Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a633030303a3a2f33342d3334203d3e20323730363030.roa
File:                     323830343a366537633a633030303a3a2f33342d3334203d3e20323730363030.roa (raw, json)
Hash identifier:          OFmelKEDi9x9smQEtWc9IUzAotbwo0K42Knqd4FtqCM=
Subject key identifier:   51:87:31:EB:AA:AF:68:A0:B1:11:1A:84:A9:A6:8D:3E:30:3E:24:84
Certificate issuer:       /CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
Certificate serial:       1F1E3F486649172473D1C99FD24C581B349535AF
Authority key identifier: 91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a633030303a3a2f33342d3334203d3e20323730363030.roa
Signing time:             Fri 07 Jul 2023 12:29:21 +0000
ROA not before:           Fri 07 Jul 2023 12:24:21 +0000
ROA not after:            Fri 05 Jul 2024 12:29:21 +0000
asID:                     270600
IP address blocks:        2804:6e7c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1e:3f:48:66:49:17:24:73:d1:c9:9f:d2:4c:58:1b:34:95:35:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
        Validity
            Not Before: Jul  7 12:24:21 2023 GMT
            Not After : Jul  5 12:29:21 2024 GMT
        Subject: CN=518731EBAAAF68A0B1111A84A9A68D3E303E2484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:42:49:72:da:f0:90:01:7b:0a:10:67:f3:
                    5d:c5:7e:39:d9:60:21:8a:2b:23:09:83:12:ec:d1:
                    74:29:ef:de:3a:9e:c4:fd:e3:51:10:6a:51:55:93:
                    fd:e6:12:08:71:74:21:66:93:a0:03:01:27:22:b8:
                    75:d8:58:83:81:9c:ea:fb:0c:ed:8e:eb:4a:fb:d0:
                    14:b1:b9:c9:d4:9f:79:aa:75:be:29:98:23:65:d9:
                    55:5d:1e:39:36:0c:70:0f:4e:1d:f4:b2:1d:9a:f0:
                    a4:97:5b:0b:30:7d:23:2b:00:e2:93:a8:79:30:74:
                    4a:16:13:a6:58:ee:9e:de:49:a8:57:e5:a3:6c:9f:
                    bd:ee:e2:1e:68:5a:12:8f:1c:9f:c5:da:de:62:83:
                    5d:4c:74:a4:63:7c:b2:64:e7:12:be:03:5e:ae:67:
                    05:a9:c4:f4:f7:3c:30:a2:a7:67:e1:95:61:af:d8:
                    b0:4e:e8:e7:ab:44:20:72:4a:95:cc:ca:6d:04:db:
                    40:f9:24:6b:98:4b:50:fd:d8:03:82:82:04:7d:d6:
                    3a:04:62:7f:79:ec:62:2d:3c:a7:d8:6d:5f:fd:fa:
                    c5:df:2d:92:1f:1a:da:3a:87:6b:79:30:28:03:94:
                    12:14:e0:e3:40:36:34:f5:72:b2:35:f9:a7:83:3a:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:87:31:EB:AA:AF:68:A0:B1:11:1A:84:A9:A6:8D:3E:30:3E:24:84
            X509v3 Authority Key Identifier:
                keyid:91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a633030303a3a2f33342d3334203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:dd:4a:73:10:f4:0f:5e:32:46:86:33:68:4e:c1:34:d8:e9:
         54:7c:db:1a:76:2d:35:7d:55:f6:e9:5c:b9:a9:f1:4b:7a:33:
         b3:f0:22:56:d9:f0:a9:64:32:1b:a8:38:05:af:66:da:f6:a4:
         6f:04:99:7a:21:58:c4:ec:e8:46:1e:0e:23:57:1e:f0:2c:94:
         cd:03:86:67:c4:bb:ab:67:96:de:f2:65:38:a6:14:0b:60:13:
         19:ec:99:47:11:83:43:7e:83:0e:38:65:2a:2f:24:00:c9:59:
         74:1e:53:28:4b:98:34:56:01:74:e1:43:d0:4d:73:8d:41:90:
         42:53:4a:16:7a:63:30:aa:39:9d:ea:fd:63:cb:b2:8f:58:24:
         7e:22:95:e5:7d:6d:18:41:d0:d7:8b:c0:60:ba:e7:c4:36:4e:
         cf:87:7f:8c:05:71:91:4b:4e:8f:95:04:8a:3e:ed:58:22:76:
         25:2e:4c:70:26:8e:2c:7c:fc:3c:29:9b:35:6b:61:ea:70:a5:
         7a:46:78:a8:af:c9:8c:0e:1f:4d:30:a9:4f:27:80:ec:78:27:
         0b:39:0a:ca:d1:cb:0a:0a:03:ed:77:79:d0:14:29:20:61:5c:
         72:6d:b3:43:3e:91:96:1c:55:bd:d8:fb:f0:6b:f2:26:c3:cd:
         50:d3:3d:68
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHx4/SGZJFyRz0cmf0kxYGzSVNa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFCQTg5NEJDNEM5RkQ2NTU5OTc4NUNGM0VFNERFQ0Ix
RkY4MjIzODAeFw0yMzA3MDcxMjI0MjFaFw0yNDA3MDUxMjI5MjFaMDMxMTAvBgNV
BAMTKDUxODczMUVCQUFBRjY4QTBCMTExMUE4NEE5QTY4RDNFMzAzRTI0ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DUJJctrwkAF7ChBn813FfjnZ
YCGKKyMJgxLs0XQp7946nsT941EQalFVk/3mEghxdCFmk6ADASciuHXYWIOBnOr7
DO2O60r70BSxucnUn3mqdb4pmCNl2VVdHjk2DHAPTh30sh2a8KSXWwswfSMrAOKT
qHkwdEoWE6ZY7p7eSahX5aNsn73u4h5oWhKPHJ/F2t5ig11MdKRjfLJk5xK+A16u
ZwWpxPT3PDCip2fhlWGv2LBO6OerRCBySpXMym0E20D5JGuYS1D92AOCggR91joE
Yn957GItPKfYbV/9+sXfLZIfGto6h2t5MCgDlBIU4ONANjT1crI1+aeDOt2vAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUYcx66qvaKCxERqEqaaNPjA+JIQwHwYDVR0j
BBgwFoAUkbqJS8TJ/WVZl4XPPuTeyx/4IjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1Y0cEVvdUQ4cVRIREZwQW9kSE04QVZFbjU0UTFuWUFCWGZyazNzVUdF
czgvMC85MUJBODk0QkM0QzlGRDY1NTk5Nzg1Q0YzRUU0REVDQjFGRjgyMjM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxQkE4OTRCQzRDOUZENjU1
OTk3ODVDRjNFRTRERUNCMUZGODIyMzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NWNHBFb3VEOHFUSERGcEFvZEhNOEFWRW41NFExbllBQlhmcmszc1VHRXM4LzAv
MzIzODMwMzQzYTM2NjUzNzYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM2MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEbnzAMA0GCSqGSIb3DQEBCwUA
A4IBAQBY3UpzEPQPXjJGhjNoTsE02OlUfNsadi01fVX26Vy5qfFLejOz8CJW2fCp
ZDIbqDgFr2ba9qRvBJl6IVjE7OhGHg4jVx7wLJTNA4ZnxLurZ5be8mU4phQLYBMZ
7JlHEYNDfoMOOGUqLyQAyVl0HlMoS5g0VgF04UPQTXONQZBCU0oWemMwqjmd6v1j
y7KPWCR+IpXlfW0YQdDXi8BguufENk7Ph3+MBXGRS06PlQSKPu1YInYlLkxwJo4s
fPw8KZs1a2HqcKV6Rnior8mMDh9NMKlPJ4DseCcLOQrK0csKCgPtd3nQFCkgYVxy
bbNDPpGWHFW92Pvwa/Imw81Q0z1o
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org