Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a343030303a3a2f33342d3334203d3e20323633313434.roa
File:                     323830343a313736383a343030303a3a2f33342d3334203d3e20323633313434.roa (raw, json)
Hash identifier:          mqcQrTE6JwFMSkHF5gcv8nwYefyG88AiDacZihNSKCg=
Subject key identifier:   EF:EE:8D:2E:A6:3F:F5:F4:38:BE:99:36:32:05:51:51:4D:42:46:E7
Certificate issuer:       /CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
Certificate serial:       3C7629A0A30F439CC6C936F41099302CBB2ECFF6
Authority key identifier: DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a343030303a3a2f33342d3334203d3e20323633313434.roa
Signing time:             Tue 05 Sep 2023 12:07:40 +0000
ROA not before:           Tue 05 Sep 2023 12:02:40 +0000
ROA not after:            Tue 03 Sep 2024 12:07:40 +0000
asID:                     263144
IP address blocks:        2804:1768:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:76:29:a0:a3:0f:43:9c:c6:c9:36:f4:10:99:30:2c:bb:2e:cf:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
        Validity
            Not Before: Sep  5 12:02:40 2023 GMT
            Not After : Sep  3 12:07:40 2024 GMT
        Subject: CN=EFEE8D2EA63FF5F438BE9936320551514D4246E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:31:c7:d1:75:dd:bf:8d:e1:80:ec:f6:dd:
                    84:b9:b3:2e:57:d9:7d:73:ec:8c:c3:29:d6:c1:71:
                    c8:6c:2b:fa:d9:b6:27:56:d8:ad:50:9a:7c:f4:2d:
                    44:af:bb:a8:3e:30:34:95:fd:4d:d4:14:2f:22:51:
                    6a:73:6a:cc:cf:a5:b6:1c:aa:d9:24:27:21:73:22:
                    dc:e3:7b:32:ba:4d:dc:a8:9e:40:a5:6c:2c:8b:cf:
                    e7:02:56:cc:e7:13:fa:31:eb:53:d9:00:bd:31:09:
                    bb:dc:b1:d5:af:9f:22:0a:24:e1:ad:33:07:a7:fd:
                    50:21:9f:59:96:a1:09:e9:9f:47:c9:3c:d9:3e:df:
                    b2:22:14:19:64:fb:2d:32:86:50:9c:79:74:2d:e6:
                    ef:ef:b8:84:d9:27:e6:ac:d7:ae:24:e9:49:b7:5b:
                    6d:94:bb:a1:a1:d3:64:18:f9:15:12:0f:68:f9:6b:
                    29:4c:09:30:7c:f3:bb:91:ca:3f:5d:21:aa:d4:5e:
                    21:94:d5:87:9b:6f:4d:87:5d:a1:7b:01:d6:7b:ca:
                    d2:bb:c7:72:71:04:a7:a0:a8:bb:75:f5:9a:e8:95:
                    1b:e8:75:1c:d0:e0:cd:13:e1:85:9b:30:74:95:75:
                    54:4e:f5:d9:58:39:b6:42:83:e5:ae:41:d7:9c:01:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EE:8D:2E:A6:3F:F5:F4:38:BE:99:36:32:05:51:51:4D:42:46:E7
            X509v3 Authority Key Identifier:
                keyid:DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a343030303a3a2f33342d3334203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:8b:47:73:4e:29:72:42:43:62:97:5b:82:18:38:f0:88:
         5f:00:d6:c8:1a:dc:c3:42:20:3c:38:ac:bb:11:d6:21:10:54:
         40:07:5e:b9:67:fd:e7:09:58:33:d4:f3:f2:25:80:9f:d7:95:
         f1:a6:85:67:3c:b1:6f:6a:11:c9:ad:92:3d:2a:f2:32:18:8a:
         f6:e0:6d:4a:75:8f:28:86:83:62:2b:52:65:5d:8c:db:db:66:
         7e:a1:bc:da:ea:f0:05:cc:26:0c:0d:96:37:c4:9c:1b:19:82:
         97:d4:68:c4:67:12:60:14:f1:07:00:66:40:75:4a:22:c6:c3:
         d9:77:e3:d3:aa:75:4d:6f:28:70:f1:df:d0:20:8b:45:c0:56:
         09:45:ef:8e:40:35:17:e6:94:fb:e8:e5:83:d9:32:2b:8b:63:
         3b:4b:7e:02:80:df:bd:b8:59:08:e7:07:ec:a4:7a:2b:c0:d0:
         e4:56:1f:4d:a3:5a:3e:ba:8e:01:1e:35:79:bf:b4:28:19:3a:
         af:2c:23:48:12:4d:3d:e0:50:ab:3b:2c:77:94:88:23:ee:75:
         28:a2:7e:a6:75:79:8f:3c:a8:d8:ac:98:17:9e:28:88:65:a8:
         01:d7:b7:d3:f5:73:05:fe:d5:f0:7e:64:f1:8f:a1:38:c7:e6:
         dc:ae:9f:b8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPHYpoKMPQ5zGyTb0EJkwLLsuz/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMwN0Y5QzRDMDlEMUIzNzdCNkJFQUUzQ0FGQjE4REY4
RTJBQTlBQzAeFw0yMzA5MDUxMjAyNDBaFw0yNDA5MDMxMjA3NDBaMDMxMTAvBgNV
BAMTKEVGRUU4RDJFQTYzRkY1RjQzOEJFOTkzNjMyMDU1MTUxNEQ0MjQ2RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFTHH0XXdv43hgOz23YS5sy5X
2X1z7IzDKdbBcchsK/rZtidW2K1Qmnz0LUSvu6g+MDSV/U3UFC8iUWpzaszPpbYc
qtkkJyFzItzjezK6TdyonkClbCyLz+cCVsznE/ox61PZAL0xCbvcsdWvnyIKJOGt
Mwen/VAhn1mWoQnpn0fJPNk+37IiFBlk+y0yhlCceXQt5u/vuITZJ+as164k6Um3
W22Uu6Gh02QY+RUSD2j5aylMCTB887uRyj9dIarUXiGU1Yebb02HXaF7AdZ7ytK7
x3JxBKegqLt19ZrolRvodRzQ4M0T4YWbMHSVdVRO9dlYObZCg+WuQdecAcjBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU7+6NLqY/9fQ4vpk2MgVRUU1CRucwHwYDVR0j
BBgwFoAU3Af5xMCdGzd7a+rjyvsY344qqawwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJSMVNCZ01YMUN2ekVYMWlpUXMzM3lTZG5kQjIzVUd1b29VRHJDNndO
UWIvMC9EQzA3RjlDNEMwOUQxQjM3N0I2QkVBRTNDQUZCMThERjhFMkFBOUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDMDdGOUM0QzA5RDFCMzc3
QjZCRUFFM0NBRkIxOERGOEUyQUE5QUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyUjFTQmdNWDFDdnpFWDFpaVFzMzN5U2RuZEIyM1VHdW9vVURyQzZ3TlFiLzAv
MzIzODMwMzQzYTMxMzczNjM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzMxMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEF2hAMA0GCSqGSIb3DQEBCwUA
A4IBAQBoj4tHc04pckJDYpdbghg48IhfANbIGtzDQiA8OKy7EdYhEFRAB165Z/3n
CVgz1PPyJYCf15XxpoVnPLFvahHJrZI9KvIyGIr24G1KdY8ohoNiK1JlXYzb22Z+
obza6vAFzCYMDZY3xJwbGYKX1GjEZxJgFPEHAGZAdUoixsPZd+PTqnVNbyhw8d/Q
IItFwFYJRe+OQDUX5pT76OWD2TIri2M7S34CgN+9uFkI5wfspHorwNDkVh9No1o+
uo4BHjV5v7QoGTqvLCNIEk094FCrOyx3lIgj7nUoon6mdXmPPKjYrJgXniiIZagB
17fT9XMF/tXwfmTxj6E4x+bcrp+4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org