Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33342d3334203d3e20323730393834.roa
File:                     323830343a373437633a3a2f33342d3334203d3e20323730393834.roa (raw, json)
Hash identifier:          K3v2Vj/SwcCyYwTMhHKqvP6ij8qsko92JT/awiGQJ+c=
Subject key identifier:   02:AF:31:CF:FB:71:1B:C0:FC:C3:43:97:A6:69:97:EA:2D:FF:EE:A9
Certificate issuer:       /CN=A5867F518399DDAB33735A7B2492795CCD727428
Certificate serial:       0DF5ACACD2E3049BD3B65189FFD51D46B7C6AED2
Authority key identifier: A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33342d3334203d3e20323730393834.roa
Signing time:             Sat 02 Sep 2023 22:00:14 +0000
ROA not before:           Sat 02 Sep 2023 21:55:14 +0000
ROA not after:            Sat 31 Aug 2024 22:00:14 +0000
asID:                     270984
IP address blocks:        2804:747c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f5:ac:ac:d2:e3:04:9b:d3:b6:51:89:ff:d5:1d:46:b7:c6:ae:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5867F518399DDAB33735A7B2492795CCD727428
        Validity
            Not Before: Sep  2 21:55:14 2023 GMT
            Not After : Aug 31 22:00:14 2024 GMT
        Subject: CN=02AF31CFFB711BC0FCC34397A66997EA2DFFEEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:f1:9d:d7:9e:8c:fe:e0:f0:3a:ac:b2:a0:
                    1c:81:14:86:ee:c8:15:a7:5e:1c:99:1d:81:8d:08:
                    a6:a6:8e:d4:e8:69:71:7f:4c:c3:f2:6b:db:e2:80:
                    d2:73:3d:7c:e1:5a:77:f0:23:3a:59:49:b3:ea:59:
                    63:a9:04:ae:3c:60:f4:5c:2e:c5:f3:f3:bf:9d:97:
                    7c:93:a6:9f:c7:4b:41:c8:ea:dd:fb:bb:5e:93:0d:
                    6c:d1:91:b1:89:12:e3:8e:21:c0:b7:85:1c:41:31:
                    16:06:90:c7:4d:40:fe:ce:e0:99:c1:d2:f6:c4:86:
                    cd:a9:e6:ab:fa:95:48:81:7b:06:ee:79:0f:2d:0d:
                    13:36:1a:85:6e:40:7f:b6:74:04:98:d0:68:ce:a1:
                    4f:6c:5f:24:6c:2a:4d:bb:84:8f:b0:fa:66:6b:3e:
                    20:48:9f:d0:39:49:4b:04:35:82:56:b7:1d:63:a9:
                    1a:d9:b1:a3:c3:df:5d:c8:a2:90:39:9d:2a:93:1d:
                    ca:c5:2b:76:23:f7:59:cd:cd:82:2b:3b:87:50:cd:
                    89:90:b9:79:0d:77:4f:35:02:48:d7:0b:bf:9a:98:
                    80:54:2a:58:3c:e9:ae:71:e9:2c:77:18:2e:02:55:
                    b7:00:ca:44:71:51:ce:b2:36:87:8d:ed:12:20:b5:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:31:CF:FB:71:1B:C0:FC:C3:43:97:A6:69:97:EA:2D:FF:EE:A9
            X509v3 Authority Key Identifier:
                keyid:A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/A5867F518399DDAB33735A7B2492795CCD727428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33342d3334203d3e20323730393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:747c::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:73:d3:17:50:e5:14:86:64:42:c5:f6:c2:80:50:15:bc:b3:
         30:ab:ed:34:00:90:8f:56:54:e6:2e:5a:60:86:9a:01:1e:b9:
         e7:6d:c5:08:21:63:32:db:0c:02:0e:72:c1:85:96:c3:56:49:
         a1:76:9b:45:41:a6:87:83:15:4c:a5:df:a2:14:61:b4:fb:5a:
         e8:7f:6a:a9:77:c1:cd:33:2a:a9:5c:54:72:e9:8c:20:90:e4:
         dc:20:c4:b5:1b:77:c1:0e:d0:7b:6e:24:25:0b:e7:20:64:f0:
         1f:30:64:1f:f1:a1:34:9d:ec:74:9e:c2:ea:1c:57:b5:84:8c:
         b9:87:8c:44:fd:02:5c:d3:83:1d:ca:ad:42:5d:50:e1:90:bd:
         fa:06:9f:61:f6:78:07:b7:07:4d:9e:ed:b1:48:fd:b4:1b:81:
         ac:28:de:94:c6:be:f4:11:89:f9:ef:7e:fa:54:0c:5b:76:76:
         f4:73:56:6d:06:ab:15:66:56:8c:ba:c6:4f:34:78:57:c1:3d:
         a0:9b:61:e3:d1:0e:49:0b:cc:e9:70:0f:a8:4d:df:4e:67:4c:
         9f:1a:5c:92:e7:a3:6a:1a:32:3d:d5:b3:7d:04:eb:54:93:d9:
         03:cb:83:02:1e:4b:32:c6:a4:9c:b0:76:80:07:61:b6:01:2f:
         22:aa:b3:03
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDfWsrNLjBJvTtlGJ/9UdRrfGrtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU4NjdGNTE4Mzk5RERBQjMzNzM1QTdCMjQ5Mjc5NUND
RDcyNzQyODAeFw0yMzA5MDIyMTU1MTRaFw0yNDA4MzEyMjAwMTRaMDMxMTAvBgNV
BAMTKDAyQUYzMUNGRkI3MTFCQzBGQ0MzNDM5N0E2Njk5N0VBMkRGRkVFQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhK/Gd156M/uDwOqyyoByBFIbu
yBWnXhyZHYGNCKamjtToaXF/TMPya9vigNJzPXzhWnfwIzpZSbPqWWOpBK48YPRc
LsXz87+dl3yTpp/HS0HI6t37u16TDWzRkbGJEuOOIcC3hRxBMRYGkMdNQP7O4JnB
0vbEhs2p5qv6lUiBewbueQ8tDRM2GoVuQH+2dASY0GjOoU9sXyRsKk27hI+w+mZr
PiBIn9A5SUsENYJWtx1jqRrZsaPD313IopA5nSqTHcrFK3Yj91nNzYIrO4dQzYmQ
uXkNd081AkjXC7+amIBUKlg86a5x6Sx3GC4CVbcAykRxUc6yNoeN7RIgtUYxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAq8xz/txG8D8w0OXpmmX6i3/7qkwHwYDVR0j
BBgwFoAUpYZ/UYOZ3aszc1p7JJJ5XM1ydCgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGp1R1J0QmRxWkxWOFBkajF3TGNwU3poQVV0ZEoyam1BVFU2WjVzU0hG
Q28vMC9BNTg2N0Y1MTgzOTlEREFCMzM3MzVBN0IyNDkyNzk1Q0NENzI3NDI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E1ODY3RjUxODM5OUREQUIz
MzczNUE3QjI0OTI3OTVDQ0Q3Mjc0MjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqdUdSdEJkcVpMVjhQZGoxd0xjcFN6aEFVdGRKMmptQVRVNlo1c1NIRkNvLzAv
MzIzODMwMzQzYTM3MzQzNzYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMw
MzkzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR0fAAwDQYJKoZIhvcNAQELBQADggEBADRz0xdQ
5RSGZELF9sKAUBW8szCr7TQAkI9WVOYuWmCGmgEeuedtxQghYzLbDAIOcsGFlsNW
SaF2m0VBpoeDFUyl36IUYbT7Wuh/aql3wc0zKqlcVHLpjCCQ5NwgxLUbd8EO0Htu
JCUL5yBk8B8wZB/xoTSd7HSewuocV7WEjLmHjET9AlzTgx3KrUJdUOGQvfoGn2H2
eAe3B02e7bFI/bQbgawo3pTGvvQRifnvfvpUDFt2dvRzVm0GqxVmVoy6xk80eFfB
PaCbYePRDkkLzOlwD6hN305nTJ8aXJLno2oaMj3Vs30E61ST2QPLgwIeSzLGpJyw
doAHYbYBLyKqswM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org