Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/323830343a343165303a3a2f33322d3332203d3e20323637343632.roa
File:                     323830343a343165303a3a2f33322d3332203d3e20323637343632.roa (raw, json)
Hash identifier:          Z2nC4GF+xspmFgYTe4TU44dPZHNrsu98OJuPc7lxCag=
Subject key identifier:   02:9D:E5:25:44:94:89:4A:C3:F0:C5:0B:30:7C:6E:16:ED:59:1D:61
Certificate issuer:       /CN=DB63E784A3E17B835B48947818FD48DB2F6264F6
Certificate serial:       0D2E573C152FB0EB7B2ED4CA27E1002C24FDDCE5
Authority key identifier: DB:63:E7:84:A3:E1:7B:83:5B:48:94:78:18:FD:48:DB:2F:62:64:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB63E784A3E17B835B48947818FD48DB2F6264F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/323830343a343165303a3a2f33322d3332203d3e20323637343632.roa
Signing time:             Tue 26 Dec 2023 21:06:47 +0000
ROA not before:           Tue 26 Dec 2023 21:01:47 +0000
ROA not after:            Tue 24 Dec 2024 21:06:47 +0000
asID:                     267462
IP address blocks:        2804:41e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2e:57:3c:15:2f:b0:eb:7b:2e:d4:ca:27:e1:00:2c:24:fd:dc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB63E784A3E17B835B48947818FD48DB2F6264F6
        Validity
            Not Before: Dec 26 21:01:47 2023 GMT
            Not After : Dec 24 21:06:47 2024 GMT
        Subject: CN=029DE5254494894AC3F0C50B307C6E16ED591D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:85:1f:8e:15:50:a0:94:52:7a:22:8c:de:19:
                    6d:5b:89:61:2d:c6:86:24:37:1c:31:dd:80:5e:f0:
                    2d:16:ec:44:9e:c9:e9:31:df:5e:e5:e6:0e:a9:e2:
                    c1:1d:dd:e1:43:aa:2d:37:93:49:19:d2:b4:af:63:
                    96:80:ce:af:ae:81:7f:67:6b:fe:66:ee:3b:1d:d1:
                    ea:30:f5:12:e2:c1:32:5d:e8:91:7d:8f:94:55:3e:
                    b5:8e:5e:a4:bc:47:68:70:f8:ad:c2:bb:52:9c:29:
                    ba:23:57:99:f1:97:37:69:5a:c3:b5:ce:6d:fc:b1:
                    3d:6b:ea:b4:4f:ff:92:c8:90:bf:a5:19:2b:5f:61:
                    a6:22:3c:38:aa:88:4b:eb:8c:86:9c:f8:a4:40:93:
                    65:fd:8e:c0:d8:1f:e2:55:76:d5:9d:54:46:8d:a8:
                    aa:09:56:0c:ce:cc:3c:5b:7c:29:3c:1c:c9:33:62:
                    ed:30:c3:3e:34:86:e2:f8:13:a0:56:02:23:06:34:
                    90:f5:56:0e:7d:c0:3d:e9:fd:df:32:ae:21:b0:57:
                    25:84:66:52:aa:7d:63:af:c0:b3:4d:05:2d:fc:a6:
                    d4:c9:ec:54:bd:91:ca:3c:2a:71:43:44:dd:c7:90:
                    0b:28:5b:7e:32:86:48:17:73:f4:18:da:c4:05:b7:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:E5:25:44:94:89:4A:C3:F0:C5:0B:30:7C:6E:16:ED:59:1D:61
            X509v3 Authority Key Identifier:
                keyid:DB:63:E7:84:A3:E1:7B:83:5B:48:94:78:18:FD:48:DB:2F:62:64:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/DB63E784A3E17B835B48947818FD48DB2F6264F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB63E784A3E17B835B48947818FD48DB2F6264F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/323830343a343165303a3a2f33322d3332203d3e20323637343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:11:a6:32:71:4f:2a:2d:88:3b:ff:4e:0d:68:63:3e:cd:d2:
         56:94:6f:35:67:0e:5b:b1:96:da:1a:51:72:fb:96:2b:83:37:
         14:66:98:a2:a9:c9:da:f7:dc:62:e9:41:3c:8d:e2:52:98:ca:
         82:93:c4:0d:0b:43:cc:cb:c4:d2:eb:ff:21:1e:da:9e:2a:30:
         83:05:17:c7:55:45:70:75:4a:94:9c:d4:00:94:99:d9:0c:e9:
         46:1e:70:8a:5d:7b:bc:1b:a5:3a:52:fa:c7:29:3f:ba:21:4c:
         7e:94:8b:f0:7c:bf:f5:86:4b:7a:7e:29:4c:d2:a0:d0:92:d5:
         a8:90:5b:35:84:41:56:bb:86:9f:37:a1:7e:23:a8:54:08:d0:
         58:f5:2d:04:e9:02:a9:f6:37:2b:44:76:d2:cf:36:8b:11:c0:
         45:00:09:bd:79:53:c6:9d:14:bf:5d:17:c0:22:b5:cc:fe:f9:
         81:fa:66:ba:f5:60:e3:aa:4f:d0:38:26:8e:68:7c:d9:6e:88:
         09:d8:c1:16:9b:f8:5f:9d:01:ec:94:43:21:7a:dd:37:c6:a8:
         36:a2:42:7d:89:ec:4c:6f:b2:2a:d8:e4:96:4f:0a:bd:27:9d:
         44:ec:f6:5e:03:0e:d2:14:24:3d:fb:b6:b1:18:09:3f:69:71:
         56:05:75:f5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDS5XPBUvsOt7LtTKJ+EALCT93OUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2M0U3ODRBM0UxN0I4MzVCNDg5NDc4MThGRDQ4REIy
RjYyNjRGNjAeFw0yMzEyMjYyMTAxNDdaFw0yNDEyMjQyMTA2NDdaMDMxMTAvBgNV
BAMTKDAyOURFNTI1NDQ5NDg5NEFDM0YwQzUwQjMwN0M2RTE2RUQ1OTFENjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqhR+OFVCglFJ6IozeGW1biWEt
xoYkNxwx3YBe8C0W7ESeyekx317l5g6p4sEd3eFDqi03k0kZ0rSvY5aAzq+ugX9n
a/5m7jsd0eow9RLiwTJd6JF9j5RVPrWOXqS8R2hw+K3Cu1KcKbojV5nxlzdpWsO1
zm38sT1r6rRP/5LIkL+lGStfYaYiPDiqiEvrjIac+KRAk2X9jsDYH+JVdtWdVEaN
qKoJVgzOzDxbfCk8HMkzYu0wwz40huL4E6BWAiMGNJD1Vg59wD3p/d8yriGwVyWE
ZlKqfWOvwLNNBS38ptTJ7FS9kco8KnFDRN3HkAsoW34yhkgXc/QY2sQFtymdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAp3lJUSUiUrD8MULMHxuFu1ZHWEwHwYDVR0j
BBgwFoAU22PnhKPhe4NbSJR4GP1I2y9iZPYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Tb01ETVVTZ1Uya2hjb2F0bnhFVkJHM2hVaW1wajdvdUdGblJmb1hYenUx
LzAvREI2M0U3ODRBM0UxN0I4MzVCNDg5NDc4MThGRDQ4REIyRjYyNjRGNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjYzRTc4NEEzRTE3QjgzNUI0
ODk0NzgxOEZENDhEQjJGNjI2NEY2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
b01ETVVTZ1Uya2hjb2F0bnhFVkJHM2hVaW1wajdvdUdGblJmb1hYenUxLzAvMzIz
ODMwMzQzYTM0MzE2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3MzQz
NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARB4DANBgkqhkiG9w0BAQsFAAOCAQEAARGmMnFPKi2I
O/9ODWhjPs3SVpRvNWcOW7GW2hpRcvuWK4M3FGaYoqnJ2vfcYulBPI3iUpjKgpPE
DQtDzMvE0uv/IR7aniowgwUXx1VFcHVKlJzUAJSZ2QzpRh5wil17vBulOlL6xyk/
uiFMfpSL8Hy/9YZLen4pTNKg0JLVqJBbNYRBVruGnzehfiOoVAjQWPUtBOkCqfY3
K0R20s82ixHARQAJvXlTxp0Uv10XwCK1zP75gfpmuvVg46pP0Dgmjmh82W6ICdjB
Fpv4X50B7JRDIXrdN8aoNqJCfYnsTG+yKtjklk8KvSedROz2XgMO0hQkPfu2sRgJ
P2lxVgV19Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org