Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          fzDkkPj7Lvp5ph3hQukOpzbbA0x3Q2mxVnG96F9ihvA=
Subject key identifier:   AF:C6:1B:EA:02:D3:A2:4E:6A:87:B3:CA:8B:46:D3:8B:28:81:6E:0A
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       39F6B44F7C6EB13E90E531506E57087A391C4ACF
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:02 +0000
ROA not before:           Sat 04 Nov 2023 20:55:02 +0000
ROA not after:            Sat 02 Nov 2024 21:00:02 +0000
asID:                     264247
IP address blocks:        2804:24e4:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f6:b4:4f:7c:6e:b1:3e:90:e5:31:50:6e:57:08:7a:39:1c:4a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:02 2023 GMT
            Not After : Nov  2 21:00:02 2024 GMT
        Subject: CN=AFC61BEA02D3A24E6A87B3CA8B46D38B28816E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:44:21:4d:42:2a:31:b4:77:31:c2:84:b2:
                    00:bb:55:ab:3b:a5:b5:83:a9:2e:e7:d1:1f:f3:87:
                    42:3b:c3:18:f8:e4:3f:3b:33:b9:77:f6:80:55:9a:
                    04:e3:42:20:07:1b:ec:61:2f:60:ed:82:a2:9d:44:
                    43:0f:4f:d4:b0:c8:9a:cb:a8:d0:ed:10:4b:c9:51:
                    e0:3b:73:6f:ce:7b:fd:6e:64:cf:15:fa:ed:ab:26:
                    42:0b:44:b3:2f:f4:c3:8a:72:d2:49:71:ec:1e:8e:
                    4b:86:cb:a8:6f:05:06:e0:f9:ae:07:23:df:66:25:
                    ab:55:da:78:6d:c2:ea:31:e4:ba:da:4f:53:b1:8c:
                    0c:f8:9a:06:55:cc:77:1f:40:34:81:46:dd:5a:05:
                    69:82:16:8b:19:d8:94:04:c0:74:91:6e:53:ea:33:
                    66:06:4f:32:a8:a6:f5:bd:9f:52:9b:b3:59:1f:e5:
                    9e:d2:c8:99:d7:1c:a5:c9:da:7f:67:d1:b3:84:ef:
                    12:2c:97:a1:1e:36:c6:32:91:87:42:63:29:59:2a:
                    a2:4c:f5:23:55:10:49:ee:e2:e3:06:e9:2e:22:0a:
                    a3:f7:01:e6:b0:20:08:4f:17:c9:c9:93:bb:a3:c0:
                    e3:a9:f2:9e:47:1c:63:2d:1d:1b:7f:3f:fc:47:09:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C6:1B:EA:02:D3:A2:4E:6A:87:B3:CA:8B:46:D3:8B:28:81:6E:0A
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:92:90:67:bd:13:c1:47:0a:b1:22:26:ba:fc:3f:5f:dc:
         43:f4:83:17:c4:b2:70:e5:c1:6f:21:97:d6:1f:97:71:85:c4:
         91:18:7b:44:05:9a:2a:20:3a:43:00:9c:a6:f2:67:5f:df:b4:
         a0:eb:7d:1d:58:98:2a:76:25:32:1d:99:db:fc:4b:db:f4:99:
         55:d7:dc:b9:6a:58:01:95:38:bb:5a:63:10:3e:59:d4:fc:3e:
         2c:6e:6b:60:e6:e3:14:1e:02:11:76:8d:ea:3e:ef:5c:63:af:
         ba:32:11:c9:c9:82:3e:44:76:31:d0:89:0d:0a:74:69:7f:ce:
         f0:64:d6:5a:33:52:6c:b7:ff:58:9e:71:0b:62:39:32:28:18:
         e4:96:c2:fe:a3:43:3f:86:60:0f:a0:f1:a4:a9:e5:7c:26:23:
         22:48:91:fc:31:a3:2c:7c:e3:f4:b2:dc:00:be:5f:7e:e4:45:
         58:86:62:3f:79:48:ce:ee:e0:e3:3a:23:dc:f4:47:5e:f5:4b:
         45:49:f4:05:c3:f4:bf:8a:84:df:5b:f4:9c:69:41:6e:65:4f:
         76:fe:04:8c:d2:50:f5:c1:1e:e2:31:30:d7:22:f4:61:fa:e1:
         7b:8b:46:a0:81:15:32:41:60:0f:e1:0c:0c:ee:bc:51:4e:85:
         9d:0f:72:12
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOfa0T3xusT6Q5TFQblcIejkcSs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxQzI5NUIyMDYyQ0Y3MTcyQzcxMDZBNTNCNzYxRTcw
QUFFMDJFQjAeFw0yMzExMDQyMDU1MDJaFw0yNDExMDIyMTAwMDJaMDMxMTAvBgNV
BAMTKEFGQzYxQkVBMDJEM0EyNEU2QTg3QjNDQThCNDZEMzhCMjg4MTZFMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnkQhTUIqMbR3McKEsgC7Vas7
pbWDqS7n0R/zh0I7wxj45D87M7l39oBVmgTjQiAHG+xhL2DtgqKdREMPT9SwyJrL
qNDtEEvJUeA7c2/Oe/1uZM8V+u2rJkILRLMv9MOKctJJcewejkuGy6hvBQbg+a4H
I99mJatV2nhtwuox5LraT1OxjAz4mgZVzHcfQDSBRt1aBWmCFosZ2JQEwHSRblPq
M2YGTzKopvW9n1Kbs1kf5Z7SyJnXHKXJ2n9n0bOE7xIsl6EeNsYykYdCYylZKqJM
9SNVEEnu4uMG6S4iCqP3AeawIAhPF8nJk7ujwOOp8p5HHGMtHRt/P/xHCSHJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUr8Yb6gLTok5qh7PKi0bTiyiBbgowHwYDVR0j
BBgwFoAULRwpWyBiz3FyxxBqU7dh5wquAuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMC8yRDFDMjk1QjIwNjJDRjcxNzJDNzEwNkE1M0I3NjFFNzBBQUUwMkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEMUMyOTVCMjA2MkNGNzE3
MkM3MTA2QTUzQjc2MUU3MEFBRTAyRUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzAv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJOQgMA0GCSqGSIb3DQEBCwUA
A4IBAQBUwpKQZ70TwUcKsSImuvw/X9xD9IMXxLJw5cFvIZfWH5dxhcSRGHtEBZoq
IDpDAJym8mdf37Sg630dWJgqdiUyHZnb/Evb9JlV19y5algBlTi7WmMQPlnU/D4s
bmtg5uMUHgIRdo3qPu9cY6+6MhHJyYI+RHYx0IkNCnRpf87wZNZaM1Jst/9YnnEL
YjkyKBjklsL+o0M/hmAPoPGkqeV8JiMiSJH8MaMsfOP0stwAvl9+5EVYhmI/eUjO
7uDjOiPc9Ede9UtFSfQFw/S/ioTfW/ScaUFuZU92/gSM0lD1wR7iMTDXIvRh+uF7
i0aggRUyQWAP4QwM7rxRToWdD3IS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org