Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa
File:                     323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa (raw, json)
Hash identifier:          oExEuqnaKi6r6P8edV2w862EYshDxWxH178wY2cVNLE=
Subject key identifier:   3F:AD:E1:86:60:47:9B:16:42:A3:0D:32:47:59:CB:A4:6A:28:D6:FF
Certificate issuer:       /CN=B41C5D20FCE773495931567B28D958303BB191D0
Certificate serial:       016862C4FA9A83D4ED78AAFBC1D6E4F784B9A8D2
Authority key identifier: B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa
Signing time:             Fri 09 Feb 2024 12:32:33 +0000
ROA not before:           Fri 09 Feb 2024 12:27:33 +0000
ROA not after:            Fri 07 Feb 2025 12:32:33 +0000
asID:                     268878
IP address blocks:        2804:5bf0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:68:62:c4:fa:9a:83:d4:ed:78:aa:fb:c1:d6:e4:f7:84:b9:a8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41C5D20FCE773495931567B28D958303BB191D0
        Validity
            Not Before: Feb  9 12:27:33 2024 GMT
            Not After : Feb  7 12:32:33 2025 GMT
        Subject: CN=3FADE18660479B1642A30D324759CBA46A28D6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:e5:77:6b:de:48:1e:85:6c:f7:92:89:6e:
                    ec:21:40:82:74:86:cc:d4:da:23:cd:ed:e9:71:1b:
                    2b:b9:29:04:ca:3c:42:af:f5:43:fd:7f:8b:64:91:
                    fd:91:1d:7f:83:6a:61:d2:16:84:33:05:92:13:8c:
                    69:19:71:85:75:cb:03:f3:6c:fa:35:b6:67:82:79:
                    53:d0:b6:1f:71:82:6f:21:0d:92:45:cd:e9:82:8f:
                    2a:32:11:5f:c2:46:c5:5d:bb:83:de:80:64:0e:56:
                    6b:19:ad:bd:79:80:ef:04:0b:e3:1a:6c:79:79:df:
                    f8:d8:d1:05:c3:82:ca:c7:96:d3:3f:be:5f:e4:71:
                    eb:85:d8:50:2d:b1:26:fa:00:11:0b:5e:86:97:76:
                    cd:f8:ec:e0:69:30:ba:2e:f9:e9:e6:9f:61:43:26:
                    ec:b1:68:ef:1a:d3:ff:d4:10:19:02:cd:fb:1d:26:
                    5e:52:35:2f:5d:d3:21:68:62:83:ef:b4:53:49:3f:
                    6f:3a:ee:33:79:80:9d:75:7b:4d:b2:61:40:03:a3:
                    94:5d:0c:8b:7e:7c:84:8f:d1:19:b4:84:50:fe:fc:
                    5a:06:85:c0:7d:dc:69:8b:a7:62:a7:7c:76:b2:e0:
                    86:01:80:2d:c9:bc:70:30:80:92:d1:1a:ea:0e:3f:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AD:E1:86:60:47:9B:16:42:A3:0D:32:47:59:CB:A4:6A:28:D6:FF
            X509v3 Authority Key Identifier:
                keyid:B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:79:6d:20:0f:06:1f:20:3b:6e:16:93:9a:b1:8a:ba:f1:d3:
         29:c7:3f:cb:1d:ce:52:29:e9:82:d5:8b:88:78:5f:5c:3f:a9:
         5b:e3:9d:d3:ca:6b:21:0e:e5:36:99:83:48:fd:8d:31:62:f4:
         24:ba:02:99:0d:bc:77:01:fd:df:e8:73:55:00:e9:6f:90:8c:
         de:79:3b:ff:a2:44:dd:6f:07:c7:07:bb:84:aa:27:cb:8b:ee:
         bd:8c:2a:23:f0:85:d2:d1:24:2a:5d:b2:3d:37:21:64:8e:dc:
         11:c2:7d:3f:03:fe:78:63:e1:5c:cc:5c:fc:99:70:4a:d2:6a:
         6f:c9:2b:1f:b4:de:0f:0a:c2:1e:10:60:a8:65:63:fb:6c:19:
         eb:75:34:74:93:bb:b0:55:87:62:d6:c6:69:0d:4f:9f:f7:ce:
         ce:57:35:6a:bf:fa:69:65:f8:76:d0:b4:80:d7:1d:ac:87:6e:
         17:79:85:44:31:b0:2a:7b:48:25:22:7b:1f:5d:18:2f:14:52:
         d3:2d:04:7a:10:5e:78:3d:d7:82:a3:93:9b:c3:c1:39:e3:07:
         c4:98:c8:59:13:61:bf:75:c8:af:b1:db:38:97:9b:28:c8:33:
         5a:73:9b:40:0f:d6:8c:6c:40:f4:af:dc:3d:15:1c:66:09:86:
         61:98:86:78
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAWhixPqag9TteKr7wdbk94S5qNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQxQzVEMjBGQ0U3NzM0OTU5MzE1NjdCMjhEOTU4MzAz
QkIxOTFEMDAeFw0yNDAyMDkxMjI3MzNaFw0yNTAyMDcxMjMyMzNaMDMxMTAvBgNV
BAMTKDNGQURFMTg2NjA0NzlCMTY0MkEzMEQzMjQ3NTlDQkE0NkEyOEQ2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFeV3a95IHoVs95KJbuwhQIJ0
hszU2iPN7elxGyu5KQTKPEKv9UP9f4tkkf2RHX+DamHSFoQzBZITjGkZcYV1ywPz
bPo1tmeCeVPQth9xgm8hDZJFzemCjyoyEV/CRsVdu4PegGQOVmsZrb15gO8EC+Ma
bHl53/jY0QXDgsrHltM/vl/kceuF2FAtsSb6ABELXoaXds347OBpMLou+enmn2FD
JuyxaO8a0//UEBkCzfsdJl5SNS9d0yFoYoPvtFNJP2867jN5gJ11e02yYUADo5Rd
DIt+fISP0Rm0hFD+/FoGhcB93GmLp2KnfHay4IYBgC3JvHAwgJLRGuoOP9cXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUP63hhmBHmxZCow0yR1nLpGoo1v8wHwYDVR0j
BBgwFoAUtBxdIPznc0lZMVZ7KNlYMDuxkdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC9CNDFDNUQyMEZDRTc3MzQ5NTkzMTU2N0IyOEQ5NTgzMDNCQjE5MUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I0MUM1RDIwRkNFNzczNDk1
OTMxNTY3QjI4RDk1ODMwM0JCMTkxRDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv
MzIzODMwMzQzYTM1NjI2NjMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM4MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEW/BAMA0GCSqGSIb3DQEBCwUA
A4IBAQC8eW0gDwYfIDtuFpOasYq68dMpxz/LHc5SKemC1YuIeF9cP6lb453Tymsh
DuU2mYNI/Y0xYvQkugKZDbx3Af3f6HNVAOlvkIzeeTv/okTdbwfHB7uEqifLi+69
jCoj8IXS0SQqXbI9NyFkjtwRwn0/A/54Y+FczFz8mXBK0mpvySsftN4PCsIeEGCo
ZWP7bBnrdTR0k7uwVYdi1sZpDU+f987OVzVqv/ppZfh20LSA1x2sh24XeYVEMbAq
e0glInsfXRgvFFLTLQR6EF54PdeCo5Obw8E54wfEmMhZE2G/dcivsds4l5soyDNa
c5tAD9aMbED0r9w9FRxmCYZhmIZ4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org