Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/323830343a343362343a3a2f33322d313238203d3e20323637353835.roa
File:                     323830343a343362343a3a2f33322d313238203d3e20323637353835.roa (raw, json)
Hash identifier:          WabEZzyDY3isMpweWjg0MmljtVuw/ttHeH1AZP7PRHE=
Subject key identifier:   F6:53:56:36:07:17:B4:2B:F1:9B:6A:C1:76:22:0F:D8:15:F1:41:FE
Certificate issuer:       /CN=C51858E8D4958BCC02DD1522A66C2DE642AF8AAE
Certificate serial:       2EB1A3DBBC10F5022E3915DC5372A9885283A99C
Authority key identifier: C5:18:58:E8:D4:95:8B:CC:02:DD:15:22:A6:6C:2D:E6:42:AF:8A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/323830343a343362343a3a2f33322d313238203d3e20323637353835.roa
Signing time:             Sat 09 Sep 2023 12:50:42 +0000
ROA not before:           Sat 09 Sep 2023 12:45:42 +0000
ROA not after:            Sat 07 Sep 2024 12:50:42 +0000
asID:                     267585
IP address blocks:        2804:43b4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b1:a3:db:bc:10:f5:02:2e:39:15:dc:53:72:a9:88:52:83:a9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C51858E8D4958BCC02DD1522A66C2DE642AF8AAE
        Validity
            Not Before: Sep  9 12:45:42 2023 GMT
            Not After : Sep  7 12:50:42 2024 GMT
        Subject: CN=F65356360717B42BF19B6AC176220FD815F141FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:62:ff:9b:2c:cf:0a:8b:79:65:22:53:97:ab:
                    08:5a:d6:73:96:37:6c:a2:1a:11:b3:1a:c1:34:92:
                    64:45:37:97:98:ab:f4:f2:c9:37:71:4e:97:be:a1:
                    4b:fc:79:c5:b3:0e:12:7b:f3:aa:7d:da:d0:c1:75:
                    6e:e7:0a:cc:98:0a:95:b4:de:8d:ac:1d:4a:e0:86:
                    5d:54:e3:df:bd:b8:cd:f9:e2:05:7b:3d:c7:69:bf:
                    5c:2b:79:0e:27:17:5f:ac:ff:37:f8:db:05:fe:b6:
                    2c:5e:82:c0:23:25:3d:85:fc:70:13:49:00:b2:49:
                    e5:41:55:82:4b:69:e6:60:de:fd:af:b5:06:bb:46:
                    5b:90:33:12:7c:3c:dc:ae:02:ac:93:e8:78:b6:f3:
                    62:21:4d:10:7d:0e:48:ca:c0:64:48:c2:43:d2:d5:
                    40:d9:9f:ad:f2:5b:52:c3:31:93:c8:c3:6a:93:f9:
                    cc:ca:f2:fa:12:fd:28:16:8a:5b:10:3a:53:19:88:
                    66:c6:e5:64:3d:19:1b:5c:77:0a:2b:28:f9:82:fd:
                    7b:a3:8e:3b:e8:26:e0:c9:6f:dc:51:3e:22:f5:b3:
                    ba:8d:4f:47:ce:5c:7f:75:65:cf:54:00:d4:32:78:
                    ee:86:a3:9f:1d:1e:65:2d:44:f1:ab:34:cb:ba:27:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:53:56:36:07:17:B4:2B:F1:9B:6A:C1:76:22:0F:D8:15:F1:41:FE
            X509v3 Authority Key Identifier:
                keyid:C5:18:58:E8:D4:95:8B:CC:02:DD:15:22:A6:6C:2D:E6:42:AF:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/323830343a343362343a3a2f33322d313238203d3e20323637353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:78:c1:3d:97:e7:8f:a4:56:95:0a:58:82:c8:b3:93:e8:12:
         f2:e8:84:02:09:78:7b:28:16:a6:b1:fa:a1:6d:1f:5b:73:2d:
         0d:c8:fb:19:f4:83:9e:e5:44:96:c3:1f:22:ec:87:57:56:ca:
         7a:2b:98:15:4a:ae:44:06:9f:03:75:0e:31:95:6d:aa:22:c2:
         a2:fc:5d:53:a7:b7:6b:e0:c1:55:79:18:01:d6:75:69:eb:f7:
         de:a1:0f:ff:55:f3:0e:69:26:db:b4:ae:69:f5:90:66:53:58:
         b1:b1:1a:3c:44:38:0e:26:ae:58:d6:40:82:04:e1:75:de:82:
         d1:4c:e1:22:c5:80:42:8c:12:ad:4f:e2:1d:a1:4c:f5:a2:72:
         68:f4:b0:eb:01:f5:73:d1:14:4f:14:c9:b7:89:b5:02:b8:4c:
         b1:eb:dc:fa:89:ba:16:8e:d9:47:23:05:b3:e1:9a:54:38:9d:
         66:28:21:6f:10:38:89:d4:4b:70:b6:13:19:4a:fd:28:79:d3:
         3d:a8:b8:83:22:56:be:ed:41:4d:cf:52:e6:fe:a7:ce:3a:66:
         bf:d9:ec:f8:8b:85:18:00:85:6e:2c:e7:76:1d:cc:91:1a:ab:
         c7:bf:31:9d:7e:2f:a7:68:fd:e5:9b:b6:ed:a4:e4:80:af:1e:
         f7:87:50:1a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULrGj27wQ9QIuORXcU3KpiFKDqZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxODU4RThENDk1OEJDQzAyREQxNTIyQTY2QzJERTY0
MkFGOEFBRTAeFw0yMzA5MDkxMjQ1NDJaFw0yNDA5MDcxMjUwNDJaMDMxMTAvBgNV
BAMTKEY2NTM1NjM2MDcxN0I0MkJGMTlCNkFDMTc2MjIwRkQ4MTVGMTQxRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYv+bLM8Ki3llIlOXqwha1nOW
N2yiGhGzGsE0kmRFN5eYq/TyyTdxTpe+oUv8ecWzDhJ786p92tDBdW7nCsyYCpW0
3o2sHUrghl1U49+9uM354gV7Pcdpv1wreQ4nF1+s/zf42wX+tixegsAjJT2F/HAT
SQCySeVBVYJLaeZg3v2vtQa7RluQMxJ8PNyuAqyT6Hi282IhTRB9DkjKwGRIwkPS
1UDZn63yW1LDMZPIw2qT+czK8voS/SgWilsQOlMZiGbG5WQ9GRtcdworKPmC/Xuj
jjvoJuDJb9xRPiL1s7qNT0fOXH91Zc9UANQyeO6Go58dHmUtRPGrNMu6J55vAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU9lNWNgcXtCvxm2rBdiIP2BXxQf4wHwYDVR0j
BBgwFoAUxRhY6NSVi8wC3RUipmwt5kKviq4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHdReG5GcXppaXRod1JtM2NWQ01LcUxLVTM2ODlGRE1KTU1STEM3Z3di
VVovMC9DNTE4NThFOEQ0OTU4QkNDMDJERDE1MjJBNjZDMkRFNjQyQUY4QUFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MTg1OEU4RDQ5NThCQ0Mw
MkREMTUyMkE2NkMyREU2NDJBRjhBQUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3UXhuRnF6aWl0aHdSbTNjVkNNS3FMS1UzNjg5RkRNSk1NUkxDN2d3YlVaLzAv
MzIzODMwMzQzYTM0MzM2MjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEO0MA0GCSqGSIb3DQEBCwUAA4IBAQBxeME9
l+ePpFaVCliCyLOT6BLy6IQCCXh7KBamsfqhbR9bcy0NyPsZ9IOe5USWwx8i7IdX
Vsp6K5gVSq5EBp8DdQ4xlW2qIsKi/F1Tp7dr4MFVeRgB1nVp6/feoQ//VfMOaSbb
tK5p9ZBmU1ixsRo8RDgOJq5Y1kCCBOF13oLRTOEixYBCjBKtT+IdoUz1onJo9LDr
AfVz0RRPFMm3ibUCuEyx69z6iboWjtlHIwWz4ZpUOJ1mKCFvEDiJ1EtwthMZSv0o
edM9qLiDIla+7UFNz1Lm/qfOOma/2ez4i4UYAIVuLOd2HcyRGqvHvzGdfi+naP3l
m7btpOSArx73h1Aa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org