Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          Q2BQi2mJMjMzn1S9OzQGV4vOOgW/d3oe9vpR1S1dqoE=
Subject key identifier:   B4:AE:E6:38:9C:31:98:E0:E2:F9:A4:11:05:E9:B8:3A:5E:A5:8F:63
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       718FE585EDFE529A8A5A402B02053F9E887E26FA
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:15 +0000
ROA not before:           Thu 03 Aug 2023 13:04:15 +0000
ROA not after:            Thu 01 Aug 2024 13:09:15 +0000
asID:                     262617
IP address blocks:        2804:90c:103::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:e5:85:ed:fe:52:9a:8a:5a:40:2b:02:05:3f:9e:88:7e:26:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:15 2023 GMT
            Not After : Aug  1 13:09:15 2024 GMT
        Subject: CN=B4AEE6389C3198E0E2F9A41105E9B83A5EA58F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:d7:0d:1b:14:a5:f9:72:d6:33:5a:01:2a:
                    51:1a:08:69:a0:a0:7b:fe:93:a2:a8:62:69:a1:ad:
                    56:f8:76:8a:2c:71:1b:6f:c8:1a:a4:e0:3d:97:b7:
                    6e:4b:94:eb:07:d6:5a:18:7d:cd:c7:91:8c:48:63:
                    1b:c7:dc:50:9f:56:f5:d5:22:72:c1:a0:bc:3e:53:
                    a6:eb:94:d5:dd:c0:0c:94:32:2a:5a:0e:78:8e:86:
                    cf:5c:ed:12:93:ff:2d:28:4c:e7:e6:1d:72:2a:58:
                    02:cf:77:1a:bd:01:96:cd:ed:f8:48:d6:2f:9d:b4:
                    09:71:6a:66:58:e8:e2:b7:f1:b1:45:56:90:66:eb:
                    d3:d3:4a:94:5e:62:ab:40:db:c0:f7:25:73:8c:ba:
                    5f:4f:e9:22:24:61:c8:76:7b:bd:61:e6:5c:da:be:
                    06:08:28:82:ef:f2:db:e0:20:31:22:60:f0:bc:57:
                    42:f0:0e:2b:97:42:9e:35:01:49:ae:75:52:97:5f:
                    97:4a:cb:f3:9a:b4:da:f9:da:18:c3:97:d4:40:75:
                    13:3f:b2:a6:00:7b:e3:a8:1b:55:78:1d:9b:90:06:
                    f7:64:ea:6a:8e:73:94:38:8d:06:bd:ea:7a:67:1d:
                    b5:a0:1f:29:17:16:f5:bd:5c:31:a5:b3:d7:18:5c:
                    0b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AE:E6:38:9C:31:98:E0:E2:F9:A4:11:05:E9:B8:3A:5E:A5:8F:63
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:04:3c:17:92:42:41:82:ec:cb:f8:25:67:f5:4b:f8:18:
         8f:43:eb:d5:e3:a0:0d:4c:66:1a:f6:dd:3f:d1:c4:1d:5b:a3:
         56:84:15:d6:06:77:ee:33:6b:41:dc:9b:96:e7:ad:e8:70:50:
         c0:1d:9c:57:8f:58:39:80:34:3c:6f:fa:52:f9:16:88:9e:11:
         9f:ec:cd:93:72:d3:f4:19:4b:64:89:f4:84:28:93:5d:a7:63:
         ad:6e:0c:5d:2c:13:6b:46:76:a5:0d:38:d2:01:ab:75:fa:90:
         79:bd:78:f2:70:de:2f:8a:19:c3:dd:69:a2:37:26:0b:8c:bf:
         fb:09:c4:a7:e6:ec:d2:60:6f:a8:67:75:40:cc:53:4f:9c:be:
         19:8e:ca:1c:53:e8:94:ed:c2:23:0f:1b:df:45:3f:f8:4a:e5:
         38:7c:60:da:8d:df:6a:50:97:db:a8:93:f8:22:63:43:da:d7:
         f0:97:3c:d3:72:1c:fa:c2:14:51:35:3b:0c:e8:93:00:be:8f:
         2d:4e:61:e6:a8:db:87:58:2b:dd:c3:ad:3b:50:53:25:ed:aa:
         c7:22:16:d6:08:e0:df:62:0f:bb:01:c5:ab:34:8d:40:50:3c:
         1e:ee:74:ad:9d:af:80:34:5a:be:73:c9:e8:ff:3c:b5:01:1f:
         2e:5e:46:aa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUcY/lhe3+UpqKWkArAgU/noh+JvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MTVaFw0yNDA4MDExMzA5MTVaMDMxMTAvBgNV
BAMTKEI0QUVFNjM4OUMzMTk4RTBFMkY5QTQxMTA1RTlCODNBNUVBNThGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRdcNGxSl+XLWM1oBKlEaCGmg
oHv+k6KoYmmhrVb4dooscRtvyBqk4D2Xt25LlOsH1loYfc3HkYxIYxvH3FCfVvXV
InLBoLw+U6brlNXdwAyUMipaDniOhs9c7RKT/y0oTOfmHXIqWALPdxq9AZbN7fhI
1i+dtAlxamZY6OK38bFFVpBm69PTSpReYqtA28D3JXOMul9P6SIkYch2e71h5lza
vgYIKILv8tvgIDEiYPC8V0LwDiuXQp41AUmudVKXX5dKy/OatNr52hjDl9RAdRM/
sqYAe+OoG1V4HZuQBvdk6mqOc5Q4jQa96npnHbWgHykXFvW9XDGls9cYXAtjAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUtK7mOJwxmODi+aQRBem4Ol6lj2MwHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzIzODMwMzQzYTM5MzA2MzNhMzEzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjMyMzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQJDAEDMA0GCSqGSIb3DQEBCwUAA4IB
AQBemwQ8F5JCQYLsy/glZ/VL+BiPQ+vV46ANTGYa9t0/0cQdW6NWhBXWBnfuM2tB
3JuW563ocFDAHZxXj1g5gDQ8b/pS+RaInhGf7M2TctP0GUtkifSEKJNdp2Otbgxd
LBNrRnalDTjSAat1+pB5vXjycN4vihnD3WmiNyYLjL/7CcSn5uzSYG+oZ3VAzFNP
nL4ZjsocU+iU7cIjDxvfRT/4SuU4fGDajd9qUJfbqJP4ImND2tfwlzzTchz6whRR
NTsM6JMAvo8tTmHmqNuHWCvdw607UFMl7arHIhbWCODfYg+7AcWrNI1AUDwe7nSt
na+ANFq+c8no/zy1AR8uXkaq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org