Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a3a2f33322d3332203d3e20323638393637.roa
File:                     323830343a356435633a3a2f33322d3332203d3e20323638393637.roa (raw, json)
Hash identifier:          4PdGEo5r920CeSBDI8QvTmBNtUWSWJtApSycJrB0zZE=
Subject key identifier:   D6:04:6C:9C:EF:B7:15:86:D1:2F:29:D8:C3:40:88:CD:E1:38:6E:B0
Certificate issuer:       /CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
Certificate serial:       04AF0E24024C3899B6EE41716BB8D5BC84E9AC42
Authority key identifier: 7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a3a2f33322d3332203d3e20323638393637.roa
Signing time:             Tue 05 Sep 2023 14:09:33 +0000
ROA not before:           Tue 05 Sep 2023 14:04:33 +0000
ROA not after:            Tue 03 Sep 2024 14:09:33 +0000
asID:                     268967
IP address blocks:        2804:5d5c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:af:0e:24:02:4c:38:99:b6:ee:41:71:6b:b8:d5:bc:84:e9:ac:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
        Validity
            Not Before: Sep  5 14:04:33 2023 GMT
            Not After : Sep  3 14:09:33 2024 GMT
        Subject: CN=D6046C9CEFB71586D12F29D8C34088CDE1386EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:7d:4d:3f:7b:3e:53:44:3f:ba:ff:bc:4f:
                    84:34:8a:a2:ae:1f:fa:38:e4:90:2c:3d:13:ae:51:
                    df:ef:4a:c6:01:9e:50:d1:90:3e:15:18:0e:af:b0:
                    2e:05:45:b7:13:f0:6b:dc:ee:75:3b:9b:3d:da:2e:
                    60:c2:26:16:75:26:cf:e3:8f:dc:58:ef:2d:6d:fb:
                    b1:24:1f:ff:c1:aa:8d:99:88:01:a8:2b:ef:af:a1:
                    47:56:b3:4d:90:8e:97:3a:2f:50:54:64:53:34:71:
                    01:6f:fc:b4:4e:1a:c7:0e:ad:8b:da:6b:d3:59:aa:
                    dc:a1:e5:51:04:c6:ab:d9:ae:32:0e:83:0b:2e:18:
                    e4:b5:a8:43:e7:7b:fc:5b:db:88:55:2b:52:a2:2d:
                    37:18:4a:ec:64:14:15:59:b2:3c:90:8f:f7:72:e1:
                    f8:b8:46:4d:15:22:b9:d4:6f:7f:3b:01:1d:b2:76:
                    cf:a4:06:0b:9e:e8:b9:2f:25:2c:d8:3a:1a:e2:7f:
                    79:6d:d3:05:21:82:a9:d0:cb:26:20:f3:26:2b:ec:
                    d1:77:13:b6:90:52:3f:83:98:b7:81:88:ea:a5:12:
                    23:5b:1f:f9:23:19:db:f7:b3:85:ed:ee:0c:a6:07:
                    a4:8d:41:08:59:f3:98:7c:1e:a6:0c:08:2f:d9:38:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:04:6C:9C:EF:B7:15:86:D1:2F:29:D8:C3:40:88:CD:E1:38:6E:B0
            X509v3 Authority Key Identifier:
                keyid:7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a3a2f33322d3332203d3e20323638393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:ac:c0:c9:1b:37:21:e0:05:11:c3:fc:b4:c9:03:48:7b:
         04:7e:41:c2:ef:24:e9:f9:6c:35:66:37:ba:89:bd:50:2f:af:
         e3:c1:24:87:8f:66:90:a0:5f:70:16:d7:87:77:cd:c1:d0:88:
         c1:fe:3a:bc:55:69:a7:87:2a:f5:e8:13:9c:17:6a:c6:5e:0d:
         3a:85:93:79:eb:8d:a2:8b:f9:0c:f4:b6:46:94:e4:e3:78:3e:
         6e:34:bc:f3:12:d7:ce:42:91:45:c8:d8:8d:e7:f6:ff:86:d1:
         42:81:e3:22:4f:3f:6b:45:b9:ed:db:60:74:65:18:41:a8:0d:
         37:f0:20:10:40:71:7d:20:19:fe:b9:9c:43:39:be:02:1f:0d:
         9e:b3:a8:65:1a:9f:24:7e:d4:bf:c1:de:f3:fd:c2:cc:b3:49:
         9a:bf:3a:2c:1c:a1:7f:b5:b8:6c:d7:67:2c:c4:a8:6e:b4:e4:
         fe:48:4f:db:14:9d:e8:9f:e0:05:9d:bd:e9:7e:91:85:aa:76:
         5e:eb:3d:cb:a3:40:4a:66:7d:49:6d:27:26:51:2b:f0:b8:e1:
         2d:c9:16:a7:e7:77:15:8a:57:2f:38:8b:37:fa:a2:b8:b8:7b:
         d3:73:ab:e7:be:24:0c:6d:a2:f9:30:bd:e5:65:11:3d:bd:be:
         82:77:0b:c8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBK8OJAJMOJm27kFxa7jVvITprEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VGNjc2Q0Q0RjY1OTkxRUQwODYxNzNFNjRGOUU1OEY4
NDU1NEFEMTAeFw0yMzA5MDUxNDA0MzNaFw0yNDA5MDMxNDA5MzNaMDMxMTAvBgNV
BAMTKEQ2MDQ2QzlDRUZCNzE1ODZEMTJGMjlEOEMzNDA4OENERTEzODZFQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+n1NP3s+U0Q/uv+8T4Q0iqKu
H/o45JAsPROuUd/vSsYBnlDRkD4VGA6vsC4FRbcT8Gvc7nU7mz3aLmDCJhZ1Js/j
j9xY7y1t+7EkH//Bqo2ZiAGoK++voUdWs02Qjpc6L1BUZFM0cQFv/LROGscOrYva
a9NZqtyh5VEExqvZrjIOgwsuGOS1qEPne/xb24hVK1KiLTcYSuxkFBVZsjyQj/dy
4fi4Rk0VIrnUb387AR2yds+kBgue6LkvJSzYOhrif3lt0wUhgqnQyyYg8yYr7NF3
E7aQUj+DmLeBiOqlEiNbH/kjGdv3s4Xt7gymB6SNQQhZ85h8HqYMCC/ZODyXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1gRsnO+3FYbRLynYw0CIzeE4brAwHwYDVR0j
BBgwFoAUfvZ2zU9lmR7Qhhc+ZPnlj4RVStEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHlRSjExUm1URUxWR0hVTENMdGFHdXhjcXhlUnRRTGd2REM1bVFuUzlI
WEcvMC83RUY2NzZDRDRGNjU5OTFFRDA4NjE3M0U2NEY5RTU4Rjg0NTU0QUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFRjY3NkNENEY2NTk5MUVE
MDg2MTczRTY0RjlFNThGODQ1NTRBRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R5UUoxMVJtVEVMVkdIVUxDTHRhR3V4Y3F4ZVJ0UUxndkRDNW1RblM5SFhHLzAv
MzIzODMwMzQzYTM1NjQzNTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARdXDANBgkqhkiG9w0BAQsFAAOCAQEAmm6swMkb
NyHgBRHD/LTJA0h7BH5Bwu8k6flsNWY3uom9UC+v48Ekh49mkKBfcBbXh3fNwdCI
wf46vFVpp4cq9egTnBdqxl4NOoWTeeuNoov5DPS2RpTk43g+bjS88xLXzkKRRcjY
jef2/4bRQoHjIk8/a0W57dtgdGUYQagNN/AgEEBxfSAZ/rmcQzm+Ah8NnrOoZRqf
JH7Uv8He8/3CzLNJmr86LByhf7W4bNdnLMSobrTk/khP2xSd6J/gBZ296X6Rhap2
Xus9y6NASmZ9SW0nJlEr8LjhLckWp+d3FYpXLziLN/qiuLh703Or574kDG2i+TC9
5WURPb2+gncLyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org