Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/323830343a3161343a3a2f33322d3333203d3e203238313430.roa
File:                     323830343a3161343a3a2f33322d3333203d3e203238313430.roa (raw, json)
Hash identifier:          EaVfxcVBu7DS/CVWnZ7Kg2YaiIQ0DGKTCyCEjE5xrSs=
Subject key identifier:   54:25:58:43:E2:29:D1:54:AE:F0:78:24:FE:B5:41:A3:F7:26:9F:A1
Certificate issuer:       /CN=F62DE795A8A9D5008B0F890B1AE18AC4AB39928F
Certificate serial:       4E1E97DA998BAE4AE9C01A4E20888ADDCC059DF4
Authority key identifier: F6:2D:E7:95:A8:A9:D5:00:8B:0F:89:0B:1A:E1:8A:C4:AB:39:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/323830343a3161343a3a2f33322d3333203d3e203238313430.roa
Signing time:             Thu 10 Aug 2023 22:56:09 +0000
ROA not before:           Thu 10 Aug 2023 22:51:09 +0000
ROA not after:            Thu 08 Aug 2024 22:56:09 +0000
asID:                     28140
IP address blocks:        2804:1a4::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1e:97:da:99:8b:ae:4a:e9:c0:1a:4e:20:88:8a:dd:cc:05:9d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62DE795A8A9D5008B0F890B1AE18AC4AB39928F
        Validity
            Not Before: Aug 10 22:51:09 2023 GMT
            Not After : Aug  8 22:56:09 2024 GMT
        Subject: CN=54255843E229D154AEF07824FEB541A3F7269FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:5c:fc:24:39:99:d5:f1:57:67:09:d4:b7:
                    23:f5:34:3e:2d:e4:ef:e5:f0:cc:6a:6a:b0:cf:87:
                    6b:f1:76:cd:db:3f:2f:e1:6f:15:80:5e:5d:bc:bd:
                    ba:11:75:ca:b7:08:f2:08:cd:7b:1c:b9:1a:0a:9c:
                    a9:02:89:6d:0b:e5:25:09:58:73:6f:fd:2f:12:d8:
                    ac:02:3b:fd:44:2e:a3:e6:58:4f:34:de:d7:65:01:
                    8d:ea:22:45:39:fb:e9:a4:c7:87:42:e6:01:dc:70:
                    cb:c2:5d:a3:f3:b5:06:7f:e4:68:bf:48:41:f7:48:
                    ae:fa:e8:c9:27:64:42:24:47:10:93:d1:b1:6d:28:
                    6b:c1:ad:f7:c2:25:01:5b:81:a5:6b:f0:1b:1f:05:
                    52:4a:fe:66:5e:d8:ab:72:3d:11:68:64:3b:c0:cc:
                    58:fe:fc:56:cf:1f:20:14:89:a7:40:ec:eb:66:bb:
                    35:bb:03:17:e3:32:d3:3b:e2:36:84:bc:8f:bf:38:
                    d7:40:22:64:78:09:e3:17:bd:a7:e0:ab:eb:72:b1:
                    d2:f9:c9:db:10:63:60:ec:54:20:78:7a:ed:42:38:
                    c6:1b:22:15:5f:75:32:36:20:3c:7b:38:4a:4f:4b:
                    4d:4a:25:45:e6:3d:41:14:0d:2f:2e:05:1f:13:d4:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:25:58:43:E2:29:D1:54:AE:F0:78:24:FE:B5:41:A3:F7:26:9F:A1
            X509v3 Authority Key Identifier:
                keyid:F6:2D:E7:95:A8:A9:D5:00:8B:0F:89:0B:1A:E1:8A:C4:AB:39:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/323830343a3161343a3a2f33322d3333203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:40:b3:d5:53:8c:85:83:68:4d:24:5c:70:d6:89:89:10:b6:
         f3:e9:40:32:7a:95:7c:93:77:c2:bc:13:c8:a3:4d:7c:4a:50:
         32:57:5e:a5:3a:9e:80:bb:6a:57:3b:31:3c:fd:2c:03:ef:b0:
         cd:6c:c2:db:ad:30:5a:ae:ea:8f:b5:f1:4a:d5:00:23:77:c5:
         98:19:fb:27:8e:c7:05:c9:a4:a9:84:d8:30:a1:d3:f6:00:37:
         44:04:a6:34:e4:16:38:89:c8:00:d1:b4:51:a0:09:6d:eb:7b:
         af:fd:65:9d:ab:41:ae:dc:c4:f6:30:08:35:7d:2d:07:1f:cf:
         9f:c0:f4:80:fb:f3:86:ad:96:5d:f0:14:d0:3b:5d:3c:3f:68:
         b7:94:22:78:54:30:8b:84:63:1f:05:30:72:b2:87:5c:e3:ab:
         58:47:28:46:ee:26:6e:99:67:53:41:cf:1a:96:a5:0f:7d:cc:
         51:ca:ad:30:3a:c2:d4:2b:c7:a4:f3:76:6b:cc:81:d1:b3:a4:
         ee:82:62:6b:78:b6:dc:9f:44:d9:43:49:87:ef:eb:2c:b6:e4:
         e5:74:9c:09:81:c9:e7:6c:70:79:f4:64:5e:19:c5:3b:e1:c7:
         8a:14:61:1e:3f:2a:08:c5:5e:e4:a5:9a:db:9d:73:c8:b3:f5:
         50:e8:d1:4f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUTh6X2pmLrkrpwBpOIIiK3cwFnfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYyREU3OTVBOEE5RDUwMDhCMEY4OTBCMUFFMThBQzRB
QjM5OTI4RjAeFw0yMzA4MTAyMjUxMDlaFw0yNDA4MDgyMjU2MDlaMDMxMTAvBgNV
BAMTKDU0MjU1ODQzRTIyOUQxNTRBRUYwNzgyNEZFQjU0MUEzRjcyNjlGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKlz8JDmZ1fFXZwnUtyP1ND4t
5O/l8MxqarDPh2vxds3bPy/hbxWAXl28vboRdcq3CPIIzXscuRoKnKkCiW0L5SUJ
WHNv/S8S2KwCO/1ELqPmWE803tdlAY3qIkU5++mkx4dC5gHccMvCXaPztQZ/5Gi/
SEH3SK766MknZEIkRxCT0bFtKGvBrffCJQFbgaVr8BsfBVJK/mZe2KtyPRFoZDvA
zFj+/FbPHyAUiadA7OtmuzW7AxfjMtM74jaEvI+/ONdAImR4CeMXvafgq+tysdL5
ydsQY2DsVCB4eu1COMYbIhVfdTI2IDx7OEpPS01KJUXmPUEUDS8uBR8T1DFnAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUVCVYQ+Ip0VSu8Hgk/rVBo/cmn6EwHwYDVR0j
BBgwFoAU9i3nlaip1QCLD4kLGuGKxKs5ko8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjhVd3F3YWdIQjhZdHJzamFXaWJVTFFNeEZKNmZpWjlQTTJVQjlQczF3
aUovMC9GNjJERTc5NUE4QTlENTAwOEIwRjg5MEIxQUUxOEFDNEFCMzk5MjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y2MkRFNzk1QThBOUQ1MDA4
QjBGODkwQjFBRTE4QUM0QUIzOTkyOEYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o4VXdxd2FnSEI4WXRyc2phV2liVUxRTXhGSjZmaVo5UE0yVUI5UHMxd2lKLzAv
MzIzODMwMzQzYTMxNjEzNDNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzgzMTM0
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAGkMA0GCSqGSIb3DQEBCwUAA4IBAQCyQLPVU4yFg2hN
JFxw1omJELbz6UAyepV8k3fCvBPIo018SlAyV16lOp6Au2pXOzE8/SwD77DNbMLb
rTBaruqPtfFK1QAjd8WYGfsnjscFyaSphNgwodP2ADdEBKY05BY4icgA0bRRoAlt
63uv/WWdq0Gu3MT2MAg1fS0HH8+fwPSA+/OGrZZd8BTQO108P2i3lCJ4VDCLhGMf
BTBysodc46tYRyhG7iZumWdTQc8alqUPfcxRyq0wOsLUK8ek83ZrzIHRs6TugmJr
eLbcn0TZQ0mH7+sstuTldJwJgcnnbHB59GReGcU74ceKFGEePyoIxV7kpZrbnXPI
s/VQ6NFP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org