Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa
File:                     323830343a373163343a3a2f33322d3332203d3e20323730383130.roa (raw, json)
Hash identifier:          fFgj8/zPqt5j97ABpLu5Z9PfJ9rc4ltgmsUVKsKFQ9A=
Subject key identifier:   83:46:72:78:71:40:9E:BB:38:B1:94:2E:82:73:34:23:96:BC:95:CC
Certificate issuer:       /CN=AC5F91766846C4C6154EEF497DA9B6A46584AEB3
Certificate serial:       5FAC1B0352C5C0A9D47D7FD3AA914340949AA8E0
Authority key identifier: AC:5F:91:76:68:46:C4:C6:15:4E:EF:49:7D:A9:B6:A4:65:84:AE:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa
Signing time:             Tue 19 Mar 2024 17:07:31 +0000
ROA not before:           Tue 19 Mar 2024 17:02:31 +0000
ROA not after:            Tue 18 Mar 2025 17:07:31 +0000
asID:                     270810
IP address blocks:        2804:71c4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ac:1b:03:52:c5:c0:a9:d4:7d:7f:d3:aa:91:43:40:94:9a:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5F91766846C4C6154EEF497DA9B6A46584AEB3
        Validity
            Not Before: Mar 19 17:02:31 2024 GMT
            Not After : Mar 18 17:07:31 2025 GMT
        Subject: CN=8346727871409EBB38B1942E8273342396BC95CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:8a:97:76:98:48:80:54:c1:a2:8a:29:1a:
                    8f:0c:73:85:7e:41:43:57:56:5f:ac:7f:49:ec:aa:
                    33:9f:76:6c:c8:a3:3e:5e:10:d2:16:5c:a5:a6:98:
                    cc:15:66:c3:f1:aa:0f:cf:79:0e:63:fb:75:43:f5:
                    a0:3d:bf:46:eb:a9:1f:2e:36:7c:d1:cd:f8:2b:e4:
                    16:1e:2a:2b:71:d4:ad:cb:af:6f:9c:c7:e8:da:5a:
                    27:ae:03:49:54:0a:1f:91:58:5f:f8:72:2d:ea:73:
                    ce:62:b2:c1:7a:fa:c1:93:c6:0f:da:d0:5f:26:27:
                    51:b7:23:25:cb:97:30:ae:e8:dd:93:d5:c2:86:fd:
                    7d:ce:4a:61:60:5d:ce:66:ad:c1:f7:00:ec:b3:c8:
                    9b:77:6b:69:21:10:bf:a6:ed:ac:40:56:b7:5e:f1:
                    bc:16:79:5e:85:e6:9c:6b:e0:78:75:20:57:2c:34:
                    cd:45:82:9c:32:5a:3e:e6:f0:b0:ea:86:e1:04:ba:
                    16:93:93:22:15:3b:59:36:e6:a9:d6:a1:bd:5c:db:
                    1a:4e:e8:09:80:ac:35:1c:fe:ea:25:16:26:38:e1:
                    5e:56:68:4e:85:b0:55:34:58:e1:2c:82:66:cd:67:
                    09:cc:8e:56:0b:6f:11:84:ff:eb:01:f4:5f:82:f0:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:46:72:78:71:40:9E:BB:38:B1:94:2E:82:73:34:23:96:BC:95:CC
            X509v3 Authority Key Identifier:
                keyid:AC:5F:91:76:68:46:C4:C6:15:4E:EF:49:7D:A9:B6:A4:65:84:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:f9:9e:cf:39:de:66:3e:e3:bb:6c:4a:29:70:13:66:57:
         38:3e:ff:f8:6f:18:e1:a4:5f:c4:f1:eb:4b:6d:b6:23:ed:12:
         8a:2e:2a:3b:c8:76:52:b0:cd:ce:34:e5:d4:7c:7a:c2:8e:23:
         2e:bc:28:bc:b3:91:74:e7:0c:af:5b:53:cd:2e:29:31:ff:cb:
         fa:99:09:02:3e:df:89:da:bd:21:3a:c8:2d:7b:b7:63:59:c3:
         52:1d:2c:2c:6c:32:ca:ec:00:5e:10:7a:31:07:3a:84:b0:fd:
         2c:a5:87:52:f7:f4:73:dd:38:d9:f0:ec:76:77:69:5d:8a:ab:
         07:61:0d:51:2e:43:b2:69:d5:d6:e5:12:e0:69:0f:1c:48:0f:
         5d:63:42:63:a6:27:2a:65:0d:37:36:88:27:89:39:fd:c1:64:
         9e:a8:1f:9b:a8:6d:8c:63:98:31:0d:c6:05:76:cd:bd:59:c6:
         4e:31:05:10:d7:52:04:84:c7:3b:a0:08:ac:a2:da:67:c5:62:
         52:e1:9f:70:82:23:64:9e:85:3a:b7:d9:1f:6b:7c:2f:c2:80:
         e1:e8:77:9b:d9:a0:8d:b0:e2:4d:c8:44:73:35:75:03:4b:67:
         3b:ed:e4:89:1f:cf:ae:44:55:1f:ab:37:58:3f:eb:0c:ce:c5:
         ab:5e:3c:07
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUX6wbA1LFwKnUfX/TqpFDQJSaqOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1RjkxNzY2ODQ2QzRDNjE1NEVFRjQ5N0RBOUI2QTQ2
NTg0QUVCMzAeFw0yNDAzMTkxNzAyMzFaFw0yNTAzMTgxNzA3MzFaMDMxMTAvBgNV
BAMTKDgzNDY3Mjc4NzE0MDlFQkIzOEIxOTQyRTgyNzMzNDIzOTZCQzk1Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmX4qXdphIgFTBooopGo8Mc4V+
QUNXVl+sf0nsqjOfdmzIoz5eENIWXKWmmMwVZsPxqg/PeQ5j+3VD9aA9v0brqR8u
NnzRzfgr5BYeKitx1K3Lr2+cx+jaWieuA0lUCh+RWF/4ci3qc85issF6+sGTxg/a
0F8mJ1G3IyXLlzCu6N2T1cKG/X3OSmFgXc5mrcH3AOyzyJt3a2khEL+m7axAVrde
8bwWeV6F5pxr4Hh1IFcsNM1FgpwyWj7m8LDqhuEEuhaTkyIVO1k25qnWob1c2xpO
6AmArDUc/uolFiY44V5WaE6FsFU0WOEsgmbNZwnMjlYLbxGE/+sB9F+C8Jy1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUg0ZyeHFAnrs4sZQugnM0I5a8lcwwHwYDVR0j
BBgwFoAUrF+RdmhGxMYVTu9Jfam2pGWErrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZuZVRuRmRDWFR5Z2Zjam9lQThvY05OTlR2Z1lzY2N0eEpNcHhLRFg1
dVQvMS9BQzVGOTE3NjY4NDZDNEM2MTU0RUVGNDk3REE5QjZBNDY1ODRBRUIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FDNUY5MTc2Njg0NkM0QzYx
NTRFRUY0OTdEQTlCNkE0NjU4NEFFQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWbmVUbkZkQ1hUeWdmY2pvZUE4b2NOTk5UdmdZc2NjdHhKTXB4S0RYNXVULzEv
MzIzODMwMzQzYTM3MzE2MzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzgzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARxxDANBgkqhkiG9w0BAQsFAAOCAQEAjQT5ns85
3mY+47tsSilwE2ZXOD7/+G8Y4aRfxPHrS222I+0Sii4qO8h2UrDNzjTl1Hx6wo4j
LrwovLORdOcMr1tTzS4pMf/L+pkJAj7fidq9ITrILXu3Y1nDUh0sLGwyyuwAXhB6
MQc6hLD9LKWHUvf0c9042fDsdndpXYqrB2ENUS5DsmnV1uUS4GkPHEgPXWNCY6Yn
KmUNNzaIJ4k5/cFknqgfm6htjGOYMQ3GBXbNvVnGTjEFENdSBITHO6AIrKLaZ8Vi
UuGfcIIjZJ6FOrfZH2t8L8KA4eh3m9mgjbDiTchEczV1A0tnO+3kiR/PrkRVH6s3
WD/rDM7Fq148Bw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:35 2025 by rpki-client