Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3431303a3a2f34342d3434203d3e20323636353530.roa
File:                     323830343a336462633a3431303a3a2f34342d3434203d3e20323636353530.roa (raw, json)
Hash identifier:          PmX9EbQBK+JLsI8XyvOBSArn7T/IpZQRSst+Uzm1334=
Subject key identifier:   C5:3B:32:F4:39:40:ED:50:AE:5A:B3:C1:29:4F:97:6A:08:1A:C5:15
Certificate issuer:       /CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
Certificate serial:       0F941178380B9DF86780526EACCE786FDAA59EC3
Authority key identifier: 00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3431303a3a2f34342d3434203d3e20323636353530.roa
Signing time:             Mon 10 Jul 2023 13:27:10 +0000
ROA not before:           Mon 10 Jul 2023 13:22:10 +0000
ROA not after:            Mon 08 Jul 2024 13:27:10 +0000
asID:                     266550
IP address blocks:        2804:3dbc:410::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:94:11:78:38:0b:9d:f8:67:80:52:6e:ac:ce:78:6f:da:a5:9e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
        Validity
            Not Before: Jul 10 13:22:10 2023 GMT
            Not After : Jul  8 13:27:10 2024 GMT
        Subject: CN=C53B32F43940ED50AE5AB3C1294F976A081AC515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:c7:17:97:7d:7d:65:a6:a5:24:02:be:2b:
                    70:f4:87:69:ea:58:15:75:1c:56:bd:7e:51:30:a4:
                    52:9a:a5:69:11:c1:57:2a:5a:4f:37:e2:d9:38:86:
                    f0:46:14:70:37:6f:6c:94:ba:bf:a2:41:b5:83:9b:
                    11:e1:51:72:0a:b6:52:a7:49:7b:f2:cc:49:fa:f5:
                    2d:cb:f8:90:94:06:58:02:3e:83:c9:79:c1:5a:06:
                    a1:d8:ef:0b:04:83:d1:98:fb:f7:96:1c:96:43:2d:
                    6c:e2:1f:bd:41:78:10:95:49:f9:f4:b6:32:70:61:
                    6e:12:a5:47:aa:59:ab:d4:b6:48:90:8c:dd:77:e6:
                    71:d2:f8:f8:42:3b:5e:94:ed:79:29:0e:7c:7d:3f:
                    73:f4:70:4d:23:17:b5:14:c3:0f:50:1c:c0:81:bc:
                    4b:ab:c9:77:f8:70:73:2f:fc:fc:90:25:85:92:a9:
                    7d:3b:ff:c1:1c:a0:07:65:92:2e:da:db:75:65:e7:
                    2d:70:ba:14:c6:77:93:a7:0c:cd:4e:57:de:f1:18:
                    59:2b:38:1e:13:8d:b9:56:ed:6d:90:b7:b3:16:6d:
                    94:38:ce:8a:cc:7a:e8:b2:2d:57:4a:83:ec:6a:0a:
                    88:77:e6:72:b3:ca:1c:a7:7f:70:36:e7:73:7c:7f:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3B:32:F4:39:40:ED:50:AE:5A:B3:C1:29:4F:97:6A:08:1A:C5:15
            X509v3 Authority Key Identifier:
                keyid:00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3431303a3a2f34342d3434203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dbc:410::/44

    Signature Algorithm: sha256WithRSAEncryption
         be:44:99:86:03:2f:59:be:d1:1a:6d:de:56:f2:dd:3a:77:b5:
         f7:90:06:3f:6d:00:69:53:aa:ee:d2:f9:83:fb:03:18:35:bf:
         10:33:e7:17:7a:79:45:7e:ac:b7:f9:40:1b:c3:a1:06:12:13:
         21:45:7c:4d:71:88:7d:43:f6:bb:1b:51:3e:8a:43:44:15:d1:
         5d:25:b7:62:87:73:dd:a5:86:d5:e2:3d:92:6c:19:6f:b2:d4:
         ba:a0:fe:32:b0:62:a2:42:10:5f:0f:d1:3d:19:e1:8a:51:a2:
         86:7b:54:92:49:d8:9b:fa:82:d9:7e:6a:d9:12:e9:72:94:2f:
         d4:5b:2e:c7:79:e7:31:67:d5:34:aa:3a:82:86:05:5d:ec:80:
         f7:b2:d5:e1:97:62:a9:e0:28:a4:75:59:be:5e:92:f6:25:12:
         d9:5e:de:44:10:fb:11:63:52:d1:f8:07:d7:88:f7:c0:22:21:
         ae:10:f3:46:13:ac:4e:0c:0c:6e:fb:e4:19:84:6c:17:46:51:
         57:79:91:c6:4a:13:d7:d3:c0:fa:be:fb:5d:e7:a9:ce:ca:c4:
         9e:12:ed:09:1d:dc:c7:06:56:c2:59:74:03:41:28:d4:ba:49:
         d9:56:b5:5d:f8:87:be:b5:37:21:ae:1f:53:16:68:99:72:87:
         5a:8a:fc:96
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUD5QReDgLnfhngFJurM54b9qlnsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAzMjA3Qzc1RUIxOEY1ODQ1MzVGQjVBQjg5RjRFRkFG
QkU3RkQzMTAeFw0yMzA3MTAxMzIyMTBaFw0yNDA3MDgxMzI3MTBaMDMxMTAvBgNV
BAMTKEM1M0IzMkY0Mzk0MEVENTBBRTVBQjNDMTI5NEY5NzZBMDgxQUM1MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7scXl319ZaalJAK+K3D0h2nq
WBV1HFa9flEwpFKapWkRwVcqWk834tk4hvBGFHA3b2yUur+iQbWDmxHhUXIKtlKn
SXvyzEn69S3L+JCUBlgCPoPJecFaBqHY7wsEg9GY+/eWHJZDLWziH71BeBCVSfn0
tjJwYW4SpUeqWavUtkiQjN135nHS+PhCO16U7XkpDnx9P3P0cE0jF7UUww9QHMCB
vEuryXf4cHMv/PyQJYWSqX07/8EcoAdlki7a23Vl5y1wuhTGd5OnDM1OV97xGFkr
OB4TjblW7W2Qt7MWbZQ4zorMeuiyLVdKg+xqCoh35nKzyhynf3A253N8f59HAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUxTsy9DlA7VCuWrPBKU+XaggaxRUwHwYDVR0j
BBgwFoAUADIHx16xj1hFNftauJ9O+vvn/TEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94bnhQMXZ0Z3l3U3pwdWk1ZHdrVXNlSG5yY2g1UmNpTnkyaGVCQXZhU2sx
LzAvMDAzMjA3Qzc1RUIxOEY1ODQ1MzVGQjVBQjg5RjRFRkFGQkU3RkQzMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wMDMyMDdDNzVFQjE4RjU4NDUz
NUZCNUFCODlGNEVGQUZCRTdGRDMxLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
bnhQMXZ0Z3l3U3pwdWk1ZHdrVXNlSG5yY2g1UmNpTnkyaGVCQXZhU2sxLzAvMzIz
ODMwMzQzYTMzNjQ2MjYzM2EzNDMxMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAz
MjM2MzYzNTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBD28BBAwDQYJKoZIhvcNAQELBQADggEB
AL5EmYYDL1m+0Rpt3lby3Tp3tfeQBj9tAGlTqu7S+YP7Axg1vxAz5xd6eUV+rLf5
QBvDoQYSEyFFfE1xiH1D9rsbUT6KQ0QV0V0lt2KHc92lhtXiPZJsGW+y1Lqg/jKw
YqJCEF8P0T0Z4YpRooZ7VJJJ2Jv6gtl+atkS6XKUL9RbLsd55zFn1TSqOoKGBV3s
gPey1eGXYqngKKR1Wb5ekvYlEtle3kQQ+xFjUtH4B9eI98AiIa4Q80YTrE4MDG77
5BmEbBdGUVd5kcZKE9fTwPq++13nqc7KxJ4S7Qkd3McGVsJZdANBKNS6SdlWtV34
h761NyGuH1MWaJlyh1qK/JY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org