Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a633030303a3a2f33342d3334203d3e203238323235.roa
File:                     323830343a363230633a633030303a3a2f33342d3334203d3e203238323235.roa (raw, json)
Hash identifier:          SrGjgNcY7jIXB4etmJVoNf9+udEnp18rnFR15BLgplA=
Subject key identifier:   91:1C:F4:BE:EC:62:5E:2E:9A:22:8A:1C:E1:19:7B:44:5B:03:E4:B9
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       5FAB3BDD1578B410CA5DC78AD0B5080C8287FF2F
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a633030303a3a2f33342d3334203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:16 +0000
ROA not before:           Tue 09 Jan 2024 12:51:16 +0000
ROA not after:            Tue 07 Jan 2025 12:56:16 +0000
asID:                     28225
IP address blocks:        2804:620c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ab:3b:dd:15:78:b4:10:ca:5d:c7:8a:d0:b5:08:0c:82:87:ff:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:16 2024 GMT
            Not After : Jan  7 12:56:16 2025 GMT
        Subject: CN=911CF4BEEC625E2E9A228A1CE1197B445B03E4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:e9:7e:bd:70:2b:40:ec:b5:21:7a:c6:2a:
                    9e:d1:a2:e8:fe:0e:4d:8b:3c:a8:10:72:0f:4c:26:
                    d3:32:95:73:a0:11:f7:cd:3a:28:eb:9b:86:bc:94:
                    d9:19:a1:8a:e1:3e:72:c4:b3:18:dc:bb:d0:06:71:
                    8c:0e:70:6d:07:0c:33:f1:e9:97:9d:69:4a:11:b7:
                    ae:c0:c9:ba:65:e3:b9:15:9d:6b:47:9c:a9:80:57:
                    49:4b:cc:5a:81:c4:df:e7:2a:95:09:e8:95:d9:77:
                    65:51:78:98:2c:0f:0b:86:2b:6a:77:84:a6:1b:ed:
                    3e:a8:b7:89:eb:8e:9d:35:ca:b6:96:8b:54:4a:30:
                    ad:a9:fa:5e:60:ba:fe:41:98:86:2a:f2:b4:31:7a:
                    9c:65:92:bc:ca:6c:ee:9f:3c:fc:c6:39:c0:01:7e:
                    ef:cd:f8:24:ac:1b:d6:57:12:62:84:c9:59:1e:d9:
                    e4:5b:1b:73:bd:d8:2b:b9:f4:3f:18:3e:59:5c:60:
                    a8:b2:e3:09:fa:a4:29:b7:8a:9a:d3:31:59:a5:a8:
                    36:35:25:29:b5:d8:26:12:91:b2:38:b7:30:95:4d:
                    0e:78:16:d5:49:d2:2b:0d:c0:ad:0c:7f:1b:c2:34:
                    ad:e4:53:e1:d3:7a:2f:89:90:49:0d:9c:43:5f:18:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1C:F4:BE:EC:62:5E:2E:9A:22:8A:1C:E1:19:7B:44:5B:03:E4:B9
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a633030303a3a2f33342d3334203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:620c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:6b:72:ab:1a:fe:4a:1b:f1:49:34:d1:78:0a:d9:43:ba:
         35:17:cb:41:71:d0:10:38:16:9e:1a:37:b1:a0:54:2e:fc:4e:
         98:1d:00:50:18:94:49:3e:0f:1e:51:0d:cd:ea:93:4e:3e:ba:
         6c:e7:4b:e4:1c:e8:e5:44:6a:50:ff:8e:4d:39:f7:e4:32:e0:
         9d:89:84:d7:ce:d9:f7:6c:93:07:75:25:66:60:93:11:b3:0e:
         45:6f:3b:65:84:d9:18:e3:d8:fd:f3:b3:6a:b1:76:81:c1:41:
         a2:b8:65:40:35:8b:ba:40:ba:3e:55:61:dc:b2:76:77:fa:de:
         14:ba:12:45:61:ad:8f:a6:89:bc:32:ff:a4:9c:7d:ab:61:44:
         50:41:0d:ea:cb:3f:c8:0c:2d:ff:c2:0c:6d:bb:63:63:a4:79:
         7e:48:66:5c:d8:14:00:dd:47:d8:04:ff:c2:7f:49:0e:40:8a:
         23:6d:00:3e:79:d0:33:32:48:0b:fa:2d:06:52:ca:e3:48:0a:
         da:41:c6:43:54:43:a4:84:db:e5:a5:4e:f8:5b:09:31:c6:3e:
         07:15:e2:7f:66:5e:c1:70:a5:ea:db:15:e3:06:7e:ba:50:67:
         1f:58:96:ca:92:5d:86:c0:d9:df:e5:a7:45:de:5b:d3:b5:2b:
         f9:5d:73:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUX6s73RV4tBDKXceK0LUIDIKH/y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5REE3Mjk1MkY1MDdFODc4Njc2NTgzNThEODFDRUZC
REI2NzY4NjAeFw0yNDAxMDkxMjUxMTZaFw0yNTAxMDcxMjU2MTZaMDMxMTAvBgNV
BAMTKDkxMUNGNEJFRUM2MjVFMkU5QTIyOEExQ0UxMTk3QjQ0NUIwM0U0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQOl+vXArQOy1IXrGKp7Rouj+
Dk2LPKgQcg9MJtMylXOgEffNOijrm4a8lNkZoYrhPnLEsxjcu9AGcYwOcG0HDDPx
6ZedaUoRt67Aybpl47kVnWtHnKmAV0lLzFqBxN/nKpUJ6JXZd2VReJgsDwuGK2p3
hKYb7T6ot4nrjp01yraWi1RKMK2p+l5guv5BmIYq8rQxepxlkrzKbO6fPPzGOcAB
fu/N+CSsG9ZXEmKEyVke2eRbG3O92Cu59D8YPllcYKiy4wn6pCm3iprTMVmlqDY1
JSm12CYSkbI4tzCVTQ54FtVJ0isNwK0MfxvCNK3kU+HTei+JkEkNnENfGPT9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkRz0vuxiXi6aIooc4Rl7RFsD5LkwHwYDVR0j
BBgwFoAUoJ2nKVL1B+h4Z2WDWNgc7722doYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY
akgvMS9BMDlEQTcyOTUyRjUwN0U4Nzg2NzY1ODM1OEQ4MUNFRkJEQjY3Njg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOURBNzI5NTJGNTA3RTg3
ODY3NjU4MzU4RDgxQ0VGQkRCNjc2ODYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzEv
MzIzODMwMzQzYTM2MzIzMDYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzgzMjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBGIMwDANBgkqhkiG9w0BAQsFAAOC
AQEAeJprcqsa/kob8Uk00XgK2UO6NRfLQXHQEDgWnho3saBULvxOmB0AUBiUST4P
HlENzeqTTj66bOdL5Bzo5URqUP+OTTn35DLgnYmE187Z92yTB3UlZmCTEbMORW87
ZYTZGOPY/fOzarF2gcFBorhlQDWLukC6PlVh3LJ2d/reFLoSRWGtj6aJvDL/pJx9
q2FEUEEN6ss/yAwt/8IMbbtjY6R5fkhmXNgUAN1H2AT/wn9JDkCKI20APnnQMzJI
C/otBlLK40gK2kHGQ1RDpITb5aVO+FsJMcY+BxXif2ZewXCl6tsV4wZ+ulBnH1iW
ypJdhsDZ3+WnRd5b07Ur+V1zeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org