Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666666323a3a2f34382d3438203d3e20323632343137.roa
File:                     323830343a6532343a666666323a3a2f34382d3438203d3e20323632343137.roa (raw, json)
Hash identifier:          O3DbqXKlESbJ18y0OzD9uNqoNJCYQiTXFtjPm5CKhcQ=
Subject key identifier:   17:72:E5:1A:85:8B:44:86:B0:DF:0F:CB:D1:AC:3C:8D:FF:A0:6B:E9
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       095FE9E3ADEB43B488EE19B0C30F5679C59C9207
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666666323a3a2f34382d3438203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:36:35 +0000
ROA not before:           Mon 11 Dec 2023 17:31:35 +0000
ROA not after:            Mon 09 Dec 2024 17:36:35 +0000
asID:                     262417
IP address blocks:        2804:e24:fff2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:e9:e3:ad:eb:43:b4:88:ee:19:b0:c3:0f:56:79:c5:9c:92:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:31:35 2023 GMT
            Not After : Dec  9 17:36:35 2024 GMT
        Subject: CN=1772E51A858B4486B0DF0FCBD1AC3C8DFFA06BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:d3:c7:3f:30:82:33:77:5b:e6:a1:c4:b2:
                    72:6f:25:88:74:26:48:47:e2:23:ac:cd:06:f3:44:
                    3c:07:48:b0:82:d5:50:2f:e3:e1:af:22:9d:2f:04:
                    39:32:d1:69:03:af:81:59:20:f0:ed:a0:3a:b5:6b:
                    03:5a:d7:c1:87:20:66:5b:76:f0:04:9e:4e:0e:c0:
                    1d:78:91:c7:90:c5:37:fc:24:88:85:54:dc:60:19:
                    18:66:bb:7c:fe:61:10:89:cb:f3:ef:b0:e9:49:38:
                    64:c2:ec:96:43:61:c3:82:ab:c8:67:35:40:24:ea:
                    8d:b4:32:d5:be:a8:17:41:93:16:bf:b2:5d:dc:c2:
                    cc:5f:0d:3a:73:ad:22:0e:3e:15:a4:14:80:ed:e2:
                    17:ea:b5:d0:bd:8a:ea:6f:52:a2:46:13:1a:de:60:
                    88:b7:97:bf:05:4f:af:e5:21:ba:e2:dc:21:3c:21:
                    38:3b:a6:04:b1:69:ad:be:51:38:5c:ad:cb:21:47:
                    43:1d:14:e1:d5:6f:b0:a3:ff:ba:05:d8:1d:a3:17:
                    e1:09:22:71:07:18:93:47:e2:6c:0c:f5:43:2f:9a:
                    45:45:11:24:36:fe:e3:99:56:1f:01:23:46:d5:93:
                    e1:80:36:c2:3c:15:57:2e:f5:d7:09:34:da:16:02:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:72:E5:1A:85:8B:44:86:B0:DF:0F:CB:D1:AC:3C:8D:FF:A0:6B:E9
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666666323a3a2f34382d3438203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e24:fff2::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:59:8a:de:aa:5b:6a:40:7d:92:63:a0:61:b4:1e:77:1a:
         a5:a1:15:a0:27:c0:7e:56:ea:c6:35:3a:59:36:b7:25:1e:c4:
         1c:e6:61:78:0e:60:fb:b5:b8:1e:f3:ca:e6:0a:38:3e:38:c1:
         6e:db:7c:13:89:ea:d8:32:6f:82:28:34:56:1f:38:e4:5d:24:
         35:32:1e:6c:e1:d0:92:64:fd:2f:20:fc:3d:fa:98:d3:e1:d9:
         cd:c5:ec:16:9e:10:fc:06:ca:9b:2f:ac:6d:00:e1:98:f8:6c:
         22:55:df:01:ef:bf:13:d8:b4:c7:4a:9f:36:62:4d:17:bf:27:
         91:4c:ca:98:eb:55:e7:0c:80:17:f8:7b:28:5f:29:50:1f:f3:
         45:c9:6d:15:b0:33:49:d5:bd:0b:d7:dd:3b:64:cc:92:74:27:
         f3:f5:0e:eb:fc:66:15:f8:23:5c:cb:60:7d:62:60:11:87:a3:
         f4:b4:1b:ba:d8:ee:a3:7c:59:36:35:86:fb:6e:02:b0:ca:17:
         8d:7f:0f:bb:7b:3d:7e:fd:fd:8f:a1:69:0a:9e:c1:d7:59:ef:
         79:61:fd:0e:74:2c:bc:06:78:d1:fb:53:4e:bd:c4:d4:46:5e:
         5b:c5:84:8e:16:0d:4d:6b:9d:ed:cd:91:99:7e:26:a9:8d:8b:
         03:57:5c:a8
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUCV/p463rQ7SI7hmwww9WecWckgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdBNEFGNUE1REFBOTMwMUU1NjEzNzRGMzgzNTI1OTFF
MDkzQzI3MDAeFw0yMzEyMTExNzMxMzVaFw0yNDEyMDkxNzM2MzVaMDMxMTAvBgNV
BAMTKDE3NzJFNTFBODU4QjQ0ODZCMERGMEZDQkQxQUMzQzhERkZBMDZCRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWiNPHPzCCM3db5qHEsnJvJYh0
JkhH4iOszQbzRDwHSLCC1VAv4+GvIp0vBDky0WkDr4FZIPDtoDq1awNa18GHIGZb
dvAEnk4OwB14kceQxTf8JIiFVNxgGRhmu3z+YRCJy/PvsOlJOGTC7JZDYcOCq8hn
NUAk6o20MtW+qBdBkxa/sl3cwsxfDTpzrSIOPhWkFIDt4hfqtdC9iupvUqJGExre
YIi3l78FT6/lIbri3CE8ITg7pgSxaa2+UThcrcshR0MdFOHVb7Cj/7oF2B2jF+EJ
InEHGJNH4mwM9UMvmkVFESQ2/uOZVh8BI0bVk+GANsI8FVcu9dcJNNoWAkavAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUF3LlGoWLRIaw3w/L0aw8jf+ga+kwHwYDVR0j
BBgwFoAUl6SvWl2qkwHlYTdPODUlkeCTwnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdV
ZlIvMC85N0E0QUY1QTVEQUE5MzAxRTU2MTM3NEYzODM1MjU5MUUwOTNDMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3QTRBRjVBNURBQTkzMDFF
NTYxMzc0RjM4MzUyNTkxRTA5M0MyNzAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQjQ1UnpGZzNHNGlVaXo0ZnVVNHFUOFBHbzY0UlJQTHR6YU1XeGZHVWZSLzAv
MzIzODMwMzQzYTY1MzIzNDNhNjY2NjY2MzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzIzNDMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBA4k//IwDQYJKoZIhvcNAQELBQAD
ggEBAHmiWYreqltqQH2SY6BhtB53GqWhFaAnwH5W6sY1Olk2tyUexBzmYXgOYPu1
uB7zyuYKOD44wW7bfBOJ6tgyb4IoNFYfOORdJDUyHmzh0JJk/S8g/D36mNPh2c3F
7BaeEPwGypsvrG0A4Zj4bCJV3wHvvxPYtMdKnzZiTRe/J5FMypjrVecMgBf4eyhf
KVAf80XJbRWwM0nVvQvX3TtkzJJ0J/P1Duv8ZhX4I1zLYH1iYBGHo/S0G7rY7qN8
WTY1hvtuArDKF41/D7t7PX79/Y+haQqewddZ73lh/Q50LLwGeNH7U069xNRGXlvF
hI4WDU1rne3NkZl+JqmNiwNXXKg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org