Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a383030303a3a2f33342d3334203d3e20323732363731.roa
File:                     323830343a383664633a383030303a3a2f33342d3334203d3e20323732363731.roa (raw, json)
Hash identifier:          4TjKJUnq6bjZdynYXmDFCfGpo1qaBxUsa2wA1hp4wA0=
Subject key identifier:   E8:8D:18:EF:C7:C9:78:54:88:9C:35:D7:E0:FA:90:D4:18:21:EA:EF
Certificate issuer:       /CN=7ACFA602B537E683CB031FA3447049A7F776E6C5
Certificate serial:       786B899D5D23489862721F3BC6B7662DB6567EB4
Authority key identifier: 7A:CF:A6:02:B5:37:E6:83:CB:03:1F:A3:44:70:49:A7:F7:76:E6:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a383030303a3a2f33342d3334203d3e20323732363731.roa
Signing time:             Thu 14 Mar 2024 19:32:52 +0000
ROA not before:           Thu 14 Mar 2024 19:27:52 +0000
ROA not after:            Thu 13 Mar 2025 19:32:52 +0000
asID:                     272671
IP address blocks:        2804:86dc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6b:89:9d:5d:23:48:98:62:72:1f:3b:c6:b7:66:2d:b6:56:7e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ACFA602B537E683CB031FA3447049A7F776E6C5
        Validity
            Not Before: Mar 14 19:27:52 2024 GMT
            Not After : Mar 13 19:32:52 2025 GMT
        Subject: CN=E88D18EFC7C97854889C35D7E0FA90D41821EAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:07:ee:6b:33:35:f9:2c:90:64:13:10:9a:
                    04:57:14:a2:13:a4:fb:70:e3:4a:84:e0:35:21:44:
                    13:01:42:40:9b:00:60:de:43:f8:a0:cf:a8:b9:a7:
                    00:a4:8d:22:6f:d9:0a:7d:c6:96:cd:bb:f0:4d:e4:
                    cb:62:8d:8f:65:8c:9e:c3:96:b8:2e:86:2b:9e:f8:
                    c5:40:1c:c2:ba:5f:9f:ee:a9:8a:27:c7:40:84:ed:
                    c6:b0:36:fc:aa:ff:f7:2b:4f:82:ed:9c:07:a6:4e:
                    b3:ff:0d:0d:00:a3:66:26:4d:30:87:f4:ad:d8:b1:
                    5c:cf:fb:07:bf:01:4d:ac:6c:12:ab:b8:4b:e7:22:
                    1f:66:13:e5:8a:13:97:ff:36:15:1b:e0:e0:78:4a:
                    19:4c:fe:32:11:17:c6:42:11:e4:a1:e1:68:7e:d0:
                    40:2d:44:c0:01:58:5c:2f:45:30:e5:a6:52:6b:eb:
                    f4:58:38:a6:28:82:3d:2b:02:e5:b8:2f:f6:ee:72:
                    4a:83:31:d5:7f:22:85:5c:40:37:12:54:0a:b8:b3:
                    b0:1f:19:9c:90:ac:50:1b:89:17:94:31:0e:06:04:
                    1e:f2:4b:7a:96:74:42:25:ef:8a:1f:a6:a4:20:7e:
                    56:3a:ab:75:c8:57:ba:05:81:5a:c2:45:68:0d:7c:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8D:18:EF:C7:C9:78:54:88:9C:35:D7:E0:FA:90:D4:18:21:EA:EF
            X509v3 Authority Key Identifier:
                keyid:7A:CF:A6:02:B5:37:E6:83:CB:03:1F:A3:44:70:49:A7:F7:76:E6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a383030303a3a2f33342d3334203d3e20323732363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86dc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:a6:03:48:01:6d:8d:0d:9f:09:86:48:6c:d0:58:7b:1d:
         fc:57:69:71:73:18:1e:10:2f:03:3b:7f:5d:d1:96:26:b5:84:
         84:4d:46:bd:9a:ed:ab:bf:09:eb:a8:68:d1:91:86:36:4b:5b:
         80:3e:88:13:bd:45:fe:6e:dc:61:74:4f:43:f2:3a:56:f2:c2:
         91:cd:21:7e:8f:4d:5d:b0:9f:c8:8d:b3:44:0b:3d:03:43:58:
         7e:5c:27:00:9e:22:c7:8a:e7:3a:ce:db:c7:dd:de:60:ef:70:
         63:27:37:5e:6c:8e:e7:71:1e:d3:4d:10:bd:9a:5c:fe:4a:39:
         bf:92:d3:bc:e3:27:0e:f0:5e:9e:f5:43:0d:3f:89:a9:55:33:
         c1:aa:6d:f5:48:08:53:cc:d6:ce:4c:16:2e:0c:f1:a0:b5:ac:
         76:be:5e:0c:f2:e8:36:27:52:89:a6:6f:20:af:dd:17:98:59:
         31:12:99:b6:30:b2:51:d3:9c:fb:13:85:f0:dc:49:d0:13:7d:
         b1:9b:90:14:a1:56:b4:b4:bf:80:0f:95:24:f8:6a:c4:a7:03:
         69:23:51:b5:62:0f:dd:ac:40:fe:d1:ee:96:ab:5c:80:47:4c:
         d0:64:ed:fa:35:e8:02:51:23:d7:42:fb:ea:52:52:f8:30:b5:
         4f:5b:c1:b8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeGuJnV0jSJhich87xrdmLbZWfrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FDRkE2MDJCNTM3RTY4M0NCMDMxRkEzNDQ3MDQ5QTdG
Nzc2RTZDNTAeFw0yNDAzMTQxOTI3NTJaFw0yNTAzMTMxOTMyNTJaMDMxMTAvBgNV
BAMTKEU4OEQxOEVGQzdDOTc4NTQ4ODlDMzVEN0UwRkE5MEQ0MTgyMUVBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTAfuazM1+SyQZBMQmgRXFKIT
pPtw40qE4DUhRBMBQkCbAGDeQ/igz6i5pwCkjSJv2Qp9xpbNu/BN5MtijY9ljJ7D
lrguhiue+MVAHMK6X5/uqYonx0CE7cawNvyq//crT4LtnAemTrP/DQ0Ao2YmTTCH
9K3YsVzP+we/AU2sbBKruEvnIh9mE+WKE5f/NhUb4OB4ShlM/jIRF8ZCEeSh4Wh+
0EAtRMABWFwvRTDlplJr6/RYOKYogj0rAuW4L/buckqDMdV/IoVcQDcSVAq4s7Af
GZyQrFAbiReUMQ4GBB7yS3qWdEIl74ofpqQgflY6q3XIV7oFgVrCRWgNfLGvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6I0Y78fJeFSInDXX4PqQ1Bgh6u8wHwYDVR0j
BBgwFoAUes+mArU35oPLAx+jRHBJp/d25sUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlhTlFjUlFLN2tuN21CV1JDY2VUTnlqcE5KWDZTakt3Snhab1dneEFr
MU0vMC83QUNGQTYwMkI1MzdFNjgzQ0IwMzFGQTM0NDcwNDlBN0Y3NzZFNkM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBQ0ZBNjAyQjUzN0U2ODND
QjAzMUZBMzQ0NzA0OUE3Rjc3NkU2QzUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpYU5RY1JRSzdrbjdtQldSQ2NlVE55anBOSlg2U2pLd0p4Wm9XZ3hBazFNLzAv
MzIzODMwMzQzYTM4MzY2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhtyAMA0GCSqGSIb3DQEBCwUA
A4IBAQANxaYDSAFtjQ2fCYZIbNBYex38V2lxcxgeEC8DO39d0ZYmtYSETUa9mu2r
vwnrqGjRkYY2S1uAPogTvUX+btxhdE9D8jpW8sKRzSF+j01dsJ/IjbNECz0DQ1h+
XCcAniLHiuc6ztvH3d5g73BjJzdebI7ncR7TTRC9mlz+Sjm/ktO84ycO8F6e9UMN
P4mpVTPBqm31SAhTzNbOTBYuDPGgtax2vl4M8ug2J1KJpm8gr90XmFkxEpm2MLJR
05z7E4Xw3EnQE32xm5AUoVa0tL+AD5Uk+GrEpwNpI1G1Yg/drED+0e6Wq1yAR0zQ
ZO36NegCUSPXQvvqUlL4MLVPW8G4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org