Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33342d3334203d3e203631353834.roa
File:                     323830343a323362383a3a2f33342d3334203d3e203631353834.roa (raw, json)
Hash identifier:          G83xurRIXRW/xvMYy8Nbkji2tQcDXoEU/3Q/mG4lS+w=
Subject key identifier:   6C:DE:4F:89:A0:F0:7D:33:6F:31:4E:16:0C:72:56:5C:D3:54:E6:E5
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       55A223B4BBB21F65954B042EAC97C29284D871EC
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33342d3334203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:32 +0000
ROA not before:           Mon 10 Jul 2023 19:01:32 +0000
ROA not after:            Mon 08 Jul 2024 19:06:32 +0000
asID:                     61584
IP address blocks:        2804:23b8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a2:23:b4:bb:b2:1f:65:95:4b:04:2e:ac:97:c2:92:84:d8:71:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:32 2023 GMT
            Not After : Jul  8 19:06:32 2024 GMT
        Subject: CN=6CDE4F89A0F07D336F314E160C72565CD354E6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:2e:83:59:22:74:72:75:5a:8f:a4:45:a6:
                    17:a5:f4:8f:a6:41:37:fe:20:06:a8:6d:17:43:0e:
                    21:61:da:b8:4d:03:94:b2:23:d2:3a:8b:43:0f:c4:
                    44:17:db:f9:e8:b6:5c:67:44:7c:94:1d:bc:09:a7:
                    e3:a5:f7:52:06:fc:d6:05:93:38:6f:d2:c7:44:d3:
                    25:1c:c6:22:78:01:22:1b:e4:2a:f9:be:a3:ef:0a:
                    d5:40:e4:b1:bc:77:5c:45:2e:41:63:34:c8:0e:e6:
                    05:3a:e8:e8:17:76:9b:38:1e:a2:2f:7a:d9:4b:e3:
                    05:5d:08:aa:a5:6f:30:4c:be:8d:fd:94:f0:ed:96:
                    29:d9:3d:fb:4f:f3:be:26:4b:fc:db:cf:ff:2f:b1:
                    bb:dd:23:ed:97:14:4e:df:e4:30:2f:6c:38:14:bb:
                    9e:b5:83:03:2e:5b:a9:9d:eb:65:f6:d6:d8:55:de:
                    4d:74:63:32:88:58:ff:8c:3d:7c:c7:ea:fd:d4:c5:
                    b8:36:47:6b:83:f6:0f:4c:bc:9b:ef:1b:32:f4:51:
                    6c:94:3a:3b:c0:07:54:8f:50:57:93:62:90:00:3f:
                    8f:01:ea:78:9d:79:73:22:3b:2e:9f:96:08:34:3f:
                    1d:57:bf:33:8a:11:40:d4:ec:53:92:70:4f:33:10:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DE:4F:89:A0:F0:7D:33:6F:31:4E:16:0C:72:56:5C:D3:54:E6:E5
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33342d3334203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23b8::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:29:21:d2:1b:34:a0:fb:64:b6:dd:09:2e:f8:3a:5c:b6:cc:
         b4:0c:c4:0d:5b:e4:55:7d:a1:12:7f:53:b8:46:46:af:4f:28:
         eb:d6:3c:f2:a3:00:9d:03:e9:50:75:66:5a:3e:ba:81:0b:ff:
         6a:8b:1d:bd:49:e5:0d:52:a6:24:a0:2f:6a:fb:30:d8:71:91:
         40:0b:72:16:0f:c3:23:e3:87:d0:1b:ad:69:ee:1f:7e:77:6e:
         9f:f0:c3:89:df:fe:9f:d9:1e:11:bb:af:35:bb:d1:cd:d9:d3:
         03:0a:a3:98:9c:5d:5c:71:81:33:6e:2e:c8:63:35:f3:a7:23:
         dc:27:3a:ed:e5:6f:52:92:22:88:90:67:9a:f6:58:a2:d5:ad:
         fe:1d:b6:6e:e7:9b:b1:aa:f6:1d:a2:7d:45:7a:84:54:ca:84:
         59:b3:08:5b:80:c1:41:51:5c:29:67:38:a8:21:94:e7:16:37:
         e0:e0:2d:1c:a1:c1:d9:bf:3d:37:79:f9:77:77:e4:d2:9f:db:
         ca:94:83:53:5f:a4:20:53:44:03:ec:8b:1a:8e:bf:11:83:40:
         f1:4a:83:7c:34:9e:94:69:e3:a5:0f:b2:b4:91:cd:2f:dd:04:
         75:39:8a:4f:48:66:dc:53:6f:71:8c:9c:64:03:6e:29:dc:7e:
         53:f6:bc:91
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUVaIjtLuyH2WVSwQurJfCkoTYcewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc0RjRBMDdERTI1NTBEQTBBMzlGRUY1NUJEMkE4QjJE
MjU0OTRFMTAeFw0yMzA3MTAxOTAxMzJaFw0yNDA3MDgxOTA2MzJaMDMxMTAvBgNV
BAMTKDZDREU0Rjg5QTBGMDdEMzM2RjMxNEUxNjBDNzI1NjVDRDM1NEU2RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJi6DWSJ0cnVaj6RFphel9I+m
QTf+IAaobRdDDiFh2rhNA5SyI9I6i0MPxEQX2/notlxnRHyUHbwJp+Ol91IG/NYF
kzhv0sdE0yUcxiJ4ASIb5Cr5vqPvCtVA5LG8d1xFLkFjNMgO5gU66OgXdps4HqIv
etlL4wVdCKqlbzBMvo39lPDtlinZPftP874mS/zbz/8vsbvdI+2XFE7f5DAvbDgU
u561gwMuW6md62X21thV3k10YzKIWP+MPXzH6v3Uxbg2R2uD9g9MvJvvGzL0UWyU
OjvAB1SPUFeTYpAAP48B6nideXMiOy6flgg0Px1XvzOKEUDU7FOScE8zELjvAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUbN5PiaDwfTNvMU4WDHJWXNNU5uUwHwYDVR0j
BBgwFoAUZ09KB94lUNoKOf71W9KostJUlOEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1
LzAvNjc0RjRBMDdERTI1NTBEQTBBMzlGRUY1NUJEMkE4QjJEMjU0OTRFMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82NzRGNEEwN0RFMjU1MERBMEEz
OUZFRjU1QkQyQThCMkQyNTQ5NEUxLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
ak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1LzAvMzIz
ODMwMzQzYTMyMzM2MjM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzYzMTM1Mzgz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBigEI7gAMA0GCSqGSIb3DQEBCwUAA4IBAQBFKSHSGzSg+2S2
3Qku+Dpctsy0DMQNW+RVfaESf1O4RkavTyjr1jzyowCdA+lQdWZaPrqBC/9qix29
SeUNUqYkoC9q+zDYcZFAC3IWD8Mj44fQG61p7h9+d26f8MOJ3/6f2R4Ru681u9HN
2dMDCqOYnF1ccYEzbi7IYzXzpyPcJzrt5W9SkiKIkGea9lii1a3+HbZu55uxqvYd
on1FeoRUyoRZswhbgMFBUVwpZzioIZTnFjfg4C0cocHZvz03efl3d+TSn9vKlINT
X6QgU0QD7Isajr8Rg0DxSoN8NJ6UaeOlD7K0kc0v3QR1OYpPSGbcU29xjJxkA24p
3H5T9ryR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org