Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa
File:                     323830343a336639343a3a2f33332d3333203d3e20323632343532.roa (raw, json)
Hash identifier:          +tcIO7HuB4pbAC5fKY9FGdWdztK6THOEcnsh4WxjJME=
Subject key identifier:   52:83:BF:D3:06:BD:E1:FF:5A:71:FA:02:17:78:31:7D:C8:A9:D9:AF
Certificate issuer:       /CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
Certificate serial:       021FE1DB348E434B746BE861A8C70E2E837797AB
Authority key identifier: 7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa
Signing time:             Thu 09 Nov 2023 13:54:01 +0000
ROA not before:           Thu 09 Nov 2023 13:49:01 +0000
ROA not after:            Thu 07 Nov 2024 13:54:01 +0000
asID:                     262452
IP address blocks:        2804:3f94::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1f:e1:db:34:8e:43:4b:74:6b:e8:61:a8:c7:0e:2e:83:77:97:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
        Validity
            Not Before: Nov  9 13:49:01 2023 GMT
            Not After : Nov  7 13:54:01 2024 GMT
        Subject: CN=5283BFD306BDE1FF5A71FA021778317DC8A9D9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:84:f9:7f:82:8f:b2:42:67:c2:ec:8d:c6:
                    de:01:b5:bd:6f:07:36:f9:77:d4:d7:53:1b:6c:f4:
                    2e:1b:17:76:61:08:c8:23:93:ff:ec:da:f0:b3:d4:
                    16:41:24:28:57:09:60:d7:cd:76:a2:a7:2a:bc:f0:
                    ea:93:f9:51:5e:ae:d7:57:bc:e8:c4:ea:cd:bc:99:
                    6c:28:85:89:ae:26:43:f1:3c:50:fb:e3:56:d7:b3:
                    06:a9:7e:0d:f2:24:22:57:36:01:a5:35:1f:80:99:
                    b0:01:9d:a9:1e:32:5a:bc:81:14:b8:b7:b4:21:32:
                    48:88:21:93:e7:8b:08:0c:bc:21:bc:63:0c:ff:49:
                    7e:cc:5a:c4:8d:1d:a6:e0:6d:7e:ed:34:1b:4b:ab:
                    e9:43:c2:7c:1a:ae:7a:f7:4d:cb:ea:e0:df:6c:ed:
                    62:74:c7:b1:12:dc:ae:85:d9:e3:eb:e3:4b:85:0c:
                    dc:4f:d5:e5:f7:2a:b3:fe:ae:10:e3:44:da:fd:90:
                    5e:69:51:b2:16:5c:29:99:14:f1:a0:15:85:1d:5c:
                    0f:d6:11:c4:9c:fc:c3:ca:f5:45:a9:f8:53:b4:9c:
                    b5:b5:6c:8d:25:b8:2b:86:63:bb:c8:dd:38:e9:bd:
                    5e:ac:89:0d:3f:90:56:16:59:c6:cd:cd:59:22:f0:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:83:BF:D3:06:BD:E1:FF:5A:71:FA:02:17:78:31:7D:C8:A9:D9:AF
            X509v3 Authority Key Identifier:
                keyid:7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/323830343a336639343a3a2f33332d3333203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f94::/33

    Signature Algorithm: sha256WithRSAEncryption
         af:ee:77:83:57:5a:7f:b8:91:1e:99:ca:05:d2:72:12:11:8c:
         3d:1c:dc:34:1f:64:fd:32:7b:48:e8:45:68:e1:d4:c0:fa:1c:
         22:1b:c6:f6:b0:a9:94:70:a0:3a:7f:19:9b:7f:e9:94:5b:42:
         b1:d3:9e:76:39:60:cf:da:90:04:9e:32:e6:ab:52:02:10:ed:
         f4:91:f7:c1:e5:23:12:b6:d0:7e:86:a7:a2:2d:50:6d:6b:21:
         97:6d:73:a6:d0:1d:9f:75:76:d7:c8:b8:45:88:fe:d7:17:ef:
         ba:ea:21:e1:a4:d6:34:53:44:83:ff:20:4c:b9:5c:ea:54:3e:
         36:b8:5d:20:c4:ef:c7:3a:f4:51:fe:a2:cd:78:85:3c:c6:84:
         be:6b:0e:53:ca:0c:55:4d:6c:77:ac:74:5e:ea:f3:db:81:9a:
         c0:59:25:8f:cd:6d:42:03:6a:e3:71:9a:7f:a7:72:77:a5:0d:
         51:fb:43:2a:4b:f3:9f:e4:68:0a:72:2c:7b:37:8c:3c:93:4b:
         48:47:a9:30:18:87:fe:0b:34:4d:3c:d8:8b:0e:7d:90:81:8e:
         12:38:df:40:d5:c2:af:a2:62:00:9d:de:7a:c7:d8:88:6d:0a:
         a6:f3:76:d2:9e:01:75:da:81:63:4c:fd:b9:5a:95:9f:d1:62:
         ef:60:e6:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAh/h2zSOQ0t0a+hhqMcOLoN3l6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzQjJEMzVEQkQ4REQ5NTY0QTVGNzQxNkMzNDhCRDQ0
OUI5M0EwRjAeFw0yMzExMDkxMzQ5MDFaFw0yNDExMDcxMzU0MDFaMDMxMTAvBgNV
BAMTKDUyODNCRkQzMDZCREUxRkY1QTcxRkEwMjE3NzgzMTdEQzhBOUQ5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2YT5f4KPskJnwuyNxt4Btb1v
Bzb5d9TXUxts9C4bF3ZhCMgjk//s2vCz1BZBJChXCWDXzXaipyq88OqT+VFertdX
vOjE6s28mWwohYmuJkPxPFD741bXswapfg3yJCJXNgGlNR+AmbABnakeMlq8gRS4
t7QhMkiIIZPniwgMvCG8Ywz/SX7MWsSNHabgbX7tNBtLq+lDwnwarnr3Tcvq4N9s
7WJ0x7ES3K6F2ePr40uFDNxP1eX3KrP+rhDjRNr9kF5pUbIWXCmZFPGgFYUdXA/W
EcSc/MPK9UWp+FO0nLW1bI0luCuGY7vI3TjpvV6siQ0/kFYWWcbNzVki8BLlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUoO/0wa94f9acfoCF3gxfcip2a8wHwYDVR0j
BBgwFoAUfzstNdvY3ZVkpfdBbDSL1Em5Og8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtGN3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZd2hmdzJOZmNt
bWYvMC83RjNCMkQzNURCRDhERDk1NjRBNUY3NDE2QzM0OEJENDQ5QjkzQTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGM0IyRDM1REJEOEREOTU2
NEE1Rjc0MTZDMzQ4QkQ0NDlCOTNBMEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVrRjd1R3NlZ0dFMTMydlZpYTc0SFQ1WmFFQlFRaVpzWXdoZncyTmZjbW1mLzAv
MzIzODMwMzQzYTMzNjYzOTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMy
MzQzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ/lAAwDQYJKoZIhvcNAQELBQADggEBAK/ud4NX
Wn+4kR6ZygXSchIRjD0c3DQfZP0ye0joRWjh1MD6HCIbxvawqZRwoDp/GZt/6ZRb
QrHTnnY5YM/akASeMuarUgIQ7fSR98HlIxK20H6Gp6ItUG1rIZdtc6bQHZ91dtfI
uEWI/tcX77rqIeGk1jRTRIP/IEy5XOpUPja4XSDE78c69FH+os14hTzGhL5rDlPK
DFVNbHesdF7q89uBmsBZJY/NbUIDauNxmn+ncnelDVH7QypL85/kaApyLHs3jDyT
S0hHqTAYh/4LNE082IsOfZCBjhI430DVwq+iYgCd3nrH2IhtCqbzdtKeAXXagWNM
/blalZ/RYu9g5gU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org