Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          gpXLDy1Bwi+Z1hSFOhK+/OZsVkwwIufH+XWYgRez1tE=
Subject key identifier:   79:6B:88:F9:44:77:FD:74:16:E9:51:AE:A4:62:28:11:A9:0A:50:54
Certificate issuer:       /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial:       105B7BF148F84B7D0C69DF460CC117E6D47AA295
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Sat 04 Nov 2023 21:00:03 +0000
ROA not before:           Sat 04 Nov 2023 20:55:03 +0000
ROA not after:            Sat 02 Nov 2024 21:00:03 +0000
asID:                     264247
IP address blocks:        2804:24e4:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5b:7b:f1:48:f8:4b:7d:0c:69:df:46:0c:c1:17:e6:d4:7a:a2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Validity
            Not Before: Nov  4 20:55:03 2023 GMT
            Not After : Nov  2 21:00:03 2024 GMT
        Subject: CN=796B88F94477FD7416E951AEA4622811A90A5054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:12:e3:2a:35:24:e9:d1:bf:10:4b:64:ca:
                    eb:cd:5d:ea:75:f6:ef:c7:03:c2:6f:c5:0d:5b:5f:
                    6f:77:f9:17:6e:56:4e:2f:a1:10:a6:b4:9c:aa:25:
                    15:94:33:3f:12:83:96:c3:98:b1:8a:d4:cb:b2:b8:
                    47:3d:14:9c:a7:e3:47:65:99:28:e2:4e:f5:17:33:
                    10:1e:5e:2d:ff:e7:a2:87:5c:e0:8f:36:94:15:7b:
                    a0:7e:a2:bc:1d:c0:22:8c:e6:08:ac:4d:6c:a4:ca:
                    68:41:40:3c:03:0a:9e:77:70:86:0c:e7:54:2b:f8:
                    0c:68:49:97:80:81:8e:20:c7:b2:d8:36:b0:bd:bb:
                    e2:1a:df:02:08:d7:2a:2a:27:81:fc:7d:27:66:f7:
                    e6:82:56:06:b6:e3:33:b6:85:eb:86:4d:78:35:72:
                    46:7b:2d:63:2b:3d:d9:60:1c:1c:a9:e0:bf:14:84:
                    37:42:5e:36:33:ad:1f:72:d4:58:3a:ad:2b:b9:be:
                    71:fb:53:88:42:da:b3:92:63:a1:89:83:5d:21:fd:
                    0e:bb:dc:94:e1:1f:0d:99:9e:d2:8b:f4:56:16:53:
                    c5:22:b4:e1:47:ae:2a:af:35:ff:d6:6c:0c:47:61:
                    d1:e1:db:91:80:81:33:9a:0c:27:9c:c8:58:b8:f9:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6B:88:F9:44:77:FD:74:16:E9:51:AE:A4:62:28:11:A9:0A:50:54
            X509v3 Authority Key Identifier:
                keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:94:d9:6d:f7:b5:15:ef:c8:76:b0:a3:d4:c5:cb:48:d9:20:
         64:2c:7c:4a:03:90:d1:1d:b5:62:7c:90:bb:29:cb:89:c2:05:
         60:80:f9:c9:8f:1b:17:d3:04:50:d5:8a:af:57:c3:a4:0f:58:
         a8:a8:49:56:a4:0b:d9:78:97:a4:5c:bd:b8:68:1a:94:ba:e5:
         e5:13:eb:b8:55:38:3b:ea:43:48:fe:90:7c:16:10:8d:a7:7b:
         a0:fb:a6:49:65:e6:c6:74:90:5b:12:18:d0:e1:de:e1:c3:7f:
         54:59:10:2f:09:44:04:73:54:b4:9c:ee:4f:c8:d4:9f:a1:08:
         ac:a3:ed:4b:5f:75:b7:8e:e6:45:42:5d:e8:76:55:80:d3:79:
         96:0f:da:39:bc:e6:e6:4b:e9:8c:93:a5:66:2a:83:9e:c1:69:
         eb:ca:b1:a2:77:a9:cb:9b:dc:ac:3f:40:e8:92:f3:5d:04:d5:
         61:60:bc:b6:11:ec:3b:21:b7:1c:3f:45:f8:c7:44:5f:53:06:
         0f:24:20:e7:b2:d3:7e:7b:f1:d7:01:5e:4b:2b:cb:97:01:87:
         de:9e:80:ff:78:47:96:fc:b1:7d:68:95:ad:54:91:2b:fd:f9:
         3b:8c:0a:99:70:42:dc:0f:12:36:3b:e6:5d:64:96:ac:6f:17:
         c8:cf:6a:a1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEFt78Uj4S30Mad9GDMEX5tR6opUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxQzI5NUIyMDYyQ0Y3MTcyQzcxMDZBNTNCNzYxRTcw
QUFFMDJFQjAeFw0yMzExMDQyMDU1MDNaFw0yNDExMDIyMTAwMDNaMDMxMTAvBgNV
BAMTKDc5NkI4OEY5NDQ3N0ZENzQxNkU5NTFBRUE0NjIyODExQTkwQTUwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUBLjKjUk6dG/EEtkyuvNXep1
9u/HA8JvxQ1bX293+RduVk4voRCmtJyqJRWUMz8Sg5bDmLGK1MuyuEc9FJyn40dl
mSjiTvUXMxAeXi3/56KHXOCPNpQVe6B+orwdwCKM5gisTWykymhBQDwDCp53cIYM
51Qr+AxoSZeAgY4gx7LYNrC9u+Ia3wII1yoqJ4H8fSdm9+aCVga24zO2heuGTXg1
ckZ7LWMrPdlgHByp4L8UhDdCXjYzrR9y1Fg6rSu5vnH7U4hC2rOSY6GJg10h/Q67
3JThHw2ZntKL9FYWU8UitOFHriqvNf/WbAxHYdHh25GAgTOaDCecyFi4+QlPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUeWuI+UR3/XQW6VGupGIoEakKUFQwHwYDVR0j
BBgwFoAULRwpWyBiz3FyxxBqU7dh5wquAuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMC8yRDFDMjk1QjIwNjJDRjcxNzJDNzEwNkE1M0I3NjFFNzBBQUUwMkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEMUMyOTVCMjA2MkNGNzE3
MkM3MTA2QTUzQjc2MUU3MEFBRTAyRUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzAv
MzIzODMwMzQzYTMyMzQ2NTM0M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJOTQMA0GCSqGSIb3DQEBCwUA
A4IBAQBJlNlt97UV78h2sKPUxctI2SBkLHxKA5DRHbVifJC7KcuJwgVggPnJjxsX
0wRQ1YqvV8OkD1ioqElWpAvZeJekXL24aBqUuuXlE+u4VTg76kNI/pB8FhCNp3ug
+6ZJZebGdJBbEhjQ4d7hw39UWRAvCUQEc1S0nO5PyNSfoQiso+1LX3W3juZFQl3o
dlWA03mWD9o5vObmS+mMk6VmKoOewWnryrGid6nLm9ysP0DokvNdBNVhYLy2Eew7
IbccP0X4x0RfUwYPJCDnstN+e/HXAV5LK8uXAYfenoD/eEeW/LF9aJWtVJEr/fk7
jAqZcELcDxI2O+ZdZJasbxfIz2qh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org