Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          knaOc5/qlRPSAyov1XT7z4HO4+DENdELnjlNpwEphS0=
Subject key identifier:   41:2D:55:DC:0E:FF:0A:A6:0D:2E:45:12:0F:FA:F1:04:4C:97:26:A7
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       01AC2BED793ABED86148746A747DBDB4F6356FC5
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        2804:259c:aa00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:2b:ed:79:3a:be:d8:61:48:74:6a:74:7d:bd:b4:f6:35:6f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=412D55DC0EFF0AA60D2E45120FFAF1044C9726A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:ac:5c:31:c0:c2:31:30:48:51:31:d1:88:
                    6a:bc:f3:2a:da:c3:9d:b2:ee:9d:1f:9c:c7:54:f8:
                    72:9a:90:d3:29:d9:d9:c9:39:cc:68:24:32:55:1f:
                    77:01:05:d4:e1:b7:24:56:a4:12:93:f5:f7:81:ef:
                    c1:91:73:92:3b:a2:73:f6:1a:88:39:2b:cf:7d:9b:
                    83:a9:3e:94:56:35:1a:6b:88:2f:70:28:89:48:3c:
                    8f:41:62:a3:2a:dc:b0:2c:85:f4:68:dd:62:06:80:
                    a0:b4:c9:60:5b:c2:8c:d5:90:e2:4b:ec:f7:68:6c:
                    ff:1a:75:95:8f:d5:19:a3:ef:96:22:3b:c1:55:f9:
                    92:3e:25:d3:03:32:d2:1a:74:79:99:1b:88:c6:a6:
                    ba:38:34:67:52:43:b5:dc:65:d9:7a:03:63:86:94:
                    91:71:8f:72:e9:f7:99:d8:b0:5c:5b:9f:ca:60:d4:
                    ed:6d:4c:1b:42:c2:75:01:28:f8:26:69:15:65:8d:
                    88:e0:4a:f9:36:d9:9d:35:56:79:0f:54:09:8b:ce:
                    a0:b4:56:93:b4:15:d6:2a:46:76:88:22:ec:c5:e0:
                    f1:55:86:c7:70:18:9c:c7:15:4e:9e:6a:2c:a8:74:
                    fc:08:c7:c9:da:6e:08:aa:69:14:af:72:39:5f:12:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:55:DC:0E:FF:0A:A6:0D:2E:45:12:0F:FA:F1:04:4C:97:26:A7
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:26:df:83:56:38:43:f0:8d:0e:49:56:87:6d:d6:31:55:93:
         3b:2e:0b:10:fd:ab:00:70:fa:24:8a:f6:e3:a3:84:d6:73:97:
         5d:5d:0e:6b:98:8f:3d:e3:ba:45:ad:b7:7a:66:0c:43:45:47:
         15:17:9c:fe:c3:97:ee:ec:a1:2e:6c:ed:b5:23:ce:f8:d0:8b:
         d5:96:1a:59:67:77:3a:ee:2e:a4:14:e6:3c:9f:55:bd:cf:8b:
         18:7e:bc:79:3a:7f:d1:97:7e:a3:ae:fe:08:3b:18:9b:2e:52:
         21:51:d9:f1:f7:de:1f:44:4e:da:fe:73:d8:a7:5b:dd:4e:19:
         0d:a1:7e:a4:7a:0e:ff:5c:22:72:62:a6:33:1b:fa:df:6b:a4:
         71:5e:8b:93:f5:49:42:5f:83:b7:5d:33:36:34:5a:d0:7f:45:
         d3:ac:95:0d:33:c5:49:5a:1c:9a:80:17:19:50:ac:42:19:5c:
         16:58:dc:23:50:cb:28:15:d0:6b:32:be:76:e0:71:38:1b:37:
         e4:85:b5:e1:50:86:b0:c2:5c:ce:08:a1:1b:0b:40:a2:f1:7b:
         31:f4:77:33:a9:ca:48:e5:0a:f9:c8:2a:c2:a4:34:bc:34:a0:
         c3:8d:3a:76:9d:40:14:aa:25:90:4e:fe:02:bf:3e:6f:28:69:
         29:9c:81:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAawr7Xk6vthhSHRqdH29tPY1b8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwRTM3Q0U1RjIxRUU4QUQ1RjI4NkE4MkE1QkY5RTQ1
QjMwQkUwRjAeFw0yNDA0MDMyMTQ5MTlaFw0yNTA0MDIyMTU0MTlaMDMxMTAvBgNV
BAMTKDQxMkQ1NURDMEVGRjBBQTYwRDJFNDUxMjBGRkFGMTA0NEM5NzI2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgqxcMcDCMTBIUTHRiGq88yra
w52y7p0fnMdU+HKakNMp2dnJOcxoJDJVH3cBBdThtyRWpBKT9feB78GRc5I7onP2
Gog5K899m4OpPpRWNRpriC9wKIlIPI9BYqMq3LAshfRo3WIGgKC0yWBbwozVkOJL
7PdobP8adZWP1Rmj75YiO8FV+ZI+JdMDMtIadHmZG4jGpro4NGdSQ7XcZdl6A2OG
lJFxj3Lp95nYsFxbn8pg1O1tTBtCwnUBKPgmaRVljYjgSvk22Z01VnkPVAmLzqC0
VpO0FdYqRnaIIuzF4PFVhsdwGJzHFU6eaiyodPwIx8nabgiqaRSvcjlfEndrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQS1V3A7/CqYNLkUSD/rxBEyXJqcwHwYDVR0j
BBgwFoAUKw43zl8h7orV8oaoKlv55Fswvg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMS8yQjBFMzdDRTVGMjFFRThBRDVGMjg2QTgyQTVCRjlFNDVCMzBCRTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMEUzN0NFNUYyMUVFOEFE
NUYyODZBODJBNUJGOUU0NUIzMEJFMEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzEv
MzIzODMwMzQzYTMyMzUzOTYzM2E2MTYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM1MzIzNzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCWcqjANBgkqhkiG9w0BAQsFAAOC
AQEAVibfg1Y4Q/CNDklWh23WMVWTOy4LEP2rAHD6JIr246OE1nOXXV0Oa5iPPeO6
Ra23emYMQ0VHFRec/sOX7uyhLmzttSPO+NCL1ZYaWWd3Ou4upBTmPJ9Vvc+LGH68
eTp/0Zd+o67+CDsYmy5SIVHZ8ffeH0RO2v5z2Kdb3U4ZDaF+pHoO/1wicmKmMxv6
32ukcV6Lk/VJQl+Dt10zNjRa0H9F06yVDTPFSVocmoAXGVCsQhlcFljcI1DLKBXQ
azK+duBxOBs35IW14VCGsMJczgihGwtAovF7MfR3M6nKSOUK+cgqwqQ0vDSgw406
dp1AFKolkE7+Ar8+byhpKZyB6g==
-----END CERTIFICATE-----
Generated at Fri Jul 12 01:59:45 2024 by rpki-client on console-ams.rpki-client.org