Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a65303a3a2f34332d3433203d3e20323636343333.roa
File:                     323830343a333762633a65303a3a2f34332d3433203d3e20323636343333.roa (raw, json)
Hash identifier:          UYhLf7EZhNPyLafMG8YYVZUyPNhNVK2cqsFwmY3GHmg=
Subject key identifier:   AC:95:8D:C5:0D:C1:78:7A:F9:68:FE:49:CF:F8:85:AB:82:38:F8:96
Certificate issuer:       /CN=78C362024931EABCD22430437714D086537F64FD
Certificate serial:       1BFBA7B7A9A89C9A0C73ABFEE37362B29A510260
Authority key identifier: 78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a65303a3a2f34332d3433203d3e20323636343333.roa
Signing time:             Thu 02 Nov 2023 21:00:48 +0000
ROA not before:           Thu 02 Nov 2023 20:55:48 +0000
ROA not after:            Thu 31 Oct 2024 21:00:48 +0000
asID:                     266433
IP address blocks:        2804:37bc:e0::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fb:a7:b7:a9:a8:9c:9a:0c:73:ab:fe:e3:73:62:b2:9a:51:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C362024931EABCD22430437714D086537F64FD
        Validity
            Not Before: Nov  2 20:55:48 2023 GMT
            Not After : Oct 31 21:00:48 2024 GMT
        Subject: CN=AC958DC50DC1787AF968FE49CFF885AB8238F896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:de:8a:99:4d:38:6a:32:ac:09:00:aa:e1:
                    33:09:b3:dd:33:66:d3:e5:49:5f:2f:8c:a6:72:1b:
                    e0:32:f6:8f:14:65:77:49:8c:30:36:f1:f5:a9:8f:
                    52:ff:60:3f:81:9a:39:4d:37:08:e1:e4:f7:4a:e7:
                    07:e5:a2:ad:d3:a0:34:5b:ff:83:83:7f:b0:d5:45:
                    4e:d0:a1:6f:f4:9d:9e:2b:ca:ef:54:6a:32:48:37:
                    8e:89:e6:60:f3:85:29:f0:f4:90:ce:c2:93:9c:a6:
                    38:a9:86:e4:74:6a:c2:93:5b:86:16:a1:ad:2b:d8:
                    fd:32:dd:3d:d6:3a:d2:52:ef:0f:b5:ed:3c:b4:f6:
                    7c:05:93:7a:ef:0d:34:6b:6d:2a:1e:56:f2:96:d3:
                    62:2d:bb:71:50:1d:0c:e0:4b:fb:5b:f3:5a:f5:fe:
                    dd:8f:01:b0:b5:ea:92:a9:7f:8b:2e:03:eb:6c:f7:
                    e4:f6:d4:ba:e3:08:08:f9:ac:be:f9:3c:13:31:b8:
                    df:54:83:e8:1c:e8:75:75:f3:d1:45:6c:ca:2e:0a:
                    7c:1e:dc:4b:b3:e6:97:53:f0:69:79:c7:54:e4:ac:
                    c9:ff:51:48:b8:92:f9:12:fb:2a:36:09:37:d6:8d:
                    e3:c6:a2:f1:9c:b4:26:67:da:40:c4:03:d3:03:27:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:95:8D:C5:0D:C1:78:7A:F9:68:FE:49:CF:F8:85:AB:82:38:F8:96
            X509v3 Authority Key Identifier:
                keyid:78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a65303a3a2f34332d3433203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37bc:e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:e9:8c:b3:9c:a6:0f:95:bf:39:e4:a4:56:8f:0c:77:22:
         dd:35:ee:92:66:d1:96:2c:f8:03:ef:a6:a4:c4:e0:cd:6e:9d:
         58:27:a0:74:24:f4:65:77:e1:91:01:df:07:c3:98:dc:8b:82:
         b2:c0:95:72:68:64:07:b5:83:54:9d:4d:9b:c5:02:92:d3:ff:
         33:c7:52:cf:45:02:c0:35:7b:76:6f:c9:dd:48:80:55:66:7f:
         58:c5:3a:22:30:82:f6:18:e4:f0:de:da:65:fa:14:57:9e:2c:
         92:38:e2:15:cd:ee:88:7a:bd:f1:46:cb:af:28:e5:14:42:0f:
         8d:2c:f1:fe:f6:c4:7b:c5:6a:56:a7:67:1a:54:79:e0:f0:ca:
         4a:5c:2c:50:aa:cc:f0:3c:84:05:08:a0:92:cd:8a:4e:16:ea:
         8d:4d:d1:02:18:91:75:f1:00:35:a3:a8:d5:7c:43:e9:06:56:
         96:e3:7b:56:0a:1e:98:98:77:f1:e8:ab:ab:7f:6a:62:66:61:
         15:6a:cf:9b:f3:fb:2e:ba:3a:94:37:9c:02:41:7b:a2:49:11:
         f2:f2:20:d9:9c:f2:b8:d0:b0:c2:6e:4e:b4:3e:b5:59:52:8c:
         24:eb:fc:55:ba:d2:b7:ec:f0:de:bd:b2:67:4a:36:1f:aa:26:
         49:be:6d:2b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUG/unt6monJoMc6v+43NisppRAmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhDMzYyMDI0OTMxRUFCQ0QyMjQzMDQzNzcxNEQwODY1
MzdGNjRGRDAeFw0yMzExMDIyMDU1NDhaFw0yNDEwMzEyMTAwNDhaMDMxMTAvBgNV
BAMTKEFDOTU4REM1MERDMTc4N0FGOTY4RkU0OUNGRjg4NUFCODIzOEY4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrN6KmU04ajKsCQCq4TMJs90z
ZtPlSV8vjKZyG+Ay9o8UZXdJjDA28fWpj1L/YD+BmjlNNwjh5PdK5wfloq3ToDRb
/4ODf7DVRU7QoW/0nZ4ryu9UajJIN46J5mDzhSnw9JDOwpOcpjiphuR0asKTW4YW
oa0r2P0y3T3WOtJS7w+17Ty09nwFk3rvDTRrbSoeVvKW02Itu3FQHQzgS/tb81r1
/t2PAbC16pKpf4suA+ts9+T21LrjCAj5rL75PBMxuN9Ug+gc6HV189FFbMouCnwe
3Euz5pdT8Gl5x1TkrMn/UUi4kvkS+yo2CTfWjePGovGctCZn2kDEA9MDJ1XpAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUrJWNxQ3BeHr5aP5Jz/iFq4I4+JYwHwYDVR0j
BBgwFoAUeMNiAkkx6rzSJDBDdxTQhlN/ZP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMC83OEMzNjIwMjQ5MzFFQUJDRDIyNDMwNDM3NzE0RDA4NjUzN0Y2NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc4QzM2MjAyNDkzMUVBQkNE
MjI0MzA0Mzc3MTREMDg2NTM3RjY0RkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4YjF0R05vcmpMNEpkQ0czM2czR29xV0dUbkJVN2JBN3lUVEJNeGVoOVVmLzAv
MzIzODMwMzQzYTMzMzc2MjYzM2E2NTMwM2EzYTJmMzQzMzJkMzQzMzIwM2QzZTIw
MzIzNjM2MzQzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKAQ3vADgMA0GCSqGSIb3DQEBCwUAA4IB
AQBJ8OmMs5ymD5W/OeSkVo8MdyLdNe6SZtGWLPgD76akxODNbp1YJ6B0JPRld+GR
Ad8Hw5jci4KywJVyaGQHtYNUnU2bxQKS0/8zx1LPRQLANXt2b8ndSIBVZn9YxToi
MIL2GOTw3tpl+hRXniySOOIVze6Ier3xRsuvKOUUQg+NLPH+9sR7xWpWp2caVHng
8MpKXCxQqszwPIQFCKCSzYpOFuqNTdECGJF18QA1o6jVfEPpBlaW43tWCh6YmHfx
6Kurf2piZmEVas+b8/suujqUN5wCQXuiSRHy8iDZnPK40LDCbk60PrVZUowk6/xV
utK37PDevbJnSjYfqiZJvm0r
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org