Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a3a2f33322d3334203d3e20323639323932.roa
File:                     323830343a363235633a3a2f33322d3334203d3e20323639323932.roa (raw, json)
Hash identifier:          qoZvMRVGWrcCTDUoh5xh5ebpLKoBEdTMnH+9jFp95Yg=
Subject key identifier:   BC:FF:B3:10:47:7A:05:59:BE:1B:6C:9E:36:65:E9:C2:D3:9C:07:F4
Certificate issuer:       /CN=8C3635117AA302D635E82CC0D2A2FB1E7A1E987D
Certificate serial:       3151ECEFC6CD441B9AAD6D5EC318606894FAEE20
Authority key identifier: 8C:36:35:11:7A:A3:02:D6:35:E8:2C:C0:D2:A2:FB:1E:7A:1E:98:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a3a2f33322d3334203d3e20323639323932.roa
Signing time:             Tue 14 Jun 2022 13:55:47 +0000
ROA not before:           Tue 14 Jun 2022 13:50:47 +0000
ROA not after:            Tue 13 Jun 2023 13:55:47 +0000
asID:                     269292
IP address blocks:        2804:625c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:51:ec:ef:c6:cd:44:1b:9a:ad:6d:5e:c3:18:60:68:94:fa:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3635117AA302D635E82CC0D2A2FB1E7A1E987D
        Validity
            Not Before: Jun 14 13:50:47 2022 GMT
            Not After : Jun 13 13:55:47 2023 GMT
        Subject: CN=BCFFB310477A0559BE1B6C9E3665E9C2D39C07F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:4c:6a:81:5c:98:42:b3:b7:7b:9e:e9:31:
                    ec:b0:57:fc:68:64:51:99:24:8f:02:7a:5c:fe:b1:
                    52:41:81:2b:3a:55:3c:06:0f:79:a8:26:19:f2:44:
                    33:45:5c:ee:b0:b0:dd:dd:74:0c:af:cd:72:83:a8:
                    72:12:55:ff:4b:79:10:e1:44:8b:3b:4e:68:74:43:
                    70:26:77:ef:2e:84:bb:75:6b:39:71:27:40:63:bc:
                    a0:2c:04:b0:42:8c:15:c1:7c:90:1c:13:ff:2a:4f:
                    c6:ff:bb:b3:d1:9c:d6:8a:e2:70:e4:d2:9d:c9:32:
                    e6:96:01:95:6d:d5:8f:d9:87:77:fc:95:b1:15:e3:
                    38:02:b4:9b:34:9a:f7:96:d1:45:b2:3d:e8:23:35:
                    1b:62:94:6e:a0:67:e2:4d:36:64:02:e4:6f:3f:9d:
                    f7:ed:9d:e8:6a:df:f6:5f:9b:b2:0d:08:7a:ad:5d:
                    fd:b5:2b:54:ab:89:5d:4f:6b:f5:d5:d6:26:0a:1a:
                    c3:76:bc:8e:5e:6f:3e:50:d1:ff:07:43:21:a4:99:
                    cf:fc:e3:09:45:88:77:af:8a:00:42:ab:3e:1f:d1:
                    77:41:36:88:2e:a5:6b:f5:c0:5a:8c:26:fb:d1:31:
                    a1:85:62:47:1f:60:68:69:96:d9:49:b1:66:a3:6a:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:B3:10:47:7A:05:59:BE:1B:6C:9E:36:65:E9:C2:D3:9C:07:F4
            X509v3 Authority Key Identifier:
                keyid:8C:36:35:11:7A:A3:02:D6:35:E8:2C:C0:D2:A2:FB:1E:7A:1E:98:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a3a2f33322d3334203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:625c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:7c:30:10:16:97:84:e3:5e:fa:d0:d0:52:14:06:38:a0:af:
         d8:7c:0a:85:60:fb:8b:18:d6:0b:62:3f:4b:15:ea:1e:a6:1e:
         85:c6:1e:d2:0f:bb:11:d0:4b:de:71:36:76:77:b3:77:99:81:
         bf:bd:58:67:b6:7b:da:c2:8a:90:ac:6b:37:01:43:2d:69:c1:
         81:a8:d8:e5:3d:44:32:25:49:a9:83:02:05:55:54:9d:0e:22:
         74:aa:7d:03:5e:e2:45:6e:54:3f:1c:d6:88:f5:01:c3:e9:ca:
         bd:c2:80:db:6c:05:74:d0:d1:ca:7b:6c:9d:35:8d:3e:27:61:
         92:d1:17:45:bf:80:02:ab:59:5e:53:71:8f:ca:de:78:a0:e8:
         78:ae:94:d3:2b:c5:d5:76:01:7b:05:4b:20:09:2e:5c:07:47:
         3f:c5:43:57:68:1c:3c:06:ae:a9:62:3f:c1:51:52:b4:59:84:
         9a:b8:ff:0c:18:dc:d7:af:95:ba:e5:8a:10:9c:8c:c0:a1:a3:
         eb:7e:f5:48:3d:bb:5f:96:df:fb:55:21:d4:36:a9:31:03:dc:
         ae:69:c6:70:55:43:bd:f0:7e:c9:16:64:ee:f4:3d:58:23:a9:
         0e:46:0b:00:1b:f4:86:c4:42:df:03:3c:d6:46:ef:4e:27:6b:
         b1:12:ae:95
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMVHs78bNRBuarW1ewxhgaJT67iAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMzNjM1MTE3QUEzMDJENjM1RTgyQ0MwRDJBMkZCMUU3
QTFFOTg3RDAeFw0yMjA2MTQxMzUwNDdaFw0yMzA2MTMxMzU1NDdaMDMxMTAvBgNV
BAMTKEJDRkZCMzEwNDc3QTA1NTlCRTFCNkM5RTM2NjVFOUMyRDM5QzA3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSExqgVyYQrO3e57pMeywV/xo
ZFGZJI8Celz+sVJBgSs6VTwGD3moJhnyRDNFXO6wsN3ddAyvzXKDqHISVf9LeRDh
RIs7Tmh0Q3Amd+8uhLt1azlxJ0BjvKAsBLBCjBXBfJAcE/8qT8b/u7PRnNaK4nDk
0p3JMuaWAZVt1Y/Zh3f8lbEV4zgCtJs0mveW0UWyPegjNRtilG6gZ+JNNmQC5G8/
nfftnehq3/Zfm7INCHqtXf21K1SriV1Pa/XV1iYKGsN2vI5ebz5Q0f8HQyGkmc/8
4wlFiHevigBCqz4f0XdBNogupWv1wFqMJvvRMaGFYkcfYGhpltlJsWajah79AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUvP+zEEd6BVm+G2yeNmXpwtOcB/QwHwYDVR0j
BBgwFoAUjDY1EXqjAtY16CzA0qL7HnoemH0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjaWVxenZNQzJQS1RBOVRZZVBqcVFuOFEyZEt4Zlg4UmdoS0tvcHFN
RlAvMC84QzM2MzUxMTdBQTMwMkQ2MzVFODJDQzBEMkEyRkIxRTdBMUU5ODdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDMzYzNTExN0FBMzAyRDYz
NUU4MkNDMEQyQTJGQjFFN0ExRTk4N0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2llcXp2TUMyUEtUQTlUWWVQanFRbjhRMmRLeGZYOFJnaEtLb3BxTUZQLzAv
MzIzODMwMzQzYTM2MzIzNTYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM5
MzIzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARiXDANBgkqhkiG9w0BAQsFAAOCAQEA0HwwEBaX
hONe+tDQUhQGOKCv2HwKhWD7ixjWC2I/SxXqHqYehcYe0g+7EdBL3nE2dnezd5mB
v71YZ7Z72sKKkKxrNwFDLWnBgajY5T1EMiVJqYMCBVVUnQ4idKp9A17iRW5UPxzW
iPUBw+nKvcKA22wFdNDRyntsnTWNPidhktEXRb+AAqtZXlNxj8reeKDoeK6U0yvF
1XYBewVLIAkuXAdHP8VDV2gcPAauqWI/wVFStFmEmrj/DBjc16+VuuWKEJyMwKGj
6371SD27X5bf+1Uh1DapMQPcrmnGcFVDvfB+yRZk7vQ9WCOpDkYLABv0hsRC3wM8
1kbvTidrsRKulQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org