Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/323830343a373437383a383030303a3a2f33332d3333203d3e20323730393833.roa
File:                     323830343a373437383a383030303a3a2f33332d3333203d3e20323730393833.roa (raw, json)
Hash identifier:          GHw+8JL6PtbfW2MbgN59F90Zhi313PqCh0d65JvUd/A=
Subject key identifier:   6E:EF:9B:8F:46:9B:A8:7B:34:6E:F7:44:CC:1C:3D:43:BE:52:1B:A0
Certificate issuer:       /CN=73A759420E60B79FBFB48037B5A830EF409EA873
Certificate serial:       610EA9A69E9774A59392A73CBCF578E7F1CB70D4
Authority key identifier: 73:A7:59:42:0E:60:B7:9F:BF:B4:80:37:B5:A8:30:EF:40:9E:A8:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73A759420E60B79FBFB48037B5A830EF409EA873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/323830343a373437383a383030303a3a2f33332d3333203d3e20323730393833.roa
Signing time:             Thu 25 Jan 2024 13:20:45 +0000
ROA not before:           Thu 25 Jan 2024 13:15:45 +0000
ROA not after:            Thu 23 Jan 2025 13:20:45 +0000
asID:                     270983
IP address blocks:        2804:7478:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0e:a9:a6:9e:97:74:a5:93:92:a7:3c:bc:f5:78:e7:f1:cb:70:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A759420E60B79FBFB48037B5A830EF409EA873
        Validity
            Not Before: Jan 25 13:15:45 2024 GMT
            Not After : Jan 23 13:20:45 2025 GMT
        Subject: CN=6EEF9B8F469BA87B346EF744CC1C3D43BE521BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:a3:cc:01:5a:d3:98:d4:5c:fc:fb:87:09:
                    df:16:8f:25:3c:b6:a0:28:3b:84:93:f8:42:ae:43:
                    e3:4a:aa:98:82:e5:57:3c:af:53:12:b0:71:35:21:
                    47:28:10:03:6a:9b:bf:81:05:69:5b:9a:af:8f:50:
                    e8:f8:9d:b4:03:41:9e:15:4f:be:8f:d4:c2:30:af:
                    64:b6:f7:93:33:ea:4c:73:2c:8c:b9:1d:fe:4d:89:
                    47:ba:a3:7f:2c:81:40:59:9f:39:f6:27:cd:c8:68:
                    4e:3f:ef:dc:b9:c7:27:e4:1e:ad:ff:d8:c6:2f:dc:
                    55:ac:d2:9e:3f:46:de:69:67:7b:5f:79:64:3a:9a:
                    fb:69:8a:b4:9d:4f:18:0e:17:29:90:45:7b:e1:44:
                    1f:0f:83:d7:e7:70:f8:8f:2d:d9:e8:b3:a6:b5:53:
                    da:4e:81:95:c6:d0:4f:99:cf:6d:34:87:a1:5f:c6:
                    3f:91:ef:a4:a0:41:8b:72:eb:23:a4:fc:5a:f8:ce:
                    d0:13:f8:83:cb:fe:7a:3f:fd:0b:c6:c0:4a:c1:c1:
                    29:4b:cf:4e:5e:c8:d6:d5:fc:ee:6c:ce:a3:a9:28:
                    16:ba:05:2c:42:ff:c6:fb:21:f5:3f:e4:0a:3a:b2:
                    b9:4f:ac:8d:4b:ec:1c:0b:01:e4:06:fe:0a:3e:6d:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:9B:8F:46:9B:A8:7B:34:6E:F7:44:CC:1C:3D:43:BE:52:1B:A0
            X509v3 Authority Key Identifier:
                keyid:73:A7:59:42:0E:60:B7:9F:BF:B4:80:37:B5:A8:30:EF:40:9E:A8:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/73A759420E60B79FBFB48037B5A830EF409EA873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73A759420E60B79FBFB48037B5A830EF409EA873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oY7KoRqCZUrsqwZwv8gypiRSmjDULTjsjSSq5cEG7wF/0/323830343a373437383a383030303a3a2f33332d3333203d3e20323730393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7478:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         af:78:42:42:78:e2:0f:40:8f:30:bb:2d:79:b4:79:82:79:01:
         e6:3e:df:14:82:03:80:da:a2:59:d4:8b:81:fe:f7:c6:67:ef:
         5c:07:ca:27:86:aa:8d:0c:7b:e2:8d:08:48:83:ec:c1:7e:8e:
         8c:5b:c9:af:65:a5:91:bb:09:db:36:3c:ec:e5:d2:e4:3a:4a:
         46:90:ad:a5:16:b8:15:5c:d0:00:29:84:fe:82:3e:57:41:93:
         c4:81:04:d7:d5:67:84:51:ba:93:32:1b:76:59:40:0b:49:53:
         28:2e:fe:64:91:86:bb:a7:6a:21:f2:20:ef:c4:fb:0d:e2:02:
         99:b7:9a:c0:9a:0a:da:7a:62:c0:68:08:9f:d1:85:5f:8d:2f:
         eb:52:dd:79:b9:d0:5d:fa:24:08:43:e8:56:12:7a:cf:97:5c:
         13:ed:b0:d1:d3:71:f2:55:33:b2:73:0c:34:1f:e2:98:23:ac:
         0e:4e:7f:9c:97:83:2c:bc:58:9f:35:ab:12:8f:14:59:d7:3d:
         0e:eb:67:22:ef:8c:d0:80:9b:1d:0c:8a:da:04:cd:27:59:2e:
         49:45:78:87:52:c8:cd:61:20:60:98:5a:84:5d:16:c8:77:33:
         dd:45:23:52:d1:68:38:4c:d6:2d:a7:5b:eb:3e:02:30:ae:66:
         80:31:ba:6c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYQ6ppp6XdKWTkqc8vPV45/HLcNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNBNzU5NDIwRTYwQjc5RkJGQjQ4MDM3QjVBODMwRUY0
MDlFQTg3MzAeFw0yNDAxMjUxMzE1NDVaFw0yNTAxMjMxMzIwNDVaMDMxMTAvBgNV
BAMTKDZFRUY5QjhGNDY5QkE4N0IzNDZFRjc0NENDMUMzRDQzQkU1MjFCQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqqPMAVrTmNRc/PuHCd8WjyU8
tqAoO4ST+EKuQ+NKqpiC5Vc8r1MSsHE1IUcoEANqm7+BBWlbmq+PUOj4nbQDQZ4V
T76P1MIwr2S295Mz6kxzLIy5Hf5NiUe6o38sgUBZnzn2J83IaE4/79y5xyfkHq3/
2MYv3FWs0p4/Rt5pZ3tfeWQ6mvtpirSdTxgOFymQRXvhRB8Pg9fncPiPLdnos6a1
U9pOgZXG0E+Zz200h6Ffxj+R76SgQYty6yOk/Fr4ztAT+IPL/no//QvGwErBwSlL
z05eyNbV/O5szqOpKBa6BSxC/8b7IfU/5Ao6srlPrI1L7BwLAeQG/go+bVW/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbu+bj0abqHs0bvdEzBw9Q75SG6AwHwYDVR0j
BBgwFoAUc6dZQg5gt5+/tIA3tagw70CeqHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9ZN0tvUnFDWlVyc3F3Wnd2OGd5cGlSU21qRFVMVGpzalNTcTVjRUc3
d0YvMC83M0E3NTk0MjBFNjBCNzlGQkZCNDgwMzdCNUE4MzBFRjQwOUVBODczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczQTc1OTQyMEU2MEI3OUZC
RkI0ODAzN0I1QTgzMEVGNDA5RUE4NzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvWTdLb1JxQ1pVcnNxd1p3djhneXBpUlNtakRVTFRqc2pTU3E1Y0VHN3dGLzAv
MzIzODMwMzQzYTM3MzQzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM5MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEdHiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCveEJCeOIPQI8wuy15tHmCeQHmPt8UggOA2qJZ1IuB/vfGZ+9cB8onhqqN
DHvijQhIg+zBfo6MW8mvZaWRuwnbNjzs5dLkOkpGkK2lFrgVXNAAKYT+gj5XQZPE
gQTX1WeEUbqTMht2WUALSVMoLv5kkYa7p2oh8iDvxPsN4gKZt5rAmgraemLAaAif
0YVfjS/rUt15udBd+iQIQ+hWEnrPl1wT7bDR03HyVTOycww0H+KYI6wOTn+cl4Ms
vFifNasSjxRZ1z0O62ci74zQgJsdDIraBM0nWS5JRXiHUsjNYSBgmFqEXRbIdzPd
RSNS0Wg4TNYtp1vrPgIwrmaAMbps
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org