Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a343030303a3a2f33342d3334203d3e20323731323934.roa
File:                     323830343a373934303a343030303a3a2f33342d3334203d3e20323731323934.roa (raw, json)
Hash identifier:          uyuyq8DlNDM6XmZ8T10csClDMwZ6gPNStX+d2nWZ8Mw=
Subject key identifier:   DC:D2:72:DB:15:5F:27:3A:21:85:9D:88:5B:CC:6B:DC:1B:EF:2B:3C
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       7B50C4BEE93093BCBE018EADCCD94CC1471F4885
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a343030303a3a2f33342d3334203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:56 +0000
ROA not before:           Wed 10 Jan 2024 12:40:56 +0000
ROA not after:            Wed 08 Jan 2025 12:45:56 +0000
asID:                     271294
IP address blocks:        2804:7940:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:50:c4:be:e9:30:93:bc:be:01:8e:ad:cc:d9:4c:c1:47:1f:48:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:56 2024 GMT
            Not After : Jan  8 12:45:56 2025 GMT
        Subject: CN=DCD272DB155F273A21859D885BCC6BDC1BEF2B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:b0:1b:11:e5:cb:c5:d6:0e:58:a8:12:99:
                    bb:e8:63:22:23:d1:93:86:09:56:4c:1d:00:ed:76:
                    d9:5f:22:32:15:ac:f7:53:ed:9f:97:cd:4b:b9:b4:
                    59:7a:f1:de:34:a8:8d:bc:3f:f9:75:b9:b0:dd:2a:
                    70:af:7d:a7:85:bf:43:cd:f8:93:83:7f:6a:32:ae:
                    8a:89:1d:a3:8e:1d:f4:8a:cd:a3:a3:f3:72:70:6d:
                    f9:cb:96:56:b1:8d:87:b0:cd:e6:9b:ff:f0:0c:02:
                    ca:7d:03:48:6c:3a:4e:38:de:47:f0:6d:c3:ff:83:
                    50:cc:5b:3b:b5:01:3a:06:ab:f9:2c:38:7e:5e:a7:
                    bb:cc:d8:bc:ac:f5:fe:e3:f6:96:11:68:b7:77:c7:
                    77:8a:85:9f:9f:a7:19:16:b7:e2:66:7b:29:8d:e6:
                    81:42:87:74:78:cd:31:f2:09:02:f9:6c:55:16:dc:
                    9b:21:ca:2d:89:d6:3d:85:84:0a:de:15:0a:8f:e6:
                    29:16:67:b7:99:7d:67:7f:d2:df:63:0f:e6:bc:bf:
                    b6:b6:19:97:75:45:5b:10:1b:e3:13:e6:f8:66:ae:
                    ad:a5:c6:87:6c:ca:a9:fc:c3:f2:4a:67:18:3e:07:
                    3a:73:86:02:48:8f:dd:fd:3a:25:3b:95:dd:f7:e6:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D2:72:DB:15:5F:27:3A:21:85:9D:88:5B:CC:6B:DC:1B:EF:2B:3C
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a343030303a3a2f33342d3334203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7940:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:3e:17:37:10:f5:61:60:8d:6e:63:3d:57:7b:dd:94:e6:
         f1:03:7c:72:c0:7b:5c:12:1c:56:ea:49:70:04:fc:f4:51:d2:
         cc:34:63:4a:4a:75:bd:ec:53:49:3d:24:74:7c:48:32:57:af:
         d8:e1:c0:d3:df:93:5c:89:ed:ca:d6:7f:39:72:56:07:58:a6:
         62:59:2c:4f:be:4b:86:49:75:2e:66:8c:5c:ee:31:27:88:01:
         be:fe:d0:e6:40:24:17:0c:b0:3a:58:50:1c:02:87:ae:14:89:
         24:53:5f:27:79:be:a2:0e:b1:8f:bc:81:d8:24:c9:0b:4b:f0:
         b4:9e:07:54:34:b3:d8:32:21:9f:c6:b1:86:91:c1:46:d9:d4:
         b7:53:f5:2c:74:e4:6f:79:be:1e:a4:60:e1:30:3e:b8:6f:ae:
         52:01:f2:3b:4e:0c:89:ba:b6:fc:c0:10:d4:de:9b:39:58:21:
         5d:e2:25:2c:d8:7c:a1:0b:ed:54:0d:2d:92:db:c0:20:c7:5c:
         9b:2a:13:ef:d6:7e:00:db:99:63:50:5b:55:f6:b7:5b:ab:32:
         62:62:ce:ad:a3:7e:08:fb:fc:0c:8e:7a:6d:4f:c6:97:86:64:
         41:3a:22:0f:b4:ff:b1:b4:20:01:4d:e0:ce:fb:3b:4b:cf:bd:
         3a:06:83:92
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUe1DEvukwk7y+AY6tzNlMwUcfSIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQzRTdCODM4MTIxQjQzNEUzNDA2ODBENjYzMTlCRTJB
MTg2MTMxMTAeFw0yNDAxMTAxMjQwNTZaFw0yNTAxMDgxMjQ1NTZaMDMxMTAvBgNV
BAMTKERDRDI3MkRCMTU1RjI3M0EyMTg1OUQ4ODVCQ0M2QkRDMUJFRjJCM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqirAbEeXLxdYOWKgSmbvoYyIj
0ZOGCVZMHQDtdtlfIjIVrPdT7Z+XzUu5tFl68d40qI28P/l1ubDdKnCvfaeFv0PN
+JODf2oyroqJHaOOHfSKzaOj83JwbfnLllaxjYewzeab//AMAsp9A0hsOk443kfw
bcP/g1DMWzu1AToGq/ksOH5ep7vM2Lys9f7j9pYRaLd3x3eKhZ+fpxkWt+JmeymN
5oFCh3R4zTHyCQL5bFUW3Jshyi2J1j2FhAreFQqP5ikWZ7eZfWd/0t9jD+a8v7a2
GZd1RVsQG+MT5vhmrq2lxodsyqn8w/JKZxg+BzpzhgJIj939OiU7ld335j0xAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3NJy2xVfJzohhZ2IW8xr3BvvKzwwHwYDVR0j
BBgwFoAU3T57g4EhtDTjQGgNZjGb4qGGExEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2JGU3RlRjRGRmZkVHViU3ZONWZFN3RNMUplVk5qODMxb0EydEEzYmt3
TmovMC9ERDNFN0I4MzgxMjFCNDM0RTM0MDY4MEQ2NjMxOUJFMkExODYxMzExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REM0U3QjgzODEyMUI0MzRF
MzQwNjgwRDY2MzE5QkUyQTE4NjEzMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NiRlN0ZUY0RkZmZFR1YlN2TjVmRTd0TTFKZVZOajgzMW9BMnRBM2Jrd05qLzAv
MzIzODMwMzQzYTM3MzkzNDMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMyMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEeUBAMA0GCSqGSIb3DQEBCwUA
A4IBAQBPiD4XNxD1YWCNbmM9V3vdlObxA3xywHtcEhxW6klwBPz0UdLMNGNKSnW9
7FNJPSR0fEgyV6/Y4cDT35Ncie3K1n85clYHWKZiWSxPvkuGSXUuZoxc7jEniAG+
/tDmQCQXDLA6WFAcAoeuFIkkU18neb6iDrGPvIHYJMkLS/C0ngdUNLPYMiGfxrGG
kcFG2dS3U/UsdORveb4epGDhMD64b65SAfI7TgyJurb8wBDU3ps5WCFd4iUs2Hyh
C+1UDS2S28Agx1ybKhPv1n4A25ljUFtV9rdbqzJiYs6to34I+/wMjnptT8aXhmRB
OiIPtP+xtCABTeDO+ztLz706BoOS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org