Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a396230303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a396230303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          lvyhcVysaghESciLtoWubh80zi181j+q7PBl/UoXjC0=
Subject key identifier:   6F:AF:AD:5D:60:8F:8D:06:CF:0B:5E:3B:5A:4F:2E:D2:16:A8:82:CB
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       5BA95A567396DEA144D38BE823959AE7547244BC
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a396230303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Thu 09 Feb 2023 06:20:34 +0000
ROA not before:           Thu 09 Feb 2023 06:15:34 +0000
ROA not after:            Thu 08 Feb 2024 06:20:34 +0000
asID:                     264242
IP address blocks:        2804:24cc:9b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a9:5a:56:73:96:de:a1:44:d3:8b:e8:23:95:9a:e7:54:72:44:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Feb  9 06:15:34 2023 GMT
            Not After : Feb  8 06:20:34 2024 GMT
        Subject: CN=6FAFAD5D608F8D06CF0B5E3B5A4F2ED216A882CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:98:2f:04:07:ba:a6:c9:d5:1c:86:d8:81:
                    c2:8d:c3:61:1a:b6:44:e4:ef:93:07:a5:89:b3:e8:
                    45:24:0d:91:d2:fc:df:dc:5a:9f:bc:59:3d:7d:64:
                    1b:7e:60:18:9e:c6:f7:bc:83:a6:72:fb:f6:67:84:
                    cc:c6:52:91:fc:d9:6d:59:57:6f:d4:ba:0a:ec:03:
                    bd:26:ac:d2:ef:37:0d:44:7b:d8:3a:d0:e6:26:4c:
                    e8:82:0f:6f:c6:64:f8:c8:4e:2b:93:8d:92:bf:14:
                    0e:e8:ae:52:8c:3a:8a:ea:70:f7:a4:0e:4b:49:c0:
                    98:d6:3f:29:e1:46:bb:e8:88:a5:c1:d2:9d:99:68:
                    6a:a9:f4:31:b2:c5:df:10:53:77:17:27:4b:58:d4:
                    99:38:77:59:f9:c4:8d:3e:4e:ec:1f:02:bb:13:5b:
                    20:3a:7b:ee:e0:30:90:f8:e8:d9:9f:45:e5:24:16:
                    2a:35:fc:64:ee:d1:16:29:9c:75:d4:90:89:2c:dd:
                    18:4c:da:5e:ca:21:a2:0b:08:7c:b2:81:e6:71:f6:
                    a6:8b:fc:cc:57:a7:b7:02:cb:c1:89:e4:7d:60:49:
                    d0:b3:79:0b:27:2c:18:88:06:0c:b5:cd:10:9b:af:
                    36:0d:f2:2f:13:1a:f0:b2:8c:46:11:2c:e6:7c:59:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:AD:5D:60:8F:8D:06:CF:0B:5E:3B:5A:4F:2E:D2:16:A8:82:CB
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a396230303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:b3:12:b5:a7:07:1b:0b:be:10:e7:17:fa:bc:2e:2f:fc:
         99:de:b4:b2:d9:c0:5c:79:6b:d7:d8:79:d9:11:96:e5:f2:27:
         65:09:ec:ad:e7:dc:e4:ba:b4:80:fb:cb:e8:64:6f:b4:10:f0:
         36:4b:85:1a:8a:66:8f:03:dc:6a:d7:63:a6:f9:f1:aa:ce:a8:
         73:72:a2:0c:29:95:2c:6f:a5:8e:c8:6c:f1:9a:81:31:02:97:
         8a:78:ee:49:ca:bc:6d:2d:70:58:6c:2e:7f:d8:b5:b9:16:6e:
         f4:49:69:fa:8a:16:42:75:cf:5a:79:5e:79:c2:5e:8f:76:3e:
         bc:b0:7c:1f:95:1c:37:14:0a:bc:e8:d1:78:81:9a:ba:26:0a:
         08:46:3f:dc:9a:40:a4:9c:28:f7:23:c3:8b:37:c8:25:21:0a:
         1a:af:68:99:e8:85:ff:64:7b:5b:f3:e6:60:5c:06:58:70:f3:
         0f:5a:cf:72:87:51:80:5a:99:e4:ef:17:8c:61:96:e0:18:e0:
         15:98:19:92:f9:ee:8b:d0:bc:db:f5:6b:af:be:ae:e6:e4:b0:
         38:c0:48:55:dc:9b:ef:6a:d0:1c:2b:ed:bf:4f:54:15:29:52:
         e1:0c:6b:51:91:f9:8b:87:35:c0:a5:fe:52:d0:b4:53:10:ba:
         5f:47:25:6b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUW6laVnOW3qFE04voI5Wa51RyRLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkREQzcwMzNCNDVEOTc1NDcwNkQxNjJEN0ZCMkM4QkVF
MUEyOTM4NzAeFw0yMzAyMDkwNjE1MzRaFw0yNDAyMDgwNjIwMzRaMDMxMTAvBgNV
BAMTKDZGQUZBRDVENjA4RjhEMDZDRjBCNUUzQjVBNEYyRUQyMTZBODgyQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDewZgvBAe6psnVHIbYgcKNw2Ea
tkTk75MHpYmz6EUkDZHS/N/cWp+8WT19ZBt+YBiexve8g6Zy+/ZnhMzGUpH82W1Z
V2/UugrsA70mrNLvNw1Ee9g60OYmTOiCD2/GZPjITiuTjZK/FA7orlKMOorqcPek
DktJwJjWPynhRrvoiKXB0p2ZaGqp9DGyxd8QU3cXJ0tY1Jk4d1n5xI0+TuwfArsT
WyA6e+7gMJD46NmfReUkFio1/GTu0RYpnHXUkIks3RhM2l7KIaILCHyygeZx9qaL
/MxXp7cCy8GJ5H1gSdCzeQsnLBiIBgy1zRCbrzYN8i8TGvCyjEYRLOZ8WW0ZAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUb6+tXWCPjQbPC147Wk8u0haogsswHwYDVR0j
BBgwFoAULdxwM7Rdl1RwbRYtf7LIvuGik4cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KbzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6
LzEvMkREQzcwMzNCNDVEOTc1NDcwNkQxNjJEN0ZCMkM4QkVFMUEyOTM4Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8yRERDNzAzM0I0NUQ5NzU0NzA2
RDE2MkQ3RkIyQzhCRUUxQTI5Mzg3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
bzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6LzEvMzIz
ODMwMzQzYTMyMzQ2MzYzM2EzOTYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2Uy
MDMyMzYzNDMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJMybMA0GCSqGSIb3DQEBCwUAA4IB
AQBqArMStacHGwu+EOcX+rwuL/yZ3rSy2cBceWvX2HnZEZbl8idlCeyt59zkurSA
+8voZG+0EPA2S4UaimaPA9xq12Om+fGqzqhzcqIMKZUsb6WOyGzxmoExApeKeO5J
yrxtLXBYbC5/2LW5Fm70SWn6ihZCdc9aeV55wl6Pdj68sHwflRw3FAq86NF4gZq6
JgoIRj/cmkCknCj3I8OLN8glIQoar2iZ6IX/ZHtb8+ZgXAZYcPMPWs9yh1GAWpnk
7xeMYZbgGOAVmBmS+e6L0Lzb9Wuvvq7m5LA4wEhV3JvvatAcK+2/T1QVKVLhDGtR
kfmLhzXApf5S0LRTELpfRyVr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org