Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3a2f33332d3333203d3e203532373732.roa
File:                     323830343a323539633a3a2f33332d3333203d3e203532373732.roa (raw, json)
Hash identifier:          iFgS5c7ut6Rkuov9DypzuNweyfPlJqji1rZW3S0QN0U=
Subject key identifier:   80:93:D2:93:D4:92:34:A8:DE:26:67:7B:06:8B:24:A6:FB:E2:6F:25
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       69CB53F993B80ABE9F916F59D614B6136895C061
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3a2f33332d3333203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        2804:259c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cb:53:f9:93:b8:0a:be:9f:91:6f:59:d6:14:b6:13:68:95:c0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=8093D293D49234A8DE26677B068B24A6FBE26F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:1f:4a:38:d4:13:cc:52:0c:38:1d:ff:15:
                    53:48:10:89:7e:dc:32:f5:0d:78:4d:69:9a:f1:0b:
                    11:e4:4c:8e:01:2a:09:18:9c:8d:6c:8f:04:fc:c0:
                    b9:67:88:bf:37:cd:10:14:62:60:8b:bf:90:f7:f3:
                    d3:a5:92:62:9c:d2:2a:46:ce:48:db:40:ec:a2:f0:
                    d3:fe:fb:09:1a:4e:11:56:8d:67:65:f3:b2:29:5e:
                    7b:4f:5a:15:aa:86:e1:a3:b0:d2:52:49:5c:cb:1b:
                    81:b1:57:5a:e7:d1:a8:12:28:a9:9d:b1:43:27:72:
                    80:7d:87:47:11:9b:89:f0:52:c6:93:97:30:87:d5:
                    54:f7:ff:5b:a1:eb:8d:14:04:fe:7c:e3:8d:c1:20:
                    f8:91:4f:31:1e:c6:dd:49:5a:2d:18:07:bd:70:4e:
                    62:0e:a0:b7:34:18:42:8a:49:b9:92:6e:ac:a5:54:
                    e6:79:fd:53:af:45:ac:20:68:d7:2a:75:39:3b:74:
                    7f:30:d1:19:0c:c6:96:98:b6:86:6e:ac:7d:67:58:
                    f6:86:c1:d6:dc:4d:e5:f7:ee:8c:aa:63:b6:32:cf:
                    98:bc:90:6e:bd:7e:99:c5:f6:90:93:4d:83:69:14:
                    b3:b0:2e:c3:67:f2:0a:dd:2c:eb:92:af:1f:f4:d3:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:93:D2:93:D4:92:34:A8:DE:26:67:7B:06:8B:24:A6:FB:E2:6F:25
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3a2f33332d3333203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:ed:a6:dc:33:d2:af:61:ab:9e:60:80:f5:66:fd:93:d4:
         02:e3:43:2b:3a:70:0f:75:67:55:ba:0e:79:61:37:10:51:04:
         f5:11:7f:d9:cb:8e:18:20:53:65:27:cf:77:62:b7:19:73:c9:
         ee:14:e5:63:c6:e9:a2:14:26:0d:d3:63:ae:ee:aa:10:ff:8f:
         c9:fb:c7:1f:c5:4d:16:1e:f2:9b:0e:42:f3:8a:2f:b7:43:6e:
         6b:b0:bf:c7:ac:80:29:28:bf:d6:89:11:06:9c:13:ad:33:0d:
         99:b9:1d:24:28:96:43:1d:2e:0e:80:ea:b1:d8:b6:49:c7:26:
         a7:e0:6f:10:86:36:33:e9:27:39:06:1f:30:db:8a:e8:c3:7e:
         d0:20:a5:af:92:b3:e3:73:f3:6d:33:5f:bf:82:47:f7:46:c3:
         55:fc:42:37:c3:09:fe:68:9a:ca:2d:ee:d7:a7:65:1c:2a:39:
         f3:0b:81:e1:4b:47:91:89:a3:72:15:67:10:ec:6c:ca:33:16:
         10:05:3c:5c:91:65:42:26:b4:8a:50:5c:93:d0:96:65:94:a7:
         96:92:ed:55:3e:3b:60:94:c1:9c:cf:43:2e:17:1b:6b:00:ba:
         f2:cd:a3:7b:56:df:87:53:7a:44:dd:17:87:ab:fe:f8:bf:d0:
         9e:35:e5:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUactT+ZO4Cr6fkW9Z1hS2E2iVwGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwRTM3Q0U1RjIxRUU4QUQ1RjI4NkE4MkE1QkY5RTQ1
QjMwQkUwRjAeFw0yNDA0MDMyMTQ5MTlaFw0yNTA0MDIyMTU0MTlaMDMxMTAvBgNV
BAMTKDgwOTNEMjkzRDQ5MjM0QThERTI2Njc3QjA2OEIyNEE2RkJFMjZGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGh9KONQTzFIMOB3/FVNIEIl+
3DL1DXhNaZrxCxHkTI4BKgkYnI1sjwT8wLlniL83zRAUYmCLv5D389OlkmKc0ipG
zkjbQOyi8NP++wkaThFWjWdl87IpXntPWhWqhuGjsNJSSVzLG4GxV1rn0agSKKmd
sUMncoB9h0cRm4nwUsaTlzCH1VT3/1uh640UBP58443BIPiRTzEext1JWi0YB71w
TmIOoLc0GEKKSbmSbqylVOZ5/VOvRawgaNcqdTk7dH8w0RkMxpaYtoZurH1nWPaG
wdbcTeX37oyqY7Yyz5i8kG69fpnF9pCTTYNpFLOwLsNn8grdLOuSrx/006RDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgJPSk9SSNKjeJmd7BoskpvvibyUwHwYDVR0j
BBgwFoAUKw43zl8h7orV8oaoKlv55Fswvg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMS8yQjBFMzdDRTVGMjFFRThBRDVGMjg2QTgyQTVCRjlFNDVCMzBCRTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMEUzN0NFNUYyMUVFOEFE
NUYyODZBODJBNUJGOUU0NUIzMEJFMEYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzEv
MzIzODMwMzQzYTMyMzUzOTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzUzMjM3
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEJZwAMA0GCSqGSIb3DQEBCwUAA4IBAQAi9e2m3DPS
r2GrnmCA9Wb9k9QC40MrOnAPdWdVug55YTcQUQT1EX/Zy44YIFNlJ893YrcZc8nu
FOVjxumiFCYN02Ou7qoQ/4/J+8cfxU0WHvKbDkLzii+3Q25rsL/HrIApKL/WiREG
nBOtMw2ZuR0kKJZDHS4OgOqx2LZJxyan4G8QhjYz6Sc5Bh8w24row37QIKWvkrPj
c/NtM1+/gkf3RsNV/EI3wwn+aJrKLe7Xp2UcKjnzC4HhS0eRiaNyFWcQ7GzKMxYQ
BTxckWVCJrSKUFyT0JZllKeWku1VPjtglMGcz0MuFxtrALryzaN7Vt+HU3pE3ReH
q/74v9CeNeUp
-----END CERTIFICATE-----
Generated at Fri Jul 12 01:59:44 2024 by rpki-client on console-ams.rpki-client.org