Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          tN+qExnjfNwpgybQqS1hi7YZGXoBaK8YkQkrcoKvxc4=
Subject key identifier:   C0:C2:E1:CD:CE:BF:EE:1E:AA:81:17:82:5E:0B:49:E8:0D:6B:30:73
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       2D69481301081DA5C51BB2869B0521B18C7DDE19
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:57:53 +0000
ROA not before:           Sat 27 Apr 2024 14:52:53 +0000
ROA not after:            Sat 26 Apr 2025 14:57:53 +0000
asID:                     265300
IP address blocks:        2804:2dbc:e000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:69:48:13:01:08:1d:a5:c5:1b:b2:86:9b:05:21:b1:8c:7d:de:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:52:53 2024 GMT
            Not After : Apr 26 14:57:53 2025 GMT
        Subject: CN=C0C2E1CDCEBFEE1EAA8117825E0B49E80D6B3073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:4a:ab:98:a8:2f:96:5f:ef:ac:24:c5:cc:
                    d8:91:28:a6:e4:46:c2:b5:74:30:7e:81:a1:c1:d6:
                    d5:17:f3:1e:77:c3:23:27:43:ba:f9:e4:7d:56:b8:
                    f5:c4:0a:8e:73:d4:17:d5:2f:a1:6c:a6:b9:27:aa:
                    fb:c7:22:ec:6b:c4:d7:31:ee:8c:a7:57:14:a2:9b:
                    7d:8b:a5:a7:81:e1:21:86:03:87:8a:39:93:5c:ab:
                    9e:35:3a:40:af:52:cc:cf:8c:57:90:c7:3d:42:7c:
                    90:4d:22:5c:9c:82:6f:97:7a:67:9d:ff:c1:c7:d5:
                    ab:12:77:1b:1b:d9:01:76:4a:e1:f5:37:d1:75:41:
                    0e:f8:f1:94:41:3f:9c:a4:4c:02:ed:33:32:ec:69:
                    ec:b1:03:e6:a7:1c:e1:fd:1d:6a:45:9e:0a:57:9c:
                    07:a6:94:7a:0a:b0:75:fd:86:79:e2:8e:9d:4e:53:
                    94:7d:2f:37:77:3c:12:07:6c:a8:a7:dc:8e:cf:2a:
                    12:dc:45:49:39:01:7a:1f:5d:a4:bd:e1:ee:7c:a5:
                    66:4f:6e:c1:d1:8b:47:41:88:17:92:c8:1a:2c:2a:
                    69:fd:be:c4:c1:16:7b:43:d4:97:7f:34:2f:e1:c1:
                    15:99:d6:a0:26:ff:b0:09:48:70:3e:af:9c:4c:1c:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C2:E1:CD:CE:BF:EE:1E:AA:81:17:82:5E:0B:49:E8:0D:6B:30:73
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:e000::/38

    Signature Algorithm: sha256WithRSAEncryption
         8d:f4:49:1a:c0:6d:58:02:68:26:f8:d4:9d:f6:27:7b:07:a4:
         b4:74:b4:1f:54:1f:95:18:ab:22:a2:25:c2:22:2e:27:6d:a4:
         53:1b:20:22:25:6d:84:17:bf:d3:e4:9d:a0:ac:8e:de:cc:f8:
         f2:3f:5a:d3:1d:a4:26:37:5a:82:21:3a:33:68:5e:f9:3b:43:
         2e:97:92:02:c4:b2:a6:a6:a8:d3:05:95:1e:b1:c8:df:91:4d:
         97:e3:44:c9:2c:6f:f6:1e:23:a0:91:25:12:46:d4:da:c1:77:
         c8:bd:87:4e:4e:83:0a:02:b4:ee:46:4f:23:92:aa:91:9b:74:
         29:48:70:b5:a0:0e:03:9e:5e:ed:f1:42:cd:c0:cd:82:8b:8a:
         75:c9:00:86:47:9d:d2:10:0e:58:d6:3f:51:17:16:a1:af:2f:
         53:12:a7:22:41:06:da:c7:d1:3d:0a:8b:96:92:31:a1:75:6a:
         06:ee:3a:e2:1c:60:11:fa:77:5e:33:ab:0a:28:a6:01:6b:47:
         f7:99:26:9d:66:24:e3:6f:e8:e9:a5:b1:f5:a5:e4:5e:f8:11:
         be:fd:cc:88:8f:fe:3b:60:52:5a:8c:50:5f:8f:4a:11:41:15:
         c7:5c:69:0d:47:97:c2:d4:51:0c:a0:2c:2c:7a:5a:95:c4:02:
         d1:8d:59:da
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULWlIEwEIHaXFG7KGmwUhsYx93hkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUzN0MyNTZFQTBDRTMxQkYwNUE5MTg4NzMwMzI0NDE0
NUFDRThBRDAeFw0yNDA0MjcxNDUyNTNaFw0yNTA0MjYxNDU3NTNaMDMxMTAvBgNV
BAMTKEMwQzJFMUNEQ0VCRkVFMUVBQTgxMTc4MjVFMEI0OUU4MEQ2QjMwNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIEqrmKgvll/vrCTFzNiRKKbk
RsK1dDB+gaHB1tUX8x53wyMnQ7r55H1WuPXECo5z1BfVL6FsprknqvvHIuxrxNcx
7oynVxSim32LpaeB4SGGA4eKOZNcq541OkCvUszPjFeQxz1CfJBNIlycgm+Xemed
/8HH1asSdxsb2QF2SuH1N9F1QQ748ZRBP5ykTALtMzLsaeyxA+anHOH9HWpFngpX
nAemlHoKsHX9hnnijp1OU5R9Lzd3PBIHbKin3I7PKhLcRUk5AXofXaS94e58pWZP
bsHRi0dBiBeSyBosKmn9vsTBFntD1Jd/NC/hwRWZ1qAm/7AJSHA+r5xMHDeLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwMLhzc6/7h6qgReCXgtJ6A1rMHMwHwYDVR0j
BBgwFoAUpTfCVuoM4xvwWpGIcwMkQUWs6K0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMS9BNTM3QzI1NkVBMENFMzFCRjA1QTkxODg3MzAzMjQ0MTQ1QUNFOEFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MzdDMjU2RUEwQ0UzMUJG
MDVBOTE4ODczMDMyNDQxNDVBQ0U4QUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzEv
MzIzODMwMzQzYTMyNjQ2MjYzM2E2NTMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzNTMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigELbzgMA0GCSqGSIb3DQEBCwUA
A4IBAQCN9EkawG1YAmgm+NSd9id7B6S0dLQfVB+VGKsioiXCIi4nbaRTGyAiJW2E
F7/T5J2grI7ezPjyP1rTHaQmN1qCITozaF75O0Mul5ICxLKmpqjTBZUescjfkU2X
40TJLG/2HiOgkSUSRtTawXfIvYdOToMKArTuRk8jkqqRm3QpSHC1oA4Dnl7t8ULN
wM2Ci4p1yQCGR53SEA5Y1j9RFxahry9TEqciQQbax9E9CouWkjGhdWoG7jriHGAR
+ndeM6sKKKYBa0f3mSadZiTjb+jppbH1peRe+BG+/cyIj/47YFJajFBfj0oRQRXH
XGkNR5fC1FEMoCwselqVxALRjVna
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org