Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383030303a3a2f34302d3430203d3e20323633393234.roa
File:                     323830343a323764343a383030303a3a2f34302d3430203d3e20323633393234.roa (raw, json)
Hash identifier:          3LfhEgga18hXA/WDOXJK3jmC1oa4l1q1UKgymi6QRYA=
Subject key identifier:   6A:37:3A:15:FB:16:CD:B7:D4:F6:81:7C:9D:8D:88:29:89:AA:32:74
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       52DB88DC8630C9689AD265186A8A99B8CB4B0A18
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383030303a3a2f34302d3430203d3e20323633393234.roa
Signing time:             Mon 07 Feb 2022 12:09:20 +0000
ROA not before:           Mon 07 Feb 2022 12:04:20 +0000
ROA not after:            Mon 06 Feb 2023 12:09:20 +0000
asID:                     263924
IP address blocks:        2804:27d4:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:db:88:dc:86:30:c9:68:9a:d2:65:18:6a:8a:99:b8:cb:4b:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:20 2022 GMT
            Not After : Feb  6 12:09:20 2023 GMT
        Subject: CN=6A373A15FB16CDB7D4F6817C9D8D882989AA3274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ed:75:8e:56:1c:fd:6c:3a:6d:2f:0c:8c:8d:
                    a4:4e:56:b0:12:33:77:99:b1:c5:36:29:e9:8a:06:
                    14:6d:86:10:fa:5b:64:ec:58:a3:f7:37:75:36:65:
                    c5:e7:28:4d:a9:50:23:66:49:df:32:67:a8:7a:a4:
                    16:e4:98:a2:ac:ed:16:0f:e4:2b:c0:34:d7:55:07:
                    b5:59:a7:ab:da:c4:b9:ee:35:d8:5a:79:3a:e7:04:
                    07:f6:f2:a7:2c:7f:63:81:e9:ed:a5:a9:be:39:ca:
                    2c:8f:d5:c7:df:30:32:b4:2b:27:98:d4:dd:7b:a4:
                    82:ff:04:b7:0e:98:27:4f:44:b6:4e:d1:27:4b:b5:
                    b0:44:6b:2d:11:e4:7e:7d:7c:34:c3:0d:b2:d8:ab:
                    4c:9d:bc:e9:05:72:e3:69:77:53:7f:ce:91:ad:f3:
                    d1:c9:21:f0:a0:56:09:08:2d:2b:dd:c2:c4:f6:95:
                    7c:3e:11:75:64:85:c6:3f:58:47:4f:7c:a7:d2:31:
                    94:fe:f2:86:81:08:32:40:50:74:8e:dd:7b:80:9a:
                    2d:eb:82:ff:a1:f7:1f:fd:aa:7a:84:d1:3b:b9:7c:
                    6f:cd:ff:d6:37:79:9c:b4:a7:1b:ae:a7:f6:20:a5:
                    02:98:57:a3:2c:e0:06:eb:e4:26:3b:f4:89:6c:ce:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:3A:15:FB:16:CD:B7:D4:F6:81:7C:9D:8D:88:29:89:AA:32:74
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383030303a3a2f34302d3430203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:e5:92:69:64:25:00:3a:f2:6d:54:b7:03:38:88:dd:9d:
         ff:12:56:63:cd:c1:83:89:cf:ac:2b:ba:3d:1a:c6:44:71:7b:
         81:2e:ea:3c:d7:2f:d8:4f:6c:99:14:20:eb:46:0f:41:71:f0:
         e3:49:a3:f6:0c:3f:bb:d9:4e:dd:54:51:9f:9f:73:d9:f4:41:
         af:d9:d1:73:94:f0:99:a9:06:83:61:89:c5:45:3a:a5:c7:95:
         31:f5:26:b1:bb:56:c7:26:bc:b2:05:4c:84:33:fa:1e:7e:3b:
         2c:7d:7a:75:21:5d:ef:53:e6:63:9c:cb:00:50:ce:dd:dd:40:
         82:c6:1f:59:7c:1e:d0:70:ba:ab:fa:24:9e:4b:ac:27:d7:f7:
         43:cf:73:cc:65:3d:07:00:fd:76:47:18:a2:ec:0c:73:ed:f6:
         d5:c1:8b:d1:69:3f:b6:ea:31:ad:df:73:03:ec:a5:54:5f:60:
         7b:1f:cd:8f:de:0a:30:df:6c:ca:01:2d:bf:32:a5:38:f4:83:
         7f:80:71:bb:ab:bf:88:53:aa:af:4b:92:18:b3:ce:2c:6e:e1:
         4a:9c:f5:11:ee:04:8f:cb:c0:ab:d6:9a:fd:6d:6c:22:92:35:
         3a:b4:5f:5e:18:74:8d:44:58:24:71:a1:3c:9b:25:88:9e:59:
         fc:9b:09:7f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUtuI3IYwyWia0mUYaoqZuMtLChgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5MjBFMEZBODY4ODY0NTEzMzcwQ0NDQTQ2NzFGNkI0
M0I2NUYyMjAeFw0yMjAyMDcxMjA0MjBaFw0yMzAyMDYxMjA5MjBaMDMxMTAvBgNV
BAMTKDZBMzczQTE1RkIxNkNEQjdENEY2ODE3QzlEOEQ4ODI5ODlBQTMyNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu7XWOVhz9bDptLwyMjaROVrAS
M3eZscU2KemKBhRthhD6W2TsWKP3N3U2ZcXnKE2pUCNmSd8yZ6h6pBbkmKKs7RYP
5CvANNdVB7VZp6vaxLnuNdhaeTrnBAf28qcsf2OB6e2lqb45yiyP1cffMDK0KyeY
1N17pIL/BLcOmCdPRLZO0SdLtbBEay0R5H59fDTDDbLYq0ydvOkFcuNpd1N/zpGt
89HJIfCgVgkILSvdwsT2lXw+EXVkhcY/WEdPfKfSMZT+8oaBCDJAUHSO3XuAmi3r
gv+h9x/9qnqE0Tu5fG/N/9Y3eZy0pxuup/YgpQKYV6Ms4Abr5CY79IlszlXZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUajc6FfsWzbfU9oF8nY2IKYmqMnQwHwYDVR0j
BBgwFoAUN5IOD6hohkUTNwzMpGcfa0O2XyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC8zNzkyMEUwRkE4Njg4NjQ1MTMzNzBDQ0NBNDY3MUY2QjQzQjY1RjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3OTIwRTBGQTg2ODg2NDUx
MzM3MENDQ0E0NjcxRjZCNDNCNjVGMjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzIzODMwMzQzYTMyMzc2NDM0M2EzODMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM5MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJ9SAMA0GCSqGSIb3DQEBCwUA
A4IBAQAl4uWSaWQlADrybVS3AziI3Z3/ElZjzcGDic+sK7o9GsZEcXuBLuo81y/Y
T2yZFCDrRg9BcfDjSaP2DD+72U7dVFGfn3PZ9EGv2dFzlPCZqQaDYYnFRTqlx5Ux
9Saxu1bHJryyBUyEM/oefjssfXp1IV3vU+ZjnMsAUM7d3UCCxh9ZfB7QcLqr+iSe
S6wn1/dDz3PMZT0HAP12Rxii7Axz7fbVwYvRaT+26jGt33MD7KVUX2B7H82P3gow
32zKAS2/MqU49IN/gHG7q7+IU6qvS5IYs84sbuFKnPUR7gSPy8Cr1pr9bWwikjU6
tF9eGHSNRFgkcaE8myWInln8mwl/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org