Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa
File:                     323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa (raw, json)
Hash identifier:          D83V2rvqibBIw5k2BlQZdEXBSWespkFU0oIfuO6ouag=
Subject key identifier:   5A:96:28:F5:D3:4B:6C:56:DA:20:05:86:5B:8B:A4:E2:42:F1:19:60
Certificate issuer:       /CN=6C20D6D1C3A83815C34AD48BB58CDE7175526D06
Certificate serial:       3E2A8E1E82E5C2BE77833734122F160BE6CF1261
Authority key identifier: 6C:20:D6:D1:C3:A8:38:15:C3:4A:D4:8B:B5:8C:DE:71:75:52:6D:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa
Signing time:             Thu 25 Jan 2024 19:23:40 +0000
ROA not before:           Thu 25 Jan 2024 19:18:40 +0000
ROA not after:            Thu 23 Jan 2025 19:23:40 +0000
asID:                     273814
IP address blocks:        2804:8cac:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2a:8e:1e:82:e5:c2:be:77:83:37:34:12:2f:16:0b:e6:cf:12:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C20D6D1C3A83815C34AD48BB58CDE7175526D06
        Validity
            Not Before: Jan 25 19:18:40 2024 GMT
            Not After : Jan 23 19:23:40 2025 GMT
        Subject: CN=5A9628F5D34B6C56DA2005865B8BA4E242F11960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:fb:cb:98:2c:78:4e:fd:b2:6f:fe:99:d1:
                    1d:e2:42:00:db:19:72:8b:f8:a2:c4:05:5b:bb:a2:
                    2a:09:4d:b8:12:11:3c:38:5e:a6:62:ba:a8:e9:1f:
                    dd:aa:3b:b5:c6:d8:6f:66:0c:c0:31:e2:1c:67:39:
                    74:ea:0a:09:4c:40:f8:ff:d0:6f:78:a4:95:ca:d6:
                    5c:9e:77:2b:07:19:65:2f:5f:3f:32:57:aa:e9:75:
                    16:29:55:2e:ab:2d:7b:0f:62:db:f3:ad:42:92:c4:
                    15:89:c3:88:91:59:71:c7:2d:e2:af:02:29:de:89:
                    97:e7:b1:c7:a0:6c:fb:9a:63:39:5b:ab:76:ac:f2:
                    78:3a:c8:fd:7d:f3:fd:71:b0:d6:40:ab:68:f6:c0:
                    3f:3d:48:a2:71:53:e7:6d:44:94:cc:fa:6b:6f:cf:
                    9c:48:90:a6:86:e1:c2:86:c9:3f:af:8b:d0:8a:43:
                    72:5e:03:20:11:e2:c5:29:9a:94:ab:49:0b:31:f5:
                    3f:6c:b0:a2:1e:8d:b0:93:35:76:ad:19:dd:07:7d:
                    2a:95:db:20:59:04:1b:35:79:70:63:0e:bb:0e:04:
                    34:ce:e8:2d:21:cb:06:48:d9:bc:10:de:f1:b9:30:
                    c1:cd:db:54:e8:f5:35:cb:25:52:bc:c9:b5:c9:49:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:96:28:F5:D3:4B:6C:56:DA:20:05:86:5B:8B:A4:E2:42:F1:19:60
            X509v3 Authority Key Identifier:
                keyid:6C:20:D6:D1:C3:A8:38:15:C3:4A:D4:8B:B5:8C:DE:71:75:52:6D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:6f:b8:a3:39:14:48:c8:99:16:fc:6f:3e:84:9f:90:8b:
         ac:0a:5b:33:b8:2b:e0:73:0c:cd:30:da:23:e0:dd:2c:e9:82:
         27:36:db:e0:34:ae:84:11:d8:da:61:50:48:f0:86:d0:db:53:
         07:68:d0:14:ff:2d:9d:36:1b:90:46:7e:5f:d4:fa:0a:99:9d:
         9e:c7:ec:a2:30:14:3c:98:06:e3:66:f7:d4:e9:54:47:b0:f5:
         12:28:b2:b1:1f:dd:84:55:cc:43:22:7e:df:2b:d9:0c:d6:b9:
         e4:58:bd:69:a2:85:f3:2c:43:88:b5:6c:bf:09:e5:a7:66:c8:
         21:85:ff:6b:72:f7:b5:b4:53:f2:98:b7:24:15:eb:ba:dc:25:
         d5:fc:be:93:a4:7a:64:c5:2c:ce:cf:48:55:da:70:a5:3d:e3:
         3c:15:3d:ec:fe:04:d8:61:e1:52:d9:34:b5:0b:a5:fe:b0:f3:
         db:18:9a:4e:4d:d4:4e:4b:63:b6:a2:aa:00:3d:fe:55:bb:d2:
         22:61:b3:90:68:ce:28:11:ae:13:83:2e:64:00:70:e5:69:7b:
         5f:9b:72:8f:66:57:7d:26:e3:49:eb:66:0e:a1:fc:a8:d3:5d:
         50:a8:69:88:94:1d:30:89:44:45:db:29:f5:5d:ec:72:fe:e0:
         54:fe:5b:89
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPiqOHoLlwr53gzc0Ei8WC+bPEmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMyMEQ2RDFDM0E4MzgxNUMzNEFENDhCQjU4Q0RFNzE3
NTUyNkQwNjAeFw0yNDAxMjUxOTE4NDBaFw0yNTAxMjMxOTIzNDBaMDMxMTAvBgNV
BAMTKDVBOTYyOEY1RDM0QjZDNTZEQTIwMDU4NjVCOEJBNEUyNDJGMTE5NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2vvLmCx4Tv2yb/6Z0R3iQgDb
GXKL+KLEBVu7oioJTbgSETw4XqZiuqjpH92qO7XG2G9mDMAx4hxnOXTqCglMQPj/
0G94pJXK1lyedysHGWUvXz8yV6rpdRYpVS6rLXsPYtvzrUKSxBWJw4iRWXHHLeKv
AineiZfnscegbPuaYzlbq3as8ng6yP198/1xsNZAq2j2wD89SKJxU+dtRJTM+mtv
z5xIkKaG4cKGyT+vi9CKQ3JeAyAR4sUpmpSrSQsx9T9ssKIejbCTNXatGd0HfSqV
2yBZBBs1eXBjDrsOBDTO6C0hywZI2bwQ3vG5MMHN21To9TXLJVK8ybXJSdWtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWpYo9dNLbFbaIAWGW4uk4kLxGWAwHwYDVR0j
BBgwFoAUbCDW0cOoOBXDStSLtYzecXVSbQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQ
TEsvMC82QzIwRDZEMUMzQTgzODE1QzM0QUQ0OEJCNThDREU3MTc1NTI2RDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZDMjBENkQxQzNBODM4MTVD
MzRBRDQ4QkI1OENERTcxNzU1MjZEMDYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZocTZvWDNieHhrblh0Y2ZCMXJ0WXlUamttazJEdkZvbW9SNUc0ajY2UExLLzAv
MzIzODMwMzQzYTM4NjM2MTYzM2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMzM4MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEjKwgMA0GCSqGSIb3DQEBCwUA
A4IBAQCT/G+4ozkUSMiZFvxvPoSfkIusClszuCvgcwzNMNoj4N0s6YInNtvgNK6E
EdjaYVBI8IbQ21MHaNAU/y2dNhuQRn5f1PoKmZ2ex+yiMBQ8mAbjZvfU6VRHsPUS
KLKxH92EVcxDIn7fK9kM1rnkWL1pooXzLEOItWy/CeWnZsghhf9rcve1tFPymLck
Feu63CXV/L6TpHpkxSzOz0hV2nClPeM8FT3s/gTYYeFS2TS1C6X+sPPbGJpOTdRO
S2O2oqoAPf5Vu9IiYbOQaM4oEa4Tgy5kAHDlaXtfm3KPZld9JuNJ62YOofyo011Q
qGmIlB0wiURF2yn1Xexy/uBU/luJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org