Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa
File:                     323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (raw, json)
Hash identifier:          koXubnuAcxoSHuv2nS4SpPW9T/R4Ou7IxVpmcfedFiI=
Subject key identifier:   F8:30:87:13:EA:5E:BA:7F:83:66:21:3B:74:6D:E1:B7:DB:B6:F0:BB
Certificate issuer:       /CN=CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938
Certificate serial:       63C37B819CC69A5EB70FCC8331765E2A7F3475C9
Authority key identifier: CA:1E:AF:52:54:A0:89:DA:EF:D2:DB:19:FE:65:10:4F:DC:FD:89:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa
Signing time:             Tue 12 Mar 2024 16:27:18 +0000
ROA not before:           Tue 12 Mar 2024 16:22:18 +0000
ROA not after:            Tue 11 Mar 2025 16:27:18 +0000
asID:                     264233
IP address blocks:        2804:249c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c3:7b:81:9c:c6:9a:5e:b7:0f:cc:83:31:76:5e:2a:7f:34:75:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938
        Validity
            Not Before: Mar 12 16:22:18 2024 GMT
            Not After : Mar 11 16:27:18 2025 GMT
        Subject: CN=F8308713EA5EBA7F8366213B746DE1B7DBB6F0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:12:8c:27:dd:e0:07:9e:fe:ee:07:29:eb:
                    f2:4f:35:bb:2e:d6:48:86:41:be:04:8e:f4:40:d0:
                    cd:b5:c8:20:63:51:88:45:d3:0d:1f:7b:4a:ba:8f:
                    94:2f:10:23:e5:e4:4f:5d:3f:b2:51:a0:65:03:10:
                    48:10:71:01:98:87:b4:3a:a5:e6:7a:bf:60:81:25:
                    e7:55:90:97:c4:aa:51:39:9d:43:e5:44:e8:39:8b:
                    e3:80:e8:bd:27:ea:ea:5e:7d:74:99:03:c7:ba:98:
                    99:0c:bf:00:48:f1:33:81:61:98:8a:86:8a:54:8b:
                    9a:56:d1:ef:92:5b:eb:89:11:a2:84:f3:ae:2f:db:
                    7b:69:36:39:39:b6:a3:a7:8f:bb:36:98:5e:da:f0:
                    28:f2:75:5a:9f:e6:81:ac:fb:7d:a0:22:91:66:c1:
                    6e:5b:7d:e3:60:b4:33:3e:a7:95:97:76:1f:32:99:
                    5d:b5:c9:a3:a2:91:ba:be:32:57:fe:f0:3d:72:86:
                    3f:85:82:da:e3:57:66:78:e5:45:5d:9f:62:f5:4b:
                    d0:69:c1:e0:2e:bd:96:28:aa:a3:d8:e8:e1:33:d2:
                    21:1f:91:04:e1:f1:df:a4:28:c5:22:e8:4b:a1:40:
                    95:a5:2f:8c:f3:a0:11:67:ec:73:64:bb:6b:ab:9c:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:30:87:13:EA:5E:BA:7F:83:66:21:3B:74:6D:E1:B7:DB:B6:F0:BB
            X509v3 Authority Key Identifier:
                keyid:CA:1E:AF:52:54:A0:89:DA:EF:D2:DB:19:FE:65:10:4F:DC:FD:89:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:249c::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:53:85:09:b8:2d:7a:4c:92:2a:76:ab:b1:bd:6f:99:89:
         f7:3b:8a:21:03:5b:e6:60:a8:2b:9c:4a:57:83:5e:b7:9a:75:
         69:c8:b0:f1:e0:70:dc:8f:e2:1c:e2:9f:a6:65:4a:2b:a3:5f:
         99:f7:ae:58:49:fd:73:d6:fd:e7:42:41:cc:04:ff:fb:d5:9d:
         62:60:76:8d:b0:81:ab:20:11:3c:4c:a5:74:78:56:cf:d7:67:
         cc:70:a5:7f:73:55:82:e3:ab:4b:74:99:20:b1:a0:e6:d2:3c:
         7d:c9:a5:d9:7e:14:12:31:79:95:95:5e:24:39:ba:e8:b0:a2:
         cc:ed:17:38:a7:06:c4:45:21:b4:5e:84:06:3a:b9:04:d7:e1:
         4c:fa:37:ed:de:35:d9:a4:be:93:3b:74:c8:bc:41:8e:cb:05:
         b4:a9:d2:35:82:aa:2f:b8:67:fe:de:15:d9:07:6e:54:ae:a5:
         ba:76:3c:43:de:03:ee:7e:ee:52:01:ac:d5:75:72:29:9b:70:
         1a:22:44:ac:d7:08:7d:a2:5a:9a:33:51:dd:65:75:0b:dc:fc:
         03:5c:21:70:6d:69:b5:1f:49:bd:f9:dc:01:3d:0f:da:35:27:
         79:fe:53:80:a8:04:a1:d0:ab:46:b9:21:d4:67:c1:e8:fb:b1:
         7d:f2:1b:f4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUY8N7gZzGml63D8yDMXZeKn80dckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExRUFGNTI1NEEwODlEQUVGRDJEQjE5RkU2NTEwNEZE
Q0ZEODkzODAeFw0yNDAzMTIxNjIyMThaFw0yNTAzMTExNjI3MThaMDMxMTAvBgNV
BAMTKEY4MzA4NzEzRUE1RUJBN0Y4MzY2MjEzQjc0NkRFMUI3REJCNkYwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqhKMJ93gB57+7gcp6/JPNbsu
1kiGQb4EjvRA0M21yCBjUYhF0w0fe0q6j5QvECPl5E9dP7JRoGUDEEgQcQGYh7Q6
peZ6v2CBJedVkJfEqlE5nUPlROg5i+OA6L0n6upefXSZA8e6mJkMvwBI8TOBYZiK
hopUi5pW0e+SW+uJEaKE864v23tpNjk5tqOnj7s2mF7a8CjydVqf5oGs+32gIpFm
wW5bfeNgtDM+p5WXdh8ymV21yaOikbq+Mlf+8D1yhj+FgtrjV2Z45UVdn2L1S9Bp
weAuvZYoqqPY6OEz0iEfkQTh8d+kKMUi6EuhQJWlL4zzoBFn7HNku2urnIfjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+DCHE+peun+DZiE7dG3ht9u28LswHwYDVR0j
BBgwFoAUyh6vUlSgidrv0tsZ/mUQT9z9iTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5
QUgvMC9DQTFFQUY1MjU0QTA4OURBRUZEMkRCMTlGRTY1MTA0RkRDRkQ4OTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBMUVBRjUyNTRBMDg5REFF
RkQyREIxOUZFNjUxMDRGRENGRDg5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUU3JhVWRBV1dMaFVZWDl1ZDNjeW55WEg2WmVXY0FWQzh6Y0dvRmhQOUFILzAv
MzIzODMwMzQzYTMyMzQzOTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzIzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQknDANBgkqhkiG9w0BAQsFAAOCAQEAU7VThQm4
LXpMkip2q7G9b5mJ9zuKIQNb5mCoK5xKV4Net5p1aciw8eBw3I/iHOKfpmVKK6Nf
mfeuWEn9c9b950JBzAT/+9WdYmB2jbCBqyARPEyldHhWz9dnzHClf3NVguOrS3SZ
ILGg5tI8fcml2X4UEjF5lZVeJDm66LCizO0XOKcGxEUhtF6EBjq5BNfhTPo37d41
2aS+kzt0yLxBjssFtKnSNYKqL7hn/t4V2QduVK6lunY8Q94D7n7uUgGs1XVyKZtw
GiJErNcIfaJamjNR3WV1C9z8A1whcG1ptR9JvfncAT0P2jUnef5TgKgEodCrRrkh
1GfB6PuxffIb9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org