Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/323830343a353165633a3a2f33322d3336203d3e20323638343835.roa
File:                     323830343a353165633a3a2f33322d3336203d3e20323638343835.roa (raw, json)
Hash identifier:          F+QwfQCflL/UpiQfnReRVcFmDfbpiY3xURfsfOVHJtc=
Subject key identifier:   76:B2:75:9B:FC:02:31:61:4A:44:96:FC:65:24:47:BE:F1:17:C7:D3
Certificate issuer:       /CN=5004E61A4C37B6E4B16A7FF42AC504376068BC6A
Certificate serial:       554BE8CDA4FA1EAA7074F7D8B56ECA72D1C027E5
Authority key identifier: 50:04:E6:1A:4C:37:B6:E4:B1:6A:7F:F4:2A:C5:04:37:60:68:BC:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/323830343a353165633a3a2f33322d3336203d3e20323638343835.roa
Signing time:             Mon 11 Mar 2024 16:58:12 +0000
ROA not before:           Mon 11 Mar 2024 16:53:12 +0000
ROA not after:            Mon 10 Mar 2025 16:58:12 +0000
asID:                     268485
IP address blocks:        2804:51ec::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4b:e8:cd:a4:fa:1e:aa:70:74:f7:d8:b5:6e:ca:72:d1:c0:27:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5004E61A4C37B6E4B16A7FF42AC504376068BC6A
        Validity
            Not Before: Mar 11 16:53:12 2024 GMT
            Not After : Mar 10 16:58:12 2025 GMT
        Subject: CN=76B2759BFC0231614A4496FC652447BEF117C7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:76:3e:44:b5:10:56:a5:66:db:cf:ee:af:
                    91:c1:64:7f:f7:95:8c:29:11:61:fa:da:5a:69:ff:
                    10:d1:58:a7:db:17:0c:8a:0c:4c:ea:40:b3:12:09:
                    ca:7b:83:18:d8:7e:e0:55:7b:db:0c:0e:cc:2e:93:
                    b0:da:23:ee:77:92:7a:08:5b:82:41:2d:63:f9:cf:
                    35:74:5e:98:52:77:52:1b:5d:60:56:83:a4:93:f8:
                    e5:85:e0:17:e7:3e:0c:c5:05:cc:65:1a:16:26:8b:
                    0c:1f:4b:8e:17:08:f2:3c:fe:ec:74:75:70:a8:2b:
                    8b:7f:dd:84:53:eb:7a:23:d5:76:d9:6f:be:19:ef:
                    1b:62:0b:19:05:aa:cf:e1:db:b6:d2:8d:a6:9a:64:
                    a9:74:58:5c:a3:a0:8d:5c:df:8a:50:b2:46:e2:a0:
                    89:08:43:00:e5:98:a1:d3:d9:63:d0:b6:72:b1:52:
                    07:01:eb:49:f7:40:a0:fc:20:80:8a:e4:fa:e6:90:
                    31:a9:2e:02:57:72:7e:ab:be:d4:10:3a:4f:d7:61:
                    db:87:36:5e:46:4e:20:c8:93:80:fd:69:09:45:ce:
                    dd:9d:f4:44:2c:7a:a4:60:91:35:f4:bf:ca:2e:69:
                    1a:f9:8f:b4:2b:25:e4:54:0a:2b:44:22:a8:2b:6e:
                    fe:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B2:75:9B:FC:02:31:61:4A:44:96:FC:65:24:47:BE:F1:17:C7:D3
            X509v3 Authority Key Identifier:
                keyid:50:04:E6:1A:4C:37:B6:E4:B1:6A:7F:F4:2A:C5:04:37:60:68:BC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/323830343a353165633a3a2f33322d3336203d3e20323638343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:71:32:3e:1f:f6:1a:72:30:22:aa:4a:01:a1:1d:a2:ec:
         ac:3b:1d:cb:03:97:76:bc:86:ed:fe:13:90:1c:97:6f:5a:70:
         96:b4:9f:5c:33:84:c1:a7:de:a3:d3:c0:75:05:1b:14:c5:ff:
         c4:08:76:b0:a6:bd:a0:fd:83:67:71:9a:ee:11:01:c2:e3:dd:
         d8:91:e7:c1:fb:67:02:c2:a9:c4:4e:79:43:92:45:c1:56:78:
         ae:4a:c5:fd:f8:fd:e9:9c:a0:05:42:17:ed:6a:a2:02:ca:94:
         02:37:0d:cb:36:eb:8b:97:b5:dc:a1:ad:2e:4b:cb:9c:f6:cb:
         3d:b9:99:60:2f:11:75:cd:ab:89:db:a1:b1:f5:57:b6:b4:86:
         65:c9:7c:c2:96:2e:3d:b6:a7:4f:f7:bf:ee:90:53:5e:88:57:
         41:91:23:3d:9f:e6:78:53:75:cb:12:fe:62:8f:54:e4:06:8d:
         d5:3d:a0:53:cf:93:80:8d:1b:76:c9:f1:f3:47:45:51:9d:da:
         e6:e0:a7:06:af:b8:54:07:0d:d5:f3:e2:89:92:da:a8:f7:e2:
         9a:5f:0c:73:0f:72:1f:0c:b4:18:3b:8c:2c:52:81:d2:4f:1c:
         14:c3:89:61:83:a2:5a:e7:34:4a:e2:a0:1a:c6:43:c5:dd:2a:
         42:72:5d:86
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVUvozaT6HqpwdPfYtW7KctHAJ+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAwNEU2MUE0QzM3QjZFNEIxNkE3RkY0MkFDNTA0Mzc2
MDY4QkM2QTAeFw0yNDAzMTExNjUzMTJaFw0yNTAzMTAxNjU4MTJaMDMxMTAvBgNV
BAMTKDc2QjI3NTlCRkMwMjMxNjE0QTQ0OTZGQzY1MjQ0N0JFRjExN0M3RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeHY+RLUQVqVm28/ur5HBZH/3
lYwpEWH62lpp/xDRWKfbFwyKDEzqQLMSCcp7gxjYfuBVe9sMDswuk7DaI+53knoI
W4JBLWP5zzV0XphSd1IbXWBWg6ST+OWF4BfnPgzFBcxlGhYmiwwfS44XCPI8/ux0
dXCoK4t/3YRT63oj1XbZb74Z7xtiCxkFqs/h27bSjaaaZKl0WFyjoI1c34pQskbi
oIkIQwDlmKHT2WPQtnKxUgcB60n3QKD8IICK5PrmkDGpLgJXcn6rvtQQOk/XYduH
Nl5GTiDIk4D9aQlFzt2d9EQseqRgkTX0v8ouaRr5j7QrJeRUCitEIqgrbv6rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdrJ1m/wCMWFKRJb8ZSRHvvEXx9MwHwYDVR0j
BBgwFoAUUATmGkw3tuSxan/0KsUEN2BovGowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnU3Z0wyOXRaajhHd1g4S0RXWWIzY211dVNtM1RrSkNBczRvamZiYVFj
QkUvMC81MDA0RTYxQTRDMzdCNkU0QjE2QTdGRjQyQUM1MDQzNzYwNjhCQzZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUwMDRFNjFBNEMzN0I2RTRC
MTZBN0ZGNDJBQzUwNDM3NjA2OEJDNkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1N2dMMjl0Wmo4R3dYOEtEV1liM2NtdXVTbTNUa0pDQXM0b2pmYmFRY0JFLzAv
MzIzODMwMzQzYTM1MzE2NTYzM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzQzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARR7DANBgkqhkiG9w0BAQsFAAOCAQEAKNJxMj4f
9hpyMCKqSgGhHaLsrDsdywOXdryG7f4TkByXb1pwlrSfXDOEwafeo9PAdQUbFMX/
xAh2sKa9oP2DZ3Ga7hEBwuPd2JHnwftnAsKpxE55Q5JFwVZ4rkrF/fj96ZygBUIX
7WqiAsqUAjcNyzbri5e13KGtLkvLnPbLPbmZYC8Rdc2riduhsfVXtrSGZcl8wpYu
PbanT/e/7pBTXohXQZEjPZ/meFN1yxL+Yo9U5AaN1T2gU8+TgI0bdsnx80dFUZ3a
5uCnBq+4VAcN1fPiiZLaqPfiml8Mcw9yHwy0GDuMLFKB0k8cFMOJYYOiWuc0SuKg
GsZDxd0qQnJdhg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org