Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/323830343a386630633a3a2f33322d313238203d3e20323733343634.roa
File:                     323830343a386630633a3a2f33322d313238203d3e20323733343634.roa (raw, json)
Hash identifier:          XObGerXNuYTA7B5v2TGMt/jCw2w7Vav5cdke945VbCs=
Subject key identifier:   CB:FE:D7:52:61:7F:F9:B6:47:CE:DA:72:97:31:D6:26:46:FC:5D:3B
Certificate issuer:       /CN=2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C
Certificate serial:       2E910418DA44E27D16F85C5048CADB4D6E481908
Authority key identifier: 2A:27:64:91:E9:50:74:4A:9F:BA:35:D7:BC:3D:32:A5:EA:B1:EB:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/323830343a386630633a3a2f33322d313238203d3e20323733343634.roa
Signing time:             Fri 08 Mar 2024 17:38:27 +0000
ROA not before:           Fri 08 Mar 2024 17:33:27 +0000
ROA not after:            Fri 07 Mar 2025 17:38:27 +0000
asID:                     273464
IP address blocks:        2804:8f0c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:91:04:18:da:44:e2:7d:16:f8:5c:50:48:ca:db:4d:6e:48:19:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C
        Validity
            Not Before: Mar  8 17:33:27 2024 GMT
            Not After : Mar  7 17:38:27 2025 GMT
        Subject: CN=CBFED752617FF9B647CEDA729731D62646FC5D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:ae:a6:b1:35:38:2b:5c:9e:fb:df:af:71:
                    bf:a0:50:32:6d:aa:77:65:da:7a:08:49:7b:5d:b8:
                    59:02:a8:51:4a:87:24:57:32:8a:cb:83:67:84:19:
                    fb:b4:64:4f:ec:c8:55:46:ec:05:b3:78:a7:ef:ae:
                    40:bc:25:0c:0d:b9:06:be:6c:61:7d:40:ad:09:77:
                    86:71:ec:fd:c3:3c:ff:d7:6a:de:57:77:bf:59:0e:
                    46:2f:fc:ac:cb:86:b9:35:ee:da:a4:4d:c2:1f:f5:
                    e9:d0:ff:68:a5:00:00:bd:be:86:f7:df:c1:85:aa:
                    0f:c7:1b:78:ae:20:94:77:79:1b:f2:ec:ff:dd:ca:
                    3f:a3:08:72:98:7d:91:2f:90:8f:32:68:6f:39:a0:
                    28:3f:d1:3c:ed:4d:66:cc:05:a4:d6:51:1d:fd:37:
                    d5:c8:11:33:52:71:05:bf:d1:18:1c:66:11:85:ff:
                    6c:26:f8:37:27:63:69:a5:01:e1:e2:2a:fa:bf:57:
                    14:46:88:84:b4:29:38:ad:83:4c:a6:b3:f0:1c:6c:
                    42:78:8a:8f:36:ec:43:f8:35:b1:fa:77:24:60:67:
                    ad:16:9a:b2:f8:8c:d3:0d:44:05:10:b0:95:7a:52:
                    1c:d2:07:85:47:d7:63:c8:73:61:e1:e3:a9:8b:10:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FE:D7:52:61:7F:F9:B6:47:CE:DA:72:97:31:D6:26:46:FC:5D:3B
            X509v3 Authority Key Identifier:
                keyid:2A:27:64:91:E9:50:74:4A:9F:BA:35:D7:BC:3D:32:A5:EA:B1:EB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/323830343a386630633a3a2f33322d313238203d3e20323733343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:79:2a:30:54:7f:77:ef:a4:16:a0:49:44:d8:7c:02:fe:84:
         9a:1c:10:70:8d:e6:19:5e:30:9c:d3:74:3b:a7:d4:9c:33:54:
         07:0d:d8:57:8b:62:6b:9d:56:f9:2a:85:ce:ce:5d:88:82:66:
         fc:7b:e4:b6:24:8d:f2:83:be:ab:36:f4:cd:8b:a5:bf:ef:73:
         f3:c2:56:2d:1c:32:ad:b6:96:a1:aa:9a:ca:2f:c9:7b:ba:cd:
         c6:d5:41:31:04:e4:6d:2a:5a:43:02:79:ee:37:ba:5f:9c:64:
         a7:7b:27:4d:f7:d3:03:d5:fa:0e:8b:a9:5f:cc:4b:db:de:13:
         2e:fe:f7:be:04:c1:7b:ce:6d:ec:c8:53:db:4c:0a:55:62:5b:
         fc:45:32:d4:cf:45:d4:d1:71:7b:a9:04:11:62:1f:87:c5:5c:
         ae:d4:e6:9b:47:a6:bf:af:6c:db:f9:b8:4c:f9:8a:d8:18:b1:
         dc:83:cb:ed:8d:e3:e6:e6:b6:84:d1:21:5f:e1:ac:a6:f5:88:
         61:10:45:55:c0:27:3d:fa:4e:33:fd:b6:54:59:ce:df:57:d9:
         c9:48:7f:a9:0c:eb:42:43:0b:b1:47:9d:c1:97:89:76:03:8b:
         08:c9:74:0b:e9:52:05:96:8b:25:ec:75:a5:d4:8a:91:3c:ab:
         ad:81:6e:63
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULpEEGNpE4n0W+FxQSMrbTW5IGQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyNzY0OTFFOTUwNzQ0QTlGQkEzNUQ3QkMzRDMyQTVF
QUIxRUI5QzAeFw0yNDAzMDgxNzMzMjdaFw0yNTAzMDcxNzM4MjdaMDMxMTAvBgNV
BAMTKENCRkVENzUyNjE3RkY5QjY0N0NFREE3Mjk3MzFENjI2NDZGQzVEM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEa6msTU4K1ye+9+vcb+gUDJt
qndl2noISXtduFkCqFFKhyRXMorLg2eEGfu0ZE/syFVG7AWzeKfvrkC8JQwNuQa+
bGF9QK0Jd4Zx7P3DPP/Xat5Xd79ZDkYv/KzLhrk17tqkTcIf9enQ/2ilAAC9vob3
38GFqg/HG3iuIJR3eRvy7P/dyj+jCHKYfZEvkI8yaG85oCg/0TztTWbMBaTWUR39
N9XIETNScQW/0RgcZhGF/2wm+DcnY2mlAeHiKvq/VxRGiIS0KTitg0yms/AcbEJ4
io827EP4NbH6dyRgZ60WmrL4jNMNRAUQsJV6UhzSB4VH12PIc2Hh46mLEDWzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUy/7XUmF/+bZHztpylzHWJkb8XTswHwYDVR0j
BBgwFoAUKidkkelQdEqfujXXvD0ypeqx65wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRThGMWdaYXZVWmUxdjJXRmRKb3R1S29NUGpHNXpMZ2RmekZEaE1WQmdn
VGQvMC8yQTI3NjQ5MUU5NTA3NDRBOUZCQTM1RDdCQzNEMzJBNUVBQjFFQjlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJBMjc2NDkxRTk1MDc0NEE5
RkJBMzVEN0JDM0QzMkE1RUFCMUVCOUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U4RjFnWmF2VVplMXYyV0ZkSm90dUtvTVBqRzV6TGdkZnpGRGhNVkJnZ1RkLzAv
MzIzODMwMzQzYTM4NjYzMDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNDM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI8MMA0GCSqGSIb3DQEBCwUAA4IBAQCfeSow
VH9376QWoElE2HwC/oSaHBBwjeYZXjCc03Q7p9ScM1QHDdhXi2JrnVb5KoXOzl2I
gmb8e+S2JI3yg76rNvTNi6W/73PzwlYtHDKttpahqprKL8l7us3G1UExBORtKlpD
AnnuN7pfnGSneydN99MD1foOi6lfzEvb3hMu/ve+BMF7zm3syFPbTApVYlv8RTLU
z0XU0XF7qQQRYh+HxVyu1OabR6a/r2zb+bhM+YrYGLHcg8vtjePm5raE0SFf4aym
9YhhEEVVwCc9+k4z/bZUWc7fV9nJSH+pDOtCQwuxR53Bl4l2A4sIyXQL6VIFlosl
7HWl1IqRPKutgW5j
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org