Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/1/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa
File:                     323830343a353832343a3a2f33322d3438203d3e20323638313039.roa (raw, json)
Hash identifier:          NsWNu64lvY8pJn4F+5bo0N6uSTjGgeaVnJWvpSn0n7s=
Subject key identifier:   B4:BC:0D:95:CC:CF:88:52:B0:8A:27:0F:23:2D:11:00:A3:FB:74:46
Certificate issuer:       /CN=DCDFC14B4A60270DD418626EDC937B3A3E33A1FB
Certificate serial:       21D57684C2FF8B74DA89A9191D1C53CFDA78C779
Authority key identifier: DC:DF:C1:4B:4A:60:27:0D:D4:18:62:6E:DC:93:7B:3A:3E:33:A1:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/1/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa
Signing time:             Thu 15 Jun 2023 19:18:55 +0000
ROA not before:           Thu 15 Jun 2023 19:13:55 +0000
ROA not after:            Thu 13 Jun 2024 19:18:55 +0000
asID:                     268109
IP address blocks:        2804:5824::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d5:76:84:c2:ff:8b:74:da:89:a9:19:1d:1c:53:cf:da:78:c7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDFC14B4A60270DD418626EDC937B3A3E33A1FB
        Validity
            Not Before: Jun 15 19:13:55 2023 GMT
            Not After : Jun 13 19:18:55 2024 GMT
        Subject: CN=B4BC0D95CCCF8852B08A270F232D1100A3FB7446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:19:97:38:e0:c4:22:1b:be:74:41:78:c4:
                    c9:d7:57:46:36:41:e7:bc:14:f5:b4:75:c7:6a:26:
                    b1:9a:03:bc:38:14:53:89:5b:3a:e4:90:d0:23:1f:
                    5a:ac:a3:9d:e9:ea:d4:53:ac:2e:96:19:ff:a4:94:
                    45:a3:32:99:fd:b0:47:c0:1d:d8:49:72:93:47:70:
                    34:61:b8:6c:68:db:91:44:0c:be:32:01:10:80:83:
                    25:3e:ee:66:24:40:15:cc:1a:95:a0:68:94:15:ed:
                    05:71:dc:be:57:4a:5a:67:76:16:2a:c6:7a:b2:61:
                    5f:3f:77:3f:71:d2:63:17:6e:8b:9a:c5:8a:87:a2:
                    49:86:b1:72:ea:bb:e8:a7:e1:d2:34:2c:a9:fe:8c:
                    aa:e7:06:d7:bb:2d:fc:62:ec:66:d9:3b:f5:ea:b4:
                    2a:26:cb:d3:3c:e6:bb:1a:88:25:05:ec:2d:a3:0c:
                    0b:91:43:e2:26:76:bc:13:f0:81:09:aa:0c:04:fd:
                    29:ec:29:24:fe:76:12:ee:de:98:6a:13:c5:7b:4c:
                    7e:0d:af:09:0d:ec:15:b2:54:5e:5d:67:21:9a:9a:
                    8e:dd:6f:18:17:d7:2c:e7:b6:e4:46:2a:b4:06:56:
                    ca:37:47:e2:15:b6:e5:0a:3c:36:c8:f9:19:3b:bc:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BC:0D:95:CC:CF:88:52:B0:8A:27:0F:23:2D:11:00:A3:FB:74:46
            X509v3 Authority Key Identifier:
                keyid:DC:DF:C1:4B:4A:60:27:0D:D4:18:62:6E:DC:93:7B:3A:3E:33:A1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/1/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/1/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5824::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:ec:9d:3c:95:7e:6b:f9:8e:da:26:68:82:43:a8:70:fa:00:
         29:f5:bd:2a:5e:6f:fa:1c:57:a1:f0:8c:8f:56:21:bd:31:2e:
         e0:76:89:33:dc:b6:9a:b5:10:10:82:ae:03:aa:da:23:ba:5c:
         86:51:c8:83:e7:4a:e0:9b:b7:8c:42:30:2f:ae:9c:62:c7:9b:
         ee:ec:5b:8d:8e:ac:3c:ca:8f:18:0e:a3:e6:fd:ca:ff:97:6e:
         00:92:27:ae:f8:ff:bd:fb:b0:eb:23:64:c6:2a:57:c6:ed:ff:
         d4:03:dc:ca:31:fe:d7:4e:01:20:77:0a:af:c7:89:59:3d:ae:
         01:f8:40:2a:dd:7e:b0:45:67:fb:8c:7c:ab:31:76:de:08:23:
         1b:51:8c:e3:65:26:65:1b:e2:bd:53:81:8f:77:29:82:e3:b8:
         46:27:54:89:6b:50:22:f5:52:8e:c8:9c:c6:69:6f:5e:2d:4c:
         f3:e3:7d:9d:02:3d:ea:19:41:fb:f8:6f:1c:3e:fd:4e:a1:88:
         3b:77:4d:58:86:cf:ff:ec:f5:e2:02:b7:0a:5c:fe:a4:fe:3c:
         3c:f8:66:8b:4c:a1:ff:2a:90:68:8a:a9:54:12:8b:25:17:b3:
         44:d1:72:2b:05:39:9e:e8:a2:1c:02:e6:59:2d:42:36:eb:1c:
         96:26:df:d2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIdV2hML/i3TaiakZHRxTz9p4x3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERkMxNEI0QTYwMjcwREQ0MTg2MjZFREM5MzdCM0Ez
RTMzQTFGQjAeFw0yMzA2MTUxOTEzNTVaFw0yNDA2MTMxOTE4NTVaMDMxMTAvBgNV
BAMTKEI0QkMwRDk1Q0NDRjg4NTJCMDhBMjcwRjIzMkQxMTAwQTNGQjc0NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfBmXOODEIhu+dEF4xMnXV0Y2
Qee8FPW0dcdqJrGaA7w4FFOJWzrkkNAjH1qso53p6tRTrC6WGf+klEWjMpn9sEfA
HdhJcpNHcDRhuGxo25FEDL4yARCAgyU+7mYkQBXMGpWgaJQV7QVx3L5XSlpndhYq
xnqyYV8/dz9x0mMXbouaxYqHokmGsXLqu+in4dI0LKn+jKrnBte7Lfxi7GbZO/Xq
tComy9M85rsaiCUF7C2jDAuRQ+ImdrwT8IEJqgwE/SnsKST+dhLu3phqE8V7TH4N
rwkN7BWyVF5dZyGamo7dbxgX1yzntuRGKrQGVso3R+IVtuUKPDbI+Rk7vOfpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUtLwNlczPiFKwiicPIy0RAKP7dEYwHwYDVR0j
BBgwFoAU3N/BS0pgJw3UGGJu3JN7Oj4zofswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QTUFTVnJjOEF5bXlzNDczd3FFQXh1Z1NQRVpIa1JBdjVybUxOQzZab0FT
LzEvRENERkMxNEI0QTYwMjcwREQ0MTg2MjZFREM5MzdCM0EzRTMzQTFGQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQ0RGQzE0QjRBNjAyNzBERDQx
ODYyNkVEQzkzN0IzQTNFMzNBMUZCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q
TUFTVnJjOEF5bXlzNDczd3FFQXh1Z1NQRVpIa1JBdjVybUxOQzZab0FTLzEvMzIz
ODMwMzQzYTM1MzgzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4MzEz
MDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARYJDANBgkqhkiG9w0BAQsFAAOCAQEAo+ydPJV+a/mO
2iZogkOocPoAKfW9Kl5v+hxXofCMj1YhvTEu4HaJM9y2mrUQEIKuA6raI7pchlHI
g+dK4Ju3jEIwL66cYseb7uxbjY6sPMqPGA6j5v3K/5duAJInrvj/vfuw6yNkxipX
xu3/1APcyjH+104BIHcKr8eJWT2uAfhAKt1+sEVn+4x8qzF23ggjG1GM42UmZRvi
vVOBj3cpguO4RidUiWtQIvVSjsicxmlvXi1M8+N9nQI96hlB+/hvHD79TqGIO3dN
WIbP/+z14gK3Clz+pP48PPhmi0yh/yqQaIqpVBKLJRezRNFyKwU5nuiiHALmWS1C
Nusclibf0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org