Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33332d3333203d3e203532363936.roa
File:                     323830343a6336303a3a2f33332d3333203d3e203532363936.roa (raw, json)
Hash identifier:          Tnw8XSgsDvEKiB9CkPx21odGv9YJiotWJaS/f5ODavg=
Subject key identifier:   27:10:75:2B:35:D0:D7:5E:21:E6:1A:93:38:28:2C:E0:E6:5C:D1:0C
Certificate issuer:       /CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
Certificate serial:       38EBB6D1C41E02878F0CFEF582FAC69D575A7409
Authority key identifier: C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33332d3333203d3e203532363936.roa
Signing time:             Wed 07 Feb 2024 05:40:48 +0000
ROA not before:           Wed 07 Feb 2024 05:35:48 +0000
ROA not after:            Wed 05 Feb 2025 05:40:48 +0000
asID:                     52696
IP address blocks:        2804:c60::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:eb:b6:d1:c4:1e:02:87:8f:0c:fe:f5:82:fa:c6:9d:57:5a:74:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
        Validity
            Not Before: Feb  7 05:35:48 2024 GMT
            Not After : Feb  5 05:40:48 2025 GMT
        Subject: CN=2710752B35D0D75E21E61A9338282CE0E65CD10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:95:5c:38:b2:41:bf:f8:07:31:fe:df:ef:
                    62:13:c4:fc:ff:2b:eb:ea:5e:d0:a1:39:cd:bc:36:
                    30:fa:11:0a:ca:71:d8:8c:b1:0b:a1:83:d6:e7:e1:
                    97:07:ed:a4:54:f4:0f:2b:91:b5:8c:ca:ff:2b:82:
                    f2:21:84:ee:0e:3f:f0:dc:4b:3a:f6:9b:71:22:a6:
                    9c:0a:07:4b:0e:dc:87:f6:a7:aa:49:d0:1b:a9:aa:
                    2a:ce:ee:ad:b1:42:e9:b3:5a:ae:49:df:d3:1b:20:
                    61:7f:42:95:61:a6:ac:7e:22:ae:27:e4:2e:11:39:
                    83:7e:25:f9:a6:9b:db:0f:de:82:41:12:d7:d2:b5:
                    a5:83:be:26:dc:b5:8f:51:8c:3d:cf:de:d9:05:e1:
                    ec:ab:1d:32:1a:fa:d6:08:33:2b:3e:a7:3d:0e:02:
                    63:91:1e:dc:56:d7:fa:d5:aa:79:ae:15:24:5e:47:
                    3a:7e:71:b0:71:d4:85:35:6c:8e:f0:dd:1e:87:82:
                    ea:0f:fa:41:4f:2b:c5:71:6d:f6:52:b5:49:ea:37:
                    b0:ee:13:a6:a1:7f:52:c6:c6:78:bc:d6:b7:1c:a8:
                    61:7a:22:23:fe:d7:d6:78:d1:03:27:e2:95:32:28:
                    49:37:a5:f2:9f:44:4f:23:20:00:b3:ce:bd:e8:de:
                    10:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:75:2B:35:D0:D7:5E:21:E6:1A:93:38:28:2C:E0:E6:5C:D1:0C
            X509v3 Authority Key Identifier:
                keyid:C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33332d3333203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c60::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:26:79:eb:10:87:ae:11:4c:3f:ba:86:3f:21:7a:9d:f7:97:
         4b:51:ee:ff:56:25:6e:fa:6e:0d:39:c1:62:e3:fd:19:aa:5c:
         78:f7:8e:6c:9b:68:a7:75:cc:d1:08:3c:2f:a6:cd:00:63:a5:
         b0:08:f1:9a:eb:fb:57:20:59:ed:8e:10:cc:1a:e7:31:52:66:
         27:d2:e5:d3:00:be:43:6a:98:d7:96:87:49:db:9f:54:73:1a:
         78:b2:8b:77:cf:ff:75:9a:9e:2f:ce:74:14:67:12:91:8d:9f:
         b0:63:32:54:3c:3a:54:bd:d1:6e:21:f1:af:db:34:f3:cf:f0:
         2f:85:98:9a:6d:44:aa:5c:c5:b5:ff:14:ff:01:6d:10:1b:24:
         40:88:04:63:f9:04:7e:f7:66:d8:a5:6e:91:ff:7a:df:30:bb:
         47:bf:6d:9b:3e:35:d5:f8:05:ff:39:d9:76:83:0c:f3:1d:78:
         0c:90:5f:82:72:24:f9:63:51:e5:d0:7f:88:71:21:3d:6d:76:
         1e:ba:81:31:0a:67:af:59:f5:5d:67:fb:47:50:ed:07:b4:9a:
         0c:40:b4:59:cf:67:ca:60:9f:6c:dc:b7:ed:c4:72:7d:35:14:
         ef:d9:10:52:09:38:aa:13:76:7c:72:e7:1d:0d:10:53:84:ea:
         a7:07:da:07
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOOu20cQeAoePDP71gvrGnVdadAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyMDdDQkNERDVDNTg4QUE2Rjk4OTU0RTQ2NDJCQUNE
OUMyMDZGNTAeFw0yNDAyMDcwNTM1NDhaFw0yNTAyMDUwNTQwNDhaMDMxMTAvBgNV
BAMTKDI3MTA3NTJCMzVEMEQ3NUUyMUU2MUE5MzM4MjgyQ0UwRTY1Q0QxMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5JVcOLJBv/gHMf7f72ITxPz/
K+vqXtChOc28NjD6EQrKcdiMsQuhg9bn4ZcH7aRU9A8rkbWMyv8rgvIhhO4OP/Dc
Szr2m3EippwKB0sO3If2p6pJ0BupqirO7q2xQumzWq5J39MbIGF/QpVhpqx+Iq4n
5C4ROYN+Jfmmm9sP3oJBEtfStaWDvibctY9RjD3P3tkF4eyrHTIa+tYIMys+pz0O
AmORHtxW1/rVqnmuFSReRzp+cbBx1IU1bI7w3R6HguoP+kFPK8VxbfZStUnqN7Du
E6ahf1LGxni81rccqGF6IiP+19Z40QMn4pUyKEk3pfKfRE8jIACzzr3o3hDhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJxB1KzXQ114h5hqTOCgs4OZc0QwwHwYDVR0j
BBgwFoAUyCB8vN1cWIqm+YlU5GQrrNnCBvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnB4dzJlV1V3aVFNOGo4U0xzVWNLS1ZaNEZDVGk5ZlhzRDJLNHRvaEpl
Z2kvMC9DODIwN0NCQ0RENUM1ODhBQTZGOTg5NTRFNDY0MkJBQ0Q5QzIwNkY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4MjA3Q0JDREQ1QzU4OEFB
NkY5ODk1NEU0NjQyQkFDRDlDMjA2RjUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZweHcyZVdVd2lRTThqOFNMc1VjS0tWWjRGQ1RpOWZYc0QySzR0b2hKZWdpLzAv
MzIzODMwMzQzYTYzMzYzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDM1MzIzNjM5
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgcoBAxgADANBgkqhkiG9w0BAQsFAAOCAQEAJyZ56xCHrhFM
P7qGPyF6nfeXS1Hu/1YlbvpuDTnBYuP9GapcePeObJtop3XM0Qg8L6bNAGOlsAjx
muv7VyBZ7Y4QzBrnMVJmJ9Ll0wC+Q2qY15aHSdufVHMaeLKLd8//dZqeL850FGcS
kY2fsGMyVDw6VL3RbiHxr9s088/wL4WYmm1EqlzFtf8U/wFtEBskQIgEY/kEfvdm
2KVukf963zC7R79tmz411fgF/znZdoMM8x14DJBfgnIk+WNR5dB/iHEhPW12HrqB
MQpnr1n1XWf7R1DtB7SaDEC0Wc9nymCfbNy37cRyfTUU79kQUgk4qhN2fHLnHQ0Q
U4TqpwfaBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org