2e:52:5d:
                    2a:33:3a:11:7b:4f:c8:40:f3:77:c5:65:26:8e:9e:
                    89:68:c1:7c:e4:14:a3:99:54:07:9d:00:eb:3d:dc:
                    d8:ff:e8:62:e9:f5:ea:3e:02:f7:80:38:d9:2b:38:
                    d8:2b:bc:cb:48:32:2b:43:0b:e0:82:60:82:08:77:
                    ed:a8:42:5a:72:8b:eb:f6:58:8a:8d:3a:72:a9:2d:
                    06:bc:d2:18:c2:8a:6f:13:79:96:9d:9e:8e:50:73:
                    2b:25:55:97:c2:52:2b:28:4b:0a:92:fa:06:46:13:
                    34:cf:65:32:66:5c:bb:72:2a:31:61:5f:d4:da:d3:
                    42:aa:9d:95:b8:71:35:0d:e4:34:59:11:96:5f:45:
                    48:60:97:04:25:e7:ad:8d:2d:79:f0:bc:36:d4:32:
                    c4:cc:8c:65:94:d3:53:8c:98:7f:e0:3c:64:98:58:
                    0b:53:e3:a6:e0:bf:08:43:3a:c5:5d:e6:bf:62:12:
                    3c:08:90:28:bf:ec:82:c4:4a:23:f6:c8:89:f7:3d:
                    1c:72:fc:d2:7e:d2:62:77:f3:bc:99:e4:82:a9:bc:
                    03:86:ad:ca:6e:1b:aa:42:77:ce:98:3f:74:4e:4e:
                    bf:05:39:07:89:d0:cf:b9:bd:fb:cd:b9:af:0c:a3:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:5C:A0:58:0C:9F:62:CC:AD:59:8B:98:9E:29:57:B5:83:AB:3A
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33332d3333203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:620c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:d5:64:71:00:2d:d0:1c:6f:e7:63:56:60:cb:81:20:1b:
         03:f6:d2:22:11:e0:64:f3:5c:2c:62:eb:81:a7:76:23:61:3b:
         8a:b4:2e:08:7c:e9:49:8e:c7:47:6c:fa:60:61:64:04:e3:be:
         77:c6:0e:82:8e:1d:77:8b:31:ea:14:18:81:78:83:e0:20:2a:
         0e:8b:c1:f6:c0:00:25:e1:5a:d1:d3:a7:ff:1a:1e:d4:d0:c8:
         3a:75:5f:db:87:1e:cd:1a:ec:7c:d2:9c:7f:1c:3a:c8:5c:18:
         69:5c:e3:db:f7:f5:2e:1a:4b:19:b2:0d:4a:4f:47:88:ae:c5:
         d6:bb:cc:15:97:3a:da:cc:4e:c4:8c:e4:cf:ff:bb:f5:34:a4:
         dd:de:f1:64:bd:3f:43:23:c7:0e:1b:5b:54:f5:b1:de:19:ba:
         b5:3f:49:2f:fa:ae:68:c4:fb:0e:38:62:dd:b3:d7:14:de:ce:
         be:6d:a6:72:90:47:27:94:3a:b1:a0:66:de:f8:cd:c1:eb:71:
         4b:02:20:6e:df:18:76:73:b2:f7:f5:71:d5:94:95:fe:eb:13:
         f8:f6:e5:c7:72:00:0c:88:41:c9:e3:97:5c:96:ea:68:b3:44:
         91:b7:ed:e7:fd:63:1d:c9:a5:f7:20:97:ac:66:44:e9:bd:15:
         99:c3:8c:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR7BP1LHuVT2zxjYehVXTmZdAifswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5REE3Mjk1MkY1MDdFODc4Njc2NTgzNThEODFDRUZC
REI2NzY4NjAeFw0yNDAxMDkxMjUxMTlaFw0yNTAxMDcxMjU2MTlaMDMxMTAvBgNV
BAMTKEYyODI1Q0EwNTgwQzlGNjJDQ0FENTk4Qjk4OUUyOTU3QjU4M0FCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCybYrdfVJxd/WS5SXSozOhF7
T8hA83fFZSaOnolowXzkFKOZVAedAOs93Nj/6GLp9eo+AveAONkrONgrvMtIMitD
C+CCYIIId+2oQlpyi+v2WIqNOnKpLQa80hjCim8TeZadno5QcyslVZfCUisoSwqS
+gZGEzTPZTJmXLtyKjFhX9Ta00KqnZW4cTUN5DRZEZZfRUhglwQl562NLXnwvDbU
MsTMjGWU01OMmH/gPGSYWAtT46bgvwhDOsVd5r9iEjwIkCi/7ILESiP2yIn3PRxy
/NJ+0mJ387yZ5IKpvAOGrcpuG6pCd86YP3ROTr8FOQeJ0M+5vfvNua8Mo6i3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8oJcoFgMn2LMrVmLmJ4pV7WDqzowHwYDVR0j
BBgwFoAUoJ2nKVL1B+h4Z2WDWNgc7722doYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY
akgvMS9BMDlEQTcyOTUyRjUwN0U4Nzg2NzY1ODM1OEQ4MUNFRkJEQjY3Njg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOURBNzI5NTJGNTA3RTg3
ODY3NjU4MzU4RDgxQ0VGQkRCNjc2ODYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzEv
MzIzODMwMzQzYTM2MzIzMDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzODMy
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEYgwAMA0GCSqGSIb3DQEBCwUAA4IBAQCgHdVkcQAt
0Bxv52NWYMuBIBsD9tIiEeBk81wsYuuBp3YjYTuKtC4IfOlJjsdHbPpgYWQE4753
xg6Cjh13izHqFBiBeIPgICoOi8H2wAAl4VrR06f/Gh7U0Mg6dV/bhx7NGux80px/
HDrIXBhpXOPb9/UuGksZsg1KT0eIrsXWu8wVlzrazE7EjOTP/7v1NKTd3vFkvT9D
I8cOG1tU9bHeGbq1P0kv+q5oxPsOOGLds9cU3s6+baZykEcnlDqxoGbe+M3B63FL
AiBu3xh2c7L39XHVlJX+6xP49uXHcgAMiEHJ45dclupos0SRt+3n/WMdyaX3IJes
ZkTpvRWZw4zo
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org