Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a336630303a3a2f34302d3430203d3e20323636313937.roa
File:                     323830343a336333383a336630303a3a2f34302d3430203d3e20323636313937.roa (raw, json)
Hash identifier:          wNSuuoMy6+H8itM1nAPU6SCY9NZBV9BLJvagEDU5JaE=
Subject key identifier:   15:D9:36:02:AD:9D:AC:D3:F3:5A:C7:FE:4F:AD:03:BE:DF:78:B0:7E
Certificate issuer:       /CN=20462542E7D750389A93D0ECB9BA39FEB7970339
Certificate serial:       44D65E8033543C5D63DF8EA7A9189D73F855BDD9
Authority key identifier: 20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a336630303a3a2f34302d3430203d3e20323636313937.roa
Signing time:             Fri 08 Sep 2023 18:42:56 +0000
ROA not before:           Fri 08 Sep 2023 18:37:56 +0000
ROA not after:            Fri 06 Sep 2024 18:42:56 +0000
asID:                     266197
IP address blocks:        2804:3c38:3f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d6:5e:80:33:54:3c:5d:63:df:8e:a7:a9:18:9d:73:f8:55:bd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20462542E7D750389A93D0ECB9BA39FEB7970339
        Validity
            Not Before: Sep  8 18:37:56 2023 GMT
            Not After : Sep  6 18:42:56 2024 GMT
        Subject: CN=15D93602AD9DACD3F35AC7FE4FAD03BEDF78B07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:98:cb:7f:1b:53:e3:cf:16:11:9d:2a:03:
                    3b:e1:7f:ce:90:c9:b5:5d:6d:ba:d3:a7:ed:41:e3:
                    d9:64:ff:e1:f8:b8:c3:8c:1e:3d:b4:d5:eb:ea:14:
                    ab:ed:5a:4c:7f:ed:cc:45:b3:2a:53:01:8d:60:93:
                    ba:5b:32:84:2d:b8:c9:15:9e:01:b9:1b:96:43:ce:
                    7e:1e:25:1a:22:9e:15:68:ed:0a:aa:df:3c:ad:cd:
                    d0:3f:2d:53:14:91:9e:1c:e4:66:b9:df:0e:8d:98:
                    1a:1b:62:68:43:64:ed:d9:29:fc:e6:8e:7d:bb:09:
                    7c:83:2f:f6:aa:1f:53:3c:e6:a2:8e:0c:03:fc:b5:
                    bc:76:35:36:4e:6e:4d:5b:66:55:0d:92:e2:dd:4e:
                    ad:83:c9:d7:ec:3c:28:ad:69:8e:fa:18:27:ed:b5:
                    a3:0c:b5:03:bd:94:f2:7f:6d:12:93:79:83:b4:6a:
                    93:26:18:ef:aa:f3:69:e6:bd:9d:b3:57:41:b6:ae:
                    ec:a1:04:6c:9a:3e:a6:75:31:bf:0b:c6:dc:38:23:
                    94:83:a3:d0:9d:0d:89:02:76:cd:25:9b:a8:25:8b:
                    6c:ab:19:23:be:70:4e:d1:24:e9:fb:db:24:59:69:
                    9d:f4:ac:44:72:d9:4f:f8:3b:dc:b9:33:71:14:d8:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D9:36:02:AD:9D:AC:D3:F3:5A:C7:FE:4F:AD:03:BE:DF:78:B0:7E
            X509v3 Authority Key Identifier:
                keyid:20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/20462542E7D750389A93D0ECB9BA39FEB7970339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a336630303a3a2f34302d3430203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c38:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:02:cc:85:91:e0:4f:6c:1f:6e:75:9c:3b:65:4e:be:21:
         af:e5:f4:c0:7e:23:5b:43:37:23:34:08:a8:b0:c6:b3:ac:78:
         a2:0b:6c:96:32:82:b0:42:9b:a2:24:17:e0:b9:3a:40:e9:8f:
         29:1e:b5:fb:5d:5a:f2:b3:79:ee:ca:6f:52:40:64:24:f3:81:
         e9:6a:69:11:dd:a2:ae:27:32:72:01:6a:58:5d:63:27:b9:b2:
         e5:3f:3c:76:48:da:f0:ff:77:ea:e3:ea:52:18:03:44:79:3d:
         c1:2b:23:6c:71:08:b4:e5:dd:f4:eb:d5:0a:12:4f:16:bc:a0:
         18:72:b1:60:3e:ed:aa:1e:ef:f5:03:52:6c:d6:65:ef:ea:d2:
         f0:ec:21:4b:33:10:65:e0:22:f3:c0:19:04:15:59:fd:02:ad:
         11:90:c7:67:c8:28:e8:f6:9d:a0:1d:55:cf:8a:d1:c6:b3:ac:
         ca:4b:85:8a:ea:ef:c9:04:cb:ef:12:04:08:59:a7:7f:09:1a:
         bb:c5:72:4e:21:48:23:b6:e8:5a:8e:69:a7:ff:05:ab:cc:25:
         0d:b8:61:2d:0e:60:df:d8:12:85:19:80:af:ba:35:f7:eb:79:
         0a:15:f5:ca:f7:38:18:92:02:82:35:0b:bb:f8:8b:8b:5d:e3:
         d0:66:89:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURNZegDNUPF1j346nqRidc/hVvdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA0NjI1NDJFN0Q3NTAzODlBOTNEMEVDQjlCQTM5RkVC
Nzk3MDMzOTAeFw0yMzA5MDgxODM3NTZaFw0yNDA5MDYxODQyNTZaMDMxMTAvBgNV
BAMTKDE1RDkzNjAyQUQ5REFDRDNGMzVBQzdGRTRGQUQwM0JFREY3OEIwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIZjLfxtT488WEZ0qAzvhf86Q
ybVdbbrTp+1B49lk/+H4uMOMHj201evqFKvtWkx/7cxFsypTAY1gk7pbMoQtuMkV
ngG5G5ZDzn4eJRoinhVo7Qqq3zytzdA/LVMUkZ4c5Ga53w6NmBobYmhDZO3ZKfzm
jn27CXyDL/aqH1M85qKODAP8tbx2NTZObk1bZlUNkuLdTq2DydfsPCitaY76GCft
taMMtQO9lPJ/bRKTeYO0apMmGO+q82nmvZ2zV0G2ruyhBGyaPqZ1Mb8Lxtw4I5SD
o9CdDYkCds0lm6gli2yrGSO+cE7RJOn72yRZaZ30rERy2U/4O9y5M3EU2L7jAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFdk2Aq2drNPzWsf+T60Dvt94sH4wHwYDVR0j
BBgwFoAUIEYlQufXUDiak9Dsubo5/reXAzkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVhb2prTlM1TGJabnduelhSOU1zNVhBUmJIN2hVRnYxMWpEMkRKRzk3
aE4vMS8yMDQ2MjU0MkU3RDc1MDM4OUE5M0QwRUNCOUJBMzlGRUI3OTcwMzM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwNDYyNTQyRTdENzUwMzg5
QTkzRDBFQ0I5QkEzOUZFQjc5NzAzMzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1YW9qa05TNUxiWm53bnpYUjlNczVYQVJiSDdoVUZ2MTFqRDJESkc5N2hOLzEv
MzIzODMwMzQzYTMzNjMzMzM4M2EzMzY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjMxMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEPDg/MA0GCSqGSIb3DQEBCwUA
A4IBAQAUjgLMhZHgT2wfbnWcO2VOviGv5fTAfiNbQzcjNAiosMazrHiiC2yWMoKw
QpuiJBfguTpA6Y8pHrX7XVrys3nuym9SQGQk84HpamkR3aKuJzJyAWpYXWMnubLl
Pzx2SNrw/3fq4+pSGANEeT3BKyNscQi05d3069UKEk8WvKAYcrFgPu2qHu/1A1Js
1mXv6tLw7CFLMxBl4CLzwBkEFVn9Aq0RkMdnyCjo9p2gHVXPitHGs6zKS4WK6u/J
BMvvEgQIWad/CRq7xXJOIUgjtuhajmmn/wWrzCUNuGEtDmDf2BKFGYCvujX363kK
FfXK9zgYkgKCNQu7+IuLXePQZomd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org