Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa
File:                     323830343a353838343a3a2f33322d3332203d3e20323638313334.roa (raw, json)
Hash identifier:          CJ4lG8znJB9GO2I9qb9NnPcA8UeK1Hl0hMhS9QMpJLI=
Subject key identifier:   72:43:33:04:A3:1D:67:FF:61:6D:A9:1C:BE:68:E2:9F:F2:E0:29:CF
Certificate issuer:       /CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
Certificate serial:       5D06F82EF338FDDF4586A84E1640C3BCAB2FDF4D
Authority key identifier: 7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa
Signing time:             Mon 22 Jan 2024 13:01:53 +0000
ROA not before:           Mon 22 Jan 2024 12:56:53 +0000
ROA not after:            Mon 20 Jan 2025 13:01:53 +0000
asID:                     268134
IP address blocks:        2804:5884::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:06:f8:2e:f3:38:fd:df:45:86:a8:4e:16:40:c3:bc:ab:2f:df:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
        Validity
            Not Before: Jan 22 12:56:53 2024 GMT
            Not After : Jan 20 13:01:53 2025 GMT
        Subject: CN=72433304A31D67FF616DA91CBE68E29FF2E029CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:ba:3d:69:7a:9a:74:db:f9:d4:ef:aa:7b:
                    91:ed:9c:18:dd:32:6f:3c:6d:77:1c:f7:dd:9a:4b:
                    30:49:0d:c7:07:7c:fc:73:ae:9e:9d:49:1e:b3:2f:
                    98:74:c6:ff:e2:ea:8a:7f:fa:41:e0:bd:1a:79:f7:
                    34:18:c6:14:52:ef:13:c2:51:e4:8b:e5:7d:56:c1:
                    50:48:07:57:8a:eb:87:f4:7c:e1:b7:b8:56:24:31:
                    8a:60:63:c9:e6:b6:88:37:d8:a4:1a:63:2c:43:f2:
                    86:9a:ec:0b:4e:7b:cc:e7:0d:1e:37:52:3e:9b:4d:
                    64:ed:29:2c:2a:96:95:41:36:64:79:a9:9d:b2:33:
                    76:31:3e:c3:a9:a8:83:51:db:2d:c3:a2:0c:b7:e5:
                    07:c1:10:ed:aa:c8:e4:f0:c3:1c:ad:26:18:bb:f3:
                    7a:f8:d1:af:bd:a5:02:dd:89:3c:63:d8:2c:53:d8:
                    42:cf:58:e2:0c:9d:93:1e:e8:63:19:ec:be:22:db:
                    23:63:c7:8e:3a:e3:84:31:7b:e9:b3:0d:ee:39:a0:
                    a9:11:bf:4e:e1:13:75:a2:bf:e6:ec:f7:dc:c7:01:
                    6e:f7:c0:a8:0f:e7:7a:19:3b:99:8e:f8:bd:e8:61:
                    04:b4:83:22:c4:15:f8:b7:7b:98:a5:08:2c:65:cd:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:43:33:04:A3:1D:67:FF:61:6D:A9:1C:BE:68:E2:9F:F2:E0:29:CF
            X509v3 Authority Key Identifier:
                keyid:7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5884::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:85:98:80:ca:27:f6:48:3e:62:86:2b:25:9c:2a:66:f5:6d:
         ae:fc:1d:5e:d7:b1:c4:77:04:e8:9b:77:5b:4e:0e:1b:59:20:
         fb:09:f5:60:e1:6e:6e:cc:e4:e9:4b:2e:99:38:09:b0:74:98:
         df:06:0a:b4:7a:7e:75:c7:46:50:06:dd:94:e9:ff:b9:a1:f8:
         ef:e9:4c:3e:78:e2:ad:c9:72:2d:a8:46:d5:34:1a:22:3e:a5:
         db:e3:94:aa:84:b4:e5:a0:f9:39:fe:e8:82:8c:a9:e5:15:72:
         87:fb:e9:fc:e8:61:b9:42:9e:a5:41:25:0d:08:61:5d:0d:49:
         5d:a0:47:f4:b9:87:b3:b4:e6:2b:19:63:db:23:99:d7:2e:df:
         b5:b9:e1:17:cf:11:73:95:6f:be:2e:fd:98:7b:2c:e0:33:cb:
         59:fb:88:17:e2:fa:59:62:f5:4a:61:20:4a:57:3c:75:50:e2:
         7b:de:fd:67:38:e5:db:38:36:58:cb:e9:8a:22:e3:01:94:b3:
         cf:8e:6d:32:73:11:67:fc:b9:3b:47:fd:28:69:f0:4c:88:e2:
         14:ce:8f:30:61:1a:f4:53:e2:71:d3:5f:64:60:5e:e3:f0:10:
         1a:69:b3:25:d3:f2:ae:a7:47:a3:8d:0c:9a:39:8f:97:3b:8a:
         1f:b6:8a:2f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXQb4LvM4/d9FhqhOFkDDvKsv300wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NDODJGMjFDNDRFMEZFQkVCN0U1MTcxNTZCNDg4MjhE
RTI4MzM3ODAeFw0yNDAxMjIxMjU2NTNaFw0yNTAxMjAxMzAxNTNaMDMxMTAvBgNV
BAMTKDcyNDMzMzA0QTMxRDY3RkY2MTZEQTkxQ0JFNjhFMjlGRjJFMDI5Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjLo9aXqadNv51O+qe5HtnBjd
Mm88bXcc992aSzBJDccHfPxzrp6dSR6zL5h0xv/i6op/+kHgvRp59zQYxhRS7xPC
UeSL5X1WwVBIB1eK64f0fOG3uFYkMYpgY8nmtog32KQaYyxD8oaa7AtOe8znDR43
Uj6bTWTtKSwqlpVBNmR5qZ2yM3YxPsOpqINR2y3Dogy35QfBEO2qyOTwwxytJhi7
83r40a+9pQLdiTxj2CxT2ELPWOIMnZMe6GMZ7L4i2yNjx44644Qxe+mzDe45oKkR
v07hE3Wiv+bs99zHAW73wKgP53oZO5mO+L3oYQS0gyLEFfi3e5ilCCxlzfc5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUckMzBKMdZ/9hbakcvmjin/LgKc8wHwYDVR0j
BBgwFoAUfMgvIcROD+vrflFxVrSIKN4oM3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlFa281RTJ6TTc2MVRkWmVTVFRRVFFxUXRnVDFwOFdGbUFEaTdUc0dp
b0YvMC83Q0M4MkYyMUM0NEUwRkVCRUI3RTUxNzE1NkI0ODgyOERFMjgzMzc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDQzgyRjIxQzQ0RTBGRUJF
QjdFNTE3MTU2QjQ4ODI4REUyODMzNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZRWtvNUUyek03NjFUZFplU1RUUVRRcVF0Z1QxcDhXRm1BRGk3VHNHaW9GLzAv
MzIzODMwMzQzYTM1MzgzODM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzEzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYhDANBgkqhkiG9w0BAQsFAAOCAQEAqoWYgMon
9kg+YoYrJZwqZvVtrvwdXtexxHcE6Jt3W04OG1kg+wn1YOFubszk6UsumTgJsHSY
3wYKtHp+dcdGUAbdlOn/uaH47+lMPnjirclyLahG1TQaIj6l2+OUqoS05aD5Of7o
goyp5RVyh/vp/OhhuUKepUElDQhhXQ1JXaBH9LmHs7TmKxlj2yOZ1y7ftbnhF88R
c5Vvvi79mHss4DPLWfuIF+L6WWL1SmEgSlc8dVDie979Zzjl2zg2WMvpiiLjAZSz
z45tMnMRZ/y5O0f9KGnwTIjiFM6PMGEa9FPicdNfZGBe4/AQGmmzJdPyrqdHo40M
mjmPlzuKH7aKLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org