Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2A2nb3R3CnuHzc5QUfBACANNtsrkYfAkGGfUgEhHdSy/1/323830343a326364303a3a2f33322d3438203d3e20323635323435.roa
File:                     323830343a326364303a3a2f33322d3438203d3e20323635323435.roa (raw, json)
Hash identifier:          SnUPpPFUEWsLnVuSA8zJyuLLpuqACGqB7AdqCd5TNCI=
Subject key identifier:   1D:B8:81:1C:5C:71:7B:78:B4:59:DF:3F:D6:29:C6:5D:DD:17:97:5F
Certificate issuer:       /CN=B2729C2018F23A1567E2D52386EEADCF2D33D269
Certificate serial:       394905793FA9E66AE252E40351E59C035B9BCAFC
Authority key identifier: B2:72:9C:20:18:F2:3A:15:67:E2:D5:23:86:EE:AD:CF:2D:33:D2:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2729C2018F23A1567E2D52386EEADCF2D33D269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2A2nb3R3CnuHzc5QUfBACANNtsrkYfAkGGfUgEhHdSy/1/323830343a326364303a3a2f33322d3438203d3e20323635323435.roa
Signing time:             Tue 01 Nov 2022 17:33:38 +0000
ROA not before:           Tue 01 Nov 2022 17:28:38 +0000
ROA not after:            Tue 31 Oct 2023 17:33:38 +0000
asID:                     265245
IP address blocks:        2804:2cd0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:49:05:79:3f:a9:e6:6a:e2:52:e4:03:51:e5:9c:03:5b:9b:ca:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2729C2018F23A1567E2D52386EEADCF2D33D269
        Validity
            Not Before: Nov  1 17:28:38 2022 GMT
            Not After : Oct 31 17:33:38 2023 GMT
        Subject: CN=1DB8811C5C717B78B459DF3FD629C65DDD17975F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:35:18:b2:b2:8c:9e:d0:52:db:7d:f9:bd:
                    be:0d:94:0a:af:7f:1f:59:5b:2b:46:88:ed:64:ec:
                    dd:c2:35:1e:f9:40:0c:b7:85:c9:ce:8e:3c:49:98:
                    a9:da:75:a1:bb:95:e2:54:2b:c9:2b:f9:9f:3e:5f:
                    21:0f:e4:68:7c:ae:0c:b0:3f:e0:a7:65:ec:aa:f4:
                    cd:74:b5:11:97:6e:d5:a4:e8:26:c4:25:16:cb:e8:
                    d3:9c:21:28:28:4c:26:2f:ee:1b:69:ca:01:da:f7:
                    54:2d:3f:ba:09:85:cc:35:43:79:37:8c:49:97:b5:
                    38:24:04:da:3e:fe:e6:bb:80:e1:93:0a:ef:e6:ef:
                    df:57:48:9f:73:d6:42:d1:9c:26:8e:5a:38:13:54:
                    03:87:02:35:9d:9a:98:41:f3:25:68:f6:40:f0:7b:
                    ab:a4:68:18:3b:7d:fd:88:88:7b:ee:e3:c7:7e:7e:
                    8d:dc:64:b0:1f:c5:7b:4d:4d:e7:68:a1:a9:da:54:
                    b4:1d:4d:d0:df:a6:05:82:db:e1:3c:c1:db:21:e0:
                    70:7a:d4:1d:c3:ca:60:39:44:14:4d:71:66:da:ff:
                    1c:c5:2f:bc:2f:6a:ea:82:da:d4:d4:c7:ed:00:74:
                    b4:d5:92:ef:ef:71:4c:fe:16:27:1c:f3:16:cb:7f:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B8:81:1C:5C:71:7B:78:B4:59:DF:3F:D6:29:C6:5D:DD:17:97:5F
            X509v3 Authority Key Identifier:
                keyid:B2:72:9C:20:18:F2:3A:15:67:E2:D5:23:86:EE:AD:CF:2D:33:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2A2nb3R3CnuHzc5QUfBACANNtsrkYfAkGGfUgEhHdSy/1/B2729C2018F23A1567E2D52386EEADCF2D33D269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2729C2018F23A1567E2D52386EEADCF2D33D269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2A2nb3R3CnuHzc5QUfBACANNtsrkYfAkGGfUgEhHdSy/1/323830343a326364303a3a2f33322d3438203d3e20323635323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:4a:11:a1:54:53:76:56:bb:ed:10:24:a7:ef:6d:62:be:
         9f:0f:9d:5b:7e:90:74:da:7d:32:2d:53:28:54:c8:2d:7c:c7:
         d7:cc:ae:9d:d3:1b:a1:ca:c6:27:68:72:7d:92:87:33:45:07:
         7e:bf:bb:1c:d6:f7:0a:c5:98:f0:9a:9c:83:bd:37:a1:78:f5:
         ed:93:d3:a0:1a:e2:9b:f7:62:2a:07:dc:38:2c:c2:2e:ac:a3:
         3a:2c:f3:f1:d8:d7:bb:e4:f2:d3:e7:47:e6:fc:bd:80:e8:db:
         e1:5d:35:46:34:df:5c:be:f2:63:9f:53:45:2b:92:8c:ff:a9:
         30:a9:00:e4:cf:78:ec:24:ab:81:14:f3:c9:83:f3:fb:7d:39:
         5e:a3:50:ff:76:00:2b:b0:43:cb:0b:c5:e2:04:0e:4a:1d:fa:
         6b:96:d4:c9:cd:e0:71:f7:8f:33:7c:28:56:c3:55:14:3e:4d:
         e0:04:cd:8e:86:e5:c1:6c:29:00:66:26:b5:f5:26:cd:23:fe:
         f1:64:95:f7:5d:71:9a:69:f1:50:e6:0f:94:c6:b9:f7:5c:99:
         93:a4:c3:10:ce:a1:ef:44:0b:ea:8c:69:d3:86:9e:47:8a:5d:
         84:ab:c8:fc:54:91:41:23:2b:7a:37:ac:9f:9c:d7:cd:76:40:
         19:5e:d7:bf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOUkFeT+p5mriUuQDUeWcA1ubyvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI3MjlDMjAxOEYyM0ExNTY3RTJENTIzODZFRUFEQ0Yy
RDMzRDI2OTAeFw0yMjExMDExNzI4MzhaFw0yMzEwMzExNzMzMzhaMDMxMTAvBgNV
BAMTKDFEQjg4MTFDNUM3MTdCNzhCNDU5REYzRkQ2MjlDNjVEREQxNzk3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBTUYsrKMntBS2335vb4NlAqv
fx9ZWytGiO1k7N3CNR75QAy3hcnOjjxJmKnadaG7leJUK8kr+Z8+XyEP5Gh8rgyw
P+CnZeyq9M10tRGXbtWk6CbEJRbL6NOcISgoTCYv7htpygHa91QtP7oJhcw1Q3k3
jEmXtTgkBNo+/ua7gOGTCu/m799XSJ9z1kLRnCaOWjgTVAOHAjWdmphB8yVo9kDw
e6ukaBg7ff2IiHvu48d+fo3cZLAfxXtNTedooanaVLQdTdDfpgWC2+E8wdsh4HB6
1B3DymA5RBRNcWba/xzFL7wvauqC2tTUx+0AdLTVku/vcUz+Ficc8xbLf4MDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHbiBHFxxe3i0Wd8/1inGXd0Xl18wHwYDVR0j
BBgwFoAUsnKcIBjyOhVn4tUjhu6tzy0z0mkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJBMm5iM1IzQ251SHpjNVFVZkJBQ0FOTnRzcmtZZkFrR0dmVWdFaEhk
U3kvMS9CMjcyOUMyMDE4RjIzQTE1NjdFMkQ1MjM4NkVFQURDRjJEMzNEMjY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyNzI5QzIwMThGMjNBMTU2
N0UyRDUyMzg2RUVBRENGMkQzM0QyNjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyQTJuYjNSM0NudUh6YzVRVWZCQUNBTk50c3JrWWZBa0dHZlVnRWhIZFN5LzEv
MzIzODMwMzQzYTMyNjM2NDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzIzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQs0DANBgkqhkiG9w0BAQsFAAOCAQEAOcdKEaFU
U3ZWu+0QJKfvbWK+nw+dW36QdNp9Mi1TKFTILXzH18yundMbocrGJ2hyfZKHM0UH
fr+7HNb3CsWY8Jqcg703oXj17ZPToBrim/diKgfcOCzCLqyjOizz8djXu+Ty0+dH
5vy9gOjb4V01RjTfXL7yY59TRSuSjP+pMKkA5M947CSrgRTzyYPz+305XqNQ/3YA
K7BDywvF4gQOSh36a5bUyc3gcfePM3woVsNVFD5N4ATNjoblwWwpAGYmtfUmzSP+
8WSV911xmmnxUOYPlMa591yZk6TDEM6h70QL6oxp04aeR4pdhKvI/FSRQSMrejes
n5zXzXZAGV7Xvw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org