Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/323830343a326233383a3a2f33332d3333203d3e20323635313431.roa
File:                     323830343a326233383a3a2f33332d3333203d3e20323635313431.roa (raw, json)
Hash identifier:          coatKut2/Dyzxte5To3aYj62N+A6d3YhA/UB/j4ztfs=
Subject key identifier:   68:A9:59:D5:09:E2:0F:51:0B:20:13:C7:50:4E:30:90:E7:C8:92:31
Certificate issuer:       /CN=47C18131B7D329782CEBCA1510BDB6291781E507
Certificate serial:       28BFC5F37E2C185FC1514BC465D58A4F890F10A7
Authority key identifier: 47:C1:81:31:B7:D3:29:78:2C:EB:CA:15:10:BD:B6:29:17:81:E5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C18131B7D329782CEBCA1510BDB6291781E507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/323830343a326233383a3a2f33332d3333203d3e20323635313431.roa
Signing time:             Thu 04 Apr 2024 12:04:17 +0000
ROA not before:           Thu 04 Apr 2024 11:59:17 +0000
ROA not after:            Thu 03 Apr 2025 12:04:17 +0000
asID:                     265141
IP address blocks:        2804:2b38::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bf:c5:f3:7e:2c:18:5f:c1:51:4b:c4:65:d5:8a:4f:89:0f:10:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C18131B7D329782CEBCA1510BDB6291781E507
        Validity
            Not Before: Apr  4 11:59:17 2024 GMT
            Not After : Apr  3 12:04:17 2025 GMT
        Subject: CN=68A959D509E20F510B2013C7504E3090E7C89231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:30:3c:fa:00:ce:65:38:f1:fd:ef:42:6e:
                    62:2b:50:e9:a0:00:8b:fb:e4:e6:80:43:f1:89:d5:
                    10:84:ab:dc:c5:92:82:b8:88:83:35:96:5d:95:cc:
                    2d:0a:ac:fb:56:55:aa:0c:a7:a2:54:13:43:70:e1:
                    5b:87:e9:a7:79:36:f8:42:cc:1b:65:c4:91:e7:d1:
                    0c:0d:6d:97:7f:3b:ee:55:25:47:8c:a1:7d:e1:39:
                    de:97:54:35:22:2c:16:e8:a9:20:a7:b6:82:cf:0d:
                    4f:9e:47:73:18:8f:51:98:45:4f:f3:ab:07:22:a8:
                    5e:fb:0e:ac:72:b7:96:95:99:8c:a8:63:67:4a:e7:
                    ca:40:65:a4:cf:37:98:1f:10:81:41:24:c4:5e:31:
                    85:02:d8:56:fe:55:49:f2:ca:7f:f6:e8:88:e4:38:
                    c1:da:04:35:e7:d3:2d:b5:29:f8:30:1f:e9:19:80:
                    52:7a:1c:9c:b0:13:10:1d:34:ef:51:00:55:6f:e0:
                    db:78:fa:aa:de:3c:b4:29:12:7c:e5:b1:ce:6a:40:
                    ea:d7:46:4c:3b:9b:ba:c9:f3:70:4d:ce:48:11:8c:
                    e4:6e:34:69:b7:dd:dd:8f:51:55:ef:14:32:6f:56:
                    66:84:80:ad:72:5f:86:c0:a2:ec:42:c8:e1:b7:ef:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A9:59:D5:09:E2:0F:51:0B:20:13:C7:50:4E:30:90:E7:C8:92:31
            X509v3 Authority Key Identifier:
                keyid:47:C1:81:31:B7:D3:29:78:2C:EB:CA:15:10:BD:B6:29:17:81:E5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/47C18131B7D329782CEBCA1510BDB6291781E507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C18131B7D329782CEBCA1510BDB6291781E507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/323830343a326233383a3a2f33332d3333203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:3e:e6:23:8f:d4:85:f0:11:22:1c:d2:1b:18:63:8d:8b:
         c0:b8:e5:19:41:30:86:9e:54:b5:fb:51:1e:27:9b:4c:d6:38:
         0b:f5:39:6e:5e:3d:41:ae:ce:62:59:df:a3:92:dc:e8:8f:0b:
         a3:19:80:a9:22:f4:28:fe:44:cd:f0:d8:8e:3f:4f:72:45:82:
         83:74:b8:2f:36:c5:b7:8e:51:56:44:d2:43:90:c0:f1:f0:3c:
         30:f5:08:c3:48:7c:38:fa:51:12:98:f9:10:d0:c7:7d:f2:8f:
         7b:d3:91:00:9e:e2:61:0a:67:9e:44:88:29:a2:39:2b:c5:36:
         61:a0:0b:97:f9:90:aa:59:1a:d4:12:2d:8c:fb:69:df:5c:d8:
         7e:01:f1:f2:df:cc:2d:b3:a2:45:79:4f:00:c7:6d:bd:8c:f3:
         6f:30:ea:66:67:71:c2:b3:40:93:81:14:8e:26:d5:09:c6:fa:
         27:71:21:c9:53:5d:e1:7d:36:e7:32:b8:1e:8b:3d:94:93:de:
         6a:88:63:46:6d:f2:cb:9c:9d:2f:17:09:8d:d2:7d:e2:b6:0b:
         87:c2:12:af:7d:14:21:3c:6e:d7:17:6a:b1:d7:0f:8c:24:76:
         ef:55:da:d5:7e:ec:41:ba:c9:9f:c3:07:8a:d6:49:a8:4b:2e:
         65:06:f6:fc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKL/F834sGF/BUUvEZdWKT4kPEKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdDMTgxMzFCN0QzMjk3ODJDRUJDQTE1MTBCREI2Mjkx
NzgxRTUwNzAeFw0yNDA0MDQxMTU5MTdaFw0yNTA0MDMxMjA0MTdaMDMxMTAvBgNV
BAMTKDY4QTk1OUQ1MDlFMjBGNTEwQjIwMTNDNzUwNEUzMDkwRTdDODkyMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrjA8+gDOZTjx/e9CbmIrUOmg
AIv75OaAQ/GJ1RCEq9zFkoK4iIM1ll2VzC0KrPtWVaoMp6JUE0Nw4VuH6ad5NvhC
zBtlxJHn0QwNbZd/O+5VJUeMoX3hOd6XVDUiLBboqSCntoLPDU+eR3MYj1GYRU/z
qwciqF77Dqxyt5aVmYyoY2dK58pAZaTPN5gfEIFBJMReMYUC2Fb+VUnyyn/26Ijk
OMHaBDXn0y21KfgwH+kZgFJ6HJywExAdNO9RAFVv4Nt4+qrePLQpEnzlsc5qQOrX
Rkw7m7rJ83BNzkgRjORuNGm33d2PUVXvFDJvVmaEgK1yX4bAouxCyOG379SNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaKlZ1QniD1ELIBPHUE4wkOfIkjEwHwYDVR0j
BBgwFoAUR8GBMbfTKXgs68oVEL22KReB5QcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1j
djEvMS80N0MxODEzMUI3RDMyOTc4MkNFQkNBMTUxMEJEQjYyOTE3ODFFNTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QzE4MTMxQjdEMzI5Nzgy
Q0VCQ0ExNTEwQkRCNjI5MTc4MUU1MDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYWndKTGVCRE5BeVF1R2huVHZTY2txU21xNzlRdVhnQjQ2M1JvTnltY3YxLzEv
MzIzODMwMzQzYTMyNjIzMzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzEzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQrOAAwDQYJKoZIhvcNAQELBQADggEBAF8gPuYj
j9SF8BEiHNIbGGONi8C45RlBMIaeVLX7UR4nm0zWOAv1OW5ePUGuzmJZ36OS3OiP
C6MZgKki9Cj+RM3w2I4/T3JFgoN0uC82xbeOUVZE0kOQwPHwPDD1CMNIfDj6URKY
+RDQx33yj3vTkQCe4mEKZ55EiCmiOSvFNmGgC5f5kKpZGtQSLYz7ad9c2H4B8fLf
zC2zokV5TwDHbb2M828w6mZnccKzQJOBFI4m1QnG+idxIclTXeF9NucyuB6LPZST
3mqIY0Zt8sucnS8XCY3SfeK2C4fCEq99FCE8btcXarHXD4wkdu9V2tV+7EG6yZ/D
B4rWSahLLmUG9vw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org