Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          KqPER8jCq92xmY0JR46ji9gmgyQH6qvuMw8A3BFM0vM=
Subject key identifier:   C4:D9:3C:1F:67:1F:5B:22:B7:9D:1E:7D:2F:08:10:1C:48:17:78:F5
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       431016BE38C5701A9A4F63A63A564D10A8E1F76E
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Wed 10 Jan 2024 19:26:27 +0000
ROA not before:           Wed 10 Jan 2024 19:21:27 +0000
ROA not after:            Wed 08 Jan 2025 19:26:27 +0000
asID:                     262393
IP address blocks:        2804:8c8:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:10:16:be:38:c5:70:1a:9a:4f:63:a6:3a:56:4d:10:a8:e1:f7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan 10 19:21:27 2024 GMT
            Not After : Jan  8 19:26:27 2025 GMT
        Subject: CN=C4D93C1F671F5B22B79D1E7D2F08101C481778F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:05:35:84:3e:5c:63:13:89:31:82:b0:d5:
                    8f:94:86:db:fa:0c:ae:20:96:a7:7d:96:4a:87:0a:
                    e1:48:59:f0:0c:aa:71:82:c8:30:c0:9d:a5:12:4d:
                    fb:b4:8c:40:f1:b0:51:50:d4:05:ff:4f:8e:a1:ba:
                    75:75:25:9a:37:cd:48:28:e8:c9:39:3b:a8:50:6b:
                    8d:77:c5:8d:45:c2:29:be:f0:54:b4:0a:67:02:e4:
                    b1:fc:80:14:f4:c7:2a:97:15:cb:81:a8:b7:1e:dc:
                    7f:48:3e:05:88:68:99:f6:e8:38:69:64:2c:a0:01:
                    bc:22:a3:73:e3:fe:f6:1b:52:5f:3b:fb:51:d5:ec:
                    f6:af:26:26:3d:9e:16:23:6e:18:15:87:ba:ce:92:
                    4d:d2:f9:de:25:2b:b8:40:9b:ee:fb:47:c0:41:5a:
                    59:83:ea:fa:b3:8d:22:55:7f:2b:e5:3a:b9:01:23:
                    01:89:08:2c:61:1b:69:89:28:bc:5a:d9:21:c6:dc:
                    69:15:a2:7b:b3:82:41:36:fc:8e:9d:8e:51:88:b7:
                    4b:63:3f:d6:9a:8b:cb:d5:af:9b:e2:cc:ca:b1:13:
                    c7:fe:ce:d9:62:e7:51:c5:ac:c8:c6:35:6c:e5:a3:
                    d3:f3:44:ee:69:88:7b:9c:00:25:34:3e:37:17:54:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D9:3C:1F:67:1F:5B:22:B7:9D:1E:7D:2F:08:10:1C:48:17:78:F5
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:c4:c5:a4:ce:83:3c:0a:53:9a:ae:f0:93:17:35:5d:7f:
         aa:3a:e0:81:c2:ac:91:0d:76:a1:65:eb:65:1c:ba:30:ba:10:
         e3:bb:4a:d1:55:14:e9:69:d1:24:92:ae:db:b1:52:47:9d:9f:
         ff:a7:65:8b:40:04:9f:aa:e6:be:62:7e:02:ed:8b:8e:82:aa:
         6e:fd:e0:d3:2e:93:df:b0:42:bd:32:4d:1a:4f:a0:02:d6:ed:
         f5:94:6d:17:44:c9:3a:08:38:34:71:30:6a:d8:f5:50:6c:15:
         71:c5:b5:6b:ad:a0:5d:3c:54:c7:5a:8c:eb:47:12:84:06:e1:
         3e:39:4e:a8:4c:10:17:86:ff:e5:80:e2:56:c2:2c:bd:fb:cf:
         fb:d7:2c:0f:4c:ae:11:c4:0a:c6:21:6b:bf:a1:03:b0:8b:54:
         4b:fe:ce:ee:5c:79:b4:71:cb:1d:1e:e3:83:66:dd:16:f7:e8:
         95:29:37:25:6e:ca:89:36:55:dd:35:90:25:21:9c:86:0e:92:
         a0:df:30:10:fc:e9:a1:6e:55:b4:63:3f:79:fa:0c:93:96:cf:
         38:65:b2:8b:fb:b4:ab:f0:a5:29:39:b9:13:a9:4b:3f:81:0c:
         dd:0e:c6:45:5f:05:52:eb:77:a2:81:bc:fb:bb:61:04:d4:cd:
         f7:89:fd:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQxAWvjjFcBqaT2OmOlZNEKjh924wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAyQkM3OTBBRTM0MTlDRUFBRkMyMTlFMUM3NjlERTcy
OTAyMTVBQzAeFw0yNDAxMTAxOTIxMjdaFw0yNTAxMDgxOTI2MjdaMDMxMTAvBgNV
BAMTKEM0RDkzQzFGNjcxRjVCMjJCNzlEMUU3RDJGMDgxMDFDNDgxNzc4RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWQU1hD5cYxOJMYKw1Y+Uhtv6
DK4glqd9lkqHCuFIWfAMqnGCyDDAnaUSTfu0jEDxsFFQ1AX/T46hunV1JZo3zUgo
6Mk5O6hQa413xY1Fwim+8FS0CmcC5LH8gBT0xyqXFcuBqLce3H9IPgWIaJn26Dhp
ZCygAbwio3Pj/vYbUl87+1HV7PavJiY9nhYjbhgVh7rOkk3S+d4lK7hAm+77R8BB
WlmD6vqzjSJVfyvlOrkBIwGJCCxhG2mJKLxa2SHG3GkVonuzgkE2/I6djlGIt0tj
P9aai8vVr5vizMqxE8f+ztli51HFrMjGNWzlo9PzRO5piHucACU0PjcXVAiLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxNk8H2cfWyK3nR59LwgQHEgXePUwHwYDVR0j
BBgwFoAU8CvHkK40Gc6q/CGeHHad5ykCFawwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMC9GMDJCQzc5MEFFMzQxOUNFQUFGQzIxOUUxQzc2OURFNzI5MDIxNUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YwMkJDNzkwQUUzNDE5Q0VB
QUZDMjE5RTFDNzY5REU3MjkwMjE1QUMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzAv
MzIzODMwMzQzYTM4NjMzODNhNjEzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzMjM2MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAjIoDANBgkqhkiG9w0BAQsFAAOC
AQEAGhXExaTOgzwKU5qu8JMXNV1/qjrggcKskQ12oWXrZRy6MLoQ47tK0VUU6WnR
JJKu27FSR52f/6dli0AEn6rmvmJ+Au2LjoKqbv3g0y6T37BCvTJNGk+gAtbt9ZRt
F0TJOgg4NHEwatj1UGwVccW1a62gXTxUx1qM60cShAbhPjlOqEwQF4b/5YDiVsIs
vfvP+9csD0yuEcQKxiFrv6EDsItUS/7O7lx5tHHLHR7jg2bdFvfolSk3JW7KiTZV
3TWQJSGchg6SoN8wEPzpoW5VtGM/efoMk5bPOGWyi/u0q/ClKTm5E6lLP4EM3Q7G
RV8FUut3ooG8+7thBNTN94n9Ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org