Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa
File:                     323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa (raw, json)
Hash identifier:          klMXR6l6C1xYWWJV7orDQlv3ZB5h+KJhXLqGL6D0dVc=
Subject key identifier:   08:38:D5:D3:3C:FF:68:08:B9:F2:66:5E:64:D2:E7:C0:A5:BB:75:F5
Certificate issuer:       /CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
Certificate serial:       6ABF390507A4A666AFAE08C1B8FF2C728ABA66F5
Authority key identifier: 24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa
Signing time:             Tue 14 Nov 2023 04:27:59 +0000
ROA not before:           Tue 14 Nov 2023 04:22:59 +0000
ROA not after:            Tue 12 Nov 2024 04:27:59 +0000
asID:                     266547
IP address blocks:        2804:3db0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bf:39:05:07:a4:a6:66:af:ae:08:c1:b8:ff:2c:72:8a:ba:66:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
        Validity
            Not Before: Nov 14 04:22:59 2023 GMT
            Not After : Nov 12 04:27:59 2024 GMT
        Subject: CN=0838D5D33CFF6808B9F2665E64D2E7C0A5BB75F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:47:72:40:d0:ea:70:a8:7e:d8:eb:f9:7c:
                    45:86:ef:7c:19:cb:ee:cd:a4:04:30:45:df:4a:e9:
                    4b:c8:0d:b3:0b:3f:92:cd:ef:5b:80:88:c8:3b:80:
                    d2:47:32:ba:fa:fb:e2:80:0b:29:03:64:89:fd:29:
                    05:d6:5c:0c:ed:cb:bc:ac:68:33:61:38:69:a2:21:
                    5c:92:20:de:d1:df:06:ef:7c:c3:8c:18:60:f1:d8:
                    3e:99:23:32:18:8b:be:db:a8:81:c3:e2:d6:9d:03:
                    fb:69:07:5d:94:f9:1e:f8:f3:9c:8a:00:8f:c8:19:
                    27:5b:23:05:1d:8b:a8:d2:0f:fa:cf:eb:69:a1:3f:
                    2f:3f:e0:f4:c8:48:f6:a6:f6:7e:39:a7:66:8c:b1:
                    1b:fb:dd:91:5f:4f:10:32:1b:bb:1b:05:29:d8:35:
                    4b:7b:8f:84:80:9d:29:22:1f:2b:be:c8:bb:f4:b3:
                    1c:cb:d4:f2:1f:7d:8f:54:b8:f1:67:c2:48:00:81:
                    b3:3b:dc:8d:6d:42:ae:ad:f6:02:70:a3:9b:c9:a8:
                    b1:af:4a:41:e9:73:c4:ee:4e:e5:7c:14:0a:9d:ed:
                    35:72:48:a5:d3:05:f1:8e:2b:38:e5:7e:ff:08:2f:
                    3c:c3:7f:6d:01:0f:97:87:33:fc:81:6a:04:9e:a8:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:D5:D3:3C:FF:68:08:B9:F2:66:5E:64:D2:E7:C0:A5:BB:75:F5
            X509v3 Authority Key Identifier:
                keyid:24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:59:a3:77:be:23:57:dd:ee:a7:f5:85:01:0e:68:9d:a1:
         47:e7:b9:bd:37:5d:3c:06:0e:85:84:5a:7b:03:e5:39:e0:0a:
         9d:9a:21:34:22:6e:38:0d:6c:fd:fc:4b:02:81:b9:56:8f:bc:
         11:63:e9:a5:5e:f5:25:5e:27:0a:3a:0d:47:38:60:f0:99:58:
         4d:9f:08:83:25:fb:97:d2:be:d9:ca:ca:1d:bf:e2:0a:ce:22:
         b3:22:e1:de:83:7b:68:5b:90:ed:1b:1a:c1:6b:b5:e4:24:e4:
         a1:49:07:c8:fe:fd:b3:28:52:8f:f4:38:41:60:5f:7d:c2:9a:
         1a:ae:06:6b:89:2a:72:c5:dc:de:43:66:44:6d:f7:af:80:4d:
         51:93:c2:c6:50:9e:4d:e4:35:a6:98:64:8e:14:9d:24:10:14:
         c0:22:ad:7f:6c:6a:0f:bb:84:af:07:be:af:85:92:f5:55:0f:
         89:b9:df:ac:57:46:47:89:a9:98:25:94:d9:df:20:21:73:46:
         c3:a1:72:da:4f:4c:7b:24:71:f1:85:5e:f0:36:90:50:da:ea:
         b7:fb:a1:d7:9d:63:c2:a3:3b:54:ce:fa:08:de:55:13:73:c9:
         12:af:39:af:5b:73:6e:7b:86:79:00:b8:48:51:61:f0:22:b3:
         49:5c:9f:3a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUar85BQekpmavrgjBuP8scoq6ZvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0NThDMTNGNDA0NzRFMzc0OUNCQTBBNDlGNTlCMzYy
QjREM0UwQjAeFw0yMzExMTQwNDIyNTlaFw0yNDExMTIwNDI3NTlaMDMxMTAvBgNV
BAMTKDA4MzhENUQzM0NGRjY4MDhCOUYyNjY1RTY0RDJFN0MwQTVCQjc1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQUdyQNDqcKh+2Ov5fEWG73wZ
y+7NpAQwRd9K6UvIDbMLP5LN71uAiMg7gNJHMrr6++KACykDZIn9KQXWXAzty7ys
aDNhOGmiIVySIN7R3wbvfMOMGGDx2D6ZIzIYi77bqIHD4tadA/tpB12U+R7485yK
AI/IGSdbIwUdi6jSD/rP62mhPy8/4PTISPam9n45p2aMsRv73ZFfTxAyG7sbBSnY
NUt7j4SAnSkiHyu+yLv0sxzL1PIffY9UuPFnwkgAgbM73I1tQq6t9gJwo5vJqLGv
SkHpc8TuTuV8FAqd7TVySKXTBfGOKzjlfv8ILzzDf20BD5eHM/yBagSeqKmvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCDjV0zz/aAi58mZeZNLnwKW7dfUwHwYDVR0j
BBgwFoAUJEWME/QEdON0nLoKSfWbNitNPgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1BUFVSYVFNVGtmakpkOVlNR0NqVmY4ZjQ1cmtWZm1QZFlXRkRlb0JW
OEEvMC8yNDQ1OEMxM0Y0MDQ3NEUzNzQ5Q0JBMEE0OUY1OUIzNjJCNEQzRTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0NDU4QzEzRjQwNDc0RTM3
NDlDQkEwQTQ5RjU5QjM2MkI0RDNFMEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNQVBVUmFRTVRrZmpKZDlZTUdDalZmOGY0NXJrVmZtUGRZV0ZEZW9CVjhBLzAv
MzIzODMwMzQzYTMzNjQ2MjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjM1MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEPbCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCQC1mjd74jV93up/WFAQ5onaFH57m9N108Bg6FhFp7A+U54AqdmiE0Im44
DWz9/EsCgblWj7wRY+mlXvUlXicKOg1HOGDwmVhNnwiDJfuX0r7Zysodv+IKziKz
IuHeg3toW5DtGxrBa7XkJOShSQfI/v2zKFKP9DhBYF99wpoargZriSpyxdzeQ2ZE
bfevgE1Rk8LGUJ5N5DWmmGSOFJ0kEBTAIq1/bGoPu4SvB76vhZL1VQ+Jud+sV0ZH
iamYJZTZ3yAhc0bDoXLaT0x7JHHxhV7wNpBQ2uq3+6HXnWPCoztUzvoI3lUTc8kS
rzmvW3Nue4Z5ALhIUWHwIrNJXJ86
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org