Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa
File:                     323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa (raw, json)
Hash identifier:          w1o0EQH4GSb82sZlFNFvunM7ULCibRAEDjVQN/T7TJQ=
Subject key identifier:   F9:18:0A:75:72:6C:E6:35:87:47:3A:AF:86:CC:27:06:C0:84:86:38
Certificate issuer:       /CN=64EDF843BB58DCBE2014E8820AB744C627698B80
Certificate serial:       657357481D3251A549289DE05E18C47E209E43A1
Authority key identifier: 64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa
Signing time:             Thu 04 Apr 2024 23:32:53 +0000
ROA not before:           Thu 04 Apr 2024 23:27:53 +0000
ROA not after:            Thu 03 Apr 2025 23:32:53 +0000
asID:                     268573
IP address blocks:        2804:5344:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:73:57:48:1d:32:51:a5:49:28:9d:e0:5e:18:c4:7e:20:9e:43:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
        Validity
            Not Before: Apr  4 23:27:53 2024 GMT
            Not After : Apr  3 23:32:53 2025 GMT
        Subject: CN=F9180A75726CE63587473AAF86CC2706C0848638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:d3:d3:89:8a:d0:ec:bf:50:8d:ba:84:20:
                    27:07:d3:15:0d:8e:62:bb:8f:c4:ec:95:d8:e9:0c:
                    ea:54:52:e7:ab:70:18:48:e4:ad:9f:92:cc:99:b6:
                    2b:22:0d:d2:e3:d2:f5:b1:ce:85:c0:6c:1b:f9:76:
                    f7:50:49:6d:5c:0f:89:68:b5:69:e6:20:c6:ff:f1:
                    c2:ce:79:69:2f:ef:52:4d:5a:8d:86:ae:78:ce:e6:
                    5d:0b:23:4c:35:19:fb:db:4a:98:13:cf:8a:70:40:
                    a7:f0:f3:6f:50:75:62:26:37:3d:2b:f9:d3:79:60:
                    09:3d:6f:3f:ac:5f:de:8b:fc:70:ad:dd:38:ed:da:
                    6b:f9:e1:94:53:09:62:a7:db:66:eb:c0:48:47:4b:
                    ae:41:7e:6d:72:58:d4:fc:c1:14:15:a8:4f:8c:72:
                    66:f3:f6:41:cc:86:d0:ed:84:fc:0d:ae:bc:85:59:
                    e6:4e:64:9c:a4:cd:dd:8e:98:4a:eb:f7:83:d0:36:
                    f9:7e:37:b0:d8:14:f2:98:c8:52:e6:9a:94:4b:a0:
                    04:aa:7b:6d:aa:1a:d9:6f:4d:20:5f:1d:10:0d:51:
                    91:e1:47:1c:af:c5:6b:ba:64:eb:19:1d:f4:9e:e8:
                    8f:67:b8:8a:8b:3c:e3:e9:21:5d:94:98:dc:68:bc:
                    77:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:18:0A:75:72:6C:E6:35:87:47:3A:AF:86:CC:27:06:C0:84:86:38
            X509v3 Authority Key Identifier:
                keyid:64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:23:01:43:23:4d:f2:76:15:6b:d4:7a:aa:e7:af:cb:44:
         1b:02:0f:57:d6:19:54:14:ac:1c:db:bc:4e:bc:6d:80:60:c9:
         00:a6:c8:6a:78:0c:26:02:e9:a2:3b:d0:4a:ce:48:76:3a:73:
         24:9f:17:71:9b:c9:85:2e:07:8f:4f:42:27:ba:ef:0f:19:63:
         ad:02:7f:3d:91:6a:ad:d1:89:6f:2e:14:a4:2a:41:59:5d:0f:
         78:e9:4d:e5:4e:ea:1e:d6:c7:39:0f:28:f0:d3:62:a2:f9:52:
         11:62:0a:7e:48:81:bf:b5:6e:39:96:8e:ea:d3:6f:ec:25:5b:
         07:f3:4c:92:08:08:ef:20:3e:68:8e:bf:21:43:d9:31:e3:8c:
         3c:a9:60:b5:46:94:6f:48:f0:e5:28:6a:49:2c:d4:61:da:6b:
         4b:10:d5:2c:95:f4:4a:5a:ca:ab:dd:c2:65:56:a7:ad:4a:72:
         1e:5f:ec:de:80:5b:67:02:e8:6c:f6:ac:9d:2b:94:df:8d:3c:
         44:de:dd:6d:23:28:fd:8a:0f:e7:9b:a0:48:52:db:dc:2d:34:
         ef:e1:e4:f2:65:bb:c3:dc:7f:de:08:1b:85:6b:20:1c:40:65:
         ea:81:9c:29:2d:4e:e7:a4:a7:4b:62:95:8f:5c:50:b7:38:76:
         25:ed:e0:4a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZXNXSB0yUaVJKJ3gXhjEfiCeQ6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFREY4NDNCQjU4RENCRTIwMTRFODgyMEFCNzQ0QzYy
NzY5OEI4MDAeFw0yNDA0MDQyMzI3NTNaFw0yNTA0MDMyMzMyNTNaMDMxMTAvBgNV
BAMTKEY5MTgwQTc1NzI2Q0U2MzU4NzQ3M0FBRjg2Q0MyNzA2QzA4NDg2MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQ9PTiYrQ7L9QjbqEICcH0xUN
jmK7j8TsldjpDOpUUuercBhI5K2fksyZtisiDdLj0vWxzoXAbBv5dvdQSW1cD4lo
tWnmIMb/8cLOeWkv71JNWo2GrnjO5l0LI0w1GfvbSpgTz4pwQKfw829QdWImNz0r
+dN5YAk9bz+sX96L/HCt3Tjt2mv54ZRTCWKn22brwEhHS65Bfm1yWNT8wRQVqE+M
cmbz9kHMhtDthPwNrryFWeZOZJykzd2OmErr94PQNvl+N7DYFPKYyFLmmpRLoASq
e22qGtlvTSBfHRANUZHhRxyvxWu6ZOsZHfSe6I9nuIqLPOPpIV2UmNxovHcdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+RgKdXJs5jWHRzqvhswnBsCEhjgwHwYDVR0j
BBgwFoAUZO34Q7tY3L4gFOiCCrdExidpi4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVQajJOdXFTcGN1Q3RnV25wVThIUXRka1ZYaG85a2toYTlxV29NQ1c2
RWMvMS82NEVERjg0M0JCNThEQ0JFMjAxNEU4ODIwQUI3NDRDNjI3Njk4QjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RURGODQzQkI1OERDQkUy
MDE0RTg4MjBBQjc0NEM2Mjc2OThCODAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1UGoyTnVxU3BjdUN0Z1ducFU4SFF0ZGtWWGhvOWtraGE5cVdvTUNXNkVjLzEv
MzIzODMwMzQzYTM1MzMzNDM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM1MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEU0TAMA0GCSqGSIb3DQEBCwUA
A4IBAQCBtSMBQyNN8nYVa9R6quevy0QbAg9X1hlUFKwc27xOvG2AYMkApshqeAwm
AumiO9BKzkh2OnMknxdxm8mFLgePT0Inuu8PGWOtAn89kWqt0YlvLhSkKkFZXQ94
6U3lTuoe1sc5Dyjw02Ki+VIRYgp+SIG/tW45lo7q02/sJVsH80ySCAjvID5ojr8h
Q9kx44w8qWC1RpRvSPDlKGpJLNRh2mtLENUslfRKWsqr3cJlVqetSnIeX+zegFtn
Auhs9qydK5TfjTxE3t1tIyj9ig/nm6BIUtvcLTTv4eTyZbvD3H/eCBuFayAcQGXq
gZwpLU7npKdLYpWPXFC3OHYl7eBK
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org