Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa
File:                     323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (raw, json)
Hash identifier:          Xv8uO6pTQnVZ61fDGBSl3RA52w2cbHAaJmX9ncKhIlE=
Subject key identifier:   63:39:99:E9:84:91:8C:9F:4A:A3:09:E5:43:23:C5:76:42:50:6C:84
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       2268279753C511F9AA693B85E67613DC4091B057
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa
Signing time:             Sat 30 Dec 2023 03:00:01 +0000
ROA not before:           Sat 30 Dec 2023 02:55:01 +0000
ROA not after:            Sat 28 Dec 2024 03:00:01 +0000
asID:                     264126
IP address blocks:        2804:22d8:7f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:68:27:97:53:c5:11:f9:aa:69:3b:85:e6:76:13:dc:40:91:b0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Dec 30 02:55:01 2023 GMT
            Not After : Dec 28 03:00:01 2024 GMT
        Subject: CN=633999E984918C9F4AA309E54323C57642506C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:c7:4d:7e:f5:a1:05:58:73:bf:6d:11:69:
                    40:d8:6b:d9:61:80:01:64:93:32:7f:51:3a:cf:52:
                    c3:d5:22:c8:21:71:57:ff:7a:de:59:5b:82:f9:97:
                    37:0d:76:84:4e:b1:55:37:81:fe:46:df:ea:2a:0c:
                    97:dc:a2:cb:e0:56:dc:a1:3e:bd:72:d6:93:cb:c4:
                    60:df:93:31:cf:46:da:6f:13:d0:89:f1:77:40:0c:
                    81:77:dc:61:66:3f:7e:3d:b2:63:4f:92:6b:fb:51:
                    0c:b2:a8:b9:6b:cb:ff:03:57:7b:a6:c1:4d:ab:80:
                    7c:c8:49:2e:37:c2:74:bd:02:49:7d:4e:46:73:af:
                    7f:31:cb:56:0f:56:a7:dc:53:b1:0f:fa:b9:66:43:
                    aa:5e:d5:ff:8c:73:93:ba:ba:9f:21:00:a9:00:ac:
                    09:06:3d:ca:9b:97:a4:b6:e2:44:e7:de:c3:b4:63:
                    95:6d:0c:7d:42:70:c5:a1:d2:b7:95:0d:8f:ce:46:
                    f9:72:d6:5d:ff:86:12:b9:99:20:2f:e5:35:ef:96:
                    ea:0a:b9:4a:fe:45:a8:a4:5d:e4:02:5f:01:4d:19:
                    90:18:11:9c:b3:58:ff:4d:65:1e:53:c9:8a:19:ce:
                    2f:df:b4:56:ef:e1:7c:aa:72:f8:29:5a:f7:a8:fd:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:39:99:E9:84:91:8C:9F:4A:A3:09:E5:43:23:C5:76:42:50:6C:84
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22d8:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:de:ff:1b:69:79:9d:75:84:c7:32:76:25:ac:34:c7:7b:54:
         82:09:11:07:cc:e1:ee:7f:dc:4f:b3:d1:86:5a:07:68:2e:36:
         c9:12:6a:99:78:c1:27:87:45:98:8f:3d:bb:1d:74:22:df:2b:
         e5:25:04:89:22:ed:69:ca:09:5b:f3:72:49:96:14:b9:59:8f:
         e1:4c:de:4b:0d:83:f2:5d:a8:fd:81:fa:37:e3:31:f1:1f:d8:
         11:56:ee:fa:61:db:de:1e:89:16:94:b3:e9:5b:61:c1:15:2c:
         c4:99:ae:6c:3c:6d:4c:8e:58:36:a8:2f:e9:64:41:5d:10:9e:
         75:49:74:eb:15:3f:7d:a7:1b:c0:22:60:78:89:5c:d5:d2:d4:
         3e:d5:0e:75:2c:3a:26:a5:e2:df:9d:e9:69:4e:fc:11:38:7a:
         37:97:81:62:10:74:1a:b9:77:58:d3:54:e9:93:00:1a:5f:6e:
         79:8f:b1:a5:e0:60:38:c1:48:aa:37:21:a3:14:a9:8d:fa:b6:
         7b:eb:54:ce:f6:1f:a9:e1:5e:03:49:f6:2b:8f:88:3c:44:4f:
         44:9f:83:f7:fb:53:b6:8d:a8:24:ac:9e:56:99:2c:7e:24:1c:
         0c:de:5e:37:86:87:52:87:9d:81:78:db:5e:71:8a:8d:37:5c:
         e7:9d:0b:b8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUImgnl1PFEfmqaTuF5nYT3ECRsFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIxMUUzOTdGQzMxMUI3RjVFNUUwNzcwOUUyNTc5QUJF
RUU2QUFBNzAeFw0yMzEyMzAwMjU1MDFaFw0yNDEyMjgwMzAwMDFaMDMxMTAvBgNV
BAMTKDYzMzk5OUU5ODQ5MThDOUY0QUEzMDlFNTQzMjNDNTc2NDI1MDZDODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuacdNfvWhBVhzv20RaUDYa9lh
gAFkkzJ/UTrPUsPVIsghcVf/et5ZW4L5lzcNdoROsVU3gf5G3+oqDJfcosvgVtyh
Pr1y1pPLxGDfkzHPRtpvE9CJ8XdADIF33GFmP349smNPkmv7UQyyqLlry/8DV3um
wU2rgHzISS43wnS9Akl9TkZzr38xy1YPVqfcU7EP+rlmQ6pe1f+Mc5O6up8hAKkA
rAkGPcqbl6S24kTn3sO0Y5VtDH1CcMWh0reVDY/ORvly1l3/hhK5mSAv5TXvluoK
uUr+RaikXeQCXwFNGZAYEZyzWP9NZR5TyYoZzi/ftFbv4XyqcvgpWveo/ab7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYzmZ6YSRjJ9KownlQyPFdkJQbIQwHwYDVR0j
BBgwFoAUchHjl/wxG39eXgdwniV5q+7mqqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW
azkvMC83MjExRTM5N0ZDMzExQjdGNUU1RTA3NzA5RTI1NzlBQkVFRTZBQUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyMTFFMzk3RkMzMTFCN0Y1
RTVFMDc3MDlFMjU3OUFCRUVFNkFBQTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIQTJoY0c0ZUF1WERHQlBhWXR0S2hjdEZndndid0Y1UEdNNUQyVVJ4Vms5LzAv
MzIzODMwMzQzYTMyMzI2NDM4M2EzNzY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIth/MA0GCSqGSIb3DQEBCwUA
A4IBAQCZ3v8baXmddYTHMnYlrDTHe1SCCREHzOHuf9xPs9GGWgdoLjbJEmqZeMEn
h0WYjz27HXQi3yvlJQSJIu1pyglb83JJlhS5WY/hTN5LDYPyXaj9gfo34zHxH9gR
Vu76YdveHokWlLPpW2HBFSzEma5sPG1Mjlg2qC/pZEFdEJ51SXTrFT99pxvAImB4
iVzV0tQ+1Q51LDompeLfnelpTvwROHo3l4FiEHQauXdY01TpkwAaX255j7Gl4GA4
wUiqNyGjFKmN+rZ761TO9h+p4V4DSfYrj4g8RE9En4P3+1O2jagkrJ5WmSx+JBwM
3l43hodSh52BeNtecYqNN1znnQu4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org