Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/323830343a6663303a3a2f33322d3335203d3e20323633363031.roa
File:                     323830343a6663303a3a2f33322d3335203d3e20323633363031.roa (raw, json)
Hash identifier:          RFBEPsVo9FUxKMxGxhOBKD47dnM6eNbjs4sWxYz2bM4=
Subject key identifier:   F0:9F:E1:AF:82:2F:0A:7A:81:61:49:D0:C8:2C:B4:8E:94:4B:21:DF
Certificate issuer:       /CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
Certificate serial:       53BE6DD130CBF984D576FAE96DDF1D2ED5EE04C9
Authority key identifier: DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/323830343a6663303a3a2f33322d3335203d3e20323633363031.roa
Signing time:             Thu 12 Oct 2023 15:25:16 +0000
ROA not before:           Thu 12 Oct 2023 15:20:16 +0000
ROA not after:            Thu 10 Oct 2024 15:25:16 +0000
asID:                     263601
IP address blocks:        2804:fc0::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:be:6d:d1:30:cb:f9:84:d5:76:fa:e9:6d:df:1d:2e:d5:ee:04:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
        Validity
            Not Before: Oct 12 15:20:16 2023 GMT
            Not After : Oct 10 15:25:16 2024 GMT
        Subject: CN=F09FE1AF822F0A7A816149D0C82CB48E944B21DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:17:09:77:3a:40:a2:5c:b6:5a:d8:d4:9e:
                    b7:ab:ed:08:b7:98:71:aa:63:5b:a2:a2:a4:96:41:
                    24:2d:b9:2b:bf:c9:82:b8:38:29:5a:d0:40:29:61:
                    c3:b3:e6:aa:03:9a:5b:45:b9:07:df:06:14:fc:1b:
                    ae:f8:7d:0f:62:48:1a:de:a5:b7:77:f9:66:35:97:
                    25:64:8f:b7:5c:fa:d1:a3:c3:28:56:9a:69:cd:c8:
                    59:ef:b5:35:2d:1e:d0:e4:0c:9d:49:7c:09:78:81:
                    6e:c8:ec:00:d3:4a:d8:11:0a:97:d4:cb:2e:21:11:
                    01:84:57:fa:32:0b:aa:4e:a5:25:3c:3b:b8:0d:f6:
                    82:41:fd:69:a5:75:1e:a8:93:25:aa:2d:92:ca:c7:
                    2a:50:87:f1:d9:74:77:84:da:8c:a7:9a:d4:fc:b4:
                    c4:2f:9b:0d:f3:3e:96:21:8c:5e:84:98:e8:73:30:
                    58:d9:08:0e:39:bc:fa:fd:05:93:03:73:29:a7:f1:
                    7e:f1:71:b8:4d:15:a9:d6:8e:57:dd:73:e2:93:3b:
                    d9:ab:be:f2:63:72:89:2d:8f:b9:06:10:d0:42:e1:
                    f6:6d:ab:5b:cd:8b:85:55:0a:c5:56:b6:84:1f:1a:
                    38:9b:21:ae:80:b5:8a:b6:4a:a2:dd:1e:14:9d:03:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9F:E1:AF:82:2F:0A:7A:81:61:49:D0:C8:2C:B4:8E:94:4B:21:DF
            X509v3 Authority Key Identifier:
                keyid:DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/323830343a6663303a3a2f33322d3335203d3e20323633363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:25:3f:cc:5e:98:e2:6b:cc:20:cb:3f:b5:0b:3e:18:fe:
         3e:7c:1e:5b:80:b8:f4:de:b1:20:61:80:a5:e1:5c:7a:d4:1f:
         60:15:da:15:2b:0a:05:ed:1b:6d:28:f6:ab:7b:46:83:0e:cf:
         b5:cb:e7:b2:a3:4b:c1:2c:f1:35:ea:98:bb:e5:f4:c8:64:84:
         05:10:fb:a3:c1:f0:a0:31:bb:00:44:6b:78:11:b3:c4:ba:d7:
         d8:bd:e1:87:61:0d:3b:c4:1e:3a:7b:51:0d:5f:09:09:8d:0a:
         b3:ab:f6:c0:5a:9e:e9:f7:dc:b1:fb:21:1a:e4:32:c6:0f:3e:
         86:3b:1f:af:a4:76:e1:ed:ed:0b:d4:47:88:bd:7c:a0:b8:97:
         1f:62:d8:58:d0:a8:57:8e:35:d6:81:44:50:21:8d:aa:fd:af:
         b0:d3:59:f5:d4:99:18:f9:11:e4:05:38:bb:73:a9:8f:ae:8e:
         e5:cf:9e:59:ff:ea:43:d3:c7:5a:d0:5d:91:63:80:0f:ab:5f:
         f0:dc:aa:74:da:fd:fc:15:32:e2:e9:e0:be:72:3f:c4:f1:eb:
         41:c0:d9:26:1e:cf:17:21:a6:38:21:c9:83:af:05:d3:14:43:
         4e:df:2e:b2:88:89:9f:15:c1:7b:50:92:f2:ac:df:44:51:e9:
         d5:7f:1c:5f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUU75t0TDL+YTVdvrpbd8dLtXuBMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUzQjI0MjlBRjgwMDJBNkRBNEREMDU1M0EwOUUyQzlB
NDhFRjI0MTAeFw0yMzEwMTIxNTIwMTZaFw0yNDEwMTAxNTI1MTZaMDMxMTAvBgNV
BAMTKEYwOUZFMUFGODIyRjBBN0E4MTYxNDlEMEM4MkNCNDhFOTQ0QjIxREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvxcJdzpAoly2WtjUnrer7Qi3
mHGqY1uioqSWQSQtuSu/yYK4OCla0EApYcOz5qoDmltFuQffBhT8G674fQ9iSBre
pbd3+WY1lyVkj7dc+tGjwyhWmmnNyFnvtTUtHtDkDJ1JfAl4gW7I7ADTStgRCpfU
yy4hEQGEV/oyC6pOpSU8O7gN9oJB/WmldR6okyWqLZLKxypQh/HZdHeE2oynmtT8
tMQvmw3zPpYhjF6EmOhzMFjZCA45vPr9BZMDcymn8X7xcbhNFanWjlfdc+KTO9mr
vvJjcoktj7kGENBC4fZtq1vNi4VVCsVWtoQfGjibIa6AtYq2SqLdHhSdA44pAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU8J/hr4IvCnqBYUnQyCy0jpRLId8wHwYDVR0j
BBgwFoAU3jskKa+AAqbaTdBVOgniyaSO8kEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG85aXRNbWJWUmtkZmFiRGg2UVpDSDRiZW1GRVhwN0VHQlE2OFd5dW5i
eWMvMC9ERTNCMjQyOUFGODAwMkE2REE0REQwNTUzQTA5RTJDOUE0OEVGMjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFM0IyNDI5QUY4MDAyQTZE
QTRERDA1NTNBMDlFMkM5QTQ4RUYyNDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvOWl0TW1iVlJrZGZhYkRoNlFaQ0g0YmVtRkVYcDdFR0JRNjhXeXVuYnljLzAv
MzIzODMwMzQzYTY2NjMzMDNhM2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzMzM2
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED8AwDQYJKoZIhvcNAQELBQADggEBADPRJT/MXpji
a8wgyz+1Cz4Y/j58HluAuPTesSBhgKXhXHrUH2AV2hUrCgXtG20o9qt7RoMOz7XL
57KjS8Es8TXqmLvl9MhkhAUQ+6PB8KAxuwBEa3gRs8S619i94YdhDTvEHjp7UQ1f
CQmNCrOr9sBanun33LH7IRrkMsYPPoY7H6+kduHt7QvUR4i9fKC4lx9i2FjQqFeO
NdaBRFAhjar9r7DTWfXUmRj5EeQFOLtzqY+ujuXPnln/6kPTx1rQXZFjgA+rX/Dc
qnTa/fwVMuLp4L5yP8Tx60HA2SYezxchpjghyYOvBdMUQ07fLrKIiZ8VwXtQkvKs
30RR6dV/HF8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org