Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a343030303a3a2f33342d3334203d3e20323637333031.roa
File:                     323830343a346235633a343030303a3a2f33342d3334203d3e20323637333031.roa (raw, json)
Hash identifier:          8d0rolFlRP7KWPrAa6ARB+kjbUFIajtgmrjW/Wd46/A=
Subject key identifier:   2A:8B:A7:9F:47:12:AE:F3:6D:9E:2A:0F:BA:80:AF:34:23:4E:5F:B1
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       02465608DC10348B6B62B980030F5EED00C0E2D6
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a343030303a3a2f33342d3334203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:02:01 +0000
ROA not before:           Mon 15 May 2023 20:57:01 +0000
ROA not after:            Mon 13 May 2024 21:02:01 +0000
asID:                     267301
IP address blocks:        2804:4b5c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:46:56:08:dc:10:34:8b:6b:62:b9:80:03:0f:5e:ed:00:c0:e2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:57:01 2023 GMT
            Not After : May 13 21:02:01 2024 GMT
        Subject: CN=2A8BA79F4712AEF36D9E2A0FBA80AF34234E5FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:0c:bf:8f:7c:e5:f1:4c:3d:13:0d:70:ff:
                    d8:27:d3:16:ee:31:72:fc:86:0d:95:17:e1:ab:28:
                    44:99:23:82:c4:48:b6:55:d2:44:2e:9a:14:ed:22:
                    6f:17:1d:96:83:b9:06:14:0b:42:bd:24:80:b7:5c:
                    6c:72:c0:30:68:78:bc:44:cc:63:65:4c:2e:03:eb:
                    b2:ec:d8:04:54:20:f5:82:3e:a7:4d:5b:d0:24:63:
                    84:ff:38:7c:fd:a9:7b:46:35:ed:61:ef:85:8c:db:
                    71:b1:56:59:64:b5:a5:ca:ec:f8:bf:e6:34:8d:55:
                    e9:81:ba:16:a9:a6:fb:c8:f3:7d:2e:f2:84:2d:9a:
                    48:a6:ff:6f:54:95:b8:a1:65:15:bc:4f:0c:e6:1e:
                    36:79:1a:c3:03:f8:b7:c0:a5:29:53:5e:7f:ac:30:
                    22:d6:aa:1d:21:db:1e:64:0f:0d:2b:f1:75:2c:ca:
                    5e:27:d4:af:ea:8f:e5:38:ba:ca:49:b4:cc:26:47:
                    c9:ce:49:d1:fa:64:25:33:e5:19:82:16:c1:9b:b7:
                    f8:b8:c7:ed:13:ba:0e:58:2e:3a:ed:a4:b4:4a:10:
                    e8:12:85:ee:d5:4c:18:6c:67:24:36:0e:45:ba:18:
                    99:0a:64:ea:ac:44:07:7e:d6:34:c1:c2:0d:f2:3a:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:A7:9F:47:12:AE:F3:6D:9E:2A:0F:BA:80:AF:34:23:4E:5F:B1
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a343030303a3a2f33342d3334203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b5c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:18:cc:30:86:4a:5d:ea:f6:ea:ff:dd:0b:ae:48:7d:54:c6:
         c2:8d:aa:f6:3a:56:6b:87:eb:d4:e7:eb:6a:6c:86:9b:89:29:
         4a:6f:db:76:8f:29:96:a0:b7:d9:d9:45:02:88:5b:79:dc:c1:
         7b:fb:07:63:f2:65:bd:38:3d:f8:31:3c:44:5c:62:d7:2a:f4:
         ed:e2:ca:d6:19:ca:aa:ba:e1:e6:7a:51:62:68:df:29:93:79:
         e1:ab:85:74:e5:31:7d:c2:a6:c6:53:eb:6b:e9:fd:e1:8f:53:
         0c:52:24:b1:1d:ce:b7:a1:f9:c5:34:6d:65:da:f4:90:84:4f:
         60:33:10:fb:bf:88:11:86:95:03:de:9d:cb:69:f1:53:39:4e:
         e9:5a:0e:e7:29:16:a4:1f:c0:ec:c6:5f:76:5b:1d:ed:d4:2a:
         62:c0:56:b9:7f:6c:d2:7e:ec:fb:9d:e6:ca:54:16:fb:48:f5:
         da:e4:1f:16:72:a9:c2:90:a6:85:1c:88:5b:38:f7:9e:d2:86:
         9b:dc:30:78:c7:e5:d3:7a:c2:52:d4:aa:3c:cf:e8:e1:59:b1:
         34:36:42:27:5d:dc:b8:da:e6:0f:fb:71:31:ea:6c:70:a7:ec:
         c6:d1:0d:86:17:ca:b5:68:e2:53:a3:20:07:c0:42:b3:4e:ee:
         57:48:3f:ca
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAkZWCNwQNItrYrmAAw9e7QDA4tYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0MTAxQTMzRDk2MEUyRTQ2OEVGRThEMkUyRTcwMUU4
QTA3MzI2MTAeFw0yMzA1MTUyMDU3MDFaFw0yNDA1MTMyMTAyMDFaMDMxMTAvBgNV
BAMTKDJBOEJBNzlGNDcxMkFFRjM2RDlFMkEwRkJBODBBRjM0MjM0RTVGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNIwy/j3zl8Uw9Ew1w/9gn0xbu
MXL8hg2VF+GrKESZI4LESLZV0kQumhTtIm8XHZaDuQYUC0K9JIC3XGxywDBoeLxE
zGNlTC4D67Ls2ARUIPWCPqdNW9AkY4T/OHz9qXtGNe1h74WM23GxVllktaXK7Pi/
5jSNVemBuhappvvI830u8oQtmkim/29UlbihZRW8TwzmHjZ5GsMD+LfApSlTXn+s
MCLWqh0h2x5kDw0r8XUsyl4n1K/qj+U4uspJtMwmR8nOSdH6ZCUz5RmCFsGbt/i4
x+0Tug5YLjrtpLRKEOgShe7VTBhsZyQ2DkW6GJkKZOqsRAd+1jTBwg3yOtOvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUKounn0cSrvNtnioPuoCvNCNOX7EwHwYDVR0j
BBgwFoAUGUEBoz2WDi5Gjv6NLi5wHooHMmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRhZnFGWDl6RDljRHV5dHRETFNydjUyTXZTeXBEUU44eEpMVHdoSlRV
cm8vMC8xOTQxMDFBMzNEOTYwRTJFNDY4RUZFOEQyRTJFNzAxRThBMDczMjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5NDEwMUEzM0Q5NjBFMkU0
NjhFRkU4RDJFMkU3MDFFOEEwNzMyNjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkYWZxRlg5ekQ5Y0R1eXR0RExTcnY1Mk12U3lwRFFOOHhKTFR3aEpUVXJvLzAv
MzIzODMwMzQzYTM0NjIzNTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMzMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigES1xAMA0GCSqGSIb3DQEBCwUA
A4IBAQAVGMwwhkpd6vbq/90Lrkh9VMbCjar2OlZrh+vU5+tqbIabiSlKb9t2jymW
oLfZ2UUCiFt53MF7+wdj8mW9OD34MTxEXGLXKvTt4srWGcqquuHmelFiaN8pk3nh
q4V05TF9wqbGU+tr6f3hj1MMUiSxHc63ofnFNG1l2vSQhE9gMxD7v4gRhpUD3p3L
afFTOU7pWg7nKRakH8Dsxl92Wx3t1CpiwFa5f2zSfuz7nebKVBb7SPXa5B8WcqnC
kKaFHIhbOPee0oab3DB4x+XTesJS1Ko8z+jhWbE0NkInXdy42uYP+3Ex6mxwp+zG
0Q2GF8q1aOJToyAHwEKzTu5XSD/K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org