Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/323830343a343165303a383030303a3a2f33342d3334203d3e20323637343632.roa
File:                     323830343a343165303a383030303a3a2f33342d3334203d3e20323637343632.roa (raw, json)
Hash identifier:          mao1MyvMSVz2cLePNojuDqN7J22Q0acoc8Of/L5Fed4=
Subject key identifier:   C1:ED:31:D9:CC:71:A4:6C:B2:45:E1:2E:62:DC:86:8F:F1:67:25:3A
Certificate issuer:       /CN=DB63E784A3E17B835B48947818FD48DB2F6264F6
Certificate serial:       3833ED036AE5A8F4CA9E8AF3EC560898019D5EC5
Authority key identifier: DB:63:E7:84:A3:E1:7B:83:5B:48:94:78:18:FD:48:DB:2F:62:64:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB63E784A3E17B835B48947818FD48DB2F6264F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/323830343a343165303a383030303a3a2f33342d3334203d3e20323637343632.roa
Signing time:             Tue 26 Dec 2023 21:06:59 +0000
ROA not before:           Tue 26 Dec 2023 21:01:59 +0000
ROA not after:            Tue 24 Dec 2024 21:06:59 +0000
asID:                     267462
IP address blocks:        2804:41e0:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:33:ed:03:6a:e5:a8:f4:ca:9e:8a:f3:ec:56:08:98:01:9d:5e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB63E784A3E17B835B48947818FD48DB2F6264F6
        Validity
            Not Before: Dec 26 21:01:59 2023 GMT
            Not After : Dec 24 21:06:59 2024 GMT
        Subject: CN=C1ED31D9CC71A46CB245E12E62DC868FF167253A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:52:db:54:76:aa:f9:de:0b:52:87:de:b9:
                    38:e1:1a:ca:8c:f1:3e:77:37:91:6e:06:c6:f3:1d:
                    1f:05:46:be:ad:6a:18:40:1e:fb:5c:4d:11:4c:7f:
                    e7:18:af:d4:ff:8f:56:3c:3f:78:09:77:64:ff:eb:
                    e6:00:54:05:16:3d:c5:74:79:be:bb:83:21:05:39:
                    83:00:9c:1e:ca:88:58:19:af:27:46:bd:12:82:1d:
                    a1:d5:0d:c4:88:43:8e:52:77:ac:8d:90:16:59:89:
                    44:e5:a5:6f:f4:46:9b:91:5d:d9:e9:79:fc:00:20:
                    5b:78:bd:80:0c:97:b5:d1:72:34:03:17:3b:2e:49:
                    37:c7:01:6d:e5:ab:6b:24:a6:3c:33:57:b0:0e:78:
                    57:54:6c:2c:83:13:0a:fd:a1:25:36:32:08:47:7a:
                    0c:88:3b:03:6d:19:61:a5:df:59:a8:8d:55:8f:99:
                    47:3b:f4:87:14:2d:bd:aa:6c:e6:69:7a:7e:1a:41:
                    18:f4:03:23:93:cf:a2:72:00:33:36:0c:c1:bf:ae:
                    d7:58:d8:4a:01:96:31:c8:40:b2:71:c7:71:c0:ad:
                    c3:65:3b:d9:e8:72:4a:ce:f3:ca:8a:e5:f2:51:b6:
                    9d:71:1b:1d:6f:d4:6e:4f:de:00:35:d9:c5:fb:2c:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:ED:31:D9:CC:71:A4:6C:B2:45:E1:2E:62:DC:86:8F:F1:67:25:3A
            X509v3 Authority Key Identifier:
                keyid:DB:63:E7:84:A3:E1:7B:83:5B:48:94:78:18:FD:48:DB:2F:62:64:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/DB63E784A3E17B835B48947818FD48DB2F6264F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB63E784A3E17B835B48947818FD48DB2F6264F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/323830343a343165303a383030303a3a2f33342d3334203d3e20323637343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41e0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:5f:8d:5b:56:8f:1c:7c:12:dd:2f:e5:cd:8d:d6:f8:de:f7:
         69:e6:a9:11:47:ba:3d:6c:a0:cf:82:ce:f0:e3:7c:1b:0f:4f:
         09:65:b8:8c:f4:11:99:0e:be:a0:cc:60:e8:40:c5:8e:41:d7:
         5a:46:58:11:74:14:c7:c2:65:20:2d:fa:a1:d3:d7:93:e9:9c:
         41:c1:1e:27:47:c5:2d:4c:ca:cb:34:52:40:e9:b8:fa:1c:e8:
         3c:b2:49:b1:3f:d7:e5:1f:54:0b:40:b1:49:8a:8f:50:e5:ea:
         5d:33:9c:42:de:73:c0:4e:f4:49:ce:02:49:a6:58:22:36:9a:
         09:e4:45:90:0e:43:76:6c:cd:58:89:c7:49:28:32:36:b9:bb:
         22:f3:7c:e8:26:7f:3f:33:50:4a:22:75:57:46:6f:5d:f9:0b:
         54:3d:4d:55:19:92:06:76:17:13:31:1d:34:f7:b2:d5:86:ab:
         f8:5d:2b:55:09:7a:a0:2a:73:71:93:e2:20:89:87:4d:9f:28:
         6d:15:c4:22:1c:37:ae:26:ae:9d:70:9f:a8:38:5f:e8:81:a4:
         80:7f:71:11:e1:01:45:95:c2:f2:fb:c6:67:ce:04:02:e5:14:
         85:23:c6:5c:27:64:64:bf:fe:9f:e4:6b:f1:9a:60:0a:29:b4:
         d0:3d:ec:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUODPtA2rlqPTKnorz7FYImAGdXsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2M0U3ODRBM0UxN0I4MzVCNDg5NDc4MThGRDQ4REIy
RjYyNjRGNjAeFw0yMzEyMjYyMTAxNTlaFw0yNDEyMjQyMTA2NTlaMDMxMTAvBgNV
BAMTKEMxRUQzMUQ5Q0M3MUE0NkNCMjQ1RTEyRTYyREM4NjhGRjE2NzI1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXF1LbVHaq+d4LUofeuTjhGsqM
8T53N5FuBsbzHR8FRr6tahhAHvtcTRFMf+cYr9T/j1Y8P3gJd2T/6+YAVAUWPcV0
eb67gyEFOYMAnB7KiFgZrydGvRKCHaHVDcSIQ45Sd6yNkBZZiUTlpW/0RpuRXdnp
efwAIFt4vYAMl7XRcjQDFzsuSTfHAW3lq2skpjwzV7AOeFdUbCyDEwr9oSU2MghH
egyIOwNtGWGl31mojVWPmUc79IcULb2qbOZpen4aQRj0AyOTz6JyADM2DMG/rtdY
2EoBljHIQLJxx3HArcNlO9nockrO88qK5fJRtp1xGx1v1G5P3gA12cX7LNoDAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUwe0x2cxxpGyyReEuYtyGj/FnJTowHwYDVR0j
BBgwFoAU22PnhKPhe4NbSJR4GP1I2y9iZPYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Tb01ETVVTZ1Uya2hjb2F0bnhFVkJHM2hVaW1wajdvdUdGblJmb1hYenUx
LzAvREI2M0U3ODRBM0UxN0I4MzVCNDg5NDc4MThGRDQ4REIyRjYyNjRGNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjYzRTc4NEEzRTE3QjgzNUI0
ODk0NzgxOEZENDhEQjJGNjI2NEY2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
b01ETVVTZ1Uya2hjb2F0bnhFVkJHM2hVaW1wajdvdUdGblJmb1hYenUxLzAvMzIz
ODMwMzQzYTM0MzE2NTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzNzM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQeCAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbX41bVo8cfBLdL+XNjdb43vdp5qkRR7o9bKDPgs7w43wbD08JZbiM9BGZDr6g
zGDoQMWOQddaRlgRdBTHwmUgLfqh09eT6ZxBwR4nR8UtTMrLNFJA6bj6HOg8skmx
P9flH1QLQLFJio9Q5epdM5xC3nPATvRJzgJJplgiNpoJ5EWQDkN2bM1YicdJKDI2
ubsi83zoJn8/M1BKInVXRm9d+QtUPU1VGZIGdhcTMR0097LVhqv4XStVCXqgKnNx
k+IgiYdNnyhtFcQiHDeuJq6dcJ+oOF/ogaSAf3ER4QFFlcLy+8ZnzgQC5RSFI8Zc
J2Rkv/6f5GvxmmAKKbTQPeyk
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org