Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa
File:                     323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa (raw, json)
Hash identifier:          bbMcfqWEu9tmvoOehpbQ+OFlbPN6TqyXRrLc3IBZ5m8=
Subject key identifier:   7F:4F:25:62:C2:B3:3E:00:DD:36:D1:F6:A6:A1:6D:D3:24:45:48:AB
Certificate issuer:       /CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
Certificate serial:       1A21CB4CA63ECCF99E0A44F01FFBB363B72372DC
Authority key identifier: CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa
Signing time:             Tue 20 Jun 2023 13:19:19 +0000
ROA not before:           Tue 20 Jun 2023 13:14:19 +0000
ROA not after:            Tue 18 Jun 2024 13:19:19 +0000
asID:                     266584
IP address blocks:        2804:3e44:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:21:cb:4c:a6:3e:cc:f9:9e:0a:44:f0:1f:fb:b3:63:b7:23:72:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
        Validity
            Not Before: Jun 20 13:14:19 2023 GMT
            Not After : Jun 18 13:19:19 2024 GMT
        Subject: CN=7F4F2562C2B33E00DD36D1F6A6A16DD3244548AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:19:3a:29:6e:56:9e:8d:ac:66:d9:ca:53:
                    bd:b5:5c:05:cb:3e:56:9c:cf:0e:45:f1:d8:4d:41:
                    4a:79:84:6b:73:61:10:41:c1:06:b2:dc:51:a5:1c:
                    8e:b4:5b:5f:57:43:86:fb:08:d6:78:eb:c3:17:95:
                    ca:d6:d4:0e:e8:07:a6:50:75:a9:e6:55:5e:ed:ac:
                    a3:d9:f6:c9:19:2d:fb:c0:d9:24:90:d5:39:a7:7f:
                    3e:82:1c:83:ea:18:ec:c7:ab:db:00:09:ba:b4:02:
                    4e:d9:d8:06:e5:ad:cd:db:1a:c7:7d:78:56:3a:a9:
                    25:b3:c0:07:b2:2c:92:06:6e:79:ce:79:47:96:19:
                    26:89:e2:4f:0f:5b:5d:6d:76:62:05:55:c0:a1:3d:
                    a0:ab:17:c4:0f:28:73:a6:39:e1:60:07:65:cc:6d:
                    ba:54:8a:13:43:a1:72:fa:74:b5:eb:a8:b1:7a:b4:
                    e3:0b:dc:bb:6c:20:a7:1e:f0:1e:6d:ae:c8:23:fe:
                    66:6f:b4:3a:0f:49:02:6d:b4:87:da:7a:3f:8c:08:
                    ab:86:bf:d3:09:c2:78:fa:5d:c5:d8:a1:86:8b:48:
                    2d:a8:72:55:c6:a7:2a:00:34:a1:5c:89:5d:cf:82:
                    25:82:88:6f:28:b9:ea:f8:38:9e:ae:87:6e:4b:dc:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4F:25:62:C2:B3:3E:00:DD:36:D1:F6:A6:A1:6D:D3:24:45:48:AB
            X509v3 Authority Key Identifier:
                keyid:CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e44:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         47:f2:54:82:45:dc:d1:13:94:02:2f:3e:d8:2a:37:b3:84:54:
         e5:83:f7:bb:15:f2:fc:1e:44:b5:d4:54:91:e3:ef:99:e1:e1:
         1c:5d:c2:a0:e5:5f:c2:8a:6b:0d:25:00:32:6e:7c:4f:b5:aa:
         d8:b0:93:bf:cb:75:d6:a1:b6:96:94:4a:85:5d:bc:2b:fd:42:
         9c:74:ae:4c:0a:8e:2c:6a:07:86:4e:db:9e:5a:95:ee:11:4f:
         9e:46:2f:c4:7a:fb:4e:8d:8a:49:e9:ca:ef:2d:92:36:10:ee:
         d2:3e:05:cc:d1:88:a2:2c:e8:e0:12:c5:ef:f4:c8:ff:e9:00:
         04:6a:73:6f:07:9f:dd:7c:15:61:39:63:5d:0f:0d:db:3b:a2:
         1c:ed:4a:8f:7b:fe:7d:57:e4:bc:90:2a:48:7f:e3:98:1a:26:
         81:ba:3a:82:7b:80:a9:d1:e0:d8:92:0d:74:70:a4:1b:d8:1e:
         6e:63:25:62:00:d8:4f:8b:ef:b1:75:f5:23:5d:06:91:ce:a5:
         4f:e5:18:8a:a1:34:87:cb:d2:f4:15:29:04:62:17:68:e4:e9:
         c4:05:9c:ac:8e:d9:d0:4c:f5:8d:f5:e1:b9:48:9c:48:27:1c:
         80:75:5c:a5:02:a3:56:a0:8e:b1:82:69:dd:54:02:8c:c5:d4:
         36:bd:97:df
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGiHLTKY+zPmeCkTwH/uzY7cjctwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZCOTRCMzUyOERCNEFBNDI2NTVGMzI0OTFFRkNCM0Y0
MDRCMzFDRDAeFw0yMzA2MjAxMzE0MTlaFw0yNDA2MTgxMzE5MTlaMDMxMTAvBgNV
BAMTKDdGNEYyNTYyQzJCMzNFMDBERDM2RDFGNkE2QTE2REQzMjQ0NTQ4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfuhk6KW5Wno2sZtnKU721XAXL
Placzw5F8dhNQUp5hGtzYRBBwQay3FGlHI60W19XQ4b7CNZ468MXlcrW1A7oB6ZQ
danmVV7trKPZ9skZLfvA2SSQ1Tmnfz6CHIPqGOzHq9sACbq0Ak7Z2Ablrc3bGsd9
eFY6qSWzwAeyLJIGbnnOeUeWGSaJ4k8PW11tdmIFVcChPaCrF8QPKHOmOeFgB2XM
bbpUihNDoXL6dLXrqLF6tOML3LtsIKce8B5trsgj/mZvtDoPSQJttIfaej+MCKuG
v9MJwnj6XcXYoYaLSC2oclXGpyoANKFciV3PgiWCiG8ouer4OJ6uh25L3N5ZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUf08lYsKzPgDdNtH2pqFt0yRFSKswHwYDVR0j
BBgwFoAUz7lLNSjbSqQmVfMkke/LP0BLMc0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMS9DRkI5NEIzNTI4REI0QUE0MjY1NUYzMjQ5MUVGQ0IzRjQwNEIzMUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGQjk0QjM1MjhEQjRBQTQy
NjU1RjMyNDkxRUZDQjNGNDA0QjMxQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtS2F6YXk5WFdvN2VaalR0UVU4b1FXdkxzVEhhTkZlYW5OV1o2VFpydE1lLzEv
MzIzODMwMzQzYTMzNjUzNDM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPkTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBH8lSCRdzRE5QCLz7YKjezhFTlg/e7FfL8HkS11FSR4++Z4eEcXcKg5V/C
imsNJQAybnxPtarYsJO/y3XWobaWlEqFXbwr/UKcdK5MCo4sageGTtueWpXuEU+e
Ri/EevtOjYpJ6crvLZI2EO7SPgXM0YiiLOjgEsXv9Mj/6QAEanNvB5/dfBVhOWNd
Dw3bO6Ic7UqPe/59V+S8kCpIf+OYGiaBujqCe4Cp0eDYkg10cKQb2B5uYyViANhP
i++xdfUjXQaRzqVP5RiKoTSHy9L0FSkEYhdo5OnEBZysjtnQTPWN9eG5SJxIJxyA
dVylAqNWoI6xgmndVAKMxdQ2vZff
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org