Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a623030303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a623030303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          qkPdXeNv6M3tt/o0C1ePhsmcldF0H/TqUdVVqKDZqfo=
Subject key identifier:   DC:C8:EA:8D:7A:89:CA:42:46:96:06:10:54:DD:E9:6E:54:AD:60:3D
Certificate issuer:       /CN=BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15
Certificate serial:       7B702D54D3121CD8079EFF3C82094D885782F7FF
Authority key identifier: BB:F0:2F:7F:9F:1C:A6:82:FB:06:D3:40:78:9D:F8:EF:85:CF:AB:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a623030303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Tue 10 May 2022 15:35:01 +0000
ROA not before:           Tue 10 May 2022 15:30:01 +0000
ROA not after:            Tue 09 May 2023 15:35:01 +0000
asID:                     265300
IP address blocks:        2804:2dbc:b000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:70:2d:54:d3:12:1c:d8:07:9e:ff:3c:82:09:4d:88:57:82:f7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15
        Validity
            Not Before: May 10 15:30:01 2022 GMT
            Not After : May  9 15:35:01 2023 GMT
        Subject: CN=DCC8EA8D7A89CA424696061054DDE96E54AD603D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:69:86:ee:05:6c:f5:f2:f5:59:15:15:29:20:
                    1c:54:08:48:71:f4:5a:5b:5c:3f:d8:24:a0:f4:6b:
                    d0:00:cc:2d:4b:bf:4a:65:49:72:76:d7:73:22:8b:
                    d4:cd:ad:26:48:c0:a6:6b:68:e9:a2:95:eb:80:43:
                    6a:64:20:a1:8c:65:88:85:79:a1:65:31:14:53:95:
                    17:80:34:12:1b:5c:dd:31:2f:2b:28:d9:5b:a0:98:
                    14:a6:7d:f2:47:a9:b9:d1:a1:02:64:e0:c5:67:9c:
                    da:61:d6:c6:e7:8c:32:27:1f:45:5f:3f:f8:08:47:
                    d8:48:71:82:65:b1:49:f9:54:53:a7:74:ee:1d:58:
                    60:9b:6f:62:5d:5c:72:8c:09:30:f9:1f:00:ec:85:
                    41:6a:da:36:f7:fd:a7:4a:a0:cf:b7:07:49:3f:ef:
                    44:95:c8:7d:6e:37:f9:28:a2:1b:54:98:47:49:14:
                    27:0f:bd:e2:1c:be:36:af:ba:67:7f:40:c0:25:a2:
                    36:02:c5:06:c5:ab:88:22:3e:99:13:da:3d:ed:ba:
                    1d:9c:93:ae:8a:75:0e:44:61:3b:8d:fb:5e:9d:cb:
                    c0:c5:60:75:3e:d5:43:fa:8a:c3:d5:b2:05:04:35:
                    7c:7c:67:0d:3f:b3:3c:1f:f7:59:b8:90:20:b0:bc:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C8:EA:8D:7A:89:CA:42:46:96:06:10:54:DD:E9:6E:54:AD:60:3D
            X509v3 Authority Key Identifier:
                keyid:BB:F0:2F:7F:9F:1C:A6:82:FB:06:D3:40:78:9D:F8:EF:85:CF:AB:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a623030303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:b000::/38

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:9c:0a:c6:f7:b1:5a:5b:98:25:f6:5d:da:7d:80:7f:49:
         72:31:d2:fb:1b:eb:56:96:c6:d2:ff:8f:ab:54:b1:92:dd:c1:
         cc:d9:73:a9:fa:e4:ff:05:aa:46:7a:b4:a4:cf:ea:2a:9f:0d:
         11:bf:cd:39:c6:e0:12:23:6f:b7:da:03:2f:a9:86:11:b7:5f:
         c2:4c:7f:ea:39:aa:e6:d9:2b:c7:85:49:4f:95:4b:2b:89:e7:
         8e:4c:e6:f5:74:17:92:16:53:c4:59:74:bf:a9:91:cb:6f:cc:
         13:f5:4f:e3:dd:2d:76:c8:12:ef:39:f3:b8:ea:b1:20:63:3e:
         0b:45:f1:cb:0c:8a:83:07:af:4c:3f:7f:a3:1c:7f:51:31:34:
         0f:c4:36:a2:cc:aa:61:98:71:18:92:ed:2c:25:38:eb:0e:56:
         48:21:5a:1f:3b:9a:7d:b9:f3:d9:ba:4f:8b:93:11:a0:00:91:
         58:23:28:d9:fe:98:ef:5c:fd:c5:52:1e:91:37:c6:15:42:50:
         d4:27:76:b3:73:d2:eb:a8:26:e8:da:b1:51:8c:74:39:4a:59:
         41:e5:da:57:24:40:68:7b:73:73:80:83:a1:0b:67:66:2a:a8:
         db:69:1f:80:73:f1:e6:80:15:d0:96:cb:07:60:83:e4:59:de:
         0c:66:2e:6e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUe3AtVNMSHNgHnv88gglNiFeC9/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJGMDJGN0Y5RjFDQTY4MkZCMDZEMzQwNzg5REY4RUY4
NUNGQUIxNTAeFw0yMjA1MTAxNTMwMDFaFw0yMzA1MDkxNTM1MDFaMDMxMTAvBgNV
BAMTKERDQzhFQThEN0E4OUNBNDI0Njk2MDYxMDU0RERFOTZFNTRBRDYwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxaYbuBWz18vVZFRUpIBxUCEhx
9FpbXD/YJKD0a9AAzC1Lv0plSXJ213Mii9TNrSZIwKZraOmileuAQ2pkIKGMZYiF
eaFlMRRTlReANBIbXN0xLyso2VugmBSmffJHqbnRoQJk4MVnnNph1sbnjDInH0Vf
P/gIR9hIcYJlsUn5VFOndO4dWGCbb2JdXHKMCTD5HwDshUFq2jb3/adKoM+3B0k/
70SVyH1uN/koohtUmEdJFCcPveIcvjavumd/QMAlojYCxQbFq4giPpkT2j3tuh2c
k66KdQ5EYTuN+16dy8DFYHU+1UP6isPVsgUENXx8Zw0/szwf91m4kCCwvFqtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3MjqjXqJykJGlgYQVN3pblStYD0wHwYDVR0j
BBgwFoAUu/Avf58cpoL7BtNAeJ3474XPqxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC9CQkYwMkY3RjlGMUNBNjgyRkIwNkQzNDA3ODlERjhFRjg1Q0ZBQjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCRjAyRjdGOUYxQ0E2ODJG
QjA2RDM0MDc4OURGOEVGODVDRkFCMTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzIzODMwMzQzYTMyNjQ2MjYzM2E2MjMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzNTMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigELbywMA0GCSqGSIb3DQEBCwUA
A4IBAQBBzJwKxvexWluYJfZd2n2Af0lyMdL7G+tWlsbS/4+rVLGS3cHM2XOp+uT/
BapGerSkz+oqnw0Rv805xuASI2+32gMvqYYRt1/CTH/qOarm2SvHhUlPlUsrieeO
TOb1dBeSFlPEWXS/qZHLb8wT9U/j3S12yBLvOfO46rEgYz4LRfHLDIqDB69MP3+j
HH9RMTQPxDaizKphmHEYku0sJTjrDlZIIVofO5p9ufPZuk+LkxGgAJFYIyjZ/pjv
XP3FUh6RN8YVQlDUJ3azc9LrqCbo2rFRjHQ5SllB5dpXJEBoe3NzgIOhC2dmKqjb
aR+Ac/HmgBXQlssHYIPkWd4MZi5u
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org