Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a383030303a3a2f33362d3336203d3e20323637333330.roa
File:                     323830343a346263633a383030303a3a2f33362d3336203d3e20323637333330.roa (raw, json)
Hash identifier:          E2UAHrdGRCHbcGqe5G34sCXumlEXnRhPa7gdFhiwfbI=
Subject key identifier:   07:0C:FC:BD:65:88:E0:AE:1F:65:CC:80:DA:76:CB:E5:35:68:AA:6A
Certificate issuer:       /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial:       60C3124BAFF6D4EDF79F1D6742EC01FBC4F45EC7
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a383030303a3a2f33362d3336203d3e20323637333330.roa
Signing time:             Wed 03 Apr 2024 21:51:56 +0000
ROA not before:           Wed 03 Apr 2024 21:46:56 +0000
ROA not after:            Wed 02 Apr 2025 21:51:56 +0000
asID:                     267330
IP address blocks:        2804:4bcc:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:12:4b:af:f6:d4:ed:f7:9f:1d:67:42:ec:01:fb:c4:f4:5e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
        Validity
            Not Before: Apr  3 21:46:56 2024 GMT
            Not After : Apr  2 21:51:56 2025 GMT
        Subject: CN=070CFCBD6588E0AE1F65CC80DA76CBE53568AA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:cc:c5:d8:a1:59:31:a5:51:bd:bc:bc:d5:
                    d5:89:e1:c9:74:79:6f:5d:00:8b:dc:d9:06:f8:37:
                    23:28:66:05:a6:bf:70:67:a3:9b:22:32:5b:90:b5:
                    4f:ac:ee:b2:8c:23:b3:d4:1d:fd:37:ee:fd:7f:2a:
                    d0:c4:f5:67:fb:69:be:ac:a3:3d:96:8d:2c:76:42:
                    32:2b:d4:8c:3e:ee:99:f5:a7:b9:a9:f5:90:e6:1e:
                    14:0b:cd:1f:64:50:98:4a:a5:e6:ad:ef:03:2f:a3:
                    48:54:58:19:53:73:4f:51:44:82:91:10:5c:76:9b:
                    60:aa:f9:5b:88:14:26:31:43:61:bc:7c:2d:eb:a9:
                    6f:63:77:38:a1:a6:27:d0:92:37:1e:76:ad:2e:90:
                    98:18:20:55:3e:cd:32:b7:13:df:37:36:b5:91:ee:
                    a8:7c:4c:a7:80:2a:bc:be:df:a7:27:5f:fd:1b:dc:
                    7d:f9:d0:35:ca:c0:97:e2:e3:26:17:3d:94:27:1d:
                    62:18:38:69:ef:ad:42:87:01:0b:cb:77:21:25:8a:
                    6c:94:7e:dd:e3:67:d3:ef:52:c6:fb:8f:cf:1b:d9:
                    6c:57:82:6e:b1:b8:3e:35:61:79:8e:b0:41:f0:26:
                    c9:68:1c:1c:5b:8c:85:18:90:68:14:43:bc:e4:e5:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:FC:BD:65:88:E0:AE:1F:65:CC:80:DA:76:CB:E5:35:68:AA:6A
            X509v3 Authority Key Identifier:
                keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a383030303a3a2f33362d3336203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:dc:72:82:e5:b7:7f:c6:05:2e:ff:54:60:ca:30:5a:e5:80:
         77:f6:21:02:5d:9c:02:91:d6:62:60:8f:ed:0e:09:72:c2:c8:
         91:05:be:d1:4c:d6:b7:4a:23:8e:d1:d5:14:c4:b3:d8:76:d8:
         26:90:93:e5:01:49:c1:c7:1c:61:c5:c2:aa:24:6b:5f:91:a0:
         ef:30:e0:fa:54:1c:9d:04:6b:02:e7:38:df:4e:ed:13:2d:90:
         e4:47:ef:b0:7a:44:91:9c:34:4c:5f:02:ce:3c:56:da:02:95:
         4b:f4:05:08:c9:da:35:8a:b0:b0:88:09:82:ca:22:15:91:30:
         be:1a:2b:3e:cd:33:cf:36:35:28:29:47:d1:17:f0:47:b8:60:
         40:b4:d3:f3:e6:ad:d1:7d:6b:e0:92:d6:1c:be:76:04:c2:69:
         6f:90:ad:79:dc:ab:4a:9f:30:69:52:5e:b2:b2:40:09:d1:b8:
         cb:fb:5b:71:e2:6e:db:38:96:80:a7:5d:85:3b:27:db:fe:9c:
         eb:f0:ee:cf:21:ca:41:ba:a2:a6:79:37:0b:1e:92:4d:11:21:
         06:17:6f:01:7a:d5:2c:8b:9b:45:2b:14:38:8c:95:f8:0b:37:
         41:c0:b4:cc:fb:4a:d2:ec:f8:a4:da:c5:69:a9:1d:9d:cc:db:
         5c:12:a3:c2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYMMSS6/21O33nx1nQuwB+8T0XscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE1MjJBNTIxN0UxODRDQTdCMDcxMDExRkNGOTZBMjAz
MzJBRjMzRjAeFw0yNDA0MDMyMTQ2NTZaFw0yNTA0MDIyMTUxNTZaMDMxMTAvBgNV
BAMTKDA3MENGQ0JENjU4OEUwQUUxRjY1Q0M4MERBNzZDQkU1MzU2OEFBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC758zF2KFZMaVRvby81dWJ4cl0
eW9dAIvc2Qb4NyMoZgWmv3Bno5siMluQtU+s7rKMI7PUHf037v1/KtDE9Wf7ab6s
oz2WjSx2QjIr1Iw+7pn1p7mp9ZDmHhQLzR9kUJhKpeat7wMvo0hUWBlTc09RRIKR
EFx2m2Cq+VuIFCYxQ2G8fC3rqW9jdzihpifQkjcedq0ukJgYIFU+zTK3E983NrWR
7qh8TKeAKry+36cnX/0b3H350DXKwJfi4yYXPZQnHWIYOGnvrUKHAQvLdyElimyU
ft3jZ9PvUsb7j88b2WxXgm6xuD41YXmOsEHwJsloHBxbjIUYkGgUQ7zk5S3dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBwz8vWWI4K4fZcyA2nbL5TVoqmowHwYDVR0j
BBgwFoAU0VIqUhfhhMp7BxAR/PlqIDMq8z8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFExc3ZMYW9vQXpvb0Rua2dwc2ozSjM4Rkx2dXhwa3JFdTZieXdzOFpD
TGgvMS9EMTUyMkE1MjE3RTE4NENBN0IwNzEwMTFGQ0Y5NkEyMDMzMkFGMzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNTIyQTUyMTdFMTg0Q0E3
QjA3MTAxMUZDRjk2QTIwMzMyQUYzM0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRMXN2TGFvb0F6b29EbmtncHNqM0ozOEZMdnV4cGtyRXU2Ynl3czhaQ0xoLzEv
MzIzODMwMzQzYTM0NjI2MzYzM2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgES8yAMA0GCSqGSIb3DQEBCwUA
A4IBAQCc3HKC5bd/xgUu/1RgyjBa5YB39iECXZwCkdZiYI/tDglywsiRBb7RTNa3
SiOO0dUUxLPYdtgmkJPlAUnBxxxhxcKqJGtfkaDvMOD6VBydBGsC5zjfTu0TLZDk
R++wekSRnDRMXwLOPFbaApVL9AUIydo1irCwiAmCyiIVkTC+Gis+zTPPNjUoKUfR
F/BHuGBAtNPz5q3RfWvgktYcvnYEwmlvkK153KtKnzBpUl6yskAJ0bjL+1tx4m7b
OJaAp12FOyfb/pzr8O7PIcpBuqKmeTcLHpJNESEGF28BetUsi5tFKxQ4jJX4CzdB
wLTM+0rS7Pik2sVpqR2dzNtcEqPC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org