Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3830303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a3830303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          KXe1uNYN7ek+ou+gP6H2KUyaHaHu9O2FkAMKvYZ1tuo=
Subject key identifier:   E3:7D:CF:8C:A4:9D:D6:9E:C1:33:0B:9E:33:30:2E:97:38:FD:97:4E
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       484CAE8C4A6E49D2526FB581347D2CE4A69869C4
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3830303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Tue 28 Nov 2023 02:44:05 +0000
ROA not before:           Tue 28 Nov 2023 02:39:05 +0000
ROA not after:            Tue 26 Nov 2024 02:44:05 +0000
asID:                     52916
IP address blocks:        2804:2b10:800::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4c:ae:8c:4a:6e:49:d2:52:6f:b5:81:34:7d:2c:e4:a6:98:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Nov 28 02:39:05 2023 GMT
            Not After : Nov 26 02:44:05 2024 GMT
        Subject: CN=E37DCF8CA49DD69EC1330B9E33302E9738FD974E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:75:b1:68:bb:7f:75:d0:01:6f:49:f6:e2:
                    ac:07:3e:8f:9d:64:08:42:51:fa:76:d7:5c:45:fe:
                    22:d9:e0:7c:83:dc:eb:a1:cc:9f:15:fe:95:b2:e7:
                    e7:f6:09:43:8f:20:7e:c9:90:18:de:f4:72:f5:a9:
                    b7:6a:50:df:d0:c5:3e:4f:96:98:5d:8d:30:56:c4:
                    fd:bf:43:b6:6a:f0:0f:1a:37:3f:7d:83:8f:a8:24:
                    74:78:d5:4c:c0:63:ec:f5:69:22:bd:e0:21:d1:37:
                    3f:eb:02:85:bf:6d:39:11:54:1f:3f:0d:f3:c7:5b:
                    95:29:18:6d:57:cb:70:2c:98:86:23:8e:ee:c7:be:
                    00:91:fe:16:f8:27:27:6c:38:20:d7:c5:e8:7d:6b:
                    33:00:09:da:48:8d:68:1c:7a:a7:de:a7:bf:65:22:
                    aa:e1:00:db:2b:7c:0a:72:27:a9:c3:66:bb:69:08:
                    fa:4b:72:94:b1:87:7b:c1:e7:4a:1b:f8:2f:a1:68:
                    c7:21:1d:87:df:de:08:9e:72:18:b9:96:9f:b1:4b:
                    7d:58:22:38:15:c5:55:68:63:f7:e9:fb:ad:04:93:
                    8b:e9:27:20:2f:d4:c1:ab:77:d5:f4:e7:b9:c7:8e:
                    01:05:7e:d7:21:cf:1e:da:41:fc:73:ec:23:6c:1d:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7D:CF:8C:A4:9D:D6:9E:C1:33:0B:9E:33:30:2E:97:38:FD:97:4E
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3830303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:800::/39

    Signature Algorithm: sha256WithRSAEncryption
         a0:0f:a4:c7:a4:4f:ac:d0:ae:10:1c:76:b6:15:52:6c:0c:49:
         ea:de:f5:d0:8c:cd:f4:51:43:d3:5d:9e:e6:78:ae:99:3f:80:
         9c:1c:4d:de:86:b5:de:b2:9c:2d:b7:f6:6a:77:01:47:f3:4c:
         2f:9f:8f:b3:d5:17:2e:ec:50:a1:f8:61:33:8a:87:04:46:20:
         04:34:39:0f:49:28:e5:c1:85:8d:b1:99:4d:9f:8f:70:fa:be:
         51:10:dc:72:ab:eb:f6:6b:65:59:bf:ac:fa:3d:31:c4:60:33:
         7f:40:76:5b:64:99:a3:24:7c:19:ea:a4:bd:68:20:04:a9:f2:
         89:a9:82:de:b1:9c:24:10:44:b6:86:79:69:54:7a:de:46:33:
         76:66:e9:05:d5:53:17:4e:bb:3e:6d:63:cd:94:a0:2e:6e:6c:
         55:32:59:ff:b3:e2:30:60:8d:8a:40:92:64:7a:0e:a5:3b:01:
         6c:4c:a6:7f:91:c4:bc:11:9b:08:27:90:01:5f:83:66:29:fc:
         d0:2f:8d:05:86:5f:d5:d9:48:f0:c3:a8:5a:c9:88:fd:58:08:
         0f:2e:41:29:9b:47:49:25:41:4d:c2:f8:0f:88:af:51:2a:48:
         a3:6e:65:14:eb:41:45:cd:50:1e:0e:a8:7b:50:cf:a3:0e:69:
         50:d5:e1:19
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUSEyujEpuSdJSb7WBNH0s5KaYacQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEwMzRDNEI3MUM4RkQ1Q0YzQ0M3RTNDMDJFQ0Y4MjJB
MUEyMTczRDAeFw0yMzExMjgwMjM5MDVaFw0yNDExMjYwMjQ0MDVaMDMxMTAvBgNV
BAMTKEUzN0RDRjhDQTQ5REQ2OUVDMTMzMEI5RTMzMzAyRTk3MzhGRDk3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7HWxaLt/ddABb0n24qwHPo+d
ZAhCUfp211xF/iLZ4HyD3OuhzJ8V/pWy5+f2CUOPIH7JkBje9HL1qbdqUN/QxT5P
lphdjTBWxP2/Q7Zq8A8aNz99g4+oJHR41UzAY+z1aSK94CHRNz/rAoW/bTkRVB8/
DfPHW5UpGG1Xy3AsmIYjju7HvgCR/hb4JydsOCDXxeh9azMACdpIjWgceqfep79l
IqrhANsrfApyJ6nDZrtpCPpLcpSxh3vB50ob+C+haMchHYff3giechi5lp+xS31Y
IjgVxVVoY/fp+60Ek4vpJyAv1MGrd9X057nHjgEFftchzx7aQfxz7CNsHfdLAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU433PjKSd1p7BMwueMzAulzj9l04wHwYDVR0j
BBgwFoAU0QNMS3HI/VzzzH48Auz4IqGiFz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMC9EMTAzNEM0QjcxQzhGRDVDRjNDQzdFM0MwMkVDRjgyMkExQTIxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QxMDM0QzRCNzFDOEZENUNG
M0NDN0UzQzAyRUNGODIyQTFBMjE3M0QuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzAv
MzIzODMwMzQzYTMyNjIzMTMwM2EzODMwMzAzYTNhMmYzMzM5MmQzMzM5MjAzZDNl
MjAzNTMyMzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKAQrEAgwDQYJKoZIhvcNAQELBQADggEB
AKAPpMekT6zQrhAcdrYVUmwMSere9dCMzfRRQ9NdnuZ4rpk/gJwcTd6Gtd6ynC23
9mp3AUfzTC+fj7PVFy7sUKH4YTOKhwRGIAQ0OQ9JKOXBhY2xmU2fj3D6vlEQ3HKr
6/ZrZVm/rPo9McRgM39AdltkmaMkfBnqpL1oIASp8ompgt6xnCQQRLaGeWlUet5G
M3Zm6QXVUxdOuz5tY82UoC5ubFUyWf+z4jBgjYpAkmR6DqU7AWxMpn+RxLwRmwgn
kAFfg2Yp/NAvjQWGX9XZSPDDqFrJiP1YCA8uQSmbR0klQU3C+A+Ir1EqSKNuZRTr
QUXNUB4OqHtQz6MOaVDV4Rk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org