Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa
File:                     323830343a326462633a3a2f33322d3332203d3e20323635333030.roa (raw, json)
Hash identifier:          sB0fg9rYooTRrWcN7k+7JfeexjMsTIf1dGMi1WjxofE=
Subject key identifier:   1F:1B:6D:E4:5B:AE:44:5F:8C:F6:50:08:EE:14:A6:DE:AD:0B:F0:91
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       27015A9F3570257A90786CB62936DB5622B2606D
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:57:33 +0000
ROA not before:           Sat 27 Apr 2024 14:52:33 +0000
ROA not after:            Sat 26 Apr 2025 14:57:33 +0000
asID:                     265300
IP address blocks:        2804:2dbc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:01:5a:9f:35:70:25:7a:90:78:6c:b6:29:36:db:56:22:b2:60:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:52:33 2024 GMT
            Not After : Apr 26 14:57:33 2025 GMT
        Subject: CN=1F1B6DE45BAE445F8CF65008EE14A6DEAD0BF091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:c2:f5:27:88:cd:b6:3a:06:8f:b0:cd:0c:
                    6e:ff:d6:df:e3:48:2b:16:ab:a9:13:28:44:c3:86:
                    78:6f:a3:33:7d:52:0e:67:fc:f6:ef:48:59:ed:af:
                    00:04:6b:d4:81:e5:47:7d:f9:aa:92:9a:60:de:44:
                    6a:1f:c7:b2:c2:12:80:3d:e5:0e:9e:26:16:67:55:
                    a8:dd:92:ff:59:1c:1b:5e:eb:b7:5e:36:1a:e1:31:
                    82:2c:eb:a6:e2:29:33:a5:1e:b1:50:c4:98:04:24:
                    50:82:c6:6f:60:bb:32:e0:e8:40:2f:3c:cb:b1:db:
                    d0:3e:b9:80:69:8e:d8:16:d0:2a:29:aa:44:c5:ce:
                    9e:40:6a:d5:69:c6:eb:ed:b8:58:6e:ba:0a:3b:0b:
                    13:5d:86:38:41:f3:2c:22:17:66:d1:78:5b:3d:0b:
                    28:8b:66:1f:c7:f0:65:bd:d9:5d:6c:06:6b:57:7b:
                    9f:d9:ab:f3:48:ad:8c:25:81:3a:b9:2b:80:60:24:
                    69:6f:3b:1a:cd:d0:e4:cb:06:8a:59:fa:d8:ab:1a:
                    c2:f9:d4:3b:d4:a0:d9:c3:af:06:63:a5:4e:ba:c7:
                    d5:91:eb:6f:48:dc:88:30:97:eb:f7:6f:42:e6:e7:
                    56:f0:f4:05:7d:08:8b:6a:e2:4d:84:d0:1c:53:ad:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:6D:E4:5B:AE:44:5F:8C:F6:50:08:EE:14:A6:DE:AD:0B:F0:91
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:c6:87:86:5b:93:b5:be:0f:49:7b:58:86:81:93:0b:73:6f:
         19:93:e9:a7:87:9c:f3:f7:40:2c:c0:86:ea:34:65:ad:81:b7:
         a7:9b:48:5f:00:08:50:9b:5e:5d:6d:d9:86:4f:72:ab:e0:5e:
         5a:ad:58:8f:c3:74:8f:cc:62:81:5d:8d:d1:3f:96:84:5e:10:
         81:03:8f:58:cd:13:39:b1:8a:f9:13:2d:1e:bf:3f:9f:56:d9:
         0c:c5:93:0e:07:8a:c5:62:29:cf:c9:c6:a2:9a:c3:53:61:d9:
         59:d2:a8:b8:c7:58:a4:0b:b8:bc:00:8b:b6:68:50:f7:e0:27:
         0c:5d:af:1c:0d:a2:27:5c:b6:8f:ac:71:59:16:f2:50:5f:da:
         87:db:0f:a3:a9:63:21:d2:57:a2:09:b9:97:53:5e:22:28:0a:
         13:65:6d:99:7f:a9:63:25:c0:23:a8:f4:f5:ae:4b:bd:78:0e:
         a0:a2:f3:e0:97:35:b7:2b:e4:59:a7:63:b7:f9:c8:b6:99:66:
         1d:6f:33:17:98:e4:3c:25:d3:fa:59:aa:bd:23:61:fc:45:8c:
         17:c5:03:00:d9:18:82:13:be:f9:01:f5:36:c7:f7:23:fa:4a:
         8a:87:a5:f0:71:24:dd:59:b2:35:97:5d:86:9e:71:a6:12:ac:
         c8:38:51:a0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJwFanzVwJXqQeGy2KTbbViKyYG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUzN0MyNTZFQTBDRTMxQkYwNUE5MTg4NzMwMzI0NDE0
NUFDRThBRDAeFw0yNDA0MjcxNDUyMzNaFw0yNTA0MjYxNDU3MzNaMDMxMTAvBgNV
BAMTKDFGMUI2REU0NUJBRTQ0NUY4Q0Y2NTAwOEVFMTRBNkRFQUQwQkYwOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5G8L1J4jNtjoGj7DNDG7/1t/j
SCsWq6kTKETDhnhvozN9Ug5n/PbvSFntrwAEa9SB5Ud9+aqSmmDeRGofx7LCEoA9
5Q6eJhZnVajdkv9ZHBte67deNhrhMYIs66biKTOlHrFQxJgEJFCCxm9guzLg6EAv
PMux29A+uYBpjtgW0CopqkTFzp5AatVpxuvtuFhuugo7CxNdhjhB8ywiF2bReFs9
CyiLZh/H8GW92V1sBmtXe5/Zq/NIrYwlgTq5K4BgJGlvOxrN0OTLBopZ+tirGsL5
1DvUoNnDrwZjpU66x9WR629I3Igwl+v3b0Lm51bw9AV9CItq4k2E0BxTrfWPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHxtt5FuuRF+M9lAI7hSm3q0L8JEwHwYDVR0j
BBgwFoAUpTfCVuoM4xvwWpGIcwMkQUWs6K0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMS9BNTM3QzI1NkVBMENFMzFCRjA1QTkxODg3MzAzMjQ0MTQ1QUNFOEFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MzdDMjU2RUEwQ0UzMUJG
MDVBOTE4ODczMDMyNDQxNDVBQ0U4QUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzEv
MzIzODMwMzQzYTMyNjQ2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtvDANBgkqhkiG9w0BAQsFAAOCAQEAiMaHhluT
tb4PSXtYhoGTC3NvGZPpp4ec8/dALMCG6jRlrYG3p5tIXwAIUJteXW3Zhk9yq+Be
Wq1Yj8N0j8xigV2N0T+WhF4QgQOPWM0TObGK+RMtHr8/n1bZDMWTDgeKxWIpz8nG
oprDU2HZWdKouMdYpAu4vACLtmhQ9+AnDF2vHA2iJ1y2j6xxWRbyUF/ah9sPo6lj
IdJXogm5l1NeIigKE2VtmX+pYyXAI6j09a5LvXgOoKLz4Jc1tyvkWadjt/nItplm
HW8zF5jkPCXT+lmqvSNh/EWMF8UDANkYghO++QH1Nsf3I/pKioel8HEk3VmyNZdd
hp5xphKsyDhRoA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org