Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a383030303a3a2f33332d3333203d3e20323632393432.roa
File:                     323830343a6533383a383030303a3a2f33332d3333203d3e20323632393432.roa (raw, json)
Hash identifier:          FqXGukY1Z+poGnSxGRUxOFEkH1RuxCbS9dKlmcTXHOs=
Subject key identifier:   A5:4B:32:35:18:D6:86:75:41:27:E3:2F:65:1E:71:F4:AA:E7:51:96
Certificate issuer:       /CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
Certificate serial:       7FE6348D976FBAB17E7C6E111866F5DD276A27F0
Authority key identifier: DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a383030303a3a2f33332d3333203d3e20323632393432.roa
Signing time:             Fri 24 Nov 2023 14:04:49 +0000
ROA not before:           Fri 24 Nov 2023 13:59:49 +0000
ROA not after:            Fri 22 Nov 2024 14:04:49 +0000
asID:                     262942
IP address blocks:        2804:e38:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e6:34:8d:97:6f:ba:b1:7e:7c:6e:11:18:66:f5:dd:27:6a:27:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Validity
            Not Before: Nov 24 13:59:49 2023 GMT
            Not After : Nov 22 14:04:49 2024 GMT
        Subject: CN=A54B323518D686754127E32F651E71F4AAE75196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:7a:0f:13:cc:da:1f:c9:cd:79:ba:68:a4:
                    28:ae:30:b5:5e:49:72:0b:85:77:34:51:61:da:50:
                    fe:3a:39:b5:35:77:d8:8d:21:e5:e4:9d:16:73:8f:
                    6f:45:4d:92:58:af:3e:c0:26:90:cb:ae:fd:c6:2c:
                    81:bf:a7:93:53:7b:18:a3:16:bb:b1:7a:e4:b2:0c:
                    90:93:1d:34:ea:e0:5b:21:79:0f:c9:11:2c:6c:8a:
                    b6:12:a0:ad:02:13:91:3c:e6:50:bd:3c:fc:7a:60:
                    eb:1e:65:d7:b5:93:d6:74:17:96:df:b5:14:9b:97:
                    93:cf:bf:e2:ab:c6:fe:c1:cd:9c:6b:e7:19:a7:5b:
                    d0:22:9c:a1:5a:28:18:76:d4:3f:27:a5:83:4f:e8:
                    7d:8f:17:ec:ef:9c:37:70:2f:d1:ab:7a:3b:94:e0:
                    c3:f4:61:37:26:8c:ba:0e:f4:1f:ba:be:26:69:16:
                    03:ca:7e:6f:c5:d6:24:54:7d:4b:02:ae:9c:b4:d9:
                    98:bd:fd:61:1e:4f:90:df:f1:b0:25:fc:6e:69:b1:
                    0b:18:06:6c:d1:96:41:90:10:1f:99:6c:c2:99:f4:
                    eb:71:90:cd:8c:aa:b5:ee:0d:ed:49:c8:c1:45:49:
                    08:65:1d:55:77:c0:ed:4c:c9:37:a8:6f:81:5a:80:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4B:32:35:18:D6:86:75:41:27:E3:2F:65:1E:71:F4:AA:E7:51:96
            X509v3 Authority Key Identifier:
                keyid:DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a383030303a3a2f33332d3333203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:ae:19:67:0a:1e:d4:5d:ff:b3:6b:f4:bb:ac:8b:80:a8:f3:
         03:bd:a9:32:60:2c:d2:47:6c:b7:0f:d1:5c:bb:5b:3a:77:07:
         20:ee:7e:36:4e:a1:16:fc:5a:27:21:1d:fb:6d:9f:03:e9:84:
         48:37:51:df:de:4a:e3:25:23:62:4f:86:e7:f3:86:74:5c:66:
         b8:87:d4:ed:fb:b3:72:ed:68:7f:1a:bd:c5:9f:0b:d4:c3:97:
         47:6b:b3:d6:58:eb:e7:d6:0a:8b:ff:90:90:ed:42:e7:49:4b:
         1c:9b:20:63:9c:28:9e:09:98:7f:41:57:18:fa:6f:68:5a:74:
         41:30:65:90:5e:4a:ff:bc:b2:8f:58:cf:cc:cc:92:57:dc:c0:
         b4:39:7e:6b:f1:5a:44:31:47:50:b2:f1:ab:67:a3:1a:c8:f0:
         26:4c:43:1d:d3:34:91:86:85:3f:99:02:12:1d:16:01:b5:0d:
         0e:f3:b0:75:a2:11:b6:ec:84:aa:e5:c9:43:ac:a9:6b:82:c8:
         3f:e6:ea:5e:41:68:7b:29:bb:aa:2f:10:f4:3d:a6:98:bd:27:
         9b:74:ad:1f:14:26:db:98:ed:b5:f7:1f:e7:8a:8c:f0:16:94:
         4b:72:7f:53:a2:1e:b9:ff:60:79:c6:72:0a:a9:71:f4:c6:37:
         b6:47:48:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUf+Y0jZdvurF+fG4RGGb13SdqJ/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU4RDQyN0E5NDJENjNCODRENzc2RTk5MjVGRDhDODdD
RUI0RTM4OTAeFw0yMzExMjQxMzU5NDlaFw0yNDExMjIxNDA0NDlaMDMxMTAvBgNV
BAMTKEE1NEIzMjM1MThENjg2NzU0MTI3RTMyRjY1MUU3MUY0QUFFNzUxOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWnoPE8zaH8nNebpopCiuMLVe
SXILhXc0UWHaUP46ObU1d9iNIeXknRZzj29FTZJYrz7AJpDLrv3GLIG/p5NTexij
FruxeuSyDJCTHTTq4FsheQ/JESxsirYSoK0CE5E85lC9PPx6YOseZde1k9Z0F5bf
tRSbl5PPv+Krxv7BzZxr5xmnW9AinKFaKBh21D8npYNP6H2PF+zvnDdwL9GrejuU
4MP0YTcmjLoO9B+6viZpFgPKfm/F1iRUfUsCrpy02Zi9/WEeT5Df8bAl/G5psQsY
BmzRlkGQEB+ZbMKZ9OtxkM2MqrXuDe1JyMFFSQhlHVV3wO1MyTeob4FagK/9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpUsyNRjWhnVBJ+MvZR5x9KrnUZYwHwYDVR0j
BBgwFoAU3o1CepQtY7hNd26ZJf2Mh86044kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZaNGFqZG9pYVRUNUpaenpHa3phRmpScno1QWFkajJycEcydkdXVlJN
RU0vMC9ERThENDI3QTk0MkQ2M0I4NEQ3NzZFOTkyNUZEOEM4N0NFQjRFMzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFOEQ0MjdBOTQyRDYzQjg0
RDc3NkU5OTI1RkQ4Qzg3Q0VCNEUzODkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWWjRhamRvaWFUVDVKWnp6R2t6YUZqUnJ6NUFhZGoycnBHMnZHV1ZSTUVNLzAv
MzIzODMwMzQzYTY1MzMzODNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzMjM2MzIzOTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBA44gDANBgkqhkiG9w0BAQsFAAOC
AQEAla4ZZwoe1F3/s2v0u6yLgKjzA72pMmAs0kdstw/RXLtbOncHIO5+Nk6hFvxa
JyEd+22fA+mESDdR395K4yUjYk+G5/OGdFxmuIfU7fuzcu1ofxq9xZ8L1MOXR2uz
1ljr59YKi/+QkO1C50lLHJsgY5wongmYf0FXGPpvaFp0QTBlkF5K/7yyj1jPzMyS
V9zAtDl+a/FaRDFHULLxq2ejGsjwJkxDHdM0kYaFP5kCEh0WAbUNDvOwdaIRtuyE
quXJQ6ypa4LIP+bqXkFoeym7qi8Q9D2mmL0nm3StHxQm25jttfcf54qM8BaUS3J/
U6Ieuf9gecZyCqlx9MY3tkdINQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org