Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3230303a3a2f34312d3431203d3e20323634393336.roa
File:                     323830343a333033343a3230303a3a2f34312d3431203d3e20323634393336.roa (raw, json)
Hash identifier:          /NX6pSiNbbb8cMbuMtqhc+MT1WYUQkemmSBLhrYUV34=
Subject key identifier:   73:78:99:93:5E:2E:D7:3D:90:52:5A:AD:BA:6B:53:EE:5D:E8:4B:3B
Certificate issuer:       /CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
Certificate serial:       51D0773B58A30180A2CF667F814D99BEE34B5307
Authority key identifier: 9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3230303a3a2f34312d3431203d3e20323634393336.roa
Signing time:             Mon 04 Mar 2024 18:38:20 +0000
ROA not before:           Mon 04 Mar 2024 18:33:20 +0000
ROA not after:            Mon 03 Mar 2025 18:38:20 +0000
asID:                     264936
IP address blocks:        2804:3034:200::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d0:77:3b:58:a3:01:80:a2:cf:66:7f:81:4d:99:be:e3:4b:53:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Validity
            Not Before: Mar  4 18:33:20 2024 GMT
            Not After : Mar  3 18:38:20 2025 GMT
        Subject: CN=737899935E2ED73D90525AADBA6B53EE5DE84B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:3c:63:75:f8:00:b4:f9:a5:5b:10:ce:d9:
                    1d:80:4a:a2:a4:75:d0:04:d0:9c:a3:75:dd:b7:3e:
                    fd:c0:45:2a:35:27:f8:dd:30:af:03:78:a6:40:89:
                    ee:a7:04:3b:b4:a6:b5:9b:0e:3a:c7:41:14:e2:e1:
                    15:ee:0e:ce:83:cb:27:ca:40:e7:52:5c:b6:22:19:
                    3d:ba:4b:86:46:4c:33:5e:94:00:cd:f5:df:37:d8:
                    ca:38:ad:59:f0:e2:25:73:65:1b:90:65:9e:e6:3a:
                    00:ef:14:d1:4d:47:94:5a:f2:71:79:89:dc:92:61:
                    15:41:b1:f9:8a:b1:40:87:54:8e:79:a5:9f:9d:d4:
                    2a:f6:5b:4e:0c:7b:86:48:e0:b6:ba:73:97:df:89:
                    1c:cf:dd:c3:a5:8b:63:92:7f:17:ce:f3:81:65:a4:
                    cc:bd:b9:cb:03:58:27:6a:76:b4:97:97:bb:8b:68:
                    54:c3:4e:d7:54:29:0d:6d:33:4f:a6:3e:e0:75:4e:
                    3a:6c:7d:c2:32:26:4b:78:e3:2b:95:8c:f9:0c:41:
                    a3:b6:5c:5c:f2:3f:79:17:34:8d:c2:38:56:59:5f:
                    39:91:0d:31:0d:16:d2:97:84:5e:b2:16:70:47:4b:
                    ab:9b:c3:b5:b8:19:10:0e:ab:e5:37:e0:ed:c8:77:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:78:99:93:5E:2E:D7:3D:90:52:5A:AD:BA:6B:53:EE:5D:E8:4B:3B
            X509v3 Authority Key Identifier:
                keyid:9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/323830343a333033343a3230303a3a2f34312d3431203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:da:9a:1d:43:f2:67:fb:42:88:aa:5d:1f:ef:00:09:7b:
         77:4b:d6:b3:c5:fc:b0:1c:ec:5a:6b:dd:2c:01:93:85:00:f3:
         f3:b5:98:1f:6b:9d:bb:7d:d8:b8:69:ff:20:9b:b1:0c:4e:08:
         92:cf:69:9e:fb:4c:01:80:43:e5:ff:56:74:87:f3:93:47:76:
         47:93:79:62:2c:7c:41:dd:d4:2e:35:6a:ae:8b:ce:9b:07:42:
         a3:07:f4:a9:a5:41:09:87:7f:f8:dd:d9:a9:db:fb:dc:2d:f8:
         dc:df:f4:84:3f:b5:77:fc:ce:3b:f5:88:42:09:24:29:0b:4a:
         0e:67:ac:2e:d6:9c:bb:35:d3:0d:7d:b0:09:46:88:64:47:c6:
         c9:f0:17:a9:23:a5:bc:88:39:d7:9f:11:4f:93:d2:86:99:06:
         da:50:6f:5d:c8:12:56:dd:ca:f6:e9:c3:13:de:6e:44:1b:7d:
         fc:61:41:44:40:65:ab:35:37:71:84:e3:f2:52:d1:99:7d:77:
         36:a1:74:48:57:f4:0d:3d:e1:37:6d:14:f9:b2:8b:cc:b8:3b:
         35:80:da:63:e0:67:09:49:f9:07:5b:40:68:f4:89:04:a1:c0:
         47:d7:11:54:84:77:36:02:c4:69:18:21:74:f2:e5:3f:c3:89:
         3f:6d:fd:8b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUUdB3O1ijAYCiz2Z/gU2ZvuNLUwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM3MDhBNTA2OTIwNTk5NUM1QzI1Q0YzQ0E5OEVDRkM2
RUY5Q0Y2NjAeFw0yNDAzMDQxODMzMjBaFw0yNTAzMDMxODM4MjBaMDMxMTAvBgNV
BAMTKDczNzg5OTkzNUUyRUQ3M0Q5MDUyNUFBREJBNkI1M0VFNURFODRCM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJTxjdfgAtPmlWxDO2R2ASqKk
ddAE0Jyjdd23Pv3ARSo1J/jdMK8DeKZAie6nBDu0prWbDjrHQRTi4RXuDs6DyyfK
QOdSXLYiGT26S4ZGTDNelADN9d832Mo4rVnw4iVzZRuQZZ7mOgDvFNFNR5Ra8nF5
idySYRVBsfmKsUCHVI55pZ+d1Cr2W04Me4ZI4La6c5ffiRzP3cOli2OSfxfO84Fl
pMy9ucsDWCdqdrSXl7uLaFTDTtdUKQ1tM0+mPuB1TjpsfcIyJkt44yuVjPkMQaO2
XFzyP3kXNI3COFZZXzmRDTENFtKXhF6yFnBHS6ubw7W4GRAOq+U34O3Id8zZAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUc3iZk14u1z2QUlqtumtT7l3oSzswHwYDVR0j
BBgwFoAUnHCKUGkgWZXFwlzzypjs/G75z2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMi85QzcwOEE1MDY5MjA1OTk1QzVDMjVDRjNDQTk4RUNGQzZFRjlDRjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlDNzA4QTUwNjkyMDU5OTVD
NUMyNUNGM0NBOThFQ0ZDNkVGOUNGNjYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzIv
MzIzODMwMzQzYTMzMzAzMzM0M2EzMjMwMzAzYTNhMmYzNDMxMmQzNDMxMjAzZDNl
MjAzMjM2MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwcoBDA0AgAwDQYJKoZIhvcNAQELBQAD
ggEBAGG52podQ/Jn+0KIql0f7wAJe3dL1rPF/LAc7Fpr3SwBk4UA8/O1mB9rnbt9
2Lhp/yCbsQxOCJLPaZ77TAGAQ+X/VnSH85NHdkeTeWIsfEHd1C41aq6LzpsHQqMH
9KmlQQmHf/jd2anb+9wt+Nzf9IQ/tXf8zjv1iEIJJCkLSg5nrC7WnLs10w19sAlG
iGRHxsnwF6kjpbyIOdefEU+T0oaZBtpQb13IElbdyvbpwxPebkQbffxhQURAZas1
N3GE4/JS0Zl9dzahdEhX9A094TdtFPmyi8y4OzWA2mPgZwlJ+QdbQGj0iQShwEfX
EVSEdzYCxGkYIXTy5T/DiT9t/Ys=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org