Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a3a2f33322d3438203d3e203238333039.roa
File:                     323830343a3136633a3a2f33322d3438203d3e203238333039.roa (raw, json)
Hash identifier:          MhFtICbAavA9ee0L5qKnkXYjAot4HFCDHg7Es0v+bMw=
Subject key identifier:   10:DA:2C:D5:96:80:2A:F9:B7:8D:EF:1D:64:2F:2A:68:DE:E1:D9:F2
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       713E73AD116628FA5C06034325B1C758CA521247
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a3a2f33322d3438203d3e203238333039.roa
Signing time:             Thu 15 Feb 2024 10:23:16 +0000
ROA not before:           Thu 15 Feb 2024 10:18:16 +0000
ROA not after:            Thu 13 Feb 2025 10:23:16 +0000
asID:                     28309
IP address blocks:        2804:16c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3e:73:ad:11:66:28:fa:5c:06:03:43:25:b1:c7:58:ca:52:12:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Feb 15 10:18:16 2024 GMT
            Not After : Feb 13 10:23:16 2025 GMT
        Subject: CN=10DA2CD596802AF9B78DEF1D642F2A68DEE1D9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:98:95:77:d8:5e:1d:61:66:2a:e5:b9:a9:
                    8f:e6:99:1e:42:1c:72:ed:6d:f6:94:b2:04:2a:44:
                    d4:28:8e:a5:d0:34:95:67:8c:cf:4f:28:6a:87:cb:
                    ec:49:0d:0e:ad:4a:f0:1b:3c:86:16:7e:fa:dd:11:
                    0e:12:88:2c:b0:ee:34:db:a0:09:e0:22:63:68:e1:
                    b6:3a:fa:54:81:69:0d:f8:8c:8a:99:5c:32:61:f7:
                    ba:e1:c2:28:83:b5:a1:dc:c5:dd:b3:ff:b3:70:a1:
                    3a:f0:25:2c:1d:48:ff:cf:1c:65:c6:d1:8f:76:1f:
                    c0:3f:2c:c7:6e:d6:2a:07:6e:50:ff:14:7f:aa:63:
                    12:85:19:a4:4d:5d:39:60:7c:2f:ff:6e:f2:19:2f:
                    4e:d7:ba:03:8b:21:0a:f4:94:db:92:2c:b7:4f:6a:
                    84:2f:24:86:04:98:ed:d2:ab:d2:e9:55:51:f6:63:
                    19:11:75:47:e3:00:fc:ff:2d:f1:ec:e6:99:cd:b4:
                    9b:2e:53:cc:c7:e8:d5:66:74:c8:ed:b4:a5:56:4e:
                    cc:7f:d6:53:d7:4d:31:9f:fc:0c:a0:f8:af:d5:da:
                    d4:59:4d:e6:60:25:7b:94:28:15:f3:f3:12:bb:39:
                    40:6a:f7:2d:57:29:c1:72:59:d1:fd:3c:44:1f:1c:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DA:2C:D5:96:80:2A:F9:B7:8D:EF:1D:64:2F:2A:68:DE:E1:D9:F2
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/323830343a3136633a3a2f33322d3438203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:b2:b7:77:d1:82:54:28:ef:1d:a8:3c:d2:f9:d0:97:d0:
         6e:90:06:8f:da:a5:e6:f1:84:0c:34:b6:54:c8:c3:fb:b4:e6:
         d0:d1:b0:bc:2c:36:32:8d:d7:ad:4f:89:3d:93:aa:a5:27:18:
         c6:bf:64:03:5f:ab:49:c5:04:fe:49:8f:06:f6:a3:df:d0:17:
         ad:ad:01:87:39:4e:fe:a7:da:87:88:6b:f4:74:d8:e1:16:23:
         9b:12:90:3f:c6:06:9f:f8:7f:75:94:5c:62:40:a8:d7:f5:29:
         c2:70:d4:6f:43:31:17:ba:9e:3f:a9:c2:b8:2a:ea:72:82:e7:
         11:37:f1:78:09:51:c5:96:f2:3b:89:31:f2:b7:c3:16:36:02:
         03:9d:94:06:2a:5b:2b:fc:01:85:58:f5:83:bf:7c:37:2f:60:
         a5:f9:42:d4:8c:ab:9b:41:d7:e4:84:66:23:01:d9:13:63:17:
         1c:d1:d6:bd:37:c0:e8:1a:c2:32:52:06:7d:a7:a0:bc:b0:37:
         f3:38:1a:fe:a0:1b:1e:e4:10:a6:b3:81:de:2d:38:36:3d:b4:
         23:09:00:92:dc:65:b7:c1:b1:c4:3e:b8:77:f4:52:a5:2c:bb:
         88:c4:13:7c:7b:ce:fa:04:c8:d6:00:70:47:a5:7a:c0:fc:c7:
         05:47:6b:f1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUcT5zrRFmKPpcBgNDJbHHWMpSEkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yNDAyMTUxMDE4MTZaFw0yNTAyMTMxMDIzMTZaMDMxMTAvBgNV
BAMTKDEwREEyQ0Q1OTY4MDJBRjlCNzhERUYxRDY0MkYyQTY4REVFMUQ5RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiipiVd9heHWFmKuW5qY/mmR5C
HHLtbfaUsgQqRNQojqXQNJVnjM9PKGqHy+xJDQ6tSvAbPIYWfvrdEQ4SiCyw7jTb
oAngImNo4bY6+lSBaQ34jIqZXDJh97rhwiiDtaHcxd2z/7NwoTrwJSwdSP/PHGXG
0Y92H8A/LMdu1ioHblD/FH+qYxKFGaRNXTlgfC//bvIZL07XugOLIQr0lNuSLLdP
aoQvJIYEmO3Sq9LpVVH2YxkRdUfjAPz/LfHs5pnNtJsuU8zH6NVmdMjttKVWTsx/
1lPXTTGf/Ayg+K/V2tRZTeZgJXuUKBXz8xK7OUBq9y1XKcFyWdH9PEQfHFTZAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUENos1ZaAKvm3je8dZC8qaN7h2fIwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzIzODMwMzQzYTMxMzY2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMzMw
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAFsMA0GCSqGSIb3DQEBCwUAA4IBAQA7yLK3d9GCVCjv
Hag80vnQl9BukAaP2qXm8YQMNLZUyMP7tObQ0bC8LDYyjdetT4k9k6qlJxjGv2QD
X6tJxQT+SY8G9qPf0BetrQGHOU7+p9qHiGv0dNjhFiObEpA/xgaf+H91lFxiQKjX
9SnCcNRvQzEXup4/qcK4KupygucRN/F4CVHFlvI7iTHyt8MWNgIDnZQGKlsr/AGF
WPWDv3w3L2Cl+ULUjKubQdfkhGYjAdkTYxcc0da9N8DoGsIyUgZ9p6C8sDfzOBr+
oBse5BCms4HeLTg2PbQjCQCS3GW3wbHEPrh39FKlLLuIxBN8e876BMjWAHBHpXrA
/McFR2vx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org