Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa
File:                     323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa (raw, json)
Hash identifier:          kF39uMKkpMjERAt7F/eXGnn1UTMtjwO+67y19KfLpgI=
Subject key identifier:   95:AB:6B:3B:E9:8B:0F:85:11:C8:A0:0B:2E:03:38:DC:2F:A0:4F:1E
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       5C5F2F7266CB4FF60FEC68F5D6BB5867145405BD
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa
Signing time:             Thu 07 Sep 2023 21:43:29 +0000
ROA not before:           Thu 07 Sep 2023 21:38:29 +0000
ROA not after:            Thu 05 Sep 2024 21:43:29 +0000
asID:                     61672
IP address blocks:        2804:1cbc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5f:2f:72:66:cb:4f:f6:0f:ec:68:f5:d6:bb:58:67:14:54:05:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Sep  7 21:38:29 2023 GMT
            Not After : Sep  5 21:43:29 2024 GMT
        Subject: CN=95AB6B3BE98B0F8511C8A00B2E0338DC2FA04F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:c5:1c:c9:85:d7:8f:0f:3e:1e:cf:2a:60:
                    8e:0d:cb:ae:cc:c8:1e:9c:4e:b6:b4:84:df:c0:06:
                    05:cf:9a:64:15:37:6a:d2:c8:fa:86:aa:bb:7b:3f:
                    9b:37:f5:79:1b:36:03:03:f2:61:4e:a4:1a:ae:7e:
                    21:cf:6c:93:13:dd:02:4d:cc:a9:28:a5:98:17:24:
                    39:17:92:ea:39:35:00:53:29:fc:92:5d:89:b3:2d:
                    90:6b:ef:00:75:c2:76:9e:b1:ba:e4:ba:46:51:f5:
                    a1:5b:8b:20:85:cf:f6:82:e3:30:48:33:24:c3:19:
                    8e:72:53:ab:c4:2e:71:b7:03:e6:6c:84:b0:1a:3b:
                    d5:63:90:5f:81:12:fe:54:4d:64:8a:38:79:82:fb:
                    10:31:7e:30:0d:03:82:06:53:6a:df:ff:0b:ab:a2:
                    87:f1:8e:26:c7:02:93:ec:2a:13:45:a4:0f:c3:40:
                    60:6b:52:5e:fc:4c:98:06:e4:ce:cf:fc:08:40:ed:
                    32:a4:66:c4:78:cd:c7:52:56:57:08:cf:cc:a4:a6:
                    53:c4:77:8d:27:a7:1b:9e:1c:52:2d:1b:53:1a:28:
                    5d:72:4c:9e:16:e0:a9:04:10:e4:fc:c9:6d:35:a5:
                    c2:17:86:be:1a:95:09:34:54:7d:06:08:4a:42:8b:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AB:6B:3B:E9:8B:0F:85:11:C8:A0:0B:2E:03:38:DC:2F:A0:4F:1E
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:e7:f0:f5:d7:ab:ad:96:f5:fb:29:22:92:86:b7:9e:81:
         ce:bb:47:b9:ed:77:0f:8e:f5:a0:82:a6:5a:7f:ad:2f:37:fa:
         44:a8:87:39:7d:0f:19:41:3f:a8:bd:3b:f6:bf:c0:0f:c8:e9:
         ba:19:aa:82:23:78:17:6d:52:72:aa:5e:87:ed:10:d8:76:4c:
         31:e5:53:0a:27:86:c0:4e:0e:e4:27:6a:b6:14:e3:de:80:97:
         fa:4b:d4:3b:7d:b9:84:c9:e5:27:e0:e5:51:65:61:31:8e:18:
         8f:23:ad:58:f5:33:e4:97:0f:fa:ca:60:c4:92:bd:79:03:4f:
         37:ed:29:d8:b7:06:b8:36:ca:51:26:1b:5d:a5:54:fc:39:17:
         1d:af:c1:0a:b6:74:6e:cd:11:36:ee:d3:94:43:82:31:33:38:
         2b:8f:13:c1:86:02:d7:58:12:3a:92:5c:2e:6f:b5:04:10:11:
         bf:32:c5:57:04:2f:1a:23:31:d7:f1:2b:46:12:e9:6a:20:99:
         a7:6c:5a:be:ef:e3:39:e6:e9:6c:27:79:9a:c8:d1:07:2b:be:
         cf:a1:8a:bc:2b:38:fa:ec:8d:9b:d1:5e:82:97:65:44:f3:fb:
         33:78:cc:6d:d5:27:a4:bb:ce:72:26:e9:d7:8e:45:05:40:59:
         9c:c7:54:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXF8vcmbLT/YP7Gj11rtYZxRUBb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY2NDVGN0E5QTVGM0IyOTJFNDFBRUI5RTAxNDA5QTNC
MTUyNkMzOTAeFw0yMzA5MDcyMTM4MjlaFw0yNDA5MDUyMTQzMjlaMDMxMTAvBgNV
BAMTKDk1QUI2QjNCRTk4QjBGODUxMUM4QTAwQjJFMDMzOERDMkZBMDRGMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EcUcyYXXjw8+Hs8qYI4Ny67M
yB6cTra0hN/ABgXPmmQVN2rSyPqGqrt7P5s39XkbNgMD8mFOpBqufiHPbJMT3QJN
zKkopZgXJDkXkuo5NQBTKfySXYmzLZBr7wB1wnaesbrkukZR9aFbiyCFz/aC4zBI
MyTDGY5yU6vELnG3A+ZshLAaO9VjkF+BEv5UTWSKOHmC+xAxfjANA4IGU2rf/wur
oofxjibHApPsKhNFpA/DQGBrUl78TJgG5M7P/AhA7TKkZsR4zcdSVlcIz8ykplPE
d40npxueHFItG1MaKF1yTJ4W4KkEEOT8yW01pcIXhr4alQk0VH0GCEpCi1CpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlatrO+mLD4URyKALLgM43C+gTx4wHwYDVR0j
BBgwFoAUH2RfeppfOykuQa654BQJo7FSbDkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMC8xRjY0NUY3QTlBNUYzQjI5MkU0MUFFQjlFMDE0MDlBM0IxNTI2QzM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGNjQ1RjdBOUE1RjNCMjky
RTQxQUVCOUUwMTQwOUEzQjE1MjZDMzkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzAv
MzIzODMwMzQzYTMxNjM2MjYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNjM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBy8wDANBgkqhkiG9w0BAQsFAAOC
AQEAFffn8PXXq62W9fspIpKGt56BzrtHue13D471oIKmWn+tLzf6RKiHOX0PGUE/
qL079r/AD8jpuhmqgiN4F21Scqpeh+0Q2HZMMeVTCieGwE4O5CdqthTj3oCX+kvU
O325hMnlJ+DlUWVhMY4YjyOtWPUz5JcP+spgxJK9eQNPN+0p2LcGuDbKUSYbXaVU
/DkXHa/BCrZ0bs0RNu7TlEOCMTM4K48TwYYC11gSOpJcLm+1BBARvzLFVwQvGiMx
1/ErRhLpaiCZp2xavu/jOebpbCd5msjRByu+z6GKvCs4+uyNm9FegpdlRPP7M3jM
bdUnpLvOcibp145FBUBZnMdUTw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org