Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a633030303a3a2f33342d3334203d3e20323731343636.roa
File:                     323830343a376266383a633030303a3a2f33342d3334203d3e20323731343636.roa (raw, json)
Hash identifier:          Q0kUfiVquvcw7XRIqeeLKHr/iI3o+LKcbwrbUOZdtAI=
Subject key identifier:   90:4C:7E:AB:4C:FA:EF:05:08:21:F1:A2:DB:A3:A6:FE:95:A3:6C:1E
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       1C6930C7F06F0290EF072A50958FFAE7863FF755
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a633030303a3a2f33342d3334203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:51 +0000
ROA not before:           Wed 28 Feb 2024 20:10:51 +0000
ROA not after:            Wed 26 Feb 2025 20:15:51 +0000
asID:                     271466
IP address blocks:        2804:7bf8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:69:30:c7:f0:6f:02:90:ef:07:2a:50:95:8f:fa:e7:86:3f:f7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:51 2024 GMT
            Not After : Feb 26 20:15:51 2025 GMT
        Subject: CN=904C7EAB4CFAEF050821F1A2DBA3A6FE95A36C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:cc:04:b7:8c:e0:43:cf:82:30:d8:54:c6:
                    77:d8:bb:8f:a2:28:67:7c:98:db:a9:17:1f:22:e1:
                    e9:38:64:8e:49:58:83:67:d4:10:0d:dd:9a:dc:43:
                    ce:a0:5e:e7:31:bc:f1:84:c0:5d:c4:e6:9b:12:52:
                    0d:c1:08:36:12:32:74:a2:e5:6b:39:f4:31:d4:45:
                    e6:32:fe:44:33:45:8d:89:12:6d:8e:bb:0b:f4:8a:
                    19:86:ec:90:d7:a2:dd:64:ff:05:81:dd:66:22:8a:
                    4f:ef:c1:94:69:8c:26:41:48:e9:67:08:d7:19:93:
                    e6:cc:30:fb:a7:4d:83:43:28:67:88:45:3d:6f:be:
                    0f:cb:90:67:6b:19:45:64:28:aa:98:23:a5:94:58:
                    a7:11:fe:8b:b1:8e:8c:d8:e4:68:03:2f:41:a8:52:
                    89:4f:f2:0e:33:f1:83:da:b2:0c:33:38:4b:be:45:
                    f1:f9:40:2a:c7:56:a4:6b:61:b2:c1:41:98:70:10:
                    c8:6c:6a:93:49:ae:06:2d:a8:a5:a0:86:bb:ae:58:
                    5c:56:51:69:49:a6:a1:b9:39:d2:b1:73:01:2f:d1:
                    10:c1:15:b3:3f:19:1b:37:a9:a6:28:77:49:e7:fc:
                    1c:24:8f:4b:2e:3e:27:e0:02:8e:92:de:cb:41:34:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4C:7E:AB:4C:FA:EF:05:08:21:F1:A2:DB:A3:A6:FE:95:A3:6C:1E
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a633030303a3a2f33342d3334203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:3b:44:97:3d:df:36:35:7c:cd:cd:eb:fb:ed:94:df:f2:d2:
         46:cd:01:5e:13:17:31:b5:79:29:95:30:01:9a:09:c6:b0:83:
         f0:0e:77:6b:b2:13:4c:b4:a6:8f:b5:54:69:79:28:df:7d:30:
         85:5e:36:a8:76:18:b4:a6:a2:03:91:4b:52:f8:24:6e:7b:4d:
         57:b4:bf:2c:61:45:15:8b:96:60:b2:dc:4d:a2:1c:9b:62:10:
         42:6c:b8:83:d3:05:35:1a:c5:91:d3:70:5d:bc:8a:ec:be:f5:
         9f:d7:93:0c:98:e2:80:30:b1:06:49:fe:ed:ef:42:c4:69:f3:
         27:a5:96:96:82:00:de:f0:2c:c9:09:97:6f:7d:7c:7f:f6:4c:
         be:08:6c:f6:9a:f6:47:f7:bb:e6:bb:a9:c0:11:3f:a3:0e:7b:
         37:e2:8b:3b:dd:d5:82:74:92:9e:4e:e0:aa:b3:57:9f:36:6d:
         ab:16:6a:0b:c9:21:41:3f:a6:83:7c:70:ca:ef:3b:8a:eb:5a:
         5e:da:86:c0:2c:53:e5:00:ab:ba:5f:58:20:81:23:85:25:fc:
         5e:0d:ee:47:48:0e:6f:77:09:a5:55:4c:08:29:03:85:d5:8a:
         76:95:f8:f7:4d:38:69:d3:5c:29:4a:da:f6:c1:01:d5:0e:70:
         0d:4e:0f:a2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHGkwx/BvApDvBypQlY/654Y/91UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBGNTc2MzVGM0E2NTA4MTJFNEI3RkEyMEQzNDlFRUM0
QjNDMjVFNTAeFw0yNDAyMjgyMDEwNTFaFw0yNTAyMjYyMDE1NTFaMDMxMTAvBgNV
BAMTKDkwNEM3RUFCNENGQUVGMDUwODIxRjFBMkRCQTNBNkZFOTVBMzZDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi28wEt4zgQ8+CMNhUxnfYu4+i
KGd8mNupFx8i4ek4ZI5JWINn1BAN3ZrcQ86gXucxvPGEwF3E5psSUg3BCDYSMnSi
5Ws59DHUReYy/kQzRY2JEm2Ouwv0ihmG7JDXot1k/wWB3WYiik/vwZRpjCZBSOln
CNcZk+bMMPunTYNDKGeIRT1vvg/LkGdrGUVkKKqYI6WUWKcR/ouxjozY5GgDL0Go
UolP8g4z8YPasgwzOEu+RfH5QCrHVqRrYbLBQZhwEMhsapNJrgYtqKWghruuWFxW
UWlJpqG5OdKxcwEv0RDBFbM/GRs3qaYod0nn/Bwkj0suPifgAo6S3stBNGrjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkEx+q0z67wUIIfGi26Om/pWjbB4wHwYDVR0j
BBgwFoAUAPV2NfOmUIEuS3+iDTSe7Es8JeUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdFUnNYOXhrakMzNFRYeWpSekNITFZrS2dGaXhLb0pDQlplVExFSnFU
ZWovMC8wMEY1NzYzNUYzQTY1MDgxMkU0QjdGQTIwRDM0OUVFQzRCM0MyNUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAwRjU3NjM1RjNBNjUwODEy
RTRCN0ZBMjBEMzQ5RUVDNEIzQzI1RTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHRVJzWDl4a2pDMzRUWHlqUnpDSExWa0tnRml4S29KQ0JaZVRMRUpxVGVqLzAv
MzIzODMwMzQzYTM3NjI2NjM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTM0MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEe/jAMA0GCSqGSIb3DQEBCwUA
A4IBAQA+O0SXPd82NXzNzev77ZTf8tJGzQFeExcxtXkplTABmgnGsIPwDndrshNM
tKaPtVRpeSjffTCFXjaodhi0pqIDkUtS+CRue01XtL8sYUUVi5ZgstxNohybYhBC
bLiD0wU1GsWR03BdvIrsvvWf15MMmOKAMLEGSf7t70LEafMnpZaWggDe8CzJCZdv
fXx/9ky+CGz2mvZH97vmu6nAET+jDns34os73dWCdJKeTuCqs1efNm2rFmoLySFB
P6aDfHDK7zuK61pe2obALFPlAKu6X1gggSOFJfxeDe5HSA5vdwmlVUwIKQOF1Yp2
lfj3TThp01wpStr2wQHVDnANTg+i
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org