Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a383030303a3a2f33342d3334203d3e20323638393637.roa
File:                     323830343a356435633a383030303a3a2f33342d3334203d3e20323638393637.roa (raw, json)
Hash identifier:          w1Xw5eXaVghNQL0oboT/ZtpD7O+CVZJfcjtu5c0IpEM=
Subject key identifier:   95:09:8F:E2:52:F5:29:8D:11:B1:9C:7E:AE:22:AD:83:47:55:CF:9E
Certificate issuer:       /CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
Certificate serial:       582A4CD012F990F2C80B59B818018DEED6C777B1
Authority key identifier: 7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a383030303a3a2f33342d3334203d3e20323638393637.roa
Signing time:             Tue 05 Sep 2023 14:09:33 +0000
ROA not before:           Tue 05 Sep 2023 14:04:33 +0000
ROA not after:            Tue 03 Sep 2024 14:09:33 +0000
asID:                     268967
IP address blocks:        2804:5d5c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2a:4c:d0:12:f9:90:f2:c8:0b:59:b8:18:01:8d:ee:d6:c7:77:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
        Validity
            Not Before: Sep  5 14:04:33 2023 GMT
            Not After : Sep  3 14:09:33 2024 GMT
        Subject: CN=95098FE252F5298D11B19C7EAE22AD834755CF9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c0:3b:85:c2:6a:30:d7:d8:63:df:cd:5d:b2:
                    62:3e:3f:07:e0:f7:de:eb:51:d3:6f:b3:d6:03:fc:
                    a1:c9:8a:c7:8e:9e:d8:e5:dd:33:59:7c:07:ca:e8:
                    21:c3:b7:89:f3:39:9f:ca:42:78:ed:f1:b8:1b:8f:
                    08:f3:0f:e3:67:e1:9b:09:b0:6d:11:a9:10:80:a6:
                    e7:92:b8:e9:a8:44:d6:8e:a0:79:18:e3:f8:d0:50:
                    7b:40:6f:4e:fd:a0:5c:54:78:84:c2:a3:b0:8c:c6:
                    be:1e:60:18:ff:ea:f2:45:86:79:4f:ed:58:9e:a7:
                    d4:1f:33:20:35:90:26:ed:7e:de:9c:ce:8a:10:cb:
                    3f:d1:ad:1c:34:57:90:62:1a:78:0f:d4:5a:05:bb:
                    d0:d7:2b:36:15:08:31:a5:69:68:f9:d0:97:33:14:
                    23:df:fa:82:5d:37:ad:67:e3:57:af:bb:fb:23:08:
                    fc:1b:05:48:b8:d2:35:7f:6e:60:87:42:20:ef:06:
                    1a:11:8a:fe:45:fe:6d:a1:98:9b:9c:a4:8f:17:23:
                    82:39:41:75:d4:0b:0b:c0:85:30:86:a9:30:9d:4b:
                    79:98:ce:6b:7b:57:44:8f:23:d7:e5:0c:f9:ba:31:
                    9c:ac:b7:5e:5f:e1:92:30:a0:fd:a8:9b:72:5e:da:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:09:8F:E2:52:F5:29:8D:11:B1:9C:7E:AE:22:AD:83:47:55:CF:9E
            X509v3 Authority Key Identifier:
                keyid:7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a383030303a3a2f33342d3334203d3e20323638393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:ec:fe:28:83:5d:c5:c2:d4:03:3c:7a:04:40:aa:78:1e:
         8e:78:16:41:9d:e0:f6:3d:43:85:73:77:f1:47:64:f1:50:00:
         ba:82:04:bd:e9:9f:44:e9:79:20:40:95:fc:b9:cb:5a:dd:70:
         38:0e:10:72:56:3d:fe:89:7d:49:9c:87:12:99:63:4c:29:e1:
         f5:79:ee:06:24:71:cc:91:d7:26:91:e9:49:71:9d:be:18:e9:
         cc:6e:e6:af:66:12:8c:62:a7:50:65:ad:bf:aa:4c:36:d5:19:
         70:aa:fe:e1:8f:13:df:38:c0:41:cf:19:ca:8e:e4:c6:4a:8c:
         b4:cc:48:d7:f8:08:7a:02:24:6d:3d:04:b7:cc:d6:d3:a9:41:
         ea:80:e6:16:d5:13:e3:30:3a:94:6e:7f:e9:3e:4e:97:9a:c4:
         b1:96:1b:30:a2:92:60:ec:1b:da:7c:9f:2b:24:46:d5:90:76:
         20:3c:3d:d5:13:3f:0a:ff:74:26:5a:1d:98:07:4a:a9:00:66:
         29:7c:ef:e3:0c:f2:34:98:8b:99:85:57:6d:d3:4c:75:bb:10:
         42:df:0c:b2:60:2d:a1:ca:b5:84:dd:50:34:a5:32:84:7f:8e:
         ab:cb:9e:3d:dd:cf:db:39:0f:a2:24:8e:b7:c6:77:48:e6:86:
         2e:d1:27:a1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWCpM0BL5kPLIC1m4GAGN7tbHd7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VGNjc2Q0Q0RjY1OTkxRUQwODYxNzNFNjRGOUU1OEY4
NDU1NEFEMTAeFw0yMzA5MDUxNDA0MzNaFw0yNDA5MDMxNDA5MzNaMDMxMTAvBgNV
BAMTKDk1MDk4RkUyNTJGNTI5OEQxMUIxOUM3RUFFMjJBRDgzNDc1NUNGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDawDuFwmow19hj381dsmI+Pwfg
997rUdNvs9YD/KHJiseOntjl3TNZfAfK6CHDt4nzOZ/KQnjt8bgbjwjzD+Nn4ZsJ
sG0RqRCApueSuOmoRNaOoHkY4/jQUHtAb079oFxUeITCo7CMxr4eYBj/6vJFhnlP
7Viep9QfMyA1kCbtft6czooQyz/RrRw0V5BiGngP1FoFu9DXKzYVCDGlaWj50Jcz
FCPf+oJdN61n41evu/sjCPwbBUi40jV/bmCHQiDvBhoRiv5F/m2hmJucpI8XI4I5
QXXUCwvAhTCGqTCdS3mYzmt7V0SPI9flDPm6MZyst15f4ZIwoP2om3Je2h0vAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlQmP4lL1KY0RsZx+riKtg0dVz54wHwYDVR0j
BBgwFoAUfvZ2zU9lmR7Qhhc+ZPnlj4RVStEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHlRSjExUm1URUxWR0hVTENMdGFHdXhjcXhlUnRRTGd2REM1bVFuUzlI
WEcvMC83RUY2NzZDRDRGNjU5OTFFRDA4NjE3M0U2NEY5RTU4Rjg0NTU0QUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFRjY3NkNENEY2NTk5MUVE
MDg2MTczRTY0RjlFNThGODQ1NTRBRDEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R5UUoxMVJtVEVMVkdIVUxDTHRhR3V4Y3F4ZVJ0UUxndkRDNW1RblM5SFhHLzAv
MzIzODMwMzQzYTM1NjQzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEXVyAMA0GCSqGSIb3DQEBCwUA
A4IBAQA/hOz+KINdxcLUAzx6BECqeB6OeBZBneD2PUOFc3fxR2TxUAC6ggS96Z9E
6XkgQJX8ucta3XA4DhByVj3+iX1JnIcSmWNMKeH1ee4GJHHMkdcmkelJcZ2+GOnM
buavZhKMYqdQZa2/qkw21Rlwqv7hjxPfOMBBzxnKjuTGSoy0zEjX+Ah6AiRtPQS3
zNbTqUHqgOYW1RPjMDqUbn/pPk6XmsSxlhswopJg7BvafJ8rJEbVkHYgPD3VEz8K
/3QmWh2YB0qpAGYpfO/jDPI0mIuZhVdt00x1uxBC3wyyYC2hyrWE3VA0pTKEf46r
y5493c/bOQ+iJI63xndI5oYu0Seh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org