Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a373030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a373030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          L0WVKZNxjp4+40bfikkr8pQwe/+AO9TNhbur7qOhgcw=
Subject key identifier:   B2:FE:93:01:8C:2A:E9:15:F2:63:70:19:F3:A2:74:FF:C0:F2:6D:CB
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       61ECA373023A1C049C2D6292DC5DAE8E0161823B
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a373030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:37 +0000
ROA not before:           Wed 03 Apr 2024 13:48:37 +0000
ROA not after:            Wed 02 Apr 2025 13:53:37 +0000
asID:                     270266
IP address blocks:        2804:6960:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ec:a3:73:02:3a:1c:04:9c:2d:62:92:dc:5d:ae:8e:01:61:82:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:37 2024 GMT
            Not After : Apr  2 13:53:37 2025 GMT
        Subject: CN=B2FE93018C2AE915F2637019F3A274FFC0F26DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:92:0d:f4:6d:f3:dd:86:2b:3e:30:ca:82:
                    cb:05:19:54:09:1d:8d:4a:b7:0a:39:5b:ad:34:41:
                    a2:b8:36:b0:ff:21:88:3c:08:e3:97:92:0c:d3:db:
                    f2:06:98:29:fe:37:64:56:c5:70:79:3b:c0:ff:a6:
                    ed:59:c6:a3:cb:f6:34:73:f3:6e:be:f8:41:d5:85:
                    f2:d2:93:61:7a:fa:34:5e:18:0a:38:55:4c:13:88:
                    38:45:41:8d:83:54:64:0b:67:25:b3:9f:86:09:88:
                    09:a9:b1:f1:c5:5c:4d:b9:fb:45:61:ca:9f:91:b4:
                    0e:68:f9:81:73:3f:a0:5c:bc:c8:b5:cf:c0:b9:b2:
                    e0:d6:f2:8a:59:52:c0:14:32:53:63:e7:04:11:62:
                    42:b5:ed:ad:34:ff:6e:13:48:38:c3:b4:07:a6:bd:
                    b5:b9:fe:d2:ee:34:6a:bc:9d:98:c6:7a:25:d3:43:
                    84:19:2b:78:83:99:8e:e3:2c:9b:81:d6:72:40:0b:
                    5e:ae:09:bd:c8:fc:4e:e8:c5:89:86:8a:9a:34:98:
                    cc:69:46:91:56:50:27:58:74:91:9b:ea:4a:48:98:
                    97:ee:65:20:11:93:7b:cd:c9:29:3f:48:a6:ec:fc:
                    c4:9b:59:97:49:ea:e8:3d:ab:c9:05:96:12:4d:f1:
                    ea:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FE:93:01:8C:2A:E9:15:F2:63:70:19:F3:A2:74:FF:C0:F2:6D:CB
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a373030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:dd:95:e5:4d:b4:8f:23:ea:f1:62:2c:70:8f:eb:b5:c6:
         df:ae:9b:75:0d:7f:9d:67:26:24:10:2e:38:d4:11:a0:8a:5f:
         ca:eb:40:91:2b:3b:d7:e2:bd:ca:d4:40:74:e7:e4:ed:f3:c4:
         05:b3:58:73:31:17:ed:a8:f7:2e:89:a4:b6:cf:2a:3f:80:43:
         1c:58:d0:48:31:d9:51:33:36:45:41:ae:9a:bf:ff:66:c4:4c:
         8c:22:8e:48:78:90:06:d1:8a:27:d3:df:05:45:e3:e5:2a:c7:
         76:b6:fe:06:56:45:d8:19:56:51:72:72:8f:9b:4a:fc:f1:1b:
         2e:e7:d7:e9:71:2e:fa:f0:5e:7f:a3:07:28:de:b0:6e:87:90:
         31:21:79:bd:b3:c3:96:12:39:88:04:f8:2d:51:65:d0:b0:ce:
         12:fb:2e:b4:13:9d:f2:9c:c7:bf:bb:d8:dc:35:cf:fe:0a:2e:
         f8:56:cb:b4:48:be:5b:df:a3:92:e0:7a:1a:96:d5:e5:b5:05:
         7e:0b:d7:91:15:b3:87:52:db:85:69:c7:fa:11:15:95:2a:87:
         70:b9:13:83:e4:a7:97:e0:a4:34:18:f0:19:98:1e:fa:37:ab:
         32:2a:48:d2:d5:36:c8:6d:0a:a9:88:db:fa:2e:ce:cd:70:93:
         72:86:73:37
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYeyjcwI6HAScLWKS3F2ujgFhgjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg0NzBDMTBBQzY0NEJFRjRERjI2NjkyNEM0RTA4MzJD
OEZCQThBMjAeFw0yNDA0MDMxMzQ4MzdaFw0yNTA0MDIxMzUzMzdaMDMxMTAvBgNV
BAMTKEIyRkU5MzAxOEMyQUU5MTVGMjYzNzAxOUYzQTI3NEZGQzBGMjZEQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+JIN9G3z3YYrPjDKgssFGVQJ
HY1Ktwo5W600QaK4NrD/IYg8COOXkgzT2/IGmCn+N2RWxXB5O8D/pu1ZxqPL9jRz
826++EHVhfLSk2F6+jReGAo4VUwTiDhFQY2DVGQLZyWzn4YJiAmpsfHFXE25+0Vh
yp+RtA5o+YFzP6BcvMi1z8C5suDW8opZUsAUMlNj5wQRYkK17a00/24TSDjDtAem
vbW5/tLuNGq8nZjGeiXTQ4QZK3iDmY7jLJuB1nJAC16uCb3I/E7oxYmGipo0mMxp
RpFWUCdYdJGb6kpImJfuZSARk3vNySk/SKbs/MSbWZdJ6ug9q8kFlhJN8eqjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsv6TAYwq6RXyY3AZ86J0/8DybcswHwYDVR0j
BBgwFoAUuEcMEKxkS+9N8maSTE4IMsj7qKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hydVFhSHZMVE1nV3FZTmJFNk16SnVDenI0ZEdiVmNVUjRRS3lQZldz
cHkvMC9CODQ3MEMxMEFDNjQ0QkVGNERGMjY2OTI0QzRFMDgzMkM4RkJBOEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4NDcwQzEwQUM2NDRCRUY0
REYyNjY5MjRDNEUwODMyQzhGQkE4QTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYcnVRYUh2TFRNZ1dxWU5iRTZNekp1Q3pyNGRHYlZjVVI0UUt5UGZXc3B5LzAv
MzIzODMwMzQzYTM2MzkzNjMwM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEaWBwMA0GCSqGSIb3DQEBCwUA
A4IBAQBQqN2V5U20jyPq8WIscI/rtcbfrpt1DX+dZyYkEC441BGgil/K60CRKzvX
4r3K1EB05+Tt88QFs1hzMRftqPcuiaS2zyo/gEMcWNBIMdlRMzZFQa6av/9mxEyM
Io5IeJAG0Yon098FRePlKsd2tv4GVkXYGVZRcnKPm0r88Rsu59fpcS768F5/owco
3rBuh5AxIXm9s8OWEjmIBPgtUWXQsM4S+y60E53ynMe/u9jcNc/+Ci74Vsu0SL5b
36OS4HoaltXltQV+C9eRFbOHUtuFacf6ERWVKodwuROD5KeX4KQ0GPAZmB76N6sy
KkjS1TbIbQqpiNv6Ls7NcJNyhnM3
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org