Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a383030303a3a2f33342d3334203d3e20323636343630.roa
File:                     323830343a333832383a383030303a3a2f33342d3334203d3e20323636343630.roa (raw, json)
Hash identifier:          M/KNLJLnkA4Uisj4Xl4/DjXfR0KWkKb6C3TXLqMs6PU=
Subject key identifier:   84:09:F6:2B:07:D3:D7:5B:24:95:A3:6A:60:00:16:E2:32:7C:8A:07
Certificate issuer:       /CN=997803E7A2CCE603DA65F15F6AFC1C56EC37B08D
Certificate serial:       2F3FE2B28C3A73A705244800AD711E9DB05484B1
Authority key identifier: 99:78:03:E7:A2:CC:E6:03:DA:65:F1:5F:6A:FC:1C:56:EC:37:B0:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a383030303a3a2f33342d3334203d3e20323636343630.roa
Signing time:             Wed 22 Mar 2023 18:52:08 +0000
ROA not before:           Wed 22 Mar 2023 18:47:08 +0000
ROA not after:            Wed 20 Mar 2024 18:52:08 +0000
asID:                     266460
IP address blocks:        2804:3828:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3f:e2:b2:8c:3a:73:a7:05:24:48:00:ad:71:1e:9d:b0:54:84:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997803E7A2CCE603DA65F15F6AFC1C56EC37B08D
        Validity
            Not Before: Mar 22 18:47:08 2023 GMT
            Not After : Mar 20 18:52:08 2024 GMT
        Subject: CN=8409F62B07D3D75B2495A36A600016E2327C8A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:f0:16:13:06:9d:e0:0f:8b:0b:d5:91:ab:
                    83:ae:61:65:b9:45:97:04:28:0a:be:aa:56:bc:84:
                    2b:87:38:a5:38:fe:d1:b8:f6:91:a6:ea:9e:c1:99:
                    0b:90:04:45:c0:7d:19:71:6f:3e:17:d5:26:a2:aa:
                    9b:c2:c3:aa:26:4d:6a:44:ff:95:d4:ad:9a:5c:c7:
                    d6:a4:3b:f2:e3:48:80:13:e4:68:ca:59:b9:29:6e:
                    a2:77:0c:39:39:52:90:5f:4a:6f:d1:82:71:98:1a:
                    0a:8c:7c:66:77:1c:59:45:02:ca:9e:b5:64:e9:76:
                    1e:4d:21:c4:bf:30:08:83:bb:c6:d1:c1:d8:66:71:
                    ce:75:51:d5:93:e0:00:d0:84:8b:06:45:74:44:ca:
                    2f:df:08:e7:d4:6d:d0:84:a8:31:db:f1:d5:2c:15:
                    35:0d:e6:77:25:33:14:32:ad:d6:91:92:0d:82:9b:
                    8b:24:0e:a4:37:77:62:4f:37:2b:62:be:8a:92:11:
                    05:7f:a1:75:8b:55:fc:b7:7b:00:22:3b:36:1e:dd:
                    11:c2:2e:f3:35:5f:17:ef:5a:db:fb:e8:88:53:a7:
                    a3:6e:1c:49:9c:49:61:d0:7b:bc:8c:5c:7a:fe:c4:
                    09:9b:bb:1f:fe:63:b1:5d:2e:2f:b5:63:f3:47:82:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:09:F6:2B:07:D3:D7:5B:24:95:A3:6A:60:00:16:E2:32:7C:8A:07
            X509v3 Authority Key Identifier:
                keyid:99:78:03:E7:A2:CC:E6:03:DA:65:F1:5F:6A:FC:1C:56:EC:37:B0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a383030303a3a2f33342d3334203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3828:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:03:f1:8d:cd:80:9f:62:89:24:02:b5:6c:99:d4:cb:d9:4d:
         6f:94:9f:ca:c3:32:ff:89:f3:d5:78:df:97:d6:a5:76:90:e0:
         9a:12:ef:49:c8:d2:cb:40:fa:a2:fd:ed:10:2d:35:8d:c2:4b:
         73:86:08:19:0a:f9:fb:36:f8:52:bb:12:49:0b:55:7a:93:f9:
         1b:df:73:c6:60:16:ff:a1:e7:18:bd:4d:f0:73:c0:ab:39:ad:
         4e:f5:db:56:67:05:24:2b:48:67:e9:a7:80:8f:2b:a0:76:61:
         35:e4:37:ac:21:57:06:9a:05:d9:62:bc:10:45:96:19:eb:f3:
         e2:fa:1e:4d:77:84:f8:60:48:4a:aa:19:7b:47:66:38:ef:07:
         c0:44:68:fa:48:b3:e8:02:65:2f:c2:2a:03:bf:42:e6:7f:5f:
         70:0d:6f:16:46:d7:39:ef:94:2b:42:f5:30:22:77:df:09:b7:
         54:28:68:c5:5f:87:ce:91:a2:73:b1:4d:7c:30:cc:d7:3f:e0:
         9b:2e:08:af:bf:1d:6d:e0:f8:39:32:4e:54:09:38:7d:c3:fc:
         b7:a9:2c:ed:6e:f8:bd:2c:9b:8d:98:62:9c:92:72:74:41:41:
         a4:cd:24:77:6d:c1:66:eb:72:b8:95:50:a9:de:43:66:0b:86:
         77:04:ec:c1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULz/isow6c6cFJEgArXEenbBUhLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3ODAzRTdBMkNDRTYwM0RBNjVGMTVGNkFGQzFDNTZF
QzM3QjA4RDAeFw0yMzAzMjIxODQ3MDhaFw0yNDAzMjAxODUyMDhaMDMxMTAvBgNV
BAMTKDg0MDlGNjJCMDdEM0Q3NUIyNDk1QTM2QTYwMDAxNkUyMzI3QzhBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pfAWEwad4A+LC9WRq4OuYWW5
RZcEKAq+qla8hCuHOKU4/tG49pGm6p7BmQuQBEXAfRlxbz4X1SaiqpvCw6omTWpE
/5XUrZpcx9akO/LjSIAT5GjKWbkpbqJ3DDk5UpBfSm/RgnGYGgqMfGZ3HFlFAsqe
tWTpdh5NIcS/MAiDu8bRwdhmcc51UdWT4ADQhIsGRXREyi/fCOfUbdCEqDHb8dUs
FTUN5nclMxQyrdaRkg2Cm4skDqQ3d2JPNytivoqSEQV/oXWLVfy3ewAiOzYe3RHC
LvM1XxfvWtv76IhTp6NuHEmcSWHQe7yMXHr+xAmbux/+Y7FdLi+1Y/NHgrPDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUhAn2KwfT11sklaNqYAAW4jJ8igcwHwYDVR0j
BBgwFoAUmXgD56LM5gPaZfFfavwcVuw3sI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEppUHBjZDRZR1FmRHluaHNQNVN1WDE3UkhVRFZwVGRyZEs2ZmZFckZo
VmUvMC85OTc4MDNFN0EyQ0NFNjAzREE2NUYxNUY2QUZDMUM1NkVDMzdCMDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5NzgwM0U3QTJDQ0U2MDNE
QTY1RjE1RjZBRkMxQzU2RUMzN0IwOEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKaVBwY2Q0WUdRZkR5bmhzUDVTdVgxN1JIVURWcFRkcmRLNmZmRXJGaFZlLzAv
MzIzODMwMzQzYTMzMzgzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM0MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOCiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCJA/GNzYCfYokkArVsmdTL2U1vlJ/KwzL/ifPVeN+X1qV2kOCaEu9JyNLL
QPqi/e0QLTWNwktzhggZCvn7NvhSuxJJC1V6k/kb33PGYBb/oecYvU3wc8CrOa1O
9dtWZwUkK0hn6aeAjyugdmE15DesIVcGmgXZYrwQRZYZ6/Pi+h5Nd4T4YEhKqhl7
R2Y47wfARGj6SLPoAmUvwioDv0Lmf19wDW8WRtc575QrQvUwInffCbdUKGjFX4fO
kaJzsU18MMzXP+CbLgivvx1t4Pg5Mk5UCTh9w/y3qSztbvi9LJuNmGKcknJ0QUGk
zSR3bcFm63K4lVCp3kNmC4Z3BOzB
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org