Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/323830343a356332303a3a2f33322d3336203d3e20323638383930.roa
File:                     323830343a356332303a3a2f33322d3336203d3e20323638383930.roa (raw, json)
Hash identifier:          cCo9+et9p/qn24OIh0FhGQSt47e0dWcofKtzJ480Qg8=
Subject key identifier:   41:55:E1:6D:79:F8:74:03:C7:63:2C:2A:B6:27:79:87:77:02:FB:1D
Certificate issuer:       /CN=7F3E001172A228AE324CBF37284992D179397314
Certificate serial:       16EE433E78DFB2D4FEC02C914B91CDF0DA436A08
Authority key identifier: 7F:3E:00:11:72:A2:28:AE:32:4C:BF:37:28:49:92:D1:79:39:73:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3E001172A228AE324CBF37284992D179397314.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/323830343a356332303a3a2f33322d3336203d3e20323638383930.roa
Signing time:             Thu 26 Oct 2023 17:22:53 +0000
ROA not before:           Thu 26 Oct 2023 17:17:53 +0000
ROA not after:            Thu 24 Oct 2024 17:22:53 +0000
asID:                     268890
IP address blocks:        2804:5c20::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ee:43:3e:78:df:b2:d4:fe:c0:2c:91:4b:91:cd:f0:da:43:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3E001172A228AE324CBF37284992D179397314
        Validity
            Not Before: Oct 26 17:17:53 2023 GMT
            Not After : Oct 24 17:22:53 2024 GMT
        Subject: CN=4155E16D79F87403C7632C2AB62779877702FB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:db:2f:55:78:fc:9f:bc:fc:15:ee:d8:7f:
                    4b:c0:ff:e6:f6:e1:37:2e:c6:f0:f2:af:2f:ac:0f:
                    a3:b8:f7:78:64:c3:63:72:a5:70:12:d8:ae:b8:c2:
                    1b:1e:56:c1:44:72:8d:7a:bc:9b:73:a3:23:d8:ae:
                    4d:a2:98:9e:d5:c9:d9:56:1b:ad:8b:15:dc:f1:b3:
                    48:cc:54:9d:0e:14:bc:25:32:23:8e:35:c3:46:fa:
                    ca:ab:bc:de:7e:0b:4d:cb:45:61:00:c9:62:e2:46:
                    01:89:5c:89:3e:bf:12:d5:b2:37:36:4a:ba:26:6a:
                    df:1d:9e:1f:b0:6b:f0:ff:24:d8:3f:58:c8:70:dd:
                    e5:a4:c6:96:2a:f2:8a:df:b0:17:8a:16:36:33:fb:
                    bf:a9:8c:58:ae:ab:14:83:92:f3:8e:7c:35:25:bf:
                    28:34:a0:f4:8d:09:07:66:15:8f:9f:73:05:c6:d9:
                    cf:54:91:7d:bf:9e:52:a5:9e:2e:a3:cd:c4:aa:a8:
                    4e:56:55:c0:23:8d:46:4e:47:ba:5f:73:df:d7:c1:
                    5d:c4:62:ef:b7:61:3b:0f:d3:73:af:7b:05:50:2e:
                    96:83:10:9a:fc:2c:95:b3:fb:9c:19:9d:dd:d5:52:
                    e5:b7:3a:8a:d6:20:2a:fa:57:96:ed:43:ff:18:68:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:E1:6D:79:F8:74:03:C7:63:2C:2A:B6:27:79:87:77:02:FB:1D
            X509v3 Authority Key Identifier:
                keyid:7F:3E:00:11:72:A2:28:AE:32:4C:BF:37:28:49:92:D1:79:39:73:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/7F3E001172A228AE324CBF37284992D179397314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3E001172A228AE324CBF37284992D179397314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/323830343a356332303a3a2f33322d3336203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:df:50:86:d4:03:af:89:36:2e:10:68:86:64:3f:6d:af:0e:
         ec:c2:c4:6b:31:d5:cd:9a:9a:97:55:8c:37:9a:af:41:f2:99:
         ca:31:38:9f:9c:73:8c:1e:0a:b3:e4:a6:9c:1f:fc:e5:95:31:
         41:87:ab:e1:c3:e4:24:03:1b:d5:fc:23:ac:e3:a8:0b:47:e7:
         79:11:72:4b:1e:71:33:ab:72:86:79:9a:a8:f0:47:9e:42:b0:
         19:8d:c4:5d:96:39:b2:42:b8:30:5c:bf:d0:2a:79:d8:60:62:
         cf:03:0e:17:fc:14:14:9a:9b:31:cb:81:f6:8e:53:13:7b:75:
         9e:5b:93:ce:f5:f3:0e:e2:ec:61:ff:0d:c6:41:84:5b:06:4d:
         23:29:09:73:ab:ff:56:3c:67:ba:9f:0b:41:e1:0d:99:81:bc:
         15:17:22:59:1b:5a:c3:bb:7d:d7:6a:ff:e3:8f:21:5f:f6:81:
         1f:5e:f4:20:54:53:c3:3f:57:4d:ba:02:69:70:f4:3f:de:88:
         64:f4:7f:30:25:f2:41:71:43:bb:86:07:82:39:2e:86:55:ca:
         99:de:15:cf:e0:ad:d1:2f:3d:ae:13:d9:19:b2:69:82:6c:08:
         9d:91:65:64:77:91:22:11:b2:d0:a1:53:91:11:e0:7b:5a:d9:
         bc:d3:7a:af
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFu5DPnjfstT+wCyRS5HN8NpDaggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzRTAwMTE3MkEyMjhBRTMyNENCRjM3Mjg0OTkyRDE3
OTM5NzMxNDAeFw0yMzEwMjYxNzE3NTNaFw0yNDEwMjQxNzIyNTNaMDMxMTAvBgNV
BAMTKDQxNTVFMTZENzlGODc0MDNDNzYzMkMyQUI2Mjc3OTg3NzcwMkZCMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0dsvVXj8n7z8Fe7Yf0vA/+b2
4TcuxvDyry+sD6O493hkw2NypXAS2K64whseVsFEco16vJtzoyPYrk2imJ7VydlW
G62LFdzxs0jMVJ0OFLwlMiOONcNG+sqrvN5+C03LRWEAyWLiRgGJXIk+vxLVsjc2
Sromat8dnh+wa/D/JNg/WMhw3eWkxpYq8orfsBeKFjYz+7+pjFiuqxSDkvOOfDUl
vyg0oPSNCQdmFY+fcwXG2c9UkX2/nlKlni6jzcSqqE5WVcAjjUZOR7pfc9/XwV3E
Yu+3YTsP03OvewVQLpaDEJr8LJWz+5wZnd3VUuW3OorWICr6V5btQ/8YaEEPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQVXhbXn4dAPHYywqtid5h3cC+x0wHwYDVR0j
BBgwFoAUfz4AEXKiKK4yTL83KEmS0Xk5cxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMC83RjNFMDAxMTcyQTIyOEFFMzI0Q0JGMzcyODQ5OTJEMTc5Mzk3MzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGM0UwMDExNzJBMjI4QUUz
MjRDQkYzNzI4NDk5MkQxNzkzOTczMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NyZlZvSjVoNkwyQ3NBV3FhWXQ1MzhFVzhzeUpRVTdkUG9LVmVvbXBiNERHLzAv
MzIzODMwMzQzYTM1NjMzMjMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARcIDANBgkqhkiG9w0BAQsFAAOCAQEAQ99QhtQD
r4k2LhBohmQ/ba8O7MLEazHVzZqal1WMN5qvQfKZyjE4n5xzjB4Ks+SmnB/85ZUx
QYer4cPkJAMb1fwjrOOoC0fneRFySx5xM6tyhnmaqPBHnkKwGY3EXZY5skK4MFy/
0Cp52GBizwMOF/wUFJqbMcuB9o5TE3t1nluTzvXzDuLsYf8NxkGEWwZNIykJc6v/
Vjxnup8LQeENmYG8FRciWRtaw7t912r/448hX/aBH170IFRTwz9XTboCaXD0P96I
ZPR/MCXyQXFDu4YHgjkuhlXKmd4Vz+Ct0S89rhPZGbJpgmwInZFlZHeRIhGy0KFT
kRHge1rZvNN6rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org