Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/323830343a343863343a3a2f33322d3332203d3e20323631373433.roa
File:                     323830343a343863343a3a2f33322d3332203d3e20323631373433.roa (raw, json)
Hash identifier:          ufztes5tSdDFMwcKUIJeO4fFau/HER2LLGSHmkizgrg=
Subject key identifier:   87:BA:0D:9B:09:B5:C4:1F:E2:F3:06:F4:DD:B9:9D:04:D4:00:28:D9
Certificate issuer:       /CN=CF3FA66DE9F4F2A2F2083563338953C0D402A5B5
Certificate serial:       7EA2E931DDBD1CF6F2610D663F644CB68DC88CCA
Authority key identifier: CF:3F:A6:6D:E9:F4:F2:A2:F2:08:35:63:33:89:53:C0:D4:02:A5:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/323830343a343863343a3a2f33322d3332203d3e20323631373433.roa
Signing time:             Wed 01 Nov 2023 01:01:39 +0000
ROA not before:           Wed 01 Nov 2023 00:56:39 +0000
ROA not after:            Wed 30 Oct 2024 01:01:39 +0000
asID:                     261743
IP address blocks:        2804:48c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a2:e9:31:dd:bd:1c:f6:f2:61:0d:66:3f:64:4c:b6:8d:c8:8c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF3FA66DE9F4F2A2F2083563338953C0D402A5B5
        Validity
            Not Before: Nov  1 00:56:39 2023 GMT
            Not After : Oct 30 01:01:39 2024 GMT
        Subject: CN=87BA0D9B09B5C41FE2F306F4DDB99D04D40028D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a1:c6:14:d9:70:15:32:de:c7:1c:b2:33:88:
                    25:98:df:02:a3:cf:bf:26:bd:93:45:bf:fe:a0:a7:
                    0b:23:22:cb:e2:f6:75:53:21:93:07:12:6c:aa:80:
                    63:94:fe:6c:ff:fc:18:9d:5c:24:b2:95:27:43:a9:
                    ba:14:5a:96:79:09:42:30:e0:7b:d7:b9:31:9a:ad:
                    9a:09:e9:0d:af:75:7b:3c:41:cd:86:d7:d5:12:f6:
                    e0:a7:f3:95:2e:cb:63:a3:52:c2:d4:2d:53:cb:c9:
                    2f:1b:2d:8a:59:4a:e5:62:71:a2:bf:c3:6e:a5:05:
                    c5:62:1b:7c:31:7a:55:6b:1c:3a:6e:d4:48:d2:55:
                    06:27:19:6e:da:63:88:58:4b:ea:4a:85:67:c1:07:
                    73:c4:ba:3b:f2:bb:d1:3d:59:ac:8a:59:e1:d3:29:
                    a1:b3:82:a6:47:14:96:03:ab:be:22:ee:e0:6a:cd:
                    b7:aa:42:4b:cc:5a:41:2f:7d:f8:7c:55:9b:06:2f:
                    a5:8b:ca:1d:81:bb:d6:76:62:b1:cb:ec:71:00:80:
                    30:8b:30:a2:95:e4:3e:a7:c3:00:82:57:10:54:83:
                    0f:a9:87:46:8c:d7:55:34:3c:65:3c:f8:a6:76:38:
                    2d:f4:fe:81:cf:7b:5a:4c:33:05:73:53:ac:21:d8:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BA:0D:9B:09:B5:C4:1F:E2:F3:06:F4:DD:B9:9D:04:D4:00:28:D9
            X509v3 Authority Key Identifier:
                keyid:CF:3F:A6:6D:E9:F4:F2:A2:F2:08:35:63:33:89:53:C0:D4:02:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/323830343a343863343a3a2f33322d3332203d3e20323631373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:b7:30:21:1b:b0:9d:44:57:af:3b:00:a8:e0:3e:b4:0c:36:
         8c:08:ca:fc:f5:29:95:19:41:4f:b6:24:e7:5b:0e:8b:6d:3f:
         44:04:18:d9:79:9e:95:50:51:87:0d:ed:16:64:a0:e0:5f:8a:
         9c:22:6b:98:6b:59:f5:18:29:43:fd:da:23:e9:b0:27:1e:ed:
         33:d1:1b:d6:70:ba:01:e2:ae:bb:19:a0:4e:94:23:e1:65:d9:
         e4:1a:48:f3:02:f7:77:31:6c:4d:00:81:b0:43:99:95:14:5b:
         2c:36:11:5a:fd:09:95:33:61:57:68:9e:2c:e3:c7:17:fd:0a:
         7f:45:8b:59:fc:ea:e1:14:15:55:89:44:99:dc:1c:b6:06:9e:
         62:c3:ae:1a:01:1e:ed:8d:38:7c:b0:ab:3f:6f:00:b2:60:f5:
         3c:f5:45:0b:cf:a4:fb:bf:3b:ba:4c:44:c5:ef:0e:ce:44:97:
         55:00:de:e8:7b:91:06:72:93:aa:2c:44:31:5b:eb:55:22:4f:
         cc:36:43:9a:5b:72:6b:04:2e:49:4c:9c:33:39:d8:a1:57:5e:
         bb:8a:99:3a:7f:ac:e0:9d:2e:81:26:da:ae:72:c2:ce:2e:9c:
         28:48:6b:1b:af:a5:cd:ee:69:78:f0:fe:62:7a:a9:dd:6c:6c:
         7b:45:64:60
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfqLpMd29HPbyYQ1mP2RMto3IjMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YzRkE2NkRFOUY0RjJBMkYyMDgzNTYzMzM4OTUzQzBE
NDAyQTVCNTAeFw0yMzExMDEwMDU2MzlaFw0yNDEwMzAwMTAxMzlaMDMxMTAvBgNV
BAMTKDg3QkEwRDlCMDlCNUM0MUZFMkYzMDZGNEREQjk5RDA0RDQwMDI4RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxocYU2XAVMt7HHLIziCWY3wKj
z78mvZNFv/6gpwsjIsvi9nVTIZMHEmyqgGOU/mz//BidXCSylSdDqboUWpZ5CUIw
4HvXuTGarZoJ6Q2vdXs8Qc2G19US9uCn85Uuy2OjUsLULVPLyS8bLYpZSuVicaK/
w26lBcViG3wxelVrHDpu1EjSVQYnGW7aY4hYS+pKhWfBB3PEujvyu9E9WayKWeHT
KaGzgqZHFJYDq74i7uBqzbeqQkvMWkEvffh8VZsGL6WLyh2Bu9Z2YrHL7HEAgDCL
MKKV5D6nwwCCVxBUgw+ph0aM11U0PGU8+KZ2OC30/oHPe1pMMwVzU6wh2PCnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUh7oNmwm1xB/i8wb03bmdBNQAKNkwHwYDVR0j
BBgwFoAUzz+mben08qLyCDVjM4lTwNQCpbUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXZFbmRVOEJqZHBDa3E2YVNNV0VaUWdzbkNxV0JnbzVmbURxdm95eGVK
VnYvMC9DRjNGQTY2REU5RjRGMkEyRjIwODM1NjMzMzg5NTNDMEQ0MDJBNUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGM0ZBNjZERTlGNEYyQTJG
MjA4MzU2MzMzODk1M0MwRDQwMkE1QjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV2RW5kVThCamRwQ2txNmFTTVdFWlFnc25DcVdCZ281Zm1EcXZveXhlSlZ2LzAv
MzIzODMwMzQzYTM0Mzg2MzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMx
MzczNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARIxDANBgkqhkiG9w0BAQsFAAOCAQEAibcwIRuw
nURXrzsAqOA+tAw2jAjK/PUplRlBT7Yk51sOi20/RAQY2XmelVBRhw3tFmSg4F+K
nCJrmGtZ9RgpQ/3aI+mwJx7tM9Eb1nC6AeKuuxmgTpQj4WXZ5BpI8wL3dzFsTQCB
sEOZlRRbLDYRWv0JlTNhV2ieLOPHF/0Kf0WLWfzq4RQVVYlEmdwctgaeYsOuGgEe
7Y04fLCrP28AsmD1PPVFC8+k+787ukxExe8OzkSXVQDe6HuRBnKTqixEMVvrVSJP
zDZDmltyawQuSUycMznYoVdeu4qZOn+s4J0ugSbarnLCzi6cKEhrG6+lze5pePD+
Ynqp3Wxse0VkYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org