Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa
File:                     323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa (raw, json)
Hash identifier:          RZe+nRdykw9WDrTLaJKJ1q2aNVYKQfZHXRHRZGLnNVU=
Subject key identifier:   0F:90:EB:5E:4C:4B:AC:3D:E7:5E:18:89:D7:32:7D:AC:D6:58:C3:B1
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       224E388173DEF915B2A4585DF9E8BF442D654C5D
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 19:00:00 +0000
ROA not before:           Mon 04 Mar 2024 18:55:00 +0000
ROA not after:            Mon 03 Mar 2025 19:00:00 +0000
asID:                     266129
IP address blocks:        2804:3b18:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4e:38:81:73:de:f9:15:b2:a4:58:5d:f9:e8:bf:44:2d:65:4c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 18:55:00 2024 GMT
            Not After : Mar  3 19:00:00 2025 GMT
        Subject: CN=0F90EB5E4C4BAC3DE75E1889D7327DACD658C3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:5b:3d:24:1d:d1:21:d5:ec:08:c6:b6:b4:
                    dd:9f:a5:08:78:1c:d7:eb:ca:4c:af:4e:7b:83:89:
                    87:6b:6f:e1:3c:3a:b9:23:23:0e:53:79:df:54:fd:
                    84:60:ec:2f:20:32:75:18:7d:94:1a:16:9d:69:0c:
                    81:a2:1c:6a:43:83:43:aa:c6:0f:a2:c0:15:e9:1f:
                    9d:5b:d0:00:05:76:b4:97:39:d3:7b:13:c2:c9:8f:
                    4d:85:ce:84:21:9e:ba:3b:12:48:3d:76:b8:c3:96:
                    33:75:d4:16:32:7f:e4:92:a9:92:25:a2:b5:b5:26:
                    cf:43:5a:09:d6:97:79:0d:ca:a7:24:6f:f7:86:97:
                    8f:67:90:01:07:4f:8c:ec:a3:de:57:a8:8f:88:02:
                    7c:e9:84:48:d0:ce:c4:e9:c3:3d:48:2f:51:dc:ca:
                    1e:02:e1:7c:2c:b9:1e:35:89:7c:79:a3:14:47:0c:
                    5c:09:a8:ee:ae:2d:b5:53:c8:6f:c1:59:84:46:8a:
                    39:fe:c5:5b:94:ac:8a:cb:02:9a:cb:7d:e4:44:82:
                    74:c8:3f:f2:2b:8b:a7:55:ec:31:fe:01:06:42:17:
                    b2:e8:8c:14:f5:af:1d:68:4c:68:2a:b0:b9:ba:50:
                    36:1c:88:58:f2:36:ed:18:63:fe:2c:48:5b:a3:6b:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:90:EB:5E:4C:4B:AC:3D:E7:5E:18:89:D7:32:7D:AC:D6:58:C3:B1
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bd:2f:8b:7d:29:82:ff:01:4e:26:82:39:fd:56:67:55:a6:bb:
         09:47:15:f2:a8:e3:84:18:e1:a3:ed:36:24:3f:19:a0:13:fa:
         61:87:22:86:a8:54:ac:c7:c7:a7:8b:16:f3:51:89:0e:a9:8c:
         1f:fe:e5:ff:55:58:ea:4e:2a:41:f1:74:d5:e9:2c:68:71:d1:
         c5:2a:e3:c1:3c:8e:fa:a1:27:d7:b3:d0:32:7f:ee:24:b4:3c:
         91:c6:d8:7c:a8:a2:55:f1:a1:1e:74:51:01:39:af:ea:91:7f:
         ac:d7:12:69:bf:b0:43:de:4b:ff:8c:d7:bd:92:b1:4f:4e:e0:
         63:7c:26:07:6e:f8:65:55:6c:02:c1:a7:d4:b1:b0:13:26:30:
         21:95:92:49:e6:f2:09:da:0f:0f:8d:b3:1a:7d:ad:6a:07:fb:
         f4:da:e1:4f:0d:2f:69:50:81:e1:e1:86:b5:d2:a6:28:4f:dc:
         f2:b4:15:57:32:d8:0b:75:bc:9d:03:a2:34:54:21:fa:6e:02:
         c1:9d:d9:6a:bf:29:78:6a:a8:a8:3d:65:5e:84:be:5a:61:6b:
         2e:c0:9f:01:3f:dd:54:f3:ce:7b:e1:46:8c:8e:4d:49:6d:dc:
         20:03:7f:51:2c:08:2d:f5:5b:c9:ba:54:25:14:a6:04:2d:7b:
         31:ef:79:8a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIk44gXPe+RWypFhd+ei/RC1lTF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA2MDE0RUZCNDQ3RTZDREM2REFFNjMxRjE5MTU3RDc3
NDg4MjJDRDAeFw0yNDAzMDQxODU1MDBaFw0yNTAzMDMxOTAwMDBaMDMxMTAvBgNV
BAMTKDBGOTBFQjVFNEM0QkFDM0RFNzVFMTg4OUQ3MzI3REFDRDY1OEMzQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVVs9JB3RIdXsCMa2tN2fpQh4
HNfrykyvTnuDiYdrb+E8OrkjIw5Ted9U/YRg7C8gMnUYfZQaFp1pDIGiHGpDg0Oq
xg+iwBXpH51b0AAFdrSXOdN7E8LJj02FzoQhnro7Ekg9drjDljN11BYyf+SSqZIl
orW1Js9DWgnWl3kNyqckb/eGl49nkAEHT4zso95XqI+IAnzphEjQzsTpwz1IL1Hc
yh4C4XwsuR41iXx5oxRHDFwJqO6uLbVTyG/BWYRGijn+xVuUrIrLAprLfeREgnTI
P/Iri6dV7DH+AQZCF7LojBT1rx1oTGgqsLm6UDYciFjyNu0YY/4sSFujaxRHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUD5DrXkxLrD3nXhiJ1zJ9rNZYw7EwHwYDVR0j
BBgwFoAUgGAU77RH5s3G2uYx8ZFX13SIIs0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3
dVcvMC84MDYwMTRFRkI0NDdFNkNEQzZEQUU2MzFGMTkxNTdENzc0ODgyMkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgwNjAxNEVGQjQ0N0U2Q0RD
NkRBRTYzMUYxOTE1N0Q3NzQ4ODIyQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzAv
MzIzODMwMzQzYTMzNjIzMTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMxMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOxhAMA0GCSqGSIb3DQEBCwUA
A4IBAQC9L4t9KYL/AU4mgjn9VmdVprsJRxXyqOOEGOGj7TYkPxmgE/phhyKGqFSs
x8enixbzUYkOqYwf/uX/VVjqTipB8XTV6SxocdHFKuPBPI76oSfXs9Ayf+4ktDyR
xth8qKJV8aEedFEBOa/qkX+s1xJpv7BD3kv/jNe9krFPTuBjfCYHbvhlVWwCwafU
sbATJjAhlZJJ5vIJ2g8PjbMafa1qB/v02uFPDS9pUIHh4Ya10qYoT9zytBVXMtgL
dbydA6I0VCH6bgLBndlqvyl4aqioPWVehL5aYWsuwJ8BP91U88574UaMjk1Jbdwg
A39RLAgt9VvJulQlFKYELXsx73mK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org