Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/1/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa
File:                     323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (raw, json)
Hash identifier:          ThXHh8s8+3dJqoCjXz/jmbHm8DUt8UIcC81X9xZulNA=
Subject key identifier:   81:0A:5E:E4:D9:33:D1:83:70:AB:1A:30:5C:07:90:02:3E:72:5F:B5
Certificate issuer:       /CN=7F39C51E813795F38605AAADC5EF070FF0B6EF60
Certificate serial:       52F9BBDB82067E810A63622DA08B76ABBF4F3F0B
Authority key identifier: 7F:39:C5:1E:81:37:95:F3:86:05:AA:AD:C5:EF:07:0F:F0:B6:EF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F39C51E813795F38605AAADC5EF070FF0B6EF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/1/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa
Signing time:             Tue 20 Feb 2024 12:50:11 +0000
ROA not before:           Tue 20 Feb 2024 12:45:11 +0000
ROA not after:            Tue 18 Feb 2025 12:50:11 +0000
asID:                     266309
IP address blocks:        2804:35d4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f9:bb:db:82:06:7e:81:0a:63:62:2d:a0:8b:76:ab:bf:4f:3f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F39C51E813795F38605AAADC5EF070FF0B6EF60
        Validity
            Not Before: Feb 20 12:45:11 2024 GMT
            Not After : Feb 18 12:50:11 2025 GMT
        Subject: CN=810A5EE4D933D18370AB1A305C0790023E725FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:a3:d6:9e:c9:cb:99:b2:81:1b:70:22:e4:
                    09:9d:83:21:24:5f:7f:42:df:84:2d:9a:5f:e2:20:
                    5e:3a:83:a5:a0:b8:64:a4:e3:b1:01:d5:16:a7:4d:
                    53:c7:e3:3e:68:e5:22:5e:5c:a6:4a:07:82:8d:ef:
                    10:40:d4:9a:32:6c:4c:8f:05:b3:15:7f:2d:95:33:
                    aa:dd:f8:3a:96:3a:c8:92:61:a6:36:99:2a:62:a0:
                    b8:af:77:e0:8d:4c:d4:c8:85:5c:b4:5a:f4:9f:fc:
                    76:56:e7:12:44:56:29:5f:8e:6e:58:cb:44:b5:e7:
                    fb:9c:0b:27:89:18:ac:91:ff:a8:15:4a:77:ab:83:
                    c1:9a:c3:0f:32:db:3d:5e:85:28:d0:f8:79:f9:e9:
                    56:b3:fe:d3:e1:9a:a7:5f:7a:90:02:10:2f:a4:a0:
                    bc:3f:de:4c:de:b8:5e:1e:78:60:6d:ea:bc:a3:27:
                    ed:ab:73:b9:a6:90:de:c6:79:f1:a6:8c:d7:84:79:
                    e4:9c:e1:37:99:1d:e5:16:3f:9f:7e:7f:f7:c3:74:
                    dd:04:bb:1f:a7:2c:90:30:19:c3:79:a1:41:43:7f:
                    e5:09:53:f0:97:d0:cb:4a:29:be:89:1e:64:78:28:
                    86:b7:d1:0d:4f:d9:0d:9d:5e:ef:9d:91:36:5c:6a:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0A:5E:E4:D9:33:D1:83:70:AB:1A:30:5C:07:90:02:3E:72:5F:B5
            X509v3 Authority Key Identifier:
                keyid:7F:39:C5:1E:81:37:95:F3:86:05:AA:AD:C5:EF:07:0F:F0:B6:EF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/1/7F39C51E813795F38605AAADC5EF070FF0B6EF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F39C51E813795F38605AAADC5EF070FF0B6EF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/1/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:09:10:55:bb:d8:a1:5f:c7:13:e4:8e:39:c3:99:04:2c:75:
         7f:c3:2c:a5:2d:d0:28:5f:6a:fa:50:3a:e2:98:22:a4:c9:69:
         3c:ba:07:ce:83:92:80:e3:f6:83:f5:a6:6c:82:6d:df:b9:c1:
         ce:39:3e:44:7f:fc:cf:37:aa:c2:de:09:c2:e2:b5:b0:cd:89:
         1b:d3:4f:bd:b2:7d:3f:a8:14:7e:c2:84:de:a1:dd:87:a4:ea:
         9e:a8:97:6c:87:60:c8:c2:5d:54:ef:11:18:08:c0:2c:39:99:
         5f:b6:8d:24:b4:3d:d4:40:3a:89:e1:08:73:7e:c9:db:54:93:
         66:03:14:40:2b:e0:eb:9c:d2:9c:a8:0e:2f:d7:04:58:a5:8d:
         e5:af:1e:1a:fc:ac:a8:ac:9a:50:4a:a0:c7:11:b3:16:6b:a3:
         cd:dc:f6:51:ae:8e:e4:63:e0:37:0a:1f:ed:de:93:d1:3f:47:
         32:5a:bf:de:cb:ba:c0:b1:a3:77:c8:77:73:24:f2:72:43:2c:
         8c:86:ff:8b:4d:4d:ce:95:12:91:ca:4c:27:1d:81:c7:a4:73:
         2f:83:f7:bf:51:8f:75:db:af:9c:9e:72:e3:8c:02:a0:e5:8e:
         3c:64:2b:8b:99:81:bc:5d:5d:de:54:ed:3c:2f:bf:01:c0:99:
         67:92:21:00
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUvm724IGfoEKY2ItoIt2q79PPwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzOUM1MUU4MTM3OTVGMzg2MDVBQUFEQzVFRjA3MEZG
MEI2RUY2MDAeFw0yNDAyMjAxMjQ1MTFaFw0yNTAyMTgxMjUwMTFaMDMxMTAvBgNV
BAMTKDgxMEE1RUU0RDkzM0QxODM3MEFCMUEzMDVDMDc5MDAyM0U3MjVGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DqPWnsnLmbKBG3Ai5AmdgyEk
X39C34Qtml/iIF46g6WguGSk47EB1RanTVPH4z5o5SJeXKZKB4KN7xBA1JoybEyP
BbMVfy2VM6rd+DqWOsiSYaY2mSpioLivd+CNTNTIhVy0WvSf/HZW5xJEVilfjm5Y
y0S15/ucCyeJGKyR/6gVSnerg8Gaww8y2z1ehSjQ+Hn56Vaz/tPhmqdfepACEC+k
oLw/3kzeuF4eeGBt6ryjJ+2rc7mmkN7GefGmjNeEeeSc4TeZHeUWP59+f/fDdN0E
ux+nLJAwGcN5oUFDf+UJU/CX0MtKKb6JHmR4KIa30Q1P2Q2dXu+dkTZcatHbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUgQpe5Nkz0YNwqxowXAeQAj5yX7UwHwYDVR0j
BBgwFoAUfznFHoE3lfOGBaqtxe8HD/C272AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5x
ejkvMS83RjM5QzUxRTgxMzc5NUYzODYwNUFBQURDNUVGMDcwRkYwQjZFRjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGMzlDNTFFODEzNzk1RjM4
NjA1QUFBREM1RUYwNzBGRjBCNkVGNjAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVhRm84WWtWcTg1Rk5vNXo3dm9RQXJaMkx3RkNwN0d4ajYxM2VIOFBucXo5LzEv
MzIzODMwMzQzYTMzMzU2NDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjMzMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENdSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAhCRBVu9ihX8cT5I45w5kELHV/wyylLdAoX2r6UDrimCKkyWk8ugfOg5KA
4/aD9aZsgm3fucHOOT5Ef/zPN6rC3gnC4rWwzYkb00+9sn0/qBR+woTeod2HpOqe
qJdsh2DIwl1U7xEYCMAsOZlfto0ktD3UQDqJ4QhzfsnbVJNmAxRAK+DrnNKcqA4v
1wRYpY3lrx4a/KyorJpQSqDHEbMWa6PN3PZRro7kY+A3Ch/t3pPRP0cyWr/ey7rA
saN3yHdzJPJyQyyMhv+LTU3OlRKRykwnHYHHpHMvg/e/UY9126+cnnLjjAKg5Y48
ZCuLmYG8XV3eVO08L78BwJlnkiEA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org