Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a383030303a3a2f33342d3334203d3e20323637333330.roa
File:                     323830343a346263633a383030303a3a2f33342d3334203d3e20323637333330.roa (raw, json)
Hash identifier:          oRltQAhTziQBaKVAatQkuque/JiBwtFMW02FglCEn1Q=
Subject key identifier:   48:90:B2:9D:DF:90:3C:2F:F3:4E:2B:9D:0C:33:B2:73:4E:E8:AA:83
Certificate issuer:       /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial:       3C90052682912B298B02BE57D6C26FF019A07196
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a383030303a3a2f33342d3334203d3e20323637333330.roa
Signing time:             Wed 03 Apr 2024 21:51:57 +0000
ROA not before:           Wed 03 Apr 2024 21:46:57 +0000
ROA not after:            Wed 02 Apr 2025 21:51:57 +0000
asID:                     267330
IP address blocks:        2804:4bcc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:90:05:26:82:91:2b:29:8b:02:be:57:d6:c2:6f:f0:19:a0:71:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
        Validity
            Not Before: Apr  3 21:46:57 2024 GMT
            Not After : Apr  2 21:51:57 2025 GMT
        Subject: CN=4890B29DDF903C2FF34E2B9D0C33B2734EE8AA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a8:8a:e6:6b:5d:82:21:f6:36:67:a4:21:9e:
                    97:1b:08:76:6c:86:02:e8:d5:90:ce:ac:bd:cd:b2:
                    a3:89:2d:71:48:5e:24:cd:b3:01:4d:61:c5:6d:9a:
                    82:54:ff:d6:8a:31:83:f7:b0:a7:f3:f0:6f:a3:f9:
                    ca:84:41:dd:7c:f6:4f:34:5b:04:e1:ec:57:68:ba:
                    e7:f5:2c:30:e8:50:07:8d:da:4a:00:94:47:ea:35:
                    9e:a2:34:df:95:36:7e:aa:77:e7:0d:85:af:e6:cd:
                    8e:bd:38:76:fa:df:ff:f4:0c:69:00:35:fc:27:63:
                    47:0e:46:9d:4a:1f:7d:3d:f8:94:23:61:69:80:f7:
                    55:1b:65:9a:89:1e:0b:59:89:14:b5:8e:63:b4:51:
                    3c:a4:49:eb:f4:4f:f0:16:82:b8:61:9c:3e:a0:11:
                    79:5e:4e:5e:64:ea:f5:20:35:ec:b4:b1:2e:82:ec:
                    da:73:0b:a3:c9:d8:1c:8c:68:a5:cf:4d:25:ae:aa:
                    6d:36:c3:ce:73:a3:cc:06:88:2f:54:2a:a3:01:50:
                    72:47:51:2d:a1:16:2b:eb:5b:6a:73:85:d6:fd:84:
                    3a:5f:57:62:86:bf:35:af:d2:68:0f:77:3a:3d:7e:
                    60:9b:8a:d2:5b:6e:9d:b5:00:96:68:99:a9:17:67:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:B2:9D:DF:90:3C:2F:F3:4E:2B:9D:0C:33:B2:73:4E:E8:AA:83
            X509v3 Authority Key Identifier:
                keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a383030303a3a2f33342d3334203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:73:be:f1:1c:f4:8e:5f:04:b7:0d:f1:93:58:3d:a5:7d:
         9b:5c:95:c5:d9:e9:4c:0a:4a:bc:9d:63:ea:63:09:79:db:5f:
         99:76:c5:33:98:4c:a0:81:39:3a:52:ac:64:d6:c5:9f:6a:b4:
         c5:69:b8:6a:5c:55:3a:a5:b3:b8:08:2a:2c:0a:d2:0d:54:f9:
         88:0a:4a:f5:c2:4e:1a:9e:af:cf:31:12:8a:6a:0b:f2:c1:b0:
         bf:84:c8:6e:8e:c9:22:c2:5b:79:65:2b:d4:7c:a5:27:a6:63:
         73:d1:d3:bd:d0:16:93:3a:fb:21:d0:b8:d1:1c:b0:70:52:6f:
         5c:85:a8:0b:91:94:69:bb:3d:54:e8:29:a3:af:7f:92:28:89:
         64:b3:99:4d:b7:fb:3f:0c:c5:e3:60:e1:dc:aa:7b:b7:fa:ae:
         37:fd:06:fe:8b:16:2e:64:a8:4f:5e:db:99:65:09:86:cb:5c:
         f3:59:fc:12:1e:1c:6f:e0:09:ef:da:00:93:8c:b6:c5:05:1c:
         eb:33:2a:b8:77:ab:f1:b8:5a:93:f8:69:25:1b:c9:fd:df:e4:
         b7:eb:e7:54:ae:cc:e2:f7:fa:2d:8c:03:f8:9b:06:8a:55:86:
         ac:99:1a:3b:5c:09:05:e3:f5:a5:48:de:0b:a7:75:0e:5f:b8:
         c5:ea:04:03
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPJAFJoKRKymLAr5X1sJv8BmgcZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE1MjJBNTIxN0UxODRDQTdCMDcxMDExRkNGOTZBMjAz
MzJBRjMzRjAeFw0yNDA0MDMyMTQ2NTdaFw0yNTA0MDIyMTUxNTdaMDMxMTAvBgNV
BAMTKDQ4OTBCMjlEREY5MDNDMkZGMzRFMkI5RDBDMzNCMjczNEVFOEFBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1qIrma12CIfY2Z6QhnpcbCHZs
hgLo1ZDOrL3NsqOJLXFIXiTNswFNYcVtmoJU/9aKMYP3sKfz8G+j+cqEQd189k80
WwTh7Fdouuf1LDDoUAeN2koAlEfqNZ6iNN+VNn6qd+cNha/mzY69OHb63//0DGkA
NfwnY0cORp1KH309+JQjYWmA91UbZZqJHgtZiRS1jmO0UTykSev0T/AWgrhhnD6g
EXleTl5k6vUgNey0sS6C7NpzC6PJ2ByMaKXPTSWuqm02w85zo8wGiC9UKqMBUHJH
US2hFivrW2pzhdb9hDpfV2KGvzWv0mgPdzo9fmCbitJbbp21AJZomakXZzAHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSJCynd+QPC/zTiudDDOyc07oqoMwHwYDVR0j
BBgwFoAU0VIqUhfhhMp7BxAR/PlqIDMq8z8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFExc3ZMYW9vQXpvb0Rua2dwc2ozSjM4Rkx2dXhwa3JFdTZieXdzOFpD
TGgvMS9EMTUyMkE1MjE3RTE4NENBN0IwNzEwMTFGQ0Y5NkEyMDMzMkFGMzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNTIyQTUyMTdFMTg0Q0E3
QjA3MTAxMUZDRjk2QTIwMzMyQUYzM0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRMXN2TGFvb0F6b29EbmtncHNqM0ozOEZMdnV4cGtyRXU2Ynl3czhaQ0xoLzEv
MzIzODMwMzQzYTM0NjI2MzYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigES8yAMA0GCSqGSIb3DQEBCwUA
A4IBAQANknO+8Rz0jl8Etw3xk1g9pX2bXJXF2elMCkq8nWPqYwl521+ZdsUzmEyg
gTk6Uqxk1sWfarTFabhqXFU6pbO4CCosCtINVPmICkr1wk4anq/PMRKKagvywbC/
hMhujskiwlt5ZSvUfKUnpmNz0dO90BaTOvsh0LjRHLBwUm9chagLkZRpuz1U6Cmj
r3+SKIlks5lNt/s/DMXjYOHcqnu3+q43/Qb+ixYuZKhPXtuZZQmGy1zzWfwSHhxv
4Anv2gCTjLbFBRzrMyq4d6vxuFqT+GklG8n93+S36+dUrszi9/otjAP4mwaKVYas
mRo7XAkF4/WlSN4Lp3UOX7jF6gQD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org