Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/323830343a313233303a3a2f33322d3332203d3e20323633343632.roa
File:                     323830343a313233303a3a2f33322d3332203d3e20323633343632.roa (raw, json)
Hash identifier:          Y3uooBuHrsqKYnbs26xMiMOzvdWCNLQimOVaJTyoEMQ=
Subject key identifier:   32:25:9A:92:83:4E:DA:41:36:D3:56:52:B9:71:08:8A:EE:E2:BC:37
Certificate issuer:       /CN=ECAF836B05993192B75EB1C0F1CB4F986B3860AF
Certificate serial:       2A56A7826B96722F10388F5A2F1869F14C77E00C
Authority key identifier: EC:AF:83:6B:05:99:31:92:B7:5E:B1:C0:F1:CB:4F:98:6B:38:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAF836B05993192B75EB1C0F1CB4F986B3860AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/323830343a313233303a3a2f33322d3332203d3e20323633343632.roa
Signing time:             Mon 15 Jan 2024 20:38:23 +0000
ROA not before:           Mon 15 Jan 2024 20:33:23 +0000
ROA not after:            Mon 13 Jan 2025 20:38:23 +0000
asID:                     263462
IP address blocks:        2804:1230::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:56:a7:82:6b:96:72:2f:10:38:8f:5a:2f:18:69:f1:4c:77:e0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECAF836B05993192B75EB1C0F1CB4F986B3860AF
        Validity
            Not Before: Jan 15 20:33:23 2024 GMT
            Not After : Jan 13 20:38:23 2025 GMT
        Subject: CN=32259A92834EDA4136D35652B971088AEEE2BC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:88:95:7b:19:e1:57:c2:05:f0:68:66:44:
                    44:43:63:f8:50:4d:54:90:f4:ab:4e:44:b1:95:b3:
                    ec:a4:c6:82:96:bf:40:4b:e2:2a:54:79:96:9b:12:
                    3e:a1:be:f7:90:ff:f7:16:94:c6:6a:43:1b:f4:bf:
                    6e:0d:ce:5e:f0:22:2f:34:f1:98:96:b9:bd:ec:8b:
                    74:c2:2a:5c:21:dc:ed:03:f3:7c:7c:03:89:22:0d:
                    4c:ae:10:76:f5:1c:e1:0b:5c:f8:5a:ec:e6:94:cb:
                    f3:0a:c3:4f:3d:7c:74:5d:48:5d:e1:42:10:b0:f0:
                    71:52:fa:b6:fe:36:60:b0:d9:ee:b3:b9:0a:45:57:
                    46:05:81:c6:ce:8b:d1:f0:1a:d8:f0:82:c1:35:d8:
                    5e:a7:c1:0e:2d:66:ee:ee:ee:1a:1c:21:aa:a8:65:
                    de:dd:b1:e4:be:43:7e:3e:a1:c2:e3:03:b2:98:53:
                    2d:64:d4:8c:d7:9a:43:fc:3a:74:ac:99:e5:cd:4c:
                    09:33:68:e5:fa:1b:b9:68:e7:e6:0c:03:7a:85:7c:
                    b3:c0:89:d1:46:96:70:ef:83:47:3d:97:be:7c:c7:
                    7e:f7:12:88:4a:42:0d:b2:83:59:7b:b3:19:23:af:
                    80:17:d1:f0:fe:75:fc:d2:db:19:b5:1b:98:b5:80:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:25:9A:92:83:4E:DA:41:36:D3:56:52:B9:71:08:8A:EE:E2:BC:37
            X509v3 Authority Key Identifier:
                keyid:EC:AF:83:6B:05:99:31:92:B7:5E:B1:C0:F1:CB:4F:98:6B:38:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/ECAF836B05993192B75EB1C0F1CB4F986B3860AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAF836B05993192B75EB1C0F1CB4F986B3860AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/323830343a313233303a3a2f33322d3332203d3e20323633343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1230::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:82:a8:71:75:58:b6:a9:f8:51:7b:8d:8a:7f:80:b5:a2:
         6f:75:73:8f:18:d8:02:82:52:29:0f:06:56:f2:06:a5:51:04:
         8d:33:e2:aa:c3:04:17:9a:42:d5:e5:f5:79:1b:dc:33:8d:d7:
         21:47:4a:f3:45:6d:74:16:25:73:32:21:ae:8c:25:83:e9:fb:
         1a:c8:dc:88:f5:ee:12:09:04:05:21:e4:c9:a5:db:a2:5d:53:
         7e:6e:02:83:d8:0e:e8:77:6b:7a:6c:16:4f:e0:0e:db:c2:89:
         9e:2b:3b:19:65:d2:70:d2:18:72:59:7f:c4:81:e1:45:b0:e5:
         d4:fc:38:85:3a:44:31:9e:25:47:a1:02:1a:9b:72:49:88:1c:
         4c:ea:0c:da:62:cf:53:1e:a2:4d:aa:52:2d:79:e5:93:43:01:
         de:7d:19:ca:13:3c:28:26:87:e9:0b:b7:15:26:11:1f:cd:27:
         81:95:27:4e:26:aa:f6:a3:b9:c8:3e:3e:7d:70:79:c2:31:01:
         5e:6d:44:99:a0:9f:a5:cf:85:18:bb:74:f6:2b:3a:2a:ea:be:
         bc:f8:06:b8:84:3e:25:b5:95:25:22:c2:bc:12:cd:87:dd:22:
         3d:51:27:c2:e0:dc:fa:2a:3c:de:3a:21:b2:7c:07:a5:9c:35:
         6a:d7:62:c2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKlangmuWci8QOI9aLxhp8Ux34AwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBRjgzNkIwNTk5MzE5MkI3NUVCMUMwRjFDQjRGOTg2
QjM4NjBBRjAeFw0yNDAxMTUyMDMzMjNaFw0yNTAxMTMyMDM4MjNaMDMxMTAvBgNV
BAMTKDMyMjU5QTkyODM0RURBNDEzNkQzNTY1MkI5NzEwODhBRUVFMkJDMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KYiVexnhV8IF8GhmRERDY/hQ
TVSQ9KtORLGVs+ykxoKWv0BL4ipUeZabEj6hvveQ//cWlMZqQxv0v24Nzl7wIi80
8ZiWub3si3TCKlwh3O0D83x8A4kiDUyuEHb1HOELXPha7OaUy/MKw089fHRdSF3h
QhCw8HFS+rb+NmCw2e6zuQpFV0YFgcbOi9HwGtjwgsE12F6nwQ4tZu7u7hocIaqo
Zd7dseS+Q34+ocLjA7KYUy1k1IzXmkP8OnSsmeXNTAkzaOX6G7lo5+YMA3qFfLPA
idFGlnDvg0c9l758x373EohKQg2yg1l7sxkjr4AX0fD+dfzS2xm1G5i1gPYpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMiWakoNO2kE201ZSuXEIiu7ivDcwHwYDVR0j
BBgwFoAU7K+DawWZMZK3XrHA8ctPmGs4YK8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9wSFFQckhWQjdWSGc1bUxNR25WVVlmdmtiVnF0ekUydGVkOEM3Z0dGWFlw
LzAvRUNBRjgzNkIwNTk5MzE5MkI3NUVCMUMwRjFDQjRGOTg2QjM4NjBBRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9FQ0FGODM2QjA1OTkzMTkyQjc1
RUIxQzBGMUNCNEY5ODZCMzg2MEFGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9w
SFFQckhWQjdWSGc1bUxNR25WVVlmdmtiVnF0ekUydGVkOEM3Z0dGWFlwLzAvMzIz
ODMwMzQzYTMxMzIzMzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMzMzQz
NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQSMDANBgkqhkiG9w0BAQsFAAOCAQEAELqCqHF1WLap
+FF7jYp/gLWib3VzjxjYAoJSKQ8GVvIGpVEEjTPiqsMEF5pC1eX1eRvcM43XIUdK
80VtdBYlczIhrowlg+n7GsjciPXuEgkEBSHkyaXbol1Tfm4Cg9gO6HdremwWT+AO
28KJnis7GWXScNIYcll/xIHhRbDl1Pw4hTpEMZ4lR6ECGptySYgcTOoM2mLPUx6i
TapSLXnlk0MB3n0ZyhM8KCaH6Qu3FSYRH80ngZUnTiaq9qO5yD4+fXB5wjEBXm1E
maCfpc+FGLt09is6Kuq+vPgGuIQ+JbWVJSLCvBLNh90iPVEnwuDc+io83johsnwH
pZw1atdiwg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org