Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/323830343a3839303a3a2f33322d3332203d3e203532383733.roa
File:                     323830343a3839303a3a2f33322d3332203d3e203532383733.roa (raw, json)
Hash identifier:          UoBO6tu3Md8X9IcQpuuU5RRhP+a6tDPAF4haDYuoWMQ=
Subject key identifier:   9E:F3:54:3B:4F:20:6F:CD:58:F7:BE:08:C9:0D:69:66:6B:62:1B:B8
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       0549806FF3886E67BC59B87245CB0B248A0F7A07
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/323830343a3839303a3a2f33322d3332203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:41 +0000
ROA not before:           Sat 27 Jan 2024 23:05:41 +0000
ROA not after:            Sat 25 Jan 2025 23:10:41 +0000
asID:                     52873
IP address blocks:        2804:890::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:49:80:6f:f3:88:6e:67:bc:59:b8:72:45:cb:0b:24:8a:0f:7a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:41 2024 GMT
            Not After : Jan 25 23:10:41 2025 GMT
        Subject: CN=9EF3543B4F206FCD58F7BE08C90D69666B621BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:db:ff:75:26:d9:c8:db:0c:70:3b:3b:c9:8f:
                    5f:95:76:a7:55:72:01:b5:02:39:7f:f1:95:f0:51:
                    a4:21:b4:9b:3a:92:47:df:d6:d2:75:19:c8:a4:18:
                    50:99:2c:2d:f2:77:62:30:5f:e7:00:73:c8:e1:12:
                    7f:ba:bb:2f:2c:92:c7:09:9a:dc:2c:5f:cc:ff:98:
                    06:d4:43:65:46:d2:9e:c7:d9:6d:68:1f:b0:12:9d:
                    34:27:5d:35:e9:e0:21:33:1b:14:c9:90:67:38:42:
                    b8:f0:84:4b:e0:32:84:15:24:c8:6a:24:c2:45:72:
                    5b:55:3e:a3:34:a1:2e:33:e6:e2:5f:cf:c9:97:54:
                    28:a0:fb:dc:86:2b:d7:0e:15:08:f7:0e:1a:aa:ce:
                    1c:7f:c3:34:bc:8c:80:f8:34:14:4a:fb:e2:8e:60:
                    81:f8:f0:91:8d:35:6a:b8:53:33:f3:94:41:14:f5:
                    d3:c7:8d:f0:37:a3:5c:42:33:b9:45:f0:32:7a:06:
                    11:c7:1f:2b:27:f4:27:db:5a:02:59:84:a2:9c:e3:
                    53:5a:19:dc:ff:ae:b7:de:cf:a8:05:f3:c0:4c:5f:
                    80:51:b4:d2:bb:2c:1b:dd:45:1b:37:f7:48:f3:a3:
                    c3:12:fc:e4:d2:52:e1:8d:8e:cd:85:61:1c:bd:7b:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F3:54:3B:4F:20:6F:CD:58:F7:BE:08:C9:0D:69:66:6B:62:1B:B8
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/323830343a3839303a3a2f33322d3332203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:890::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:77:d3:92:b5:ce:56:04:f6:cc:2c:a8:f5:73:7b:a1:e2:
         68:b1:6a:8f:4e:5d:14:c1:9d:b3:4a:50:f4:61:ad:9c:d8:69:
         4b:15:1c:a1:c8:20:8e:46:91:39:b2:9b:46:12:b6:7a:63:ff:
         99:28:85:82:55:6c:ce:b3:f2:8c:de:b2:55:92:e6:81:59:22:
         96:28:64:f1:8f:13:9c:aa:0f:ac:84:18:b3:f0:ca:62:f6:52:
         29:90:b6:ab:e0:a0:8e:b8:1b:05:86:f6:b3:f5:01:ec:6b:55:
         fb:db:55:2f:74:31:7d:ed:e7:d5:9c:44:a4:04:35:a9:a6:fe:
         d5:cc:79:08:a2:4f:71:77:bc:6c:da:ad:85:6a:2f:ee:48:e1:
         22:f3:33:72:28:7e:0b:05:31:29:97:7d:f3:d5:cd:eb:2b:b6:
         06:f9:e5:55:d4:14:4f:4f:cd:58:74:76:a8:b5:a1:9b:0d:7e:
         9e:da:31:bc:22:f0:fa:99:61:8b:89:ad:bb:f5:24:71:5c:37:
         bc:55:de:fc:c9:71:70:f3:b9:2f:8b:d6:86:16:34:c6:e2:1f:
         42:e9:45:2b:2f:5b:21:63:12:02:96:b0:e6:66:9a:36:63:d5:
         bd:74:ef:58:a2:39:35:09:60:0b:c8:3b:73:03:6c:1a:93:0a:
         4d:e7:58:16
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUBUmAb/OIbme8WbhyRcsLJIoPegcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5RUFDREE4MUY5REY5MDdFMkVFRkNFMENBNkI0MTQz
RTRGRkUxODAeFw0yNDAxMjcyMzA1NDFaFw0yNTAxMjUyMzEwNDFaMDMxMTAvBgNV
BAMTKDlFRjM1NDNCNEYyMDZGQ0Q1OEY3QkUwOEM5MEQ2OTY2NkI2MjFCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi2/91JtnI2wxwOzvJj1+VdqdV
cgG1Ajl/8ZXwUaQhtJs6kkff1tJ1GcikGFCZLC3yd2IwX+cAc8jhEn+6uy8skscJ
mtwsX8z/mAbUQ2VG0p7H2W1oH7ASnTQnXTXp4CEzGxTJkGc4QrjwhEvgMoQVJMhq
JMJFcltVPqM0oS4z5uJfz8mXVCig+9yGK9cOFQj3Dhqqzhx/wzS8jID4NBRK++KO
YIH48JGNNWq4UzPzlEEU9dPHjfA3o1xCM7lF8DJ6BhHHHysn9CfbWgJZhKKc41Na
Gdz/rrfez6gF88BMX4BRtNK7LBvdRRs390jzo8MS/OTSUuGNjs2FYRy9e89TAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUnvNUO08gb81Y974IyQ1pZmtiG7gwHwYDVR0j
BBgwFoAUDZ6s2oH535B+Lu/ODKa0FD5P/hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC8wRDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNFNEZGRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEOUVBQ0RBODFGOURGOTA3
RTJFRUZDRTBDQTZCNDE0M0U0RkZFMTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzIzODMwMzQzYTM4MzkzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzODM3
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAiQMA0GCSqGSIb3DQEBCwUAA4IBAQBPaXfTkrXOVgT2
zCyo9XN7oeJosWqPTl0UwZ2zSlD0Ya2c2GlLFRyhyCCORpE5sptGErZ6Y/+ZKIWC
VWzOs/KM3rJVkuaBWSKWKGTxjxOcqg+shBiz8Mpi9lIpkLar4KCOuBsFhvaz9QHs
a1X721UvdDF97efVnESkBDWppv7VzHkIok9xd7xs2q2Fai/uSOEi8zNyKH4LBTEp
l33z1c3rK7YG+eVV1BRPT81YdHaotaGbDX6e2jG8IvD6mWGLia279SRxXDe8Vd78
yXFw87kvi9aGFjTG4h9C6UUrL1shYxIClrDmZpo2Y9W9dO9Yojk1CWALyDtzA2wa
kwpN51gW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org