Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a633030303a3a2f33342d3334203d3e20323638363332.roa
File:                     323830343a353432383a633030303a3a2f33342d3334203d3e20323638363332.roa (raw, json)
Hash identifier:          27QDXp76jc1RHASvyIOMYvOX0tuhhU9rvYMFRtDeQNk=
Subject key identifier:   BD:44:E8:31:69:61:4F:70:B0:FE:BD:86:EF:90:59:51:AD:15:1D:2B
Certificate issuer:       /CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
Certificate serial:       39516424725325D85A1206C4D297BEBBBB29D152
Authority key identifier: E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a633030303a3a2f33342d3334203d3e20323638363332.roa
Signing time:             Tue 07 Nov 2023 20:20:04 +0000
ROA not before:           Tue 07 Nov 2023 20:15:04 +0000
ROA not after:            Tue 05 Nov 2024 20:20:04 +0000
asID:                     268632
IP address blocks:        2804:5428:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:51:64:24:72:53:25:d8:5a:12:06:c4:d2:97:be:bb:bb:29:d1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
        Validity
            Not Before: Nov  7 20:15:04 2023 GMT
            Not After : Nov  5 20:20:04 2024 GMT
        Subject: CN=BD44E83169614F70B0FEBD86EF905951AD151D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:7c:19:11:c3:82:c1:56:c2:75:c0:8c:80:
                    10:25:39:ea:c4:8d:2f:44:c9:6c:39:fe:e8:f4:32:
                    1d:92:1b:26:45:9a:2e:6f:40:3e:6a:90:58:04:47:
                    40:ef:a0:24:12:0f:a6:c5:35:24:37:91:d5:70:11:
                    93:37:8b:89:4b:36:16:f9:b3:42:a7:0d:c0:ca:71:
                    e7:43:99:1e:73:47:ca:db:ba:7e:7d:b4:77:20:fa:
                    f5:91:9d:33:dd:9d:6f:32:b9:46:5d:46:24:88:46:
                    0f:a0:bc:52:19:03:5b:cb:38:5d:6d:e4:43:40:19:
                    b4:b4:1d:04:29:04:38:42:b5:61:c0:1e:74:10:48:
                    3a:f7:f6:aa:4d:f1:64:d6:8c:24:17:10:10:fe:3c:
                    dc:8d:ee:21:56:53:4e:39:2e:6c:bc:ef:6a:d8:ea:
                    12:cb:32:89:c8:1e:ac:22:a0:f3:de:61:64:c5:fc:
                    86:21:06:ac:02:87:f7:10:be:47:d6:e1:50:e3:3e:
                    a4:53:4f:5f:f8:43:2f:65:3d:ca:07:e6:6b:ca:c4:
                    d9:d0:e0:56:b0:e7:38:91:ad:ae:ce:13:e1:80:ca:
                    ce:1a:54:2f:71:85:be:62:4a:27:85:55:68:ee:02:
                    f0:38:1d:73:f9:04:22:fc:90:cb:5e:ea:9e:04:21:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:44:E8:31:69:61:4F:70:B0:FE:BD:86:EF:90:59:51:AD:15:1D:2B
            X509v3 Authority Key Identifier:
                keyid:E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a633030303a3a2f33342d3334203d3e20323638363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5428:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:9f:c3:1c:79:d1:6a:ee:b7:98:99:69:2f:8d:78:1c:97:
         18:b2:f1:2c:8c:dc:39:7f:5d:89:7f:4d:5d:9b:30:d8:b7:0c:
         2d:df:7e:57:5d:bb:67:4b:70:c5:84:ee:03:01:c2:93:20:fd:
         45:a9:a6:15:79:25:ba:af:c3:d1:88:a8:1f:5c:a3:f0:ca:fb:
         3d:fc:97:9b:c2:a6:5a:94:df:b3:37:f2:8c:96:05:06:1e:20:
         b7:57:49:c4:4b:85:2b:66:52:e2:4a:bb:27:ff:69:c3:70:62:
         f9:bc:1b:2a:59:ec:fc:f6:8b:f0:eb:e2:a5:68:f4:d6:97:7d:
         78:9b:4f:0f:40:1f:ed:fe:ca:13:44:a1:3c:ee:2f:60:09:f5:
         78:ef:d7:02:86:fd:81:f4:0b:f5:e5:06:78:33:4b:16:e0:46:
         c6:68:3e:5b:76:b5:7e:b6:db:7f:dc:56:e9:a8:10:32:7f:97:
         e0:eb:a2:de:3c:53:78:2f:3d:95:04:78:cf:40:e9:dd:c5:e0:
         97:26:71:c7:78:02:62:59:30:fe:7e:6c:ad:15:06:bc:13:72:
         1a:e8:a2:57:df:c9:b1:2a:2a:3e:5c:c1:de:9e:7f:f6:08:fa:
         03:ec:58:b4:36:e1:9f:bb:75:e2:3c:75:f2:ce:5c:e8:4b:04:
         33:55:ae:02
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOVFkJHJTJdhaEgbE0pe+u7sp0VIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc0RjAzMjk1NUUxM0I0QTdDNERGQzQxODRGMUQ4MDE4
REI3QzY4QzAeFw0yMzExMDcyMDE1MDRaFw0yNDExMDUyMDIwMDRaMDMxMTAvBgNV
BAMTKEJENDRFODMxNjk2MTRGNzBCMEZFQkQ4NkVGOTA1OTUxQUQxNTFEMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdnwZEcOCwVbCdcCMgBAlOerE
jS9EyWw5/uj0Mh2SGyZFmi5vQD5qkFgER0DvoCQSD6bFNSQ3kdVwEZM3i4lLNhb5
s0KnDcDKcedDmR5zR8rbun59tHcg+vWRnTPdnW8yuUZdRiSIRg+gvFIZA1vLOF1t
5ENAGbS0HQQpBDhCtWHAHnQQSDr39qpN8WTWjCQXEBD+PNyN7iFWU045Lmy872rY
6hLLMonIHqwioPPeYWTF/IYhBqwCh/cQvkfW4VDjPqRTT1/4Qy9lPcoH5mvKxNnQ
4Faw5ziRra7OE+GAys4aVC9xhb5iSieFVWjuAvA4HXP5BCL8kMte6p4EIVyXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUvUToMWlhT3Cw/r2G75BZUa0VHSswHwYDVR0j
BBgwFoAU508DKVXhO0p8TfxBhPHYAY23xowwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkhDanE0bjZXNGFrSkNNcVU5VU5iRWFCMTNnNkFUV2JTejdHNUd2NUM1
ZUovMC9FNzRGMDMyOTU1RTEzQjRBN0M0REZDNDE4NEYxRDgwMThEQjdDNjhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U3NEYwMzI5NTVFMTNCNEE3
QzRERkM0MTg0RjFEODAxOERCN0M2OEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZIQ2pxNG42VzRha0pDTXFVOVVOYkVhQjEzZzZBVFdiU3o3RzVHdjVDNWVKLzAv
MzIzODMwMzQzYTM1MzQzMjM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM2MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVCjAMA0GCSqGSIb3DQEBCwUA
A4IBAQAtBJ/DHHnRau63mJlpL414HJcYsvEsjNw5f12Jf01dmzDYtwwt335XXbtn
S3DFhO4DAcKTIP1FqaYVeSW6r8PRiKgfXKPwyvs9/JebwqZalN+zN/KMlgUGHiC3
V0nES4UrZlLiSrsn/2nDcGL5vBsqWez89ovw6+KlaPTWl314m08PQB/t/soTRKE8
7i9gCfV479cChv2B9Av15QZ4M0sW4EbGaD5bdrV+ttt/3FbpqBAyf5fg66LePFN4
Lz2VBHjPQOndxeCXJnHHeAJiWTD+fmytFQa8E3Ia6KJX38mxKio+XMHenn/2CPoD
7Fi0NuGfu3XiPHXyzlzoSwQzVa4C
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org