Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4ph5zLYXG1vbPA5zm3tQMLxacLSputvik9Uo7JhZEWy/0/323830343a373162633a3a2f33322d3332203d3e20323730383038.roa
File:                     323830343a373162633a3a2f33322d3332203d3e20323730383038.roa (raw, json)
Hash identifier:          wNZz9xM+Ohb+qhKJVsHvkSnF82FnL0XLOTAE6JyE9cQ=
Subject key identifier:   51:A7:4A:A6:BE:30:56:12:C3:5E:37:E8:DE:BF:EB:49:E7:31:76:F4
Certificate issuer:       /CN=DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8
Certificate serial:       5925879C868EC769BA8CB4ACDA3ECE35CFE29893
Authority key identifier: DF:1E:D0:DE:85:0C:2D:6F:5B:E4:32:DC:D8:2A:3D:63:A3:A8:1F:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4ph5zLYXG1vbPA5zm3tQMLxacLSputvik9Uo7JhZEWy/0/323830343a373162633a3a2f33322d3332203d3e20323730383038.roa
Signing time:             Thu 31 Aug 2023 14:17:07 +0000
ROA not before:           Thu 31 Aug 2023 14:12:07 +0000
ROA not after:            Thu 29 Aug 2024 14:17:07 +0000
asID:                     270808
IP address blocks:        2804:71bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:25:87:9c:86:8e:c7:69:ba:8c:b4:ac:da:3e:ce:35:cf:e2:98:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8
        Validity
            Not Before: Aug 31 14:12:07 2023 GMT
            Not After : Aug 29 14:17:07 2024 GMT
        Subject: CN=51A74AA6BE305612C35E37E8DEBFEB49E73176F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:b8:cb:94:8c:5d:0e:ab:9a:62:62:17:e7:
                    54:44:51:9a:bc:ef:97:a7:a1:51:78:b1:51:8a:35:
                    d4:17:3d:2a:1d:6a:5c:97:43:39:74:99:6d:ff:fc:
                    0a:ef:63:05:e7:81:bf:8d:3c:d5:e3:ad:10:fb:9c:
                    8d:65:59:dd:b0:cb:e8:0a:61:e9:ac:b6:9a:c4:63:
                    10:0e:62:c4:18:56:6f:da:18:26:a1:76:77:e4:73:
                    a9:93:2a:0b:ee:0e:15:07:fe:7d:a0:f0:88:60:2e:
                    a4:20:35:06:75:8b:ff:4b:d8:99:5c:0b:ca:88:9e:
                    57:cd:25:12:12:67:2c:f4:f2:e1:20:72:cf:c6:06:
                    b7:3e:37:1d:6e:d9:90:33:75:7e:8f:8c:bf:57:1c:
                    c9:75:52:70:13:56:c2:77:dd:7e:a1:57:fe:00:0b:
                    b4:f6:ee:c3:18:f6:79:91:48:2d:5c:bf:da:cc:00:
                    8e:9f:96:3d:c5:26:ad:7c:6b:ad:98:f9:1a:ce:a3:
                    c5:e3:b3:24:e9:40:63:40:55:02:40:b8:e2:67:96:
                    df:e7:a4:c2:ab:17:66:17:af:1a:e4:8d:90:8d:be:
                    ab:02:1c:53:a3:26:40:cc:60:a8:31:36:ee:5f:c3:
                    f5:ee:e0:49:d5:1d:b7:65:24:00:4e:c1:e5:14:c5:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:4A:A6:BE:30:56:12:C3:5E:37:E8:DE:BF:EB:49:E7:31:76:F4
            X509v3 Authority Key Identifier:
                keyid:DF:1E:D0:DE:85:0C:2D:6F:5B:E4:32:DC:D8:2A:3D:63:A3:A8:1F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4ph5zLYXG1vbPA5zm3tQMLxacLSputvik9Uo7JhZEWy/0/DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ph5zLYXG1vbPA5zm3tQMLxacLSputvik9Uo7JhZEWy/0/323830343a373162633a3a2f33322d3332203d3e20323730383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:c5:ac:51:3e:9c:49:ef:fe:17:ed:5b:97:c5:c6:a8:6f:7a:
         cb:9b:0f:b4:31:23:4b:bb:14:8a:05:8d:08:43:08:6b:63:97:
         1c:54:c2:85:64:73:50:cb:f9:11:0e:6e:29:2e:6e:10:35:f4:
         74:b1:cb:ea:ca:5b:03:1a:3f:9b:df:0d:24:ed:3a:2d:92:4f:
         5e:6a:08:1d:97:52:f7:8d:02:99:5b:88:77:be:a0:30:ac:37:
         26:4d:f2:4d:e8:0a:dc:bd:dc:09:2d:0f:45:0f:b2:19:46:80:
         27:35:ad:ca:3e:48:9c:53:0c:df:78:9b:d2:50:f0:37:69:9c:
         21:22:e8:1c:13:52:c2:86:17:a2:ee:31:8e:d2:e3:25:80:4d:
         fe:11:c9:f8:e2:19:a8:94:89:97:46:08:e7:c5:93:72:b5:2e:
         c3:9b:8a:c0:fd:7f:ec:ef:92:1d:7b:24:aa:81:5e:b5:89:de:
         74:55:e4:78:90:03:93:e8:23:e0:e5:19:e1:50:1c:8a:be:aa:
         92:ab:0a:9c:01:e2:c9:0a:4e:4a:ce:61:63:02:4a:a6:5d:e7:
         7b:59:89:6a:16:16:ca:91:ca:a7:61:db:37:3b:92:b7:43:2e:
         48:ae:ea:2a:39:78:b8:7c:da:42:5e:71:b2:21:ac:18:c2:15:
         70:36:28:04
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWSWHnIaOx2m6jLSs2j7ONc/imJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxRUQwREU4NTBDMkQ2RjVCRTQzMkRDRDgyQTNENjNB
M0E4MUZEODAeFw0yMzA4MzExNDEyMDdaFw0yNDA4MjkxNDE3MDdaMDMxMTAvBgNV
BAMTKDUxQTc0QUE2QkUzMDU2MTJDMzVFMzdFOERFQkZFQjQ5RTczMTc2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJLjLlIxdDquaYmIX51REUZq8
75enoVF4sVGKNdQXPSodalyXQzl0mW3//ArvYwXngb+NPNXjrRD7nI1lWd2wy+gK
YemstprEYxAOYsQYVm/aGCahdnfkc6mTKgvuDhUH/n2g8IhgLqQgNQZ1i/9L2Jlc
C8qInlfNJRISZyz08uEgcs/GBrc+Nx1u2ZAzdX6PjL9XHMl1UnATVsJ33X6hV/4A
C7T27sMY9nmRSC1cv9rMAI6flj3FJq18a62Y+RrOo8XjsyTpQGNAVQJAuOJnlt/n
pMKrF2YXrxrkjZCNvqsCHFOjJkDMYKgxNu5fw/Xu4EnVHbdlJABOweUUxcJJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUadKpr4wVhLDXjfo3r/rSecxdvQwHwYDVR0j
BBgwFoAU3x7Q3oUMLW9b5DLc2Co9Y6OoH9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRwaDV6TFlYRzF2YlBBNXptM3RRTUx4YWNMU3B1dHZpazlVbzdKaFpF
V3kvMC9ERjFFRDBERTg1MEMyRDZGNUJFNDMyRENEODJBM0Q2M0EzQTgxRkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RGMUVEMERFODUwQzJENkY1
QkU0MzJEQ0Q4MkEzRDYzQTNBODFGRDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0cGg1ekxZWEcxdmJQQTV6bTN0UU1MeGFjTFNwdXR2aWs5VW83SmhaRVd5LzAv
MzIzODMwMzQzYTM3MzE2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzgzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARxvDANBgkqhkiG9w0BAQsFAAOCAQEAUcWsUT6c
Se/+F+1bl8XGqG96y5sPtDEjS7sUigWNCEMIa2OXHFTChWRzUMv5EQ5uKS5uEDX0
dLHL6spbAxo/m98NJO06LZJPXmoIHZdS940CmVuId76gMKw3Jk3yTegK3L3cCS0P
RQ+yGUaAJzWtyj5InFMM33ib0lDwN2mcISLoHBNSwoYXou4xjtLjJYBN/hHJ+OIZ
qJSJl0YI58WTcrUuw5uKwP1/7O+SHXskqoFetYnedFXkeJADk+gj4OUZ4VAcir6q
kqsKnAHiyQpOSs5hYwJKpl3ne1mJahYWypHKp2HbNzuSt0MuSK7qKjl4uHzaQl5x
siGsGMIVcDYoBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org