Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa
File:                     323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa (raw, json)
Hash identifier:          d/rlLvDrSafWjZx834Ie7LCqPALC41GsgMFBvSXEoZc=
Subject key identifier:   F5:44:79:71:4E:AA:C1:C6:67:7E:49:6C:46:13:B7:2B:05:EA:E0:2F
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       740B4D576B285606CFCD41FCB3C2C24847F510C4
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:29 +0000
ROA not before:           Thu 04 Apr 2024 13:47:29 +0000
ROA not after:            Thu 03 Apr 2025 13:52:29 +0000
asID:                     264891
IP address blocks:        2804:2f70:6000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0b:4d:57:6b:28:56:06:cf:cd:41:fc:b3:c2:c2:48:47:f5:10:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:29 2024 GMT
            Not After : Apr  3 13:52:29 2025 GMT
        Subject: CN=F54479714EAAC1C6677E496C4613B72B05EAE02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:d8:3d:86:c3:94:c6:a0:23:68:3b:04:76:
                    fa:35:47:fe:7f:2c:47:19:4c:26:55:c6:f8:1d:65:
                    c5:0b:91:57:45:80:c5:20:e9:14:8f:e3:a5:97:1b:
                    d9:f3:30:6d:a2:67:b3:ff:c0:b7:d2:b6:59:85:55:
                    e7:ae:5d:f0:f5:7e:ea:bf:f3:59:e6:5d:a7:7f:f2:
                    6a:55:4f:36:43:36:99:b1:fd:9c:57:a4:13:b2:d6:
                    22:0e:dc:31:a8:f9:97:dc:85:05:2f:3f:a2:de:6b:
                    df:0c:69:e0:28:37:67:29:50:a5:3f:ac:0a:1a:cc:
                    bd:f2:41:0f:53:3e:71:ef:5a:7b:54:c4:54:66:64:
                    49:b7:ae:3d:73:f3:4e:d6:7e:09:85:a4:4a:bb:63:
                    69:aa:1e:2b:b6:8c:e6:ec:d6:d5:b1:f8:f7:0b:e8:
                    42:86:e4:5e:e8:52:ba:01:1d:7e:c1:97:72:8c:82:
                    7d:89:be:25:d1:a2:a6:28:00:31:4d:69:ac:67:c2:
                    a0:4e:37:61:77:b2:f4:51:93:5d:3c:99:01:67:b8:
                    13:1e:53:40:e4:f8:ff:f8:c6:b6:d7:a4:61:f4:43:
                    5e:1c:12:d0:90:c2:e3:78:89:92:23:1b:5d:60:a0:
                    f8:c1:54:9d:ef:98:0b:0a:cc:27:10:e3:c2:13:83:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:79:71:4E:AA:C1:C6:67:7E:49:6C:46:13:B7:2B:05:EA:E0:2F
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:57:ca:77:ae:e5:d4:ad:f7:92:d7:6b:cd:af:92:ba:3c:ce:
         f5:49:9f:be:b7:ad:f2:7e:ef:ca:0d:8a:14:da:45:f2:8b:fe:
         69:7b:58:6c:aa:58:c2:3e:6f:99:ff:b0:f3:a5:39:de:29:6f:
         ac:37:ae:5a:aa:5d:24:52:db:aa:11:80:4a:f4:fa:2d:39:b5:
         bc:60:59:a4:5c:69:56:be:3a:27:52:6c:bb:e4:14:42:b1:e7:
         c3:03:83:d0:64:45:95:53:03:88:a0:cd:2a:19:b9:3e:64:2b:
         a8:c9:2d:e4:c9:a2:6b:4b:92:bf:2b:e3:cb:34:7e:d2:7c:e4:
         39:78:29:a9:b1:ec:9a:91:89:83:93:a7:25:11:2d:15:e5:31:
         ea:92:ba:58:a3:18:bd:34:59:8c:0c:f2:84:b7:12:78:54:cf:
         05:75:db:cb:7b:b1:dd:68:be:3c:ec:a3:d9:fb:87:6d:4a:b5:
         7d:f0:9d:4c:6d:35:64:98:28:f0:b4:e8:4b:09:af:0f:e8:98:
         ac:4b:80:aa:b1:c3:1e:fd:70:1b:96:a6:58:95:7c:8d:22:58:
         a1:2d:76:a4:54:96:ee:d8:1b:7c:dc:67:3e:0e:dd:d6:8b:a6:
         e0:98:d1:b7:1e:68:4a:38:ec:dd:9a:54:7d:c9:82:4c:59:bd:
         2f:cb:86:36
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdAtNV2soVgbPzUH8s8LCSEf1EMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERFNDBGOUM1RjJBQzYwRTMzMzMwQUZDMEZEOUYyOUNB
QjE5MTVBMzAeFw0yNDA0MDQxMzQ3MjlaFw0yNTA0MDMxMzUyMjlaMDMxMTAvBgNV
BAMTKEY1NDQ3OTcxNEVBQUMxQzY2NzdFNDk2QzQ2MTNCNzJCMDVFQUUwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMN9g9hsOUxqAjaDsEdvo1R/5/
LEcZTCZVxvgdZcULkVdFgMUg6RSP46WXG9nzMG2iZ7P/wLfStlmFVeeuXfD1fuq/
81nmXad/8mpVTzZDNpmx/ZxXpBOy1iIO3DGo+ZfchQUvP6Lea98MaeAoN2cpUKU/
rAoazL3yQQ9TPnHvWntUxFRmZEm3rj1z807WfgmFpEq7Y2mqHiu2jObs1tWx+PcL
6EKG5F7oUroBHX7Bl3KMgn2JviXRoqYoADFNaaxnwqBON2F3svRRk108mQFnuBMe
U0Dk+P/4xrbXpGH0Q14cEtCQwuN4iZIjG11goPjBVJ3vmAsKzCcQ48ITg1e9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU9UR5cU6qwcZnfklsRhO3KwXq4C8wHwYDVR0j
BBgwFoAU3eQPnF8qxg4zMwr8D9nynKsZFaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMS9EREU0MEY5QzVGMkFDNjBFMzMzMzBBRkMwRkQ5RjI5Q0FCMTkxNUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERTQwRjlDNUYyQUM2MEUz
MzMzMEFGQzBGRDlGMjlDQUIxOTE1QTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzEv
MzIzODMwMzQzYTMyNjYzNzMwM2EzNjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEL3BgMA0GCSqGSIb3DQEBCwUA
A4IBAQBjV8p3ruXUrfeS12vNr5K6PM71SZ++t63yfu/KDYoU2kXyi/5pe1hsqljC
Pm+Z/7DzpTneKW+sN65aql0kUtuqEYBK9PotObW8YFmkXGlWvjonUmy75BRCsefD
A4PQZEWVUwOIoM0qGbk+ZCuoyS3kyaJrS5K/K+PLNH7SfOQ5eCmpseyakYmDk6cl
ES0V5THqkrpYoxi9NFmMDPKEtxJ4VM8FddvLe7HdaL487KPZ+4dtSrV98J1MbTVk
mCjwtOhLCa8P6JisS4CqscMe/XAblqZYlXyNIlihLXakVJbu2Bt83Gc+Dt3Wi6bg
mNG3HmhKOOzdmlR9yYJMWb0vy4Y2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org