Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          f1ignbzXph8jxLjVq4RjKXcDv+XEwlUZXxGY4kcarxM=
Subject key identifier:   9A:B0:43:E3:AF:B0:33:D9:E6:04:DD:E0:EB:8C:03:40:35:AD:08:6B
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       027387CFBBBF5773EF17443F0E03B66706F834E2
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Wed 10 Jan 2024 19:26:27 +0000
ROA not before:           Wed 10 Jan 2024 19:21:27 +0000
ROA not after:            Wed 08 Jan 2025 19:26:27 +0000
asID:                     262393
IP address blocks:        2804:8c8:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:73:87:cf:bb:bf:57:73:ef:17:44:3f:0e:03:b6:67:06:f8:34:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan 10 19:21:27 2024 GMT
            Not After : Jan  8 19:26:27 2025 GMT
        Subject: CN=9AB043E3AFB033D9E604DDE0EB8C034035AD086B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:96:f4:45:22:e5:0d:92:ff:b3:e2:2b:b5:
                    8f:f4:66:de:e8:1a:53:78:4d:bb:ec:5a:4c:a0:26:
                    41:62:34:02:c2:b9:ad:1a:3b:34:f1:72:10:76:98:
                    96:11:fd:b9:25:29:d5:f2:eb:73:47:d2:7e:36:b1:
                    f3:a4:ef:b1:2a:9e:a9:7b:c2:4b:ec:89:36:1c:d3:
                    28:f4:8a:3b:24:a4:1f:5c:79:e6:eb:3a:85:28:4f:
                    a7:69:a5:e0:d0:8c:48:0a:59:3f:52:c0:46:0c:f8:
                    5b:7a:04:54:bc:c2:51:72:5b:b0:9e:45:e3:e4:14:
                    51:84:23:40:5f:2b:41:d7:7c:79:67:6c:93:41:eb:
                    90:d9:6d:93:05:15:a8:14:01:b2:db:5d:04:1a:78:
                    4b:89:cf:65:8c:27:0c:90:ce:df:aa:96:52:40:24:
                    e7:6c:9f:74:a5:f7:c8:62:54:e1:fa:6a:88:65:0c:
                    01:89:12:00:b7:d9:90:09:54:2b:bb:00:d2:15:fd:
                    44:5f:51:1e:e9:eb:61:f7:a6:3a:0e:67:4a:0c:c4:
                    a8:f7:78:3f:ec:1e:4e:89:ca:9d:8e:f8:84:a6:b4:
                    a5:04:86:3b:09:59:bf:49:0e:89:7d:f5:95:19:ba:
                    bb:89:38:e2:84:b8:1c:4b:0e:51:e4:0b:35:90:d5:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:43:E3:AF:B0:33:D9:E6:04:DD:E0:EB:8C:03:40:35:AD:08:6B
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         12:84:3e:49:91:98:de:81:6f:55:fc:28:88:b9:90:e5:8c:d5:
         43:b3:78:f7:dc:33:8c:a1:a8:c7:99:3d:3e:01:da:b7:40:32:
         86:f3:89:b1:95:7b:24:f4:26:52:4c:f1:a3:3a:f0:bb:9f:61:
         b2:e6:fb:e6:7f:b3:e3:f4:98:38:fc:88:42:e3:f6:63:77:e2:
         90:53:ba:ab:12:91:f3:0b:fe:a5:22:56:45:b5:df:bf:27:61:
         27:c6:73:41:35:63:57:bd:a7:d3:7f:2d:37:34:aa:17:4e:a2:
         45:30:81:ae:82:04:b6:f4:b9:ce:56:db:af:98:dc:c8:ac:f6:
         53:8a:68:b2:64:59:b4:22:da:9b:b3:a9:85:ac:16:03:cb:9e:
         5f:37:1b:c9:96:58:d3:35:bb:c2:e3:82:d7:fa:27:e4:57:f6:
         2d:35:45:46:c0:c1:78:3b:39:b0:ce:54:c1:ec:5c:ef:0a:eb:
         b7:c0:19:26:7d:c5:ba:13:3a:0f:1c:b3:9e:31:ca:07:f6:31:
         db:d4:2b:43:ea:e1:9b:56:4f:af:26:c1:8e:c4:c1:7c:fa:36:
         2c:40:df:9f:f0:ae:61:46:49:a2:e5:33:99:15:1e:04:81:66:
         a5:78:dc:4c:ab:f7:90:94:d4:9d:90:7c:0b:aa:b7:f0:e3:4e:
         dc:eb:74:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAnOHz7u/V3PvF0Q/DgO2Zwb4NOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAyQkM3OTBBRTM0MTlDRUFBRkMyMTlFMUM3NjlERTcy
OTAyMTVBQzAeFw0yNDAxMTAxOTIxMjdaFw0yNTAxMDgxOTI2MjdaMDMxMTAvBgNV
BAMTKDlBQjA0M0UzQUZCMDMzRDlFNjA0RERFMEVCOEMwMzQwMzVBRDA4NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlwJb0RSLlDZL/s+IrtY/0Zt7o
GlN4TbvsWkygJkFiNALCua0aOzTxchB2mJYR/bklKdXy63NH0n42sfOk77Eqnql7
wkvsiTYc0yj0ijskpB9ceebrOoUoT6dppeDQjEgKWT9SwEYM+Ft6BFS8wlFyW7Ce
RePkFFGEI0BfK0HXfHlnbJNB65DZbZMFFagUAbLbXQQaeEuJz2WMJwyQzt+qllJA
JOdsn3Sl98hiVOH6aohlDAGJEgC32ZAJVCu7ANIV/URfUR7p62H3pjoOZ0oMxKj3
eD/sHk6Jyp2O+ISmtKUEhjsJWb9JDol99ZUZuruJOOKEuBxLDlHkCzWQ1TcZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmrBD46+wM9nmBN3g64wDQDWtCGswHwYDVR0j
BBgwFoAU8CvHkK40Gc6q/CGeHHad5ykCFawwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMC9GMDJCQzc5MEFFMzQxOUNFQUFGQzIxOUUxQzc2OURFNzI5MDIxNUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YwMkJDNzkwQUUzNDE5Q0VB
QUZDMjE5RTFDNzY5REU3MjkwMjE1QUMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzAv
MzIzODMwMzQzYTM4NjMzODNhMzQzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzMjM2MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAjIQDANBgkqhkiG9w0BAQsFAAOC
AQEAEoQ+SZGY3oFvVfwoiLmQ5YzVQ7N499wzjKGox5k9PgHat0AyhvOJsZV7JPQm
Ukzxozrwu59hsub75n+z4/SYOPyIQuP2Y3fikFO6qxKR8wv+pSJWRbXfvydhJ8Zz
QTVjV72n038tNzSqF06iRTCBroIEtvS5zlbbr5jcyKz2U4posmRZtCLam7OphawW
A8ueXzcbyZZY0zW7wuOC1/on5Ff2LTVFRsDBeDs5sM5Uwexc7wrrt8AZJn3FuhM6
DxyznjHKB/Yx29QrQ+rhm1ZPrybBjsTBfPo2LEDfn/CuYUZJouUzmRUeBIFmpXjc
TKv3kJTUnZB8C6q38ONO3Ot03A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org