Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa
File:                     323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (raw, json)
Hash identifier:          3qd2t18iGGF+cvc1iKPZ+9QpPWaIxUn2YxQTAuhaWUw=
Subject key identifier:   88:6B:E8:A1:56:D9:A3:B5:52:05:92:F7:E6:EB:32:0C:74:5E:5F:E2
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       02013152D61E72B6EE3B2C2533EEA131571DC9D6
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa
Signing time:             Thu 04 Apr 2024 13:52:28 +0000
ROA not before:           Thu 04 Apr 2024 13:47:28 +0000
ROA not after:            Thu 03 Apr 2025 13:52:28 +0000
asID:                     264891
IP address blocks:        2804:2f70::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:01:31:52:d6:1e:72:b6:ee:3b:2c:25:33:ee:a1:31:57:1d:c9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: Apr  4 13:47:28 2024 GMT
            Not After : Apr  3 13:52:28 2025 GMT
        Subject: CN=886BE8A156D9A3B5520592F7E6EB320C745E5FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:d1:a4:9a:ec:4c:e4:dc:b3:bb:93:c9:98:
                    ef:28:52:7c:85:bb:93:df:02:93:3e:ef:ca:a7:01:
                    4f:77:15:79:a0:b2:c5:80:10:15:b1:fd:08:75:6f:
                    ad:69:b2:3d:da:a4:46:ca:84:5e:28:0f:3f:a5:0f:
                    91:41:ea:30:3d:93:55:b2:0c:ea:11:35:42:cb:62:
                    80:f8:01:49:68:fb:f7:fc:27:86:44:47:12:a9:79:
                    92:d2:19:96:ba:86:66:97:ee:99:a7:e2:9a:97:cd:
                    2a:f7:da:0d:5f:f2:b4:b9:71:5a:36:a8:b0:10:b4:
                    67:1a:a6:96:4f:06:49:bc:8c:2d:52:b4:6c:24:62:
                    84:2e:f8:b3:25:c9:f0:82:91:4a:74:53:dc:98:d3:
                    72:fb:5f:d0:8f:d0:06:1f:43:4e:65:cf:bf:8c:f1:
                    c4:28:2d:e3:f2:be:fa:38:54:7c:4a:a5:a0:da:fe:
                    25:01:5e:b5:e4:e2:4c:5c:8b:b6:05:44:e5:26:1a:
                    20:9d:1d:c6:6e:ff:0d:7c:0c:50:ce:49:79:94:a0:
                    c7:31:ef:7d:31:c4:a6:07:c3:63:2b:a5:c1:76:f1:
                    4c:8a:70:30:fe:a9:00:1c:86:e4:55:73:9c:48:41:
                    73:6b:7c:02:d0:75:e9:2c:ae:c1:9e:a5:2b:1d:f3:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6B:E8:A1:56:D9:A3:B5:52:05:92:F7:E6:EB:32:0C:74:5E:5F:E2
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:0e:22:5d:3a:58:24:b9:3c:13:e4:a5:3f:cd:69:01:bb:
         17:e7:bf:c9:48:f1:f1:d5:aa:b1:a3:08:31:42:71:15:fe:b1:
         41:1f:6a:3d:c4:b4:19:84:ca:26:ac:fd:85:23:5b:08:ca:9f:
         d5:fe:83:90:1c:09:ee:0e:fc:0e:ec:8b:c5:8e:7d:5e:c6:b3:
         19:24:a6:0a:a2:34:33:96:53:3b:87:3a:d9:df:38:07:d5:48:
         d0:11:26:9b:ff:65:55:5a:0e:5b:ae:58:3d:48:99:e7:21:4f:
         07:1c:5a:8d:2e:75:0b:f8:9d:f1:01:c2:5d:7c:93:bb:ee:d1:
         f8:7a:38:e9:78:ed:63:f1:dc:92:ec:b6:8f:c0:a9:5e:5e:00:
         ad:d3:81:eb:e9:b0:f2:c8:2d:24:12:2c:58:bd:8f:ea:47:cb:
         b6:f1:68:7c:17:e6:51:16:35:b1:2f:2b:3b:ee:6f:86:35:1b:
         f7:b6:64:69:de:b6:b5:d7:ea:21:14:2c:a4:e7:1b:00:94:f3:
         4c:ef:5b:00:e2:b2:46:cc:e5:f6:2b:e7:5f:0e:26:95:5a:b3:
         a5:a6:fa:3e:3b:0d:5c:62:4e:b3:c4:a8:20:2a:7e:47:35:ea:
         9d:c7:2f:d3:c0:cc:6b:cf:f8:c4:8a:a2:df:cf:56:7d:a2:41:
         8a:53:f6:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAgExUtYecrbuOywlM+6hMVcdydYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERFNDBGOUM1RjJBQzYwRTMzMzMwQUZDMEZEOUYyOUNB
QjE5MTVBMzAeFw0yNDA0MDQxMzQ3MjhaFw0yNTA0MDMxMzUyMjhaMDMxMTAvBgNV
BAMTKDg4NkJFOEExNTZEOUEzQjU1MjA1OTJGN0U2RUIzMjBDNzQ1RTVGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9E9GkmuxM5Nyzu5PJmO8oUnyF
u5PfApM+78qnAU93FXmgssWAEBWx/Qh1b61psj3apEbKhF4oDz+lD5FB6jA9k1Wy
DOoRNULLYoD4AUlo+/f8J4ZERxKpeZLSGZa6hmaX7pmn4pqXzSr32g1f8rS5cVo2
qLAQtGcappZPBkm8jC1StGwkYoQu+LMlyfCCkUp0U9yY03L7X9CP0AYfQ05lz7+M
8cQoLePyvvo4VHxKpaDa/iUBXrXk4kxci7YFROUmGiCdHcZu/w18DFDOSXmUoMcx
730xxKYHw2MrpcF28UyKcDD+qQAchuRVc5xIQXNrfALQdeksrsGepSsd86HBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUiGvooVbZo7VSBZL35usyDHReX+IwHwYDVR0j
BBgwFoAU3eQPnF8qxg4zMwr8D9nynKsZFaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMS9EREU0MEY5QzVGMkFDNjBFMzMzMzBBRkMwRkQ5RjI5Q0FCMTkxNUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERTQwRjlDNUYyQUM2MEUz
MzMzMEFGQzBGRDlGMjlDQUIxOTE1QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzEv
MzIzODMwMzQzYTMyNjYzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQvcDANBgkqhkiG9w0BAQsFAAOCAQEAWzQOIl06
WCS5PBPkpT/NaQG7F+e/yUjx8dWqsaMIMUJxFf6xQR9qPcS0GYTKJqz9hSNbCMqf
1f6DkBwJ7g78DuyLxY59XsazGSSmCqI0M5ZTO4c62d84B9VI0BEmm/9lVVoOW65Y
PUiZ5yFPBxxajS51C/id8QHCXXyTu+7R+Ho46XjtY/Hckuy2j8CpXl4ArdOB6+mw
8sgtJBIsWL2P6kfLtvFofBfmURY1sS8rO+5vhjUb97Zkad62tdfqIRQspOcbAJTz
TO9bAOKyRszl9ivnXw4mlVqzpab6PjsNXGJOs8SoICp+RzXqnccv08DMa8/4xIqi
389WfaJBilP26A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org