Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d3332203d3e20323637333531.roa
File:                     323830343a346332303a3a2f33322d3332203d3e20323637333531.roa (raw, json)
Hash identifier:          kLPpVdj3BjHjej46/UeGAipKdfqS/lxDRDfQKW6TEhQ=
Subject key identifier:   82:7D:8A:68:26:1D:BD:AF:FF:10:EE:D7:26:87:2A:E3:F8:F6:B8:F5
Certificate issuer:       /CN=9AC49E9CA104D787286E712171E7614ACD0B692E
Certificate serial:       28725AF65BD7FDDC76045EEEAEB1A1C5697BBF63
Authority key identifier: 9A:C4:9E:9C:A1:04:D7:87:28:6E:71:21:71:E7:61:4A:CD:0B:69:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AC49E9CA104D787286E712171E7614ACD0B692E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d3332203d3e20323637333531.roa
Signing time:             Fri 23 Feb 2024 15:38:46 +0000
ROA not before:           Fri 23 Feb 2024 15:33:46 +0000
ROA not after:            Fri 21 Feb 2025 15:38:46 +0000
asID:                     267351
IP address blocks:        2804:4c20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:72:5a:f6:5b:d7:fd:dc:76:04:5e:ee:ae:b1:a1:c5:69:7b:bf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AC49E9CA104D787286E712171E7614ACD0B692E
        Validity
            Not Before: Feb 23 15:33:46 2024 GMT
            Not After : Feb 21 15:38:46 2025 GMT
        Subject: CN=827D8A68261DBDAFFF10EED726872AE3F8F6B8F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:9e:6e:d3:09:d6:9f:c7:c0:bf:d5:d8:f7:
                    e1:8f:b9:5c:89:85:06:0e:b4:f3:2c:6d:be:99:0f:
                    af:18:2b:b7:22:43:e2:d6:4d:2a:b9:72:dc:3b:7d:
                    68:ce:a9:24:d2:12:cc:d0:5a:56:ca:4e:f5:9a:3a:
                    d1:66:f6:40:20:68:6c:c0:92:28:44:dd:a6:42:60:
                    4a:a5:bd:80:a7:c0:2b:ab:d1:17:b0:5f:59:ca:12:
                    aa:26:2c:8a:0e:d9:5d:33:b1:97:ad:17:03:b9:83:
                    11:46:c7:ad:69:dc:f2:18:49:5b:1e:79:b3:0a:6c:
                    b7:ce:1f:cb:bf:89:d9:6e:97:6f:d0:c6:3f:4c:00:
                    9d:c7:9e:0d:20:86:6d:ed:43:f0:4b:1d:1c:6b:3e:
                    f8:02:3c:f5:a2:80:00:fd:17:07:30:ae:14:a1:5d:
                    f9:1a:45:4c:83:0f:74:f2:98:3d:73:f3:3d:42:22:
                    20:4f:df:9a:a6:49:6f:23:a9:f6:51:64:3e:02:7e:
                    77:b3:ab:62:2c:ac:1c:e8:99:ef:3c:08:97:64:61:
                    ff:4e:1c:85:b8:c1:d4:2b:56:c9:cb:41:c6:1a:df:
                    59:19:ef:b2:68:f8:71:d3:5d:8f:0f:3a:5c:23:03:
                    ee:13:ed:ed:fb:e4:55:0b:84:3e:ef:b4:c5:05:71:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:8A:68:26:1D:BD:AF:FF:10:EE:D7:26:87:2A:E3:F8:F6:B8:F5
            X509v3 Authority Key Identifier:
                keyid:9A:C4:9E:9C:A1:04:D7:87:28:6E:71:21:71:E7:61:4A:CD:0B:69:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/9AC49E9CA104D787286E712171E7614ACD0B692E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AC49E9CA104D787286E712171E7614ACD0B692E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d3332203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:fd:c7:26:06:00:39:5f:dc:1e:23:61:85:9c:d9:55:a6:a3:
         c5:64:d7:34:da:7b:d1:6a:0e:7a:37:02:13:80:ae:98:3a:ba:
         61:6b:c5:4a:3c:84:fc:97:f7:b2:4e:38:53:09:4e:1a:02:fe:
         aa:d6:72:01:92:21:2a:f9:5c:65:99:1a:e3:66:38:91:f0:5a:
         14:37:6c:c4:30:a3:2f:cd:bd:d4:36:73:1c:6a:8b:dc:15:50:
         43:74:4f:84:82:a7:d3:22:f7:2c:2c:21:37:3c:37:2c:fb:2c:
         a0:ad:97:56:48:43:25:b3:6a:d2:26:bf:7d:80:11:d0:cb:be:
         7c:d2:0a:9a:5e:1d:03:f0:5c:a0:50:d0:be:27:58:f2:a2:91:
         08:a2:ff:0c:c3:90:b7:21:25:c0:6a:c5:7b:12:b4:15:de:3b:
         0f:71:80:cd:df:ac:40:f8:c5:1f:f7:1d:62:1b:c6:45:0b:7f:
         fb:7a:24:73:3e:5c:d3:8b:3e:52:c0:47:5f:38:53:2a:05:76:
         74:a0:be:f0:e0:08:f7:aa:50:7d:e6:d3:30:01:76:23:af:80:
         96:8f:6e:cf:ea:6d:28:12:9d:94:54:88:a5:33:99:d4:8c:c6:
         c9:cf:bd:07:bc:ed:62:d3:44:b8:ba:bf:db:34:f8:b6:00:1b:
         e0:98:58:9e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKHJa9lvX/dx2BF7urrGhxWl7v2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFDNDlFOUNBMTA0RDc4NzI4NkU3MTIxNzFFNzYxNEFD
RDBCNjkyRTAeFw0yNDAyMjMxNTMzNDZaFw0yNTAyMjExNTM4NDZaMDMxMTAvBgNV
BAMTKDgyN0Q4QTY4MjYxREJEQUZGRjEwRUVENzI2ODcyQUUzRjhGNkI4RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzJ5u0wnWn8fAv9XY9+GPuVyJ
hQYOtPMsbb6ZD68YK7ciQ+LWTSq5ctw7fWjOqSTSEszQWlbKTvWaOtFm9kAgaGzA
kihE3aZCYEqlvYCnwCur0RewX1nKEqomLIoO2V0zsZetFwO5gxFGx61p3PIYSVse
ebMKbLfOH8u/idlul2/Qxj9MAJ3Hng0ghm3tQ/BLHRxrPvgCPPWigAD9FwcwrhSh
XfkaRUyDD3TymD1z8z1CIiBP35qmSW8jqfZRZD4Cfnezq2IsrBzome88CJdkYf9O
HIW4wdQrVsnLQcYa31kZ77Jo+HHTXY8POlwjA+4T7e375FULhD7vtMUFca5DAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgn2KaCYdva//EO7XJocq4/j2uPUwHwYDVR0j
BBgwFoAUmsSenKEE14cobnEhcedhSs0LaS4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhF
dUQvMC85QUM0OUU5Q0ExMDRENzg3Mjg2RTcxMjE3MUU3NjE0QUNEMEI2OTJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBQzQ5RTlDQTEwNEQ3ODcy
ODZFNzEyMTcxRTc2MTRBQ0QwQjY5MkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1TmlmdHNVYnVwMXVUWThqamtzQVFnVXJQejExY25oUzNFODc1Y1VoRXVELzAv
MzIzODMwMzQzYTM0NjMzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzMzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARMIDANBgkqhkiG9w0BAQsFAAOCAQEAzv3HJgYA
OV/cHiNhhZzZVaajxWTXNNp70WoOejcCE4CumDq6YWvFSjyE/Jf3sk44UwlOGgL+
qtZyAZIhKvlcZZka42Y4kfBaFDdsxDCjL8291DZzHGqL3BVQQ3RPhIKn0yL3LCwh
Nzw3LPssoK2XVkhDJbNq0ia/fYAR0Mu+fNIKml4dA/BcoFDQvidY8qKRCKL/DMOQ
tyElwGrFexK0Fd47D3GAzd+sQPjFH/cdYhvGRQt/+3okcz5c04s+UsBHXzhTKgV2
dKC+8OAI96pQfebTMAF2I6+Alo9uz+ptKBKdlFSIpTOZ1IzGyc+9B7ztYtNEuLq/
2zT4tgAb4JhYng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org