Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3332203d3e20323634333836.roa
File:                     323830343a316462303a3a2f33322d3332203d3e20323634333836.roa (raw, json)
Hash identifier:          QQnRfICxnklEbyk/oYohV0MYrbyBcRokRz2kKvpoj/o=
Subject key identifier:   6C:79:FA:60:58:62:09:25:C6:1A:8A:64:FF:99:B0:00:0C:0B:C9:F8
Certificate issuer:       /CN=7CAEA8972637476DBD3EB95073B9755AF312D410
Certificate serial:       3081CF19609386158DF741A759C8FA754CE7C153
Authority key identifier: 7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3332203d3e20323634333836.roa
Signing time:             Tue 12 Mar 2024 17:38:36 +0000
ROA not before:           Tue 12 Mar 2024 17:33:36 +0000
ROA not after:            Tue 11 Mar 2025 17:38:36 +0000
asID:                     264386
IP address blocks:        2804:1db0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:81:cf:19:60:93:86:15:8d:f7:41:a7:59:c8:fa:75:4c:e7:c1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAEA8972637476DBD3EB95073B9755AF312D410
        Validity
            Not Before: Mar 12 17:33:36 2024 GMT
            Not After : Mar 11 17:38:36 2025 GMT
        Subject: CN=6C79FA6058620925C61A8A64FF99B0000C0BC9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:d5:70:ff:2b:3c:55:eb:ca:81:75:ae:61:
                    6b:6a:b2:0b:0c:b2:1c:ec:7a:41:b2:d0:e7:ea:06:
                    e3:45:d3:f1:9f:3c:0c:18:45:f9:fe:83:6c:3f:ce:
                    32:b5:93:83:e2:40:0a:79:bc:12:d1:94:a2:51:e1:
                    2d:e8:03:c5:ab:32:eb:ef:20:13:bc:be:e2:f4:51:
                    71:7a:f5:9a:22:d0:51:18:f3:27:c4:f3:e9:6f:6f:
                    99:a0:6b:e3:f0:1f:fb:52:b9:60:55:5b:b7:d0:55:
                    c3:f2:52:e1:cc:cf:fa:0f:e2:f1:3d:1c:32:d7:0b:
                    56:37:5e:ee:29:9b:78:3c:c9:c1:50:f5:fa:29:5a:
                    e9:67:89:58:18:bf:00:0c:ee:7d:c5:24:09:e5:ed:
                    dd:73:6b:4b:11:be:bd:26:aa:e5:b8:df:bb:99:2c:
                    69:2a:c0:9c:19:ce:3a:31:b8:33:f8:42:d2:a4:3b:
                    db:b3:fe:41:a1:ed:3b:a8:43:78:36:8a:63:7e:bd:
                    18:8d:96:b4:59:95:b4:99:75:b2:b8:8b:2e:70:dd:
                    84:cd:c8:bf:41:dc:1c:d5:90:a1:87:5c:33:ad:28:
                    dd:93:be:27:b4:aa:a5:25:98:45:14:03:87:62:ab:
                    2b:ff:50:36:0e:e3:8b:16:c4:d0:71:8d:bc:cf:8b:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:79:FA:60:58:62:09:25:C6:1A:8A:64:FF:99:B0:00:0C:0B:C9:F8
            X509v3 Authority Key Identifier:
                keyid:7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/7CAEA8972637476DBD3EB95073B9755AF312D410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3332203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:71:a7:66:42:02:23:df:17:e9:8c:5a:f9:4b:5a:a3:00:76:
         ea:7a:d8:8f:71:55:7a:e7:51:16:84:63:7e:fa:fe:b6:bd:ff:
         79:ff:35:2a:69:a0:4c:e1:c4:1a:12:bc:e0:20:30:3b:c6:7a:
         a3:86:ae:c5:f0:4d:03:6a:af:b1:bc:fc:7a:90:bd:cd:bc:20:
         df:ce:83:86:82:38:dd:d6:61:d6:1b:fc:fc:3b:25:25:b4:5b:
         7a:de:17:29:48:d0:26:00:6a:0e:7c:4d:4b:3a:cb:c5:dd:ab:
         27:ee:01:53:6f:51:13:24:a0:46:d3:17:ca:5b:8c:55:e0:fe:
         a6:af:b6:d3:21:47:a4:a9:e3:6f:19:7f:23:09:d8:7b:5e:c4:
         6a:77:ad:08:50:ab:5b:5a:ee:52:88:e0:f5:d2:b3:3f:6f:6e:
         cf:27:52:3a:8a:19:aa:a0:4c:e7:17:1e:1c:34:d8:54:46:be:
         66:a8:3a:b7:a7:eb:85:a9:b9:72:bb:4c:ed:da:ed:16:d6:33:
         be:f2:3f:fb:9a:dd:aa:ed:fd:9d:9a:8f:28:24:5f:6a:13:ba:
         d8:23:73:7c:b3:5c:35:a3:d1:48:03:bf:d3:f4:9a:35:7f:17:
         4c:7a:d1:d0:ea:fa:58:c6:05:b0:f4:28:1b:ba:ba:40:bc:34:
         98:c0:33:9c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMIHPGWCThhWN90GnWcj6dUznwVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRUE4OTcyNjM3NDc2REJEM0VCOTUwNzNCOTc1NUFG
MzEyRDQxMDAeFw0yNDAzMTIxNzMzMzZaFw0yNTAzMTExNzM4MzZaMDMxMTAvBgNV
BAMTKDZDNzlGQTYwNTg2MjA5MjVDNjFBOEE2NEZGOTlCMDAwMEMwQkM5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfNVw/ys8VevKgXWuYWtqsgsM
shzsekGy0OfqBuNF0/GfPAwYRfn+g2w/zjK1k4PiQAp5vBLRlKJR4S3oA8WrMuvv
IBO8vuL0UXF69Zoi0FEY8yfE8+lvb5mga+PwH/tSuWBVW7fQVcPyUuHMz/oP4vE9
HDLXC1Y3Xu4pm3g8ycFQ9fopWulniVgYvwAM7n3FJAnl7d1za0sRvr0mquW437uZ
LGkqwJwZzjoxuDP4QtKkO9uz/kGh7TuoQ3g2imN+vRiNlrRZlbSZdbK4iy5w3YTN
yL9B3BzVkKGHXDOtKN2Tvie0qqUlmEUUA4diqyv/UDYO44sWxNBxjbzPi0s1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbHn6YFhiCSXGGopk/5mwAAwLyfgwHwYDVR0j
BBgwFoAUfK6olyY3R229PrlQc7l1WvMS1BAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMC83Q0FFQTg5NzI2Mzc0NzZEQkQzRUI5NTA3M0I5NzU1QUYzMTJENDEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDQUVBODk3MjYzNzQ3NkRC
RDNFQjk1MDczQjk3NTVBRjMxMkQ0MTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzAv
MzIzODMwMzQzYTMxNjQ2MjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQdsDANBgkqhkiG9w0BAQsFAAOCAQEAQnGnZkIC
I98X6Yxa+UtaowB26nrYj3FVeudRFoRjfvr+tr3/ef81KmmgTOHEGhK84CAwO8Z6
o4auxfBNA2qvsbz8epC9zbwg386DhoI43dZh1hv8/DslJbRbet4XKUjQJgBqDnxN
SzrLxd2rJ+4BU29REySgRtMXyluMVeD+pq+20yFHpKnjbxl/IwnYe17EanetCFCr
W1ruUojg9dKzP29uzydSOooZqqBM5xceHDTYVEa+Zqg6t6frham5crtM7drtFtYz
vvI/+5rdqu39nZqPKCRfahO62CNzfLNcNaPRSAO/0/SaNX8XTHrR0Or6WMYFsPQo
G7q6QLw0mMAznA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org