Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          5hVjR4WCG1k4isCSqWRP0jGmUrzNaMNqSacIOm1ruXc=
Subject key identifier:   2C:77:98:EE:56:67:D4:12:1D:B8:A1:9F:A8:C8:D6:71:E3:DA:77:84
Certificate issuer:       /CN=B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0
Certificate serial:       2B1A2D4B706164B0868A1AC299EA10917F16B544
Authority key identifier: B1:BE:7E:2D:9D:CD:70:7E:1A:54:86:1A:2C:C8:81:00:84:DF:55:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Thu 01 Aug 2024 18:10:54 +0000
ROA not before:           Thu 01 Aug 2024 18:05:54 +0000
ROA not after:            Thu 31 Jul 2025 18:10:54 +0000
asID:                     265300
IP address blocks:        2804:2dbc:a400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1a:2d:4b:70:61:64:b0:86:8a:1a:c2:99:ea:10:91:7f:16:b5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0
        Validity
            Not Before: Aug  1 18:05:54 2024 GMT
            Not After : Jul 31 18:10:54 2025 GMT
        Subject: CN=2C7798EE5667D4121DB8A19FA8C8D671E3DA7784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:64:2d:d5:18:a6:e4:eb:a4:77:f3:ad:1a:
                    53:1b:0b:4a:c2:e6:6f:3f:eb:64:c9:78:6e:aa:11:
                    50:d0:72:f7:9a:8a:98:0f:f2:d8:94:e7:be:88:91:
                    46:44:ca:a0:87:59:7f:b1:a2:46:65:46:e5:cc:e7:
                    97:8c:16:d6:6e:7a:af:ca:ae:64:fe:c2:26:61:dc:
                    54:e5:dd:b1:7a:97:8a:b6:d6:24:9d:26:b6:3e:b3:
                    d2:0a:e2:d2:ad:f6:b8:a4:bc:71:87:e0:fb:2b:97:
                    29:29:27:89:08:7a:8d:ac:bd:b0:a3:d2:e8:2a:c0:
                    0c:c5:e7:6d:91:80:dd:ae:dc:c2:aa:ae:ba:97:70:
                    f1:57:42:c5:2c:03:f7:48:8d:8e:a0:fe:87:02:b7:
                    ed:b5:74:11:ae:ec:80:62:87:a4:33:e2:87:d5:84:
                    d7:76:f9:2e:e2:22:9f:6c:f8:7f:f1:7f:ed:d9:a6:
                    29:65:19:16:3f:21:c6:ca:59:e8:c7:79:2d:ea:e6:
                    2e:d8:bb:54:ca:a2:11:62:f7:92:42:24:a7:bf:ee:
                    83:96:ae:d0:e1:5b:9f:e0:3f:49:a1:53:eb:78:21:
                    04:91:c6:51:be:2b:e9:d4:f0:bf:fe:18:b4:d9:97:
                    d5:a3:b8:e7:7d:e9:16:3e:41:7c:c4:24:76:ca:ca:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:98:EE:56:67:D4:12:1D:B8:A1:9F:A8:C8:D6:71:E3:DA:77:84
            X509v3 Authority Key Identifier:
                keyid:B1:BE:7E:2D:9D:CD:70:7E:1A:54:86:1A:2C:C8:81:00:84:DF:55:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         88:00:df:17:09:04:9a:24:a1:96:79:64:18:37:2a:bf:08:79:
         94:47:5a:7e:db:d8:db:ad:03:07:8b:5a:45:6b:06:67:51:4a:
         5e:a8:c0:20:37:69:48:78:3a:98:b4:4f:c7:92:98:db:ca:e6:
         4c:3c:6e:15:64:50:df:71:cf:0d:a4:50:29:c5:0b:1d:39:80:
         01:27:77:d0:14:c1:da:d0:06:00:6f:fc:a9:89:13:7c:97:3e:
         65:44:0c:0b:fa:53:bf:7f:0a:76:36:de:32:ea:df:df:77:06:
         1a:05:2a:60:36:88:12:4e:6d:6e:16:4c:68:40:b0:f6:ab:4a:
         94:e9:0d:1f:38:ac:18:ea:29:66:c2:d7:27:c8:e0:df:5d:40:
         c2:a9:5d:f7:95:71:47:cb:6f:93:e1:9f:74:8f:de:0c:13:93:
         a6:e6:f2:cc:2a:f2:d2:26:a5:e4:1f:9e:51:c2:76:55:72:5a:
         b9:58:f9:43:ed:e3:5f:f1:7d:38:01:e7:8b:58:50:85:e0:34:
         65:e5:7a:0b:3b:1f:3c:66:e6:eb:25:d2:82:56:ae:51:72:b9:
         dc:0e:ea:d5:89:ac:9a:b3:3c:b2:84:33:03:f4:8f:d1:82:87:
         77:75:71:8d:c9:23:bd:c4:7c:4f:90:95:e8:32:93:4c:e7:1d:
         58:67:a0:15
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKxotS3BhZLCGihrCmeoQkX8WtUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFCRTdFMkQ5RENENzA3RTFBNTQ4NjFBMkNDODgxMDA4
NERGNTVCMDAeFw0yNDA4MDExODA1NTRaFw0yNTA3MzExODEwNTRaMDMxMTAvBgNV
BAMTKDJDNzc5OEVFNTY2N0Q0MTIxREI4QTE5RkE4QzhENjcxRTNEQTc3ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxy2Qt1Rim5Oukd/OtGlMbC0rC
5m8/62TJeG6qEVDQcveaipgP8tiU576IkUZEyqCHWX+xokZlRuXM55eMFtZueq/K
rmT+wiZh3FTl3bF6l4q21iSdJrY+s9IK4tKt9rikvHGH4PsrlykpJ4kIeo2svbCj
0ugqwAzF522RgN2u3MKqrrqXcPFXQsUsA/dIjY6g/ocCt+21dBGu7IBih6Qz4ofV
hNd2+S7iIp9s+H/xf+3ZpillGRY/IcbKWejHeS3q5i7Yu1TKohFi95JCJKe/7oOW
rtDhW5/gP0mhU+t4IQSRxlG+K+nU8L/+GLTZl9WjuOd96RY+QXzEJHbKyqJtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULHeY7lZn1BIduKGfqMjWcePad4QwHwYDVR0j
BBgwFoAUsb5+LZ3NcH4aVIYaLMiBAITfVbAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC9CMUJFN0UyRDlEQ0Q3MDdFMUE1NDg2MUEyQ0M4ODEwMDg0REY1NUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxQkU3RTJEOURDRDcwN0Ux
QTU0ODYxQTJDQzg4MTAwODRERjU1QjAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzIzODMwMzQzYTMyNjQ2MjYzM2E2MTM0MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzNTMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigELbykMA0GCSqGSIb3DQEBCwUA
A4IBAQCIAN8XCQSaJKGWeWQYNyq/CHmUR1p+29jbrQMHi1pFawZnUUpeqMAgN2lI
eDqYtE/HkpjbyuZMPG4VZFDfcc8NpFApxQsdOYABJ3fQFMHa0AYAb/ypiRN8lz5l
RAwL+lO/fwp2Nt4y6t/fdwYaBSpgNogSTm1uFkxoQLD2q0qU6Q0fOKwY6ilmwtcn
yODfXUDCqV33lXFHy2+T4Z90j94ME5Om5vLMKvLSJqXkH55RwnZVclq5WPlD7eNf
8X04AeeLWFCF4DRl5XoLOx88ZubrJdKCVq5RcrncDurViayaszyyhDMD9I/Rgod3
dXGNySO9xHxPkJXoMpNM5x1YZ6AV
-----END CERTIFICATE-----
Generated at Fri Oct 4 21:29:31 2024 by rpki-client on console-fra.rpki-client.org