Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/323830343a313736343a3a2f33322d3332203d3e20323633313433.roa
File:                     323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (raw, json)
Hash identifier:          lQbUaDw/o+/Lv7WMthSPXSaCYrHbM+DvHQJJSNOar+I=
Subject key identifier:   1B:A7:78:4C:26:08:82:E9:61:40:17:03:3E:AC:96:25:F2:78:4B:13
Certificate issuer:       /CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Certificate serial:       2A74A1FD09C3D1791CBA438A3B6AD622623475E4
Authority key identifier: C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/323830343a313736343a3a2f33322d3332203d3e20323633313433.roa
Signing time:             Mon 22 Jan 2024 13:46:23 +0000
ROA not before:           Mon 22 Jan 2024 13:41:23 +0000
ROA not after:            Mon 20 Jan 2025 13:46:23 +0000
asID:                     263143
IP address blocks:        2804:1764::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:74:a1:fd:09:c3:d1:79:1c:ba:43:8a:3b:6a:d6:22:62:34:75:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
        Validity
            Not Before: Jan 22 13:41:23 2024 GMT
            Not After : Jan 20 13:46:23 2025 GMT
        Subject: CN=1BA7784C260882E9614017033EAC9625F2784B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3d:3a:f8:3c:d0:84:5d:ac:ba:e4:b9:b4:cd:
                    fb:e7:9c:fa:47:95:be:9a:7f:af:bf:04:e4:fc:b4:
                    48:b8:5b:fe:d8:7b:67:c2:56:64:86:01:73:9b:6e:
                    61:11:e9:5b:88:e0:e8:e1:85:b5:ba:74:1d:d0:c9:
                    28:3b:ef:27:e5:18:8a:45:45:1b:49:e5:22:22:5b:
                    d3:3e:68:61:4c:95:be:5e:71:a0:fd:a9:08:ad:bd:
                    c0:c7:9f:51:45:3c:57:f3:21:e5:3e:96:2a:10:bb:
                    0a:f5:7c:55:ec:81:2e:db:12:f4:59:bb:b7:46:51:
                    2c:14:1c:fa:12:eb:99:1c:e3:6e:dc:23:b6:53:76:
                    03:01:c9:1f:bd:59:81:e6:32:90:03:1d:7c:e9:bb:
                    de:69:0b:33:7a:c6:89:92:c9:d4:c7:47:cb:16:54:
                    58:bf:cc:7d:f5:02:b2:be:7e:4d:d5:df:f6:3b:50:
                    1c:d0:16:3b:fb:7b:0b:12:44:e2:8d:64:0b:4f:cb:
                    76:9e:75:e6:21:0d:95:2b:1b:52:bf:02:25:1f:00:
                    f7:4a:52:a0:47:2a:29:39:9c:6c:c9:e8:26:ef:98:
                    2a:07:5c:5a:4c:33:19:37:4c:d4:c4:1e:a5:09:b6:
                    a3:1b:26:53:ec:ee:3b:ab:15:bc:74:84:f9:74:f2:
                    b1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:78:4C:26:08:82:E9:61:40:17:03:3E:AC:96:25:F2:78:4B:13
            X509v3 Authority Key Identifier:
                keyid:C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/323830343a313736343a3a2f33322d3332203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1764::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:1d:60:c6:83:70:b0:23:83:d2:6b:c9:68:c3:f1:59:de:33:
         19:89:be:6e:64:f5:4a:24:02:26:d1:ad:1f:78:fa:64:8d:a9:
         e4:16:00:d0:2d:98:e0:e4:ea:7d:9b:14:b2:80:d1:e6:e2:01:
         8a:ce:00:0d:a2:de:b2:fa:5e:db:fc:9d:a4:33:ec:d7:b9:8a:
         e8:f1:8d:d4:91:31:39:70:d8:61:0f:83:d6:45:fb:c7:ee:33:
         87:39:cf:29:bc:36:87:59:3e:3d:97:97:3a:26:50:af:ea:18:
         24:79:1e:cf:f6:a5:be:cc:05:b6:d3:20:84:3a:e2:5f:df:2a:
         88:0c:af:73:e6:48:d0:52:e1:64:13:ec:ff:54:7e:43:61:3d:
         9d:f2:e9:27:35:0f:34:65:d6:71:c6:27:ab:11:48:39:67:f8:
         16:a3:85:b6:0b:c1:7c:ef:7b:ad:37:c3:a2:b6:65:b9:ef:43:
         9c:00:31:f8:6f:b3:3a:41:51:40:78:84:3e:78:60:42:82:36:
         5a:f2:ba:ad:ee:89:57:00:7f:cb:90:da:ba:83:cc:dd:88:8e:
         e0:02:d5:0f:dc:da:cb:cb:c3:af:83:dd:53:5e:30:bc:8e:59:
         bf:fc:60:16:9c:8e:55:7a:eb:72:9d:4a:6b:55:0f:8e:0f:c0:
         7d:6b:a1:db
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKnSh/QnD0XkcukOKO2rWImI0deQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDNzQwMTRBMUIwMTNERDRCRDdGNTQ5REIxRUZCNTcw
OUUzQUQ2RjAeFw0yNDAxMjIxMzQxMjNaFw0yNTAxMjAxMzQ2MjNaMDMxMTAvBgNV
BAMTKDFCQTc3ODRDMjYwODgyRTk2MTQwMTcwMzNFQUM5NjI1RjI3ODRCMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrPTr4PNCEXay65Lm0zfvnnPpH
lb6af6+/BOT8tEi4W/7Ye2fCVmSGAXObbmER6VuI4OjhhbW6dB3QySg77yflGIpF
RRtJ5SIiW9M+aGFMlb5ecaD9qQitvcDHn1FFPFfzIeU+lioQuwr1fFXsgS7bEvRZ
u7dGUSwUHPoS65kc427cI7ZTdgMByR+9WYHmMpADHXzpu95pCzN6xomSydTHR8sW
VFi/zH31ArK+fk3V3/Y7UBzQFjv7ewsSROKNZAtPy3aedeYhDZUrG1K/AiUfAPdK
UqBHKik5nGzJ6CbvmCoHXFpMMxk3TNTEHqUJtqMbJlPs7jurFbx0hPl08rHXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUG6d4TCYIgulhQBcDPqyWJfJ4SxMwHwYDVR0j
BBgwFoAUwsdAFKGwE91L1/VJ2x77VwnjrW8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3
LzAvQzJDNzQwMTRBMUIwMTNERDRCRDdGNTQ5REIxRUZCNTcwOUUzQUQ2Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9DMkM3NDAxNEExQjAxM0RENEJE
N0Y1NDlEQjFFRkI1NzA5RTNBRDZGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3LzAvMzIz
ODMwMzQzYTMxMzczNjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMzMzEz
NDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQXZDANBgkqhkiG9w0BAQsFAAOCAQEAnx1gxoNwsCOD
0mvJaMPxWd4zGYm+bmT1SiQCJtGtH3j6ZI2p5BYA0C2Y4OTqfZsUsoDR5uIBis4A
DaLesvpe2/ydpDPs17mK6PGN1JExOXDYYQ+D1kX7x+4zhznPKbw2h1k+PZeXOiZQ
r+oYJHkez/alvswFttMghDriX98qiAyvc+ZI0FLhZBPs/1R+Q2E9nfLpJzUPNGXW
ccYnqxFIOWf4FqOFtgvBfO97rTfDorZlue9DnAAx+G+zOkFRQHiEPnhgQoI2WvK6
re6JVwB/y5DauoPM3YiO4ALVD9zay8vDr4PdU14wvI5Zv/xgFpyOVXrrcp1Ka1UP
jg/AfWuh2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org