Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          8DR907Baeix7kNQX4t/8z2BK2k/GaMoLX7IWBa8DM+U=
Subject key identifier:   6C:C1:80:04:31:5B:60:43:4D:60:89:E2:34:D8:42:1A:07:2D:FE:CC
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       7615A9A279D614E9AB233B728BA11722F487CF0C
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:01 +0000
ROA not before:           Sat 04 Nov 2023 20:55:01 +0000
ROA not after:            Sat 02 Nov 2024 21:00:01 +0000
asID:                     264247
IP address blocks:        2804:24e4:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:15:a9:a2:79:d6:14:e9:ab:23:3b:72:8b:a1:17:22:f4:87:cf:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:01 2023 GMT
            Not After : Nov  2 21:00:01 2024 GMT
        Subject: CN=6CC18004315B60434D6089E234D8421A072DFECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:ab:87:3b:8e:88:e0:0c:c3:b8:eb:3d:56:
                    b6:2e:be:38:8f:1e:d5:46:80:5b:9b:54:b6:11:0c:
                    34:d5:78:b6:da:d7:c2:94:ef:d6:fd:1d:50:77:43:
                    df:99:2f:c4:9a:49:82:ee:e5:43:1a:57:e4:d4:61:
                    81:cb:b9:ee:7b:8d:2c:e2:86:89:8a:43:d9:2d:cc:
                    26:27:0b:65:01:47:4b:2b:1f:94:28:7e:de:95:2f:
                    3b:cd:a7:90:bc:20:37:25:a5:b5:01:c1:33:3c:f8:
                    37:63:4b:ed:76:29:fe:d8:b1:ac:2d:9d:df:dd:18:
                    9d:f0:69:ca:02:0b:fc:32:a5:f0:42:2b:ef:ea:47:
                    69:9b:94:ab:a0:e6:79:1a:b7:b9:a0:ba:f1:b8:98:
                    0e:52:7a:85:ff:ea:05:16:b8:9d:29:ff:8d:f6:24:
                    62:93:b7:f9:ec:3c:e0:38:9d:84:82:9a:a6:27:dc:
                    bc:b5:f9:0c:3c:bf:f6:e4:3a:c6:be:68:ec:cd:58:
                    93:4f:42:c0:09:cc:99:da:a1:73:dc:0d:89:e2:4c:
                    b8:89:34:b3:1c:d9:f3:79:db:52:5a:70:1e:84:19:
                    e3:3c:93:b7:dc:85:98:20:4f:57:a2:db:a8:b8:e0:
                    31:83:a3:37:d0:08:df:8c:47:5e:91:95:70:9b:6e:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:80:04:31:5B:60:43:4D:60:89:E2:34:D8:42:1A:07:2D:FE:CC
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:ef:b1:89:0a:b9:d6:f5:dd:44:b0:18:d5:03:f2:b2:60:c7:
         66:4f:3f:8a:7a:58:b3:b7:58:39:79:82:be:89:c9:cf:fc:57:
         ef:8f:49:94:29:e3:37:77:85:cf:6c:dd:c7:1f:c5:4e:93:bd:
         f6:f3:84:68:bc:93:72:fd:15:0c:4d:eb:f4:c0:34:8f:5a:49:
         78:ec:b4:b1:79:33:33:1d:19:97:ea:ec:d2:75:e1:9d:03:39:
         d9:01:6c:87:7c:93:3e:95:4c:77:66:d9:0c:1c:ad:24:04:36:
         e3:e4:a5:6a:09:03:d3:9c:31:60:b2:62:2f:66:66:79:10:60:
         17:4a:c0:26:2c:c6:ef:85:31:c6:a7:3f:a9:57:fa:72:9d:f9:
         ea:39:c3:8f:60:3e:8d:fb:9d:39:5f:fe:68:24:12:3a:f4:1e:
         59:de:9d:63:38:7e:9c:15:dc:ff:a1:12:f5:0f:86:96:c7:b3:
         69:20:cb:4c:ff:f5:4f:99:0f:fa:13:75:d6:94:b6:53:4c:53:
         47:3f:71:41:1b:b0:86:5a:f3:e5:64:23:3e:e9:8a:1d:87:3c:
         4d:35:98:27:67:40:e5:fd:da:15:d9:95:08:14:7e:e4:ca:f7:
         1a:9d:5b:e4:f1:e5:62:d4:5b:83:5e:23:dc:1e:30:4a:8c:f7:
         7c:7c:c5:41
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdhWponnWFOmrIztyi6EXIvSHzwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxQzI5NUIyMDYyQ0Y3MTcyQzcxMDZBNTNCNzYxRTcw
QUFFMDJFQjAeFw0yMzExMDQyMDU1MDFaFw0yNDExMDIyMTAwMDFaMDMxMTAvBgNV
BAMTKDZDQzE4MDA0MzE1QjYwNDM0RDYwODlFMjM0RDg0MjFBMDcyREZFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oquHO46I4AzDuOs9VrYuvjiP
HtVGgFubVLYRDDTVeLba18KU79b9HVB3Q9+ZL8SaSYLu5UMaV+TUYYHLue57jSzi
homKQ9ktzCYnC2UBR0srH5Qoft6VLzvNp5C8IDclpbUBwTM8+DdjS+12Kf7Ysawt
nd/dGJ3wacoCC/wypfBCK+/qR2mblKug5nkat7mguvG4mA5SeoX/6gUWuJ0p/432
JGKTt/nsPOA4nYSCmqYn3Ly1+Qw8v/bkOsa+aOzNWJNPQsAJzJnaoXPcDYniTLiJ
NLMc2fN521JacB6EGeM8k7fchZggT1ei26i44DGDozfQCN+MR16RlXCbbkNjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbMGABDFbYENNYIniNNhCGgct/swwHwYDVR0j
BBgwFoAULRwpWyBiz3FyxxBqU7dh5wquAuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMC8yRDFDMjk1QjIwNjJDRjcxNzJDNzEwNkE1M0I3NjFFNzBBQUUwMkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEMUMyOTVCMjA2MkNGNzE3
MkM3MTA2QTUzQjc2MUU3MEFBRTAyRUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzAv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJORAMA0GCSqGSIb3DQEBCwUA
A4IBAQCn77GJCrnW9d1EsBjVA/KyYMdmTz+Kelizt1g5eYK+icnP/Ffvj0mUKeM3
d4XPbN3HH8VOk73284RovJNy/RUMTev0wDSPWkl47LSxeTMzHRmX6uzSdeGdAznZ
AWyHfJM+lUx3ZtkMHK0kBDbj5KVqCQPTnDFgsmIvZmZ5EGAXSsAmLMbvhTHGpz+p
V/pynfnqOcOPYD6N+505X/5oJBI69B5Z3p1jOH6cFdz/oRL1D4aWx7NpIMtM//VP
mQ/6E3XWlLZTTFNHP3FBG7CGWvPlZCM+6YodhzxNNZgnZ0Dl/doV2ZUIFH7kyvca
nVvk8eVi1FuDXiPcHjBKjPd8fMVB
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org