Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a316133303a3a2f33322d3438203d3e203631383434.roa
File:                     323830343a316133303a3a2f33322d3438203d3e203631383434.roa (raw, json)
Hash identifier:          b3YJjbiaRx+8dkNb6+BW2tp5EfLHTdvnggCYfxDigSM=
Subject key identifier:   E7:30:B4:94:C5:C2:0B:19:27:44:28:96:72:BB:F5:AD:07:8E:73:EF
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       62D89A09A86714819F91E648120839F698F19560
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a316133303a3a2f33322d3438203d3e203631383434.roa
Signing time:             Fri 03 May 2024 21:01:41 +0000
ROA not before:           Fri 03 May 2024 20:56:41 +0000
ROA not after:            Fri 02 May 2025 21:01:41 +0000
asID:                     61844
IP address blocks:        2804:1a30::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d8:9a:09:a8:67:14:81:9f:91:e6:48:12:08:39:f6:98:f1:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 20:56:41 2024 GMT
            Not After : May  2 21:01:41 2025 GMT
        Subject: CN=E730B494C5C20B192744289672BBF5AD078E73EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:0b:e3:42:35:d0:81:14:cc:20:98:31:22:
                    b1:8e:06:c1:1c:ef:44:f8:51:27:98:06:c7:f8:92:
                    33:01:4d:90:c0:f1:e9:bd:c9:a8:95:37:c5:7f:d3:
                    b0:e5:3e:cc:66:35:a3:82:60:5e:b7:f5:6a:b5:a7:
                    fd:12:f2:2b:f8:a3:47:31:ad:de:47:25:95:a9:cd:
                    e2:62:25:c0:68:2d:eb:c4:48:90:c2:bf:1b:bd:0d:
                    d4:b4:66:3a:8c:76:18:c0:da:44:78:aa:54:57:04:
                    5c:71:63:30:dd:47:4c:6e:8a:31:b9:ef:61:83:eb:
                    8d:67:5c:b7:d2:ad:6d:40:95:74:bf:de:6b:44:3d:
                    4f:ee:a8:1b:d4:13:d3:3b:c0:1d:28:b5:18:94:b4:
                    25:31:59:fa:f2:e4:ce:e0:72:b5:b0:1e:da:1c:de:
                    bd:17:7d:a1:11:fc:83:7c:51:44:3d:f0:9a:aa:45:
                    6b:44:fd:2a:f4:1c:fd:1c:e7:ba:6f:0d:b2:de:8a:
                    65:ab:2b:86:2f:e6:da:8e:3c:ce:fb:f2:d9:f9:37:
                    e6:94:db:51:83:eb:35:ff:14:6c:83:95:fb:d6:0c:
                    14:8f:a5:6f:20:7d:71:0b:7a:0a:e4:62:59:61:15:
                    1e:66:c3:69:53:ce:74:e3:aa:75:66:16:53:20:c1:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:30:B4:94:C5:C2:0B:19:27:44:28:96:72:BB:F5:AD:07:8E:73:EF
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a316133303a3a2f33322d3438203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:2c:b9:a2:dd:c4:cc:f1:d8:d7:e0:68:80:a9:c6:6c:58:f2:
         2f:10:a4:53:0a:b1:0a:22:2d:98:be:53:c0:88:6c:a8:9f:c3:
         4d:dc:1d:ec:fe:e5:0b:e9:27:15:94:63:3f:c1:9a:50:9d:9c:
         4b:6a:8c:2c:c9:fe:b9:e6:36:a1:c2:c4:9a:5b:f4:fb:9d:db:
         48:38:1d:a2:15:71:50:02:ee:fc:52:bd:79:1a:91:07:5c:d2:
         fd:72:e7:cb:7f:ef:de:a4:a5:6a:63:1d:86:5f:9b:1a:e1:6f:
         9d:2a:29:3b:07:eb:47:87:6b:f0:b1:55:00:4d:60:f8:f2:5c:
         84:b0:24:56:94:56:b9:9a:d1:c3:3a:6c:d1:50:fe:1b:f1:71:
         7d:61:cb:17:fd:52:2d:42:3b:84:3d:66:eb:23:e6:a7:1a:81:
         af:85:02:0e:a0:50:8b:c6:7c:1e:89:30:ec:4c:ba:80:b0:56:
         a3:b5:c9:7c:27:d0:1a:58:39:75:6f:ed:8e:8b:c6:c3:69:6e:
         f9:fc:c9:d1:18:b8:57:cb:6f:3f:a0:56:09:6a:a1:bb:cb:a0:
         e7:2d:8a:6b:03:8a:a5:d2:63:1f:a0:70:cc:eb:b4:07:1c:6d:
         53:e3:d5:c1:86:5b:e5:a3:90:0c:08:7e:95:f5:f9:46:88:a5:
         19:64:34:29
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUYtiaCahnFIGfkeZIEgg59pjxlWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGN0Y4RkRCM0E1RENERUE1MTI2M0ZFMEM2QTI3MkI1
MUYyODAxODAeFw0yNDA1MDMyMDU2NDFaFw0yNTA1MDIyMTAxNDFaMDMxMTAvBgNV
BAMTKEU3MzBCNDk0QzVDMjBCMTkyNzQ0Mjg5NjcyQkJGNUFEMDc4RTczRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOgvjQjXQgRTMIJgxIrGOBsEc
70T4USeYBsf4kjMBTZDA8em9yaiVN8V/07DlPsxmNaOCYF639Wq1p/0S8iv4o0cx
rd5HJZWpzeJiJcBoLevESJDCvxu9DdS0ZjqMdhjA2kR4qlRXBFxxYzDdR0xuijG5
72GD641nXLfSrW1AlXS/3mtEPU/uqBvUE9M7wB0otRiUtCUxWfry5M7gcrWwHtoc
3r0XfaER/IN8UUQ98JqqRWtE/Sr0HP0c57pvDbLeimWrK4Yv5tqOPM778tn5N+aU
21GD6zX/FGyDlfvWDBSPpW8gfXELegrkYllhFR5mw2lTznTjqnVmFlMgwZyPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU5zC0lMXCCxknRCiWcrv1rQeOc+8wHwYDVR0j
BBgwFoAUm/f4/bOl3N6lEmP+DGonK1HygBgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjRhZkNMeGtxSHc0c2pOaXNtVE1MNU01dTdUOXVMR0JZbkRtU0w1YTdx
WGYvMC85QkY3RjhGREIzQTVEQ0RFQTUxMjYzRkUwQzZBMjcyQjUxRjI4MDE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCRjdGOEZEQjNBNURDREVB
NTEyNjNGRTBDNkEyNzJCNTFGMjgwMTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y0YWZDTHhrcUh3NHNqTmlzbVRNTDVNNXU3VDl1TEdCWW5EbVNMNWE3cVhmLzAv
MzIzODMwMzQzYTMxNjEzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGjAwDQYJKoZIhvcNAQELBQADggEBAJ0suaLdxMzx
2NfgaICpxmxY8i8QpFMKsQoiLZi+U8CIbKifw03cHez+5QvpJxWUYz/BmlCdnEtq
jCzJ/rnmNqHCxJpb9Pud20g4HaIVcVAC7vxSvXkakQdc0v1y58t/796kpWpjHYZf
mxrhb50qKTsH60eHa/CxVQBNYPjyXISwJFaUVrma0cM6bNFQ/hvxcX1hyxf9Ui1C
O4Q9Zusj5qcaga+FAg6gUIvGfB6JMOxMuoCwVqO1yXwn0BpYOXVv7Y6LxsNpbvn8
ydEYuFfLbz+gVglqobvLoOctimsDiqXSYx+gcMzrtAccbVPj1cGGW+WjkAwIfpX1
+UaIpRlkNCk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org