Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130323a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3130323a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          92sXD69OijD/aFCEZOTDM1mamAF4x2B8vNutxTfjdtY=
Subject key identifier:   CA:48:66:3F:9B:D6:3C:56:E7:7C:71:00:CC:CF:CE:F2:16:F3:F3:25
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       725FF763194B1B77C8BF4C0AF486616A28B266B7
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130323a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:04 +0000
ROA not before:           Thu 03 Aug 2023 13:04:04 +0000
ROA not after:            Thu 01 Aug 2024 13:09:04 +0000
asID:                     262617
IP address blocks:        2804:90c:102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5f:f7:63:19:4b:1b:77:c8:bf:4c:0a:f4:86:61:6a:28:b2:66:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:04 2023 GMT
            Not After : Aug  1 13:09:04 2024 GMT
        Subject: CN=CA48663F9BD63C56E77C7100CCCFCEF216F3F325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:0f:66:82:20:d9:a4:b3:de:c8:7c:4b:10:
                    e6:bd:af:00:c3:da:f3:92:81:f5:2e:20:d8:e7:28:
                    bd:45:6f:4f:36:ac:a0:b2:7e:57:fb:47:f9:5d:ae:
                    36:26:0f:01:3f:38:57:47:65:3a:8f:36:c3:a3:f4:
                    15:ee:ac:0c:32:37:c6:1f:0c:07:4a:bb:b7:bc:ed:
                    1e:db:54:6d:e1:97:aa:cb:7f:b4:32:40:7d:04:3a:
                    ed:f3:ac:30:25:79:a8:77:14:e9:9a:14:b0:2c:d6:
                    13:20:a0:1b:24:ed:9d:1c:6e:e8:c5:03:04:3c:eb:
                    9b:af:3f:9e:f2:a9:39:b9:ae:40:15:4b:76:b8:c1:
                    08:80:b9:ba:f7:d8:6d:9e:4d:0b:6c:6c:06:32:3f:
                    76:b6:b0:46:15:50:da:cc:55:fa:40:eb:f7:b2:83:
                    ec:59:b0:6d:da:be:aa:3b:74:78:cf:7e:ae:54:4c:
                    b1:5c:36:04:d7:a3:00:eb:35:38:44:d8:5e:d7:5a:
                    02:ee:a9:8a:25:91:8e:bc:9c:8f:e3:0c:c5:09:fe:
                    33:1c:14:22:47:ad:08:f8:02:1c:19:14:14:a3:9f:
                    51:bf:04:99:07:2a:2d:ac:33:91:92:03:d3:a4:d5:
                    46:9e:8d:ef:95:c3:c7:43:a5:11:87:69:85:28:db:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:66:3F:9B:D6:3C:56:E7:7C:71:00:CC:CF:CE:F2:16:F3:F3:25
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130323a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:06:6c:91:60:e9:46:f2:d7:27:25:f5:17:9a:62:7e:33:
         75:a0:9b:ae:26:d8:e9:99:bf:e5:c7:86:23:6f:e4:46:78:bf:
         c5:40:5c:c3:d8:10:9b:da:84:e8:7d:1c:d5:04:7b:b1:1d:34:
         c2:e1:fa:f9:80:73:de:a6:14:4f:46:30:25:02:00:18:5f:d6:
         35:ac:27:08:48:05:0c:74:cd:80:29:c9:f1:30:bf:07:14:21:
         35:d2:aa:e1:a3:df:32:44:9b:d2:40:12:1b:61:c9:e8:52:eb:
         d0:33:11:09:7e:27:52:fb:2c:d8:7a:74:fd:25:fa:e5:cc:1d:
         82:3a:dc:50:80:56:a9:b7:bc:5f:15:37:bb:67:c3:8c:55:88:
         49:7f:d2:86:bd:9e:2a:6d:1d:7d:21:a9:91:c9:be:54:2a:2e:
         76:68:10:03:d2:f6:32:3e:5f:92:20:f0:63:e2:10:7b:aa:a0:
         7e:49:1e:2b:76:4b:9e:99:b9:fb:34:17:6f:69:8d:a5:d3:72:
         17:a1:a8:14:95:33:79:c0:37:30:36:23:ed:da:cf:d0:38:eb:
         f7:76:e5:d8:b2:b6:32:a6:27:c6:82:6a:c0:fe:b7:de:38:ea:
         1d:84:01:24:2b:21:d9:05:a9:70:3f:8b:e4:fd:ea:ad:73:fa:
         dc:24:5f:4a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUcl/3YxlLG3fIv0wK9IZhaiiyZrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MDRaFw0yNDA4MDExMzA5MDRaMDMxMTAvBgNV
BAMTKENBNDg2NjNGOUJENjNDNTZFNzdDNzEwMENDQ0ZDRUYyMTZGM0YzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2w9mgiDZpLPeyHxLEOa9rwDD
2vOSgfUuINjnKL1Fb082rKCyflf7R/ldrjYmDwE/OFdHZTqPNsOj9BXurAwyN8Yf
DAdKu7e87R7bVG3hl6rLf7QyQH0EOu3zrDAleah3FOmaFLAs1hMgoBsk7Z0cbujF
AwQ865uvP57yqTm5rkAVS3a4wQiAubr32G2eTQtsbAYyP3a2sEYVUNrMVfpA6/ey
g+xZsG3avqo7dHjPfq5UTLFcNgTXowDrNThE2F7XWgLuqYolkY68nI/jDMUJ/jMc
FCJHrQj4AhwZFBSjn1G/BJkHKi2sM5GSA9Ok1Uaeje+Vw8dDpRGHaYUo2yJDAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUykhmP5vWPFbnfHEAzM/O8hbz8yUwHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzIzODMwMzQzYTM5MzA2MzNhMzEzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjMyMzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQJDAECMA0GCSqGSIb3DQEBCwUAA4IB
AQA3PAZskWDpRvLXJyX1F5pifjN1oJuuJtjpmb/lx4Yjb+RGeL/FQFzD2BCb2oTo
fRzVBHuxHTTC4fr5gHPephRPRjAlAgAYX9Y1rCcISAUMdM2AKcnxML8HFCE10qrh
o98yRJvSQBIbYcnoUuvQMxEJfidS+yzYenT9JfrlzB2COtxQgFapt7xfFTe7Z8OM
VYhJf9KGvZ4qbR19IamRyb5UKi52aBAD0vYyPl+SIPBj4hB7qqB+SR4rdkuembn7
NBdvaY2l03IXoagUlTN5wDcwNiPt2s/QOOv3duXYsrYypifGgmrA/rfeOOodhAEk
KyHZBalwP4vk/eqtc/rcJF9K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org