Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/323830343a356332303a3a2f33322d3332203d3e20323638383930.roa
File:                     323830343a356332303a3a2f33322d3332203d3e20323638383930.roa (raw, json)
Hash identifier:          ixSr89RwPLBos+COq24srz76l8VseLUw/ceHZeu+HoM=
Subject key identifier:   0D:F9:0D:FC:23:4D:73:F9:B8:F4:82:6D:F6:46:BB:96:FB:2B:E1:0F
Certificate issuer:       /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial:       10806209A606363F69CB923532253AE596AAE68F
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/323830343a356332303a3a2f33322d3332203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:49:50 +0000
ROA not before:           Tue 09 Apr 2024 19:44:50 +0000
ROA not after:            Tue 08 Apr 2025 19:49:50 +0000
asID:                     268890
IP address blocks:        2804:5c20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:80:62:09:a6:06:36:3f:69:cb:92:35:32:25:3a:e5:96:aa:e6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
        Validity
            Not Before: Apr  9 19:44:50 2024 GMT
            Not After : Apr  8 19:49:50 2025 GMT
        Subject: CN=0DF90DFC234D73F9B8F4826DF646BB96FB2BE10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:7a:c5:5e:02:a7:16:70:8e:5f:59:1a:64:
                    62:cb:32:f5:2f:3a:c1:8e:4b:6c:c6:3c:4e:21:f3:
                    b0:2c:80:a5:a1:7d:e9:e0:4e:b3:fa:37:56:01:e9:
                    b3:80:cd:f3:a1:ca:52:6e:59:7a:f1:a5:b8:23:35:
                    14:07:16:44:14:8c:6f:d1:b2:bf:6d:e1:b9:f9:8d:
                    0a:26:15:e2:51:59:91:0f:98:34:96:cd:dd:84:d7:
                    6e:bc:10:1a:78:17:50:6f:c0:c8:e2:b0:38:60:03:
                    89:5e:22:75:8d:13:81:80:7f:13:f7:20:a5:08:95:
                    32:f1:3b:6f:fb:f7:be:1e:db:7a:68:1e:ce:d7:41:
                    e2:ab:08:ae:21:a2:7b:34:fb:fe:85:20:49:97:54:
                    8e:22:90:2b:3b:de:0e:dc:8a:36:24:24:ce:ff:1c:
                    27:83:e3:e3:bc:7b:51:f7:59:af:82:52:38:6d:b9:
                    bc:42:d0:e0:f1:89:f8:76:67:ea:21:03:35:e9:99:
                    a3:62:60:0e:14:cf:45:93:ee:48:30:8f:a4:0a:fc:
                    80:35:00:f7:86:d0:7d:c2:42:1c:b5:22:fe:fb:0f:
                    41:34:60:8d:48:f8:2e:ea:60:84:16:86:f0:a6:67:
                    9e:f0:42:b4:46:77:fd:f7:81:d0:15:f8:92:f5:9e:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F9:0D:FC:23:4D:73:F9:B8:F4:82:6D:F6:46:BB:96:FB:2B:E1:0F
            X509v3 Authority Key Identifier:
                keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/323830343a356332303a3a2f33322d3332203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:d4:40:25:2a:9d:2f:12:37:2e:34:71:b2:cd:fb:7b:bc:
         15:7f:11:b7:48:b2:64:22:bd:f3:1b:ad:03:ee:bf:2b:03:97:
         ce:ab:ab:ec:d2:99:d2:3d:6a:14:1d:1c:7c:bd:fc:10:6c:4a:
         7f:27:34:14:89:6e:c8:de:ad:07:b2:44:32:2a:73:b7:e2:73:
         72:62:45:50:6d:9c:aa:78:af:5b:54:fa:ea:db:59:2f:8f:93:
         44:54:10:cd:3d:7f:44:84:b3:f1:dc:25:d0:79:34:1d:c7:cd:
         13:a7:9f:48:bc:1b:88:fe:40:9b:46:b1:13:e0:f1:e5:cf:38:
         43:8f:c2:07:cf:e5:88:21:b5:b2:0d:75:52:63:92:c7:4e:ae:
         0d:53:3d:e9:1e:bd:35:1c:41:fc:0d:29:3d:08:9b:e1:6a:53:
         38:3e:cb:da:0a:c5:b0:05:a0:68:36:f3:87:00:89:0e:06:e8:
         c3:2c:57:84:c7:00:fa:50:d1:5f:99:dd:a0:ff:e0:09:fe:6a:
         94:51:fc:53:62:29:75:22:d9:bd:8e:36:13:62:d8:92:13:d3:
         38:4c:e8:64:68:f4:c1:2f:8c:e3:2b:64:e1:e3:dc:72:05:b1:
         e0:ed:c2:3b:01:3c:45:7d:32:fa:39:5d:50:6e:32:ff:0f:aa:
         fe:f9:cf:50
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEIBiCaYGNj9py5I1MiU65Zaq5o8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdEMDdCRkRCQTA0MEE2NDAwNkVGNDRERTZGNzE3NkI4
MUUxQUU1NjAeFw0yNDA0MDkxOTQ0NTBaFw0yNTA0MDgxOTQ5NTBaMDMxMTAvBgNV
BAMTKDBERjkwREZDMjM0RDczRjlCOEY0ODI2REY2NDZCQjk2RkIyQkUxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrXrFXgKnFnCOX1kaZGLLMvUv
OsGOS2zGPE4h87AsgKWhfengTrP6N1YB6bOAzfOhylJuWXrxpbgjNRQHFkQUjG/R
sr9t4bn5jQomFeJRWZEPmDSWzd2E1268EBp4F1BvwMjisDhgA4leInWNE4GAfxP3
IKUIlTLxO2/7974e23poHs7XQeKrCK4hons0+/6FIEmXVI4ikCs73g7cijYkJM7/
HCeD4+O8e1H3Wa+CUjhtubxC0ODxifh2Z+ohAzXpmaNiYA4Uz0WT7kgwj6QK/IA1
APeG0H3CQhy1Iv77D0E0YI1I+C7qYIQWhvCmZ57wQrRGd/33gdAV+JL1nm2RAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDfkN/CNNc/m49IJt9ka7lvsr4Q8wHwYDVR0j
BBgwFoAUZ9B7/boECmQAbvRN5vcXa4HhrlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMS82N0QwN0JGREJBMDQwQTY0MDA2RUY0NERFNkY3MTc2QjgxRTFBRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3RDA3QkZEQkEwNDBBNjQw
MDZFRjQ0REU2RjcxNzZCODFFMUFFNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NyZlZvSjVoNkwyQ3NBV3FhWXQ1MzhFVzhzeUpRVTdkUG9LVmVvbXBiNERHLzEv
MzIzODMwMzQzYTM1NjMzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARcIDANBgkqhkiG9w0BAQsFAAOCAQEASL3UQCUq
nS8SNy40cbLN+3u8FX8Rt0iyZCK98xutA+6/KwOXzqur7NKZ0j1qFB0cfL38EGxK
fyc0FIluyN6tB7JEMipzt+JzcmJFUG2cqnivW1T66ttZL4+TRFQQzT1/RISz8dwl
0Hk0HcfNE6efSLwbiP5Am0axE+Dx5c84Q4/CB8/liCG1sg11UmOSx06uDVM96R69
NRxB/A0pPQib4WpTOD7L2grFsAWgaDbzhwCJDgbowyxXhMcA+lDRX5ndoP/gCf5q
lFH8U2IpdSLZvY42E2LYkhPTOEzoZGj0wS+M4ytk4ePccgWx4O3COwE8RX0y+jld
UG4y/w+q/vnPUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org