Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/323830343a316362343a3a2f33322d3332203d3e203631363730.roa
File:                     323830343a316362343a3a2f33322d3332203d3e203631363730.roa (raw, json)
Hash identifier:          ZfHhslTpVuO0ywxzefn8PKGDGyEFRptlLi7cwTtYK6U=
Subject key identifier:   3B:37:4B:BE:FC:10:F2:C6:D3:E0:FB:DC:9C:6A:D5:68:15:A3:0D:C9
Certificate issuer:       /CN=235C1B5C008D278DFED43A1557D5D941F37370A3
Certificate serial:       39D64F112020A7C7F35824D34EC80D1D5B3D0D7E
Authority key identifier: 23:5C:1B:5C:00:8D:27:8D:FE:D4:3A:15:57:D5:D9:41:F3:73:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/235C1B5C008D278DFED43A1557D5D941F37370A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/323830343a316362343a3a2f33322d3332203d3e203631363730.roa
Signing time:             Fri 17 May 2024 20:39:33 +0000
ROA not before:           Fri 17 May 2024 20:34:33 +0000
ROA not after:            Fri 16 May 2025 20:39:33 +0000
asID:                     61670
IP address blocks:        2804:1cb4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d6:4f:11:20:20:a7:c7:f3:58:24:d3:4e:c8:0d:1d:5b:3d:0d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235C1B5C008D278DFED43A1557D5D941F37370A3
        Validity
            Not Before: May 17 20:34:33 2024 GMT
            Not After : May 16 20:39:33 2025 GMT
        Subject: CN=3B374BBEFC10F2C6D3E0FBDC9C6AD56815A30DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:2a:9f:14:40:4a:64:9c:c6:97:e8:ea:45:
                    91:3f:a1:c5:0d:10:ed:52:9a:16:14:ca:de:e8:d4:
                    06:7c:03:bc:f9:6c:0f:3f:64:d1:87:23:73:47:6c:
                    3d:21:11:2b:9c:ba:83:7c:fb:ac:24:e5:64:ca:72:
                    ae:1d:26:d8:02:1e:2b:1a:4d:78:c6:8f:e1:d1:4f:
                    ae:d1:49:26:8e:93:0b:d8:17:88:a2:55:83:ad:5f:
                    b0:9c:95:b3:bf:f6:bd:44:9b:81:64:eb:a9:17:35:
                    4f:d7:e7:5b:82:5c:40:fb:35:a9:ff:6f:44:53:be:
                    e5:e8:5d:6c:a9:fd:a7:9f:5a:28:b1:59:b5:f3:0e:
                    b4:21:6e:94:2e:46:5e:9a:a6:25:7e:0d:16:48:ca:
                    a5:48:ad:32:60:44:ef:19:25:1d:c7:af:17:65:88:
                    58:d2:7a:48:1e:9d:95:b2:ab:a6:5f:e1:d9:04:ac:
                    fb:48:49:b6:89:9c:62:ab:98:cd:6d:e9:58:1c:74:
                    94:3a:e5:f3:27:a5:c9:99:c2:42:dd:77:ad:ad:b0:
                    a7:6d:66:85:06:e1:6b:6f:3d:e7:a1:fd:5d:e4:80:
                    54:9c:de:3a:9a:c0:dd:62:25:47:2e:f4:4b:eb:ad:
                    d7:2d:44:77:fb:64:0a:b2:b9:64:3c:53:91:42:3b:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:37:4B:BE:FC:10:F2:C6:D3:E0:FB:DC:9C:6A:D5:68:15:A3:0D:C9
            X509v3 Authority Key Identifier:
                keyid:23:5C:1B:5C:00:8D:27:8D:FE:D4:3A:15:57:D5:D9:41:F3:73:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/235C1B5C008D278DFED43A1557D5D941F37370A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/235C1B5C008D278DFED43A1557D5D941F37370A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/323830343a316362343a3a2f33322d3332203d3e203631363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:73:f6:c3:af:1c:79:2c:6e:5a:58:22:7b:62:20:35:ad:
         3b:e3:f3:66:88:a7:39:ed:0e:30:64:09:ae:81:da:0e:35:ec:
         ca:31:f3:d9:9d:c8:4b:22:78:fd:3f:17:b3:4e:c2:58:f6:32:
         ee:b9:6f:65:40:93:34:97:ae:bd:df:cd:dd:b8:a9:ea:bd:89:
         7f:3b:6b:a2:f1:8c:0b:70:a5:55:1d:8c:ac:4f:26:db:49:4a:
         5a:4f:23:f9:1a:e6:19:8f:cc:83:b6:b6:b2:06:76:e4:9e:d0:
         20:07:48:8e:ce:bc:ae:56:86:cb:d0:a1:49:b1:ac:fb:82:13:
         b4:3f:e3:76:23:02:ba:1c:15:6a:4b:e5:51:bf:2b:49:32:14:
         a0:82:de:b0:53:a9:00:eb:df:59:93:86:6f:b2:09:32:10:5e:
         58:05:58:a0:fd:5d:8e:fc:9b:d3:1b:d2:6f:f6:b3:d3:c5:ee:
         aa:b2:55:d4:38:f4:14:fa:59:2b:bb:fc:46:c2:09:f6:f3:df:
         2f:59:a3:5c:a5:19:c7:46:6b:dd:03:70:f4:08:4b:e2:ad:26:
         4b:4d:f1:23:fd:a8:eb:bd:09:dd:92:62:86:a7:08:5a:f8:26:
         4f:13:17:88:46:94:38:c0:c8:1d:ff:71:8d:88:e5:0a:cc:a7:
         d5:dd:85:ee
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUOdZPESAgp8fzWCTTTsgNHVs9DX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM1QzFCNUMwMDhEMjc4REZFRDQzQTE1NTdENUQ5NDFG
MzczNzBBMzAeFw0yNDA1MTcyMDM0MzNaFw0yNTA1MTYyMDM5MzNaMDMxMTAvBgNV
BAMTKDNCMzc0QkJFRkMxMEYyQzZEM0UwRkJEQzlDNkFENTY4MTVBMzBEQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFliqfFEBKZJzGl+jqRZE/ocUN
EO1SmhYUyt7o1AZ8A7z5bA8/ZNGHI3NHbD0hESucuoN8+6wk5WTKcq4dJtgCHisa
TXjGj+HRT67RSSaOkwvYF4iiVYOtX7CclbO/9r1Em4Fk66kXNU/X51uCXED7Nan/
b0RTvuXoXWyp/aefWiixWbXzDrQhbpQuRl6apiV+DRZIyqVIrTJgRO8ZJR3Hrxdl
iFjSekgenZWyq6Zf4dkErPtISbaJnGKrmM1t6VgcdJQ65fMnpcmZwkLdd62tsKdt
ZoUG4WtvPeeh/V3kgFSc3jqawN1iJUcu9EvrrdctRHf7ZAqyuWQ8U5FCO1TNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUOzdLvvwQ8sbT4PvcnGrVaBWjDckwHwYDVR0j
BBgwFoAUI1wbXACNJ43+1DoVV9XZQfNzcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFVoTm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlk
cVovMC8yMzVDMUI1QzAwOEQyNzhERkVENDNBMTU1N0Q1RDk0MUYzNzM3MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzNUMxQjVDMDA4RDI3OERG
RUQ0M0ExNTU3RDVEOTQxRjM3MzcwQTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hVaE5tQ2ZwVlVCQUNtak1MOG13OUdoVThzWk5SV256YkJ0QmlTSkRZZHFaLzAv
MzIzODMwMzQzYTMxNjM2MjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHLQwDQYJKoZIhvcNAQELBQADggEBALLrc/bDrxx5
LG5aWCJ7YiA1rTvj82aIpzntDjBkCa6B2g417Mox89mdyEsieP0/F7NOwlj2Mu65
b2VAkzSXrr3fzd24qeq9iX87a6LxjAtwpVUdjKxPJttJSlpPI/ka5hmPzIO2trIG
duSe0CAHSI7OvK5WhsvQoUmxrPuCE7Q/43YjArocFWpL5VG/K0kyFKCC3rBTqQDr
31mThm+yCTIQXlgFWKD9XY78m9Mb0m/2s9PF7qqyVdQ49BT6WSu7/EbCCfbz3y9Z
o1ylGcdGa90DcPQIS+KtJktN8SP9qOu9Cd2SYoanCFr4Jk8TF4hGlDjAyB3/cY2I
5QrMp9Xdhe4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org