Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/323830343a363063633a3a2f33332d3333203d3e20323639313932.roa
File:                     323830343a363063633a3a2f33332d3333203d3e20323639313932.roa (raw, json)
Hash identifier:          2EMXfjyzV9swB3wOz/fL/shxg+oKRzSY8B1VgNXnMmk=
Subject key identifier:   53:F3:23:81:D1:53:E7:A8:47:03:9F:12:0A:DD:1C:CD:FF:E9:2F:FB
Certificate issuer:       /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial:       26940C16730B6C31231CEDC45BA65E954D6393E8
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/323830343a363063633a3a2f33332d3333203d3e20323639313932.roa
Signing time:             Mon 29 Jan 2024 20:00:00 +0000
ROA not before:           Mon 29 Jan 2024 19:55:00 +0000
ROA not after:            Mon 27 Jan 2025 20:00:00 +0000
asID:                     269192
IP address blocks:        2804:60cc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:94:0c:16:73:0b:6c:31:23:1c:ed:c4:5b:a6:5e:95:4d:63:93:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
        Validity
            Not Before: Jan 29 19:55:00 2024 GMT
            Not After : Jan 27 20:00:00 2025 GMT
        Subject: CN=53F32381D153E7A847039F120ADD1CCDFFE92FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:d1:7a:24:70:ce:59:eb:57:ee:97:93:0a:
                    7e:bd:28:fd:5e:3a:5c:39:bf:55:b9:34:65:24:dc:
                    68:44:65:54:ba:0d:c8:6c:82:a6:54:35:56:ea:d0:
                    5a:be:3e:0c:e9:7d:61:d5:a5:fd:e4:38:6c:6d:79:
                    c2:97:60:2d:84:06:97:ad:52:47:3b:e9:64:64:7a:
                    20:51:c6:08:53:48:ae:5a:c7:c7:5c:b8:20:90:48:
                    da:3d:c8:1b:8b:66:07:10:67:4e:c1:54:62:0f:4c:
                    91:10:cb:6d:87:c5:0e:c3:aa:0c:5c:74:1d:4d:2e:
                    bb:f8:8b:fb:9a:65:49:f4:b6:af:7a:18:03:66:0c:
                    13:b3:73:75:85:47:e7:26:29:b0:7b:6c:0f:77:68:
                    aa:7b:dd:66:57:97:ae:45:15:59:7a:75:e9:a7:07:
                    ed:17:c3:0d:2b:d7:23:f4:28:9a:3e:f6:53:6e:1a:
                    fc:33:59:79:78:cd:d7:32:ea:8b:51:35:59:7b:ee:
                    46:8a:47:9c:b7:a6:7a:8e:cf:aa:12:f2:52:06:e2:
                    ba:fd:21:02:4a:23:c4:83:40:96:12:8e:14:37:0e:
                    71:80:88:61:5d:70:2c:3c:2c:b3:c2:1c:3d:b2:f7:
                    3c:b2:ac:2c:9a:79:09:70:f2:d8:b1:80:a8:9c:fc:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:23:81:D1:53:E7:A8:47:03:9F:12:0A:DD:1C:CD:FF:E9:2F:FB
            X509v3 Authority Key Identifier:
                keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/323830343a363063633a3a2f33332d3333203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:eb:8e:a4:c6:54:77:4e:b0:54:64:8e:b8:e4:f4:ab:2d:
         85:74:28:25:aa:d3:63:d4:81:88:39:0a:e2:96:96:ec:17:bd:
         53:08:5f:e5:48:24:7d:15:f2:8f:47:72:90:0e:50:ba:e6:08:
         4e:bd:76:59:9c:1c:0a:e5:4b:f9:e3:08:7b:36:e8:3a:2b:8d:
         49:c8:85:25:e5:e1:d3:44:68:32:08:84:a6:f9:2f:1c:0a:1a:
         c8:67:a7:95:54:0e:aa:92:3e:b7:8b:9b:a2:1f:c7:72:23:d4:
         0f:b5:e0:10:e5:3b:12:ba:97:7b:95:f7:5b:0f:a7:2c:a3:67:
         2d:ab:43:40:32:6c:3c:49:e9:5a:64:22:5e:d2:af:5e:43:8e:
         70:71:aa:72:19:8b:ee:32:40:fb:df:6e:ab:0a:b2:ae:4b:a7:
         bb:f8:b1:1c:79:2e:66:6f:85:99:6a:eb:bc:21:e2:f2:01:c7:
         1c:b3:c6:ed:6c:38:73:9a:92:e7:84:1b:15:46:a9:25:69:8b:
         09:4c:34:69:97:93:e0:a0:52:3b:59:8e:10:2c:98:52:06:59:
         45:65:08:d3:25:be:d2:23:60:c9:4f:0d:e5:99:95:b2:3a:01:
         ce:1a:75:27:f4:1b:f5:98:fd:7c:7c:f0:81:ba:cc:6f:71:b1:
         96:6a:41:81
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJpQMFnMLbDEjHO3EW6ZelU1jk+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkwMTlEMEE1NTU3REJENzdERDQyQ0RDRUQzN0I1NUND
MEEyMDg3QzAeFw0yNDAxMjkxOTU1MDBaFw0yNTAxMjcyMDAwMDBaMDMxMTAvBgNV
BAMTKDUzRjMyMzgxRDE1M0U3QTg0NzAzOUYxMjBBREQxQ0NERkZFOTJGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClhdF6JHDOWetX7peTCn69KP1e
Olw5v1W5NGUk3GhEZVS6DchsgqZUNVbq0Fq+PgzpfWHVpf3kOGxtecKXYC2EBpet
Ukc76WRkeiBRxghTSK5ax8dcuCCQSNo9yBuLZgcQZ07BVGIPTJEQy22HxQ7Dqgxc
dB1NLrv4i/uaZUn0tq96GANmDBOzc3WFR+cmKbB7bA93aKp73WZXl65FFVl6demn
B+0Xww0r1yP0KJo+9lNuGvwzWXl4zdcy6otRNVl77kaKR5y3pnqOz6oS8lIG4rr9
IQJKI8SDQJYSjhQ3DnGAiGFdcCw8LLPCHD2y9zyyrCyaeQlw8tixgKic/FcpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUU/MjgdFT56hHA58SCt0czf/pL/swHwYDVR0j
BBgwFoAUqQGdClVX29d91Czc7Te1XMCiCHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGpZcnE4cmFuMWJSREVvUGM5aXZVZlM5NnZxb2R3WnpoMmNGSk5KeEpt
a3MvMC9BOTAxOUQwQTU1NTdEQkQ3N0RENDJDRENFRDM3QjU1Q0MwQTIwODdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E5MDE5RDBBNTU1N0RCRDc3
REQ0MkNEQ0VEMzdCNTVDQzBBMjA4N0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RqWXJxOHJhbjFiUkRFb1BjOWl2VWZTOTZ2cW9kd1p6aDJjRkpOSnhKbWtzLzAv
MzIzODMwMzQzYTM2MzA2MzYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzEzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARgzAAwDQYJKoZIhvcNAQELBQADggEBADj4646k
xlR3TrBUZI645PSrLYV0KCWq02PUgYg5CuKWluwXvVMIX+VIJH0V8o9HcpAOULrm
CE69dlmcHArlS/njCHs26DorjUnIhSXl4dNEaDIIhKb5LxwKGshnp5VUDqqSPreL
m6Ifx3Ij1A+14BDlOxK6l3uV91sPpyyjZy2rQ0AybDxJ6VpkIl7Sr15DjnBxqnIZ
i+4yQPvfbqsKsq5Lp7v4sRx5LmZvhZlq67wh4vIBxxyzxu1sOHOakueEGxVGqSVp
iwlMNGmXk+CgUjtZjhAsmFIGWUVlCNMlvtIjYMlPDeWZlbI6Ac4adSf0G/WY/Xx8
8IG6zG9xsZZqQYE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org