Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a343030303a3a2f33342d3334203d3e203631383332.roa
File:                     323830343a316130343a343030303a3a2f33342d3334203d3e203631383332.roa (raw, json)
Hash identifier:          6X0zWTCZ9gvYqwPp7tUox9tCUHaXOlFIeVhU4ZE1EIs=
Subject key identifier:   6C:1A:0F:75:F9:11:2D:15:02:7E:F4:91:E4:03:F4:DB:83:9A:A6:03
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       1407149D3B05C5F9385B539C3A4BAD2A7C4F51DE
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a343030303a3a2f33342d3334203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:48 +0000
ROA not before:           Thu 05 Oct 2023 17:46:48 +0000
ROA not after:            Thu 03 Oct 2024 17:51:48 +0000
asID:                     61832
IP address blocks:        2804:1a04:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:14:9d:3b:05:c5:f9:38:5b:53:9c:3a:4b:ad:2a:7c:4f:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:48 2023 GMT
            Not After : Oct  3 17:51:48 2024 GMT
        Subject: CN=6C1A0F75F9112D15027EF491E403F4DB839AA603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:e8:e6:8a:f5:d9:aa:96:d6:99:b2:c9:6d:
                    b6:58:04:66:e2:01:f4:8d:c0:41:77:45:53:e5:b5:
                    c7:e2:5f:23:81:56:48:03:ca:33:14:78:2a:da:ff:
                    32:60:46:9f:bf:42:00:f9:25:57:1a:ca:20:96:8a:
                    87:f8:50:76:cc:49:54:43:61:f6:de:7a:cf:2c:3f:
                    61:ea:9c:a9:bb:e0:fe:a9:35:0a:91:ca:46:2e:3f:
                    9f:de:3f:d5:41:b2:62:7c:3a:be:14:9a:1a:d3:61:
                    4f:10:75:b9:05:a0:48:1c:e7:78:11:b8:36:68:43:
                    82:c9:c4:3a:1f:a1:16:0e:5c:79:dc:1c:8d:a5:18:
                    41:82:de:ec:73:30:70:9f:f0:ca:ae:2d:7a:98:95:
                    d9:ec:89:09:63:c1:b5:7c:2e:d8:00:13:e2:ad:c5:
                    ff:0e:59:f8:bc:ed:2b:42:20:98:33:9f:d5:39:9f:
                    4a:6b:a5:ed:94:dd:d3:1c:ab:30:f2:78:79:04:37:
                    c7:a2:99:10:f3:ea:1f:38:ba:81:1d:a9:cb:96:fe:
                    e3:15:12:96:cb:ec:30:86:02:09:8d:cb:4e:1d:c2:
                    da:d2:56:8c:c2:4a:2f:d1:50:3a:ed:48:cb:e7:24:
                    a3:3b:e2:0e:3f:33:f8:36:68:6f:78:6d:fe:14:3f:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:0F:75:F9:11:2D:15:02:7E:F4:91:E4:03:F4:DB:83:9A:A6:03
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a343030303a3a2f33342d3334203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ab:6c:1d:d3:50:dd:7e:bc:c0:73:03:e9:f0:13:7c:cc:2f:b9:
         1d:e1:30:b2:67:d6:e9:10:07:50:7f:d9:87:a7:59:f9:63:e9:
         1a:62:46:19:4b:ff:8e:29:13:d0:36:ae:fe:7c:68:86:8e:e0:
         4b:8d:c1:70:6e:cc:24:0b:72:e3:44:e5:5b:99:37:37:8f:05:
         12:92:7d:71:cc:07:14:8f:ff:96:73:36:3a:60:8d:79:81:de:
         48:a9:7b:bc:79:37:12:04:53:52:f8:04:ac:a7:08:cb:fd:7e:
         be:cb:4b:0c:91:de:1b:e9:45:cb:f2:d9:b0:52:1d:26:8a:fd:
         37:2a:bb:b2:2c:f5:ec:80:29:a0:69:ac:23:0d:90:d3:01:e4:
         0a:5e:89:27:3b:54:46:24:05:7f:bb:e1:4e:11:12:25:41:19:
         5e:70:6d:da:d6:c0:e0:3d:60:c6:52:df:1c:11:1d:5e:12:5c:
         f9:4d:52:70:34:8b:1f:f9:43:65:95:10:8f:a6:db:36:f6:66:
         26:c4:ff:43:12:32:46:de:1b:c8:c4:1b:f3:5f:e3:de:18:9b:
         22:0a:94:8e:0b:2a:c1:dd:3e:84:f7:4c:3f:8b:97:4e:42:1c:
         e8:70:73:d3:2f:2b:53:57:f0:04:99:be:8f:00:92:ee:e7:ae:
         65:a8:ea:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFAcUnTsFxfk4W1OcOkutKnxPUd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBREE1N0Q4NjAxNjM0Mzk0RjREMDlFMkQwNTE3RTMw
MjlGRTk0MDAeFw0yMzEwMDUxNzQ2NDhaFw0yNDEwMDMxNzUxNDhaMDMxMTAvBgNV
BAMTKDZDMUEwRjc1RjkxMTJEMTUwMjdFRjQ5MUU0MDNGNERCODM5QUE2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtujmivXZqpbWmbLJbbZYBGbi
AfSNwEF3RVPltcfiXyOBVkgDyjMUeCra/zJgRp+/QgD5JVcayiCWiof4UHbMSVRD
Yfbees8sP2HqnKm74P6pNQqRykYuP5/eP9VBsmJ8Or4UmhrTYU8QdbkFoEgc53gR
uDZoQ4LJxDofoRYOXHncHI2lGEGC3uxzMHCf8MquLXqYldnsiQljwbV8LtgAE+Kt
xf8OWfi87StCIJgzn9U5n0prpe2U3dMcqzDyeHkEN8eimRDz6h84uoEdqcuW/uMV
EpbL7DCGAgmNy04dwtrSVozCSi/RUDrtSMvnJKM74g4/M/g2aG94bf4UP4S3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbBoPdfkRLRUCfvSR5AP024OapgMwHwYDVR0j
BBgwFoAU0q2lfYYBY0OU9NCeLQUX4wKf6UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm
dXEvMC9EMkFEQTU3RDg2MDE2MzQzOTRGNEQwOUUyRDA1MTdFMzAyOUZFOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQURBNTdEODYwMTYzNDM5
NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSV3h3cWo5S2tDVWpVclFhNjFjOFpvMURIbUhtcFRrVDluVWZqYWZRZnVxLzAv
MzIzODMwMzQzYTMxNjEzMDM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzODMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBoEQDANBgkqhkiG9w0BAQsFAAOC
AQEAq2wd01DdfrzAcwPp8BN8zC+5HeEwsmfW6RAHUH/Zh6dZ+WPpGmJGGUv/jikT
0Dau/nxoho7gS43BcG7MJAty40TlW5k3N48FEpJ9ccwHFI//lnM2OmCNeYHeSKl7
vHk3EgRTUvgErKcIy/1+vstLDJHeG+lFy/LZsFIdJor9Nyq7siz17IApoGmsIw2Q
0wHkCl6JJztURiQFf7vhThESJUEZXnBt2tbA4D1gxlLfHBEdXhJc+U1ScDSLH/lD
ZZUQj6bbNvZmJsT/QxIyRt4byMQb81/j3hibIgqUjgsqwd0+hPdMP4uXTkIc6HBz
0y8rU1fwBJm+jwCS7ueuZajqmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org