Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a343030303a3a2f33342d3334203d3e20323637323234.roa
File:                     323830343a346133343a343030303a3a2f33342d3334203d3e20323637323234.roa (raw, json)
Hash identifier:          oKPjLjTM8SukWojMxv3e+MCpb4oDP34BpNLJRxTdx0c=
Subject key identifier:   09:0A:12:F9:A2:60:66:EC:D0:19:67:70:E9:5C:EB:45:A8:98:4E:2A
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       25FE4BDDA1C65360CDFCCBDB15F53C5F66190CBF
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a343030303a3a2f33342d3334203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:06 +0000
ROA not before:           Tue 14 Nov 2023 19:29:06 +0000
ROA not after:            Tue 12 Nov 2024 19:34:06 +0000
asID:                     267224
IP address blocks:        2804:4a34:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:4b:dd:a1:c6:53:60:cd:fc:cb:db:15:f5:3c:5f:66:19:0c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:06 2023 GMT
            Not After : Nov 12 19:34:06 2024 GMT
        Subject: CN=090A12F9A26066ECD0196770E95CEB45A8984E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:74:b2:bb:22:cf:62:16:79:ec:3f:6f:59:
                    20:66:6d:a5:d5:89:ba:2d:a0:d4:b0:9b:67:a8:15:
                    d8:c4:c8:9e:55:01:8d:8f:f8:42:a7:3e:ff:62:99:
                    24:6b:15:84:4e:4f:58:d5:73:dc:40:44:9a:4b:cb:
                    11:c4:2d:4b:a0:e3:15:25:7d:d1:34:de:19:98:7b:
                    dd:d9:44:2a:62:64:73:95:5d:6c:6c:9c:6c:06:da:
                    7a:13:d8:b4:a4:f1:2d:2a:2f:f8:2e:7c:0f:45:2a:
                    c2:b6:5c:82:07:ad:09:a8:13:22:7d:9d:68:fc:62:
                    5a:ee:6b:fc:c4:c4:49:09:df:03:9b:79:61:df:45:
                    15:cc:c4:ec:05:2f:12:a6:8b:10:ce:2e:a9:a2:0a:
                    d6:a2:3f:bf:11:ee:70:d7:72:a7:dc:ae:8a:cf:9e:
                    d7:27:16:ad:6d:e4:10:5f:8a:79:8a:7e:81:9e:60:
                    42:93:18:ca:03:fd:14:8f:ab:de:4b:a2:cc:1b:33:
                    f6:40:f1:ea:9a:27:70:48:45:bc:d9:97:6e:2f:38:
                    7b:12:fb:39:be:86:60:d2:0b:e1:d7:f6:95:fd:1b:
                    e7:84:ac:6b:5b:ef:01:da:f0:8c:d8:0b:70:c8:d9:
                    9e:7c:1f:4f:53:8f:d5:fe:0c:18:61:50:8a:e7:ad:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0A:12:F9:A2:60:66:EC:D0:19:67:70:E9:5C:EB:45:A8:98:4E:2A
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a343030303a3a2f33342d3334203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a34:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:33:59:0d:7e:fb:af:47:01:bc:24:8c:18:78:07:e4:8b:4b:
         e0:da:a4:d4:84:d3:76:13:ee:eb:45:b9:41:f6:a4:4d:8b:88:
         50:73:7f:d1:38:56:88:f4:07:63:ab:55:c6:e9:82:ae:de:0e:
         52:40:66:7c:44:bf:d1:ca:b6:97:80:3a:e3:4a:9b:77:52:2b:
         63:59:2f:ba:40:c5:27:7d:5d:ac:f9:b6:6e:a6:29:82:5b:de:
         2c:fd:93:31:c1:69:c7:11:90:ee:6e:ae:3b:c5:88:a1:ad:1c:
         46:a6:86:e1:db:01:bf:de:f1:a1:ac:1f:50:29:b8:f2:7f:5a:
         88:1c:5a:58:83:18:05:4a:af:bd:18:4b:72:8d:08:14:76:a8:
         c2:2b:40:30:a4:97:9a:2e:19:b4:b3:41:d4:b0:a0:e5:05:e5:
         67:ae:d9:26:89:d8:57:f4:3d:de:48:b7:85:c1:7c:fd:0e:a8:
         8e:45:05:bb:14:95:01:d8:17:65:7a:68:4e:e1:0d:fd:e1:6f:
         ab:e3:18:68:cb:df:7a:bc:75:f2:87:56:4e:7b:69:b1:dd:e7:
         2f:f8:f2:61:50:54:d0:8e:95:89:05:2d:a3:f2:a2:11:a7:17:
         36:9d:4b:5a:f5:80:e5:3a:91:10:3b:aa:31:b3:46:7e:dd:1c:
         6b:e3:35:7b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJf5L3aHGU2DN/MvbFfU8X2YZDL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0NEEwQTg1QTc4QzY4OEVENENDOTA3MkI4RjNDQjM3
QUVEOTM4RjAeFw0yMzExMTQxOTI5MDZaFw0yNDExMTIxOTM0MDZaMDMxMTAvBgNV
BAMTKDA5MEExMkY5QTI2MDY2RUNEMDE5Njc3MEU5NUNFQjQ1QTg5ODRFMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhXSyuyLPYhZ57D9vWSBmbaXV
ibotoNSwm2eoFdjEyJ5VAY2P+EKnPv9imSRrFYROT1jVc9xARJpLyxHELUug4xUl
fdE03hmYe93ZRCpiZHOVXWxsnGwG2noT2LSk8S0qL/gufA9FKsK2XIIHrQmoEyJ9
nWj8Ylrua/zExEkJ3wObeWHfRRXMxOwFLxKmixDOLqmiCtaiP78R7nDXcqfcrorP
ntcnFq1t5BBfinmKfoGeYEKTGMoD/RSPq95LoswbM/ZA8eqaJ3BIRbzZl24vOHsS
+zm+hmDSC+HX9pX9G+eErGtb7wHa8IzYC3DI2Z58H09Tj9X+DBhhUIrnrZ8ZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCQoS+aJgZuzQGWdw6VzrRaiYTiowHwYDVR0j
BBgwFoAU+kSgqFp4xojtTMkHK488s3rtk48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlBocEpOUGFHUU15NDlyUmZ3OVNYVk1TQ3RDVzdCS2J4NFI0VzRlSDFM
b2cvMC9GQTQ0QTBBODVBNzhDNjg4RUQ0Q0M5MDcyQjhGM0NCMzdBRUQ5MzhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNDRBMEE4NUE3OEM2ODhF
RDRDQzkwNzJCOEYzQ0IzN0FFRDkzOEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQaHBKTlBhR1FNeTQ5clJmdzlTWFZNU0N0Q1c3QktieDRSNFc0ZUgxTG9nLzAv
MzIzODMwMzQzYTM0NjEzMzM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigESjRAMA0GCSqGSIb3DQEBCwUA
A4IBAQAzM1kNfvuvRwG8JIwYeAfki0vg2qTUhNN2E+7rRblB9qRNi4hQc3/ROFaI
9Adjq1XG6YKu3g5SQGZ8RL/RyraXgDrjSpt3UitjWS+6QMUnfV2s+bZupimCW94s
/ZMxwWnHEZDubq47xYihrRxGpobh2wG/3vGhrB9QKbjyf1qIHFpYgxgFSq+9GEty
jQgUdqjCK0AwpJeaLhm0s0HUsKDlBeVnrtkmidhX9D3eSLeFwXz9DqiORQW7FJUB
2BdlemhO4Q394W+r4xhoy996vHXyh1ZOe2mx3ecv+PJhUFTQjpWJBS2j8qIRpxc2
nUta9YDlOpEQO6oxs0Z+3Rxr4zV7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org