Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/323830343a343332633a3a2f33322d313238203d3e20323637353533.roa
File:                     323830343a343332633a3a2f33322d313238203d3e20323637353533.roa (raw, json)
Hash identifier:          m4E9kZfc3ArNr22P2wr/Y3oHltblyQWIE2tZ27zIsbk=
Subject key identifier:   6B:15:41:89:9A:83:AC:79:46:69:55:4E:70:6A:6C:25:2B:69:95:EF
Certificate issuer:       /CN=1CCCFB90143ACEF66D6620662A48C6120E79EF98
Certificate serial:       4EE85F2A866C897A6D3F8A0E183C2760B723352B
Authority key identifier: 1C:CC:FB:90:14:3A:CE:F6:6D:66:20:66:2A:48:C6:12:0E:79:EF:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/323830343a343332633a3a2f33322d313238203d3e20323637353533.roa
Signing time:             Wed 03 Apr 2024 19:55:50 +0000
ROA not before:           Wed 03 Apr 2024 19:50:50 +0000
ROA not after:            Wed 02 Apr 2025 19:55:50 +0000
asID:                     267553
IP address blocks:        2804:432c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e8:5f:2a:86:6c:89:7a:6d:3f:8a:0e:18:3c:27:60:b7:23:35:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCCFB90143ACEF66D6620662A48C6120E79EF98
        Validity
            Not Before: Apr  3 19:50:50 2024 GMT
            Not After : Apr  2 19:55:50 2025 GMT
        Subject: CN=6B1541899A83AC794669554E706A6C252B6995EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:47:70:b4:bd:b2:78:ad:17:24:31:85:96:
                    24:96:30:68:46:b1:30:5a:cd:b1:50:97:18:10:0b:
                    52:3c:a4:c6:ad:ed:15:f0:2b:10:00:ca:4b:03:e8:
                    93:10:a4:aa:ae:4a:2e:0d:87:62:30:30:88:18:40:
                    62:4e:29:fc:77:b5:f9:13:02:a3:1b:c5:64:61:84:
                    57:59:b0:f5:81:a0:54:6a:9d:dd:97:a7:39:2e:ea:
                    10:97:29:60:d6:a9:ac:ca:3f:c6:3a:65:32:7f:dc:
                    ff:4b:4c:71:6c:20:99:bd:4b:7d:1f:4d:1c:6f:81:
                    73:ab:fd:c0:5c:02:9e:45:58:c4:e9:21:41:06:7f:
                    2c:a3:db:ce:eb:9d:72:5e:97:fa:d3:b9:76:42:b7:
                    ab:86:8c:0f:cb:b3:3f:dc:ed:6e:28:32:0d:28:53:
                    ba:26:57:4e:6d:97:a4:5e:24:d7:c8:d4:a1:6b:dd:
                    87:45:b1:49:03:e0:28:c4:c5:07:24:23:49:a2:fe:
                    61:76:ba:69:a4:b3:08:eb:e7:65:e1:be:22:64:c1:
                    8d:cd:8d:06:11:37:64:50:6b:5e:73:f9:60:c5:f7:
                    17:e8:e1:ef:9b:3a:2f:54:45:07:63:4e:12:95:f2:
                    09:91:75:2a:02:fd:06:a3:ca:5e:f3:4f:80:94:2b:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:15:41:89:9A:83:AC:79:46:69:55:4E:70:6A:6C:25:2B:69:95:EF
            X509v3 Authority Key Identifier:
                keyid:1C:CC:FB:90:14:3A:CE:F6:6D:66:20:66:2A:48:C6:12:0E:79:EF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/323830343a343332633a3a2f33322d313238203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:432c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:e1:5d:2b:c9:0b:34:1b:f1:67:67:7c:2e:02:16:9f:6e:81:
         46:e9:be:54:12:13:9d:18:ee:d2:ab:e4:17:ed:0f:26:17:65:
         f5:39:31:76:8d:6e:a8:7d:ad:69:2c:12:ad:21:89:c4:31:b8:
         a1:9a:8d:d0:bd:02:f3:f7:c5:0d:1c:9b:60:75:c2:3c:ea:27:
         b9:f6:8b:02:5f:00:03:2f:e2:54:78:32:8f:d8:33:aa:5c:39:
         cc:e0:88:b6:a4:b9:eb:a7:fd:5c:ac:84:c0:f4:80:27:1b:1d:
         cc:6f:59:8c:b0:45:0e:2c:b6:bf:86:91:1f:53:1d:7b:b8:8b:
         cd:35:9f:7d:48:05:1c:2e:d0:9e:d9:b8:f0:f5:45:21:8c:b4:
         5b:3d:29:ec:91:a6:1d:db:77:c7:15:52:d5:20:06:6d:20:00:
         0f:da:55:90:c1:46:79:77:0d:dc:f3:dc:7d:23:2c:f1:25:5f:
         1a:ca:58:d3:dc:cc:3a:47:67:74:b5:ad:37:4a:68:b7:f6:79:
         93:78:97:ef:df:d9:9c:25:ec:14:ef:f5:10:8c:b8:4a:70:91:
         5f:a4:a7:41:35:b6:39:da:16:cd:42:6f:59:73:57:27:f3:63:
         58:7d:e6:1a:ba:8d:c0:db:56:8f:79:39:ff:c5:df:4f:de:cc:
         ee:bf:b6:ba
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUTuhfKoZsiXptP4oOGDwnYLcjNSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNDQ0ZCOTAxNDNBQ0VGNjZENjYyMDY2MkE0OEM2MTIw
RTc5RUY5ODAeFw0yNDA0MDMxOTUwNTBaFw0yNTA0MDIxOTU1NTBaMDMxMTAvBgNV
BAMTKDZCMTU0MTg5OUE4M0FDNzk0NjY5NTU0RTcwNkE2QzI1MkI2OTk1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXEdwtL2yeK0XJDGFliSWMGhG
sTBazbFQlxgQC1I8pMat7RXwKxAAyksD6JMQpKquSi4Nh2IwMIgYQGJOKfx3tfkT
AqMbxWRhhFdZsPWBoFRqnd2Xpzku6hCXKWDWqazKP8Y6ZTJ/3P9LTHFsIJm9S30f
TRxvgXOr/cBcAp5FWMTpIUEGfyyj287rnXJel/rTuXZCt6uGjA/Lsz/c7W4oMg0o
U7omV05tl6ReJNfI1KFr3YdFsUkD4CjExQckI0mi/mF2ummkswjr52XhviJkwY3N
jQYRN2RQa15z+WDF9xfo4e+bOi9URQdjThKV8gmRdSoC/Qajyl7zT4CUKy6fAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUaxVBiZqDrHlGaVVOcGpsJStple8wHwYDVR0j
BBgwFoAUHMz7kBQ6zvZtZiBmKkjGEg5575gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMS8xQ0NDRkI5MDE0M0FDRUY2NkQ2NjIwNjYyQTQ4QzYxMjBFNzlFRjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQ0NGQjkwMTQzQUNFRjY2
RDY2MjA2NjJBNDhDNjEyMEU3OUVGOTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzEv
MzIzODMwMzQzYTM0MzMzMjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEMsMA0GCSqGSIb3DQEBCwUAA4IBAQDW4V0r
yQs0G/FnZ3wuAhafboFG6b5UEhOdGO7Sq+QX7Q8mF2X1OTF2jW6ofa1pLBKtIYnE
Mbihmo3QvQLz98UNHJtgdcI86ie59osCXwADL+JUeDKP2DOqXDnM4Ii2pLnrp/1c
rITA9IAnGx3Mb1mMsEUOLLa/hpEfUx17uIvNNZ99SAUcLtCe2bjw9UUhjLRbPSns
kaYd23fHFVLVIAZtIAAP2lWQwUZ5dw3c89x9IyzxJV8ayljT3Mw6R2d0ta03Smi3
9nmTeJfv39mcJewU7/UQjLhKcJFfpKdBNbY52hbNQm9Zc1cn82NYfeYauo3A21aP
eTn/xd9P3szuv7a6
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org