Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a383030303a3a2f33342d3334203d3e20323633363134.roa
File:                     323830343a313030343a383030303a3a2f33342d3334203d3e20323633363134.roa (raw, json)
Hash identifier:          88E9ECmCwe+8WBJMGH3B8XfFJNzwhWRxIiyjDa6vWKs=
Subject key identifier:   7A:9A:53:79:D5:F7:61:30:E3:28:BA:15:BA:A7:E4:49:C4:A8:E1:67
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       698CBD18A3843BC3B705DB3DBAB789F85FD08312
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a383030303a3a2f33342d3334203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:19:00 +0000
ROA not before:           Fri 09 Feb 2024 17:14:00 +0000
ROA not after:            Fri 07 Feb 2025 17:19:00 +0000
asID:                     263614
IP address blocks:        2804:1004:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:bd:18:a3:84:3b:c3:b7:05:db:3d:ba:b7:89:f8:5f:d0:83:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:14:00 2024 GMT
            Not After : Feb  7 17:19:00 2025 GMT
        Subject: CN=7A9A5379D5F76130E328BA15BAA7E449C4A8E167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:05:91:c6:d5:b0:68:fa:13:78:b8:03:9c:
                    ca:ac:74:e0:a3:eb:2a:21:9a:7f:07:bc:50:f2:0b:
                    e3:98:ac:81:50:d9:b0:d1:74:ff:84:5e:70:d2:8f:
                    08:fa:63:c7:65:55:88:4b:ff:b4:f4:e8:87:46:33:
                    de:82:dc:7f:c0:bd:dc:eb:95:cc:3c:4c:00:ff:aa:
                    06:63:21:00:10:f7:6f:fa:e0:df:a7:73:8b:9c:2c:
                    29:15:bc:da:43:ba:57:38:fc:80:84:e4:fb:c3:e8:
                    e8:d1:56:77:18:9e:e6:6f:d1:65:d8:20:7c:ed:bb:
                    a8:d7:fa:91:da:91:76:26:c9:12:fa:e1:c4:cc:a6:
                    a6:49:65:5d:78:f2:94:90:2d:76:f7:24:56:a5:dd:
                    84:1a:a4:62:8f:7f:9f:98:14:86:6b:0c:c1:aa:5f:
                    2d:c9:e7:a7:c6:60:13:2e:b0:ba:cf:b0:fd:db:9d:
                    2c:b3:9f:2d:1a:4e:7a:f7:29:79:8a:b4:84:5d:32:
                    7e:3b:95:e2:21:b2:2e:9b:58:2b:8b:5e:5b:57:4a:
                    2d:62:e6:4e:57:e9:20:d7:c4:0a:6a:11:8f:10:9d:
                    7f:c4:14:34:4b:70:63:2e:ff:43:9a:e6:12:0e:41:
                    2d:6b:68:96:4d:97:41:61:46:e0:b4:66:9a:3b:6c:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9A:53:79:D5:F7:61:30:E3:28:BA:15:BA:A7:E4:49:C4:A8:E1:67
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a383030303a3a2f33342d3334203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:01:e3:28:58:b4:fe:d1:65:b4:2c:c2:33:94:b9:4c:0f:b2:
         6c:49:f1:64:83:a5:63:32:18:0e:c6:a8:38:70:ef:4d:c7:da:
         7c:ac:ec:1c:e7:bc:ba:cb:cc:8e:7d:2d:f0:60:2f:29:80:bf:
         3c:67:7f:82:3c:a9:2d:c6:f0:13:05:2e:70:f8:54:f7:66:a8:
         70:a9:92:c9:b1:ba:bc:8a:7f:b0:83:3e:63:4b:94:9b:a5:c5:
         e5:52:de:af:74:1c:4f:4e:5c:f0:ed:5c:ab:c7:d4:b4:14:31:
         8c:bd:89:6c:6c:75:ee:42:8c:f5:ea:fd:f8:02:f5:45:07:e6:
         30:38:d8:5e:b4:73:1b:f2:8c:a2:d3:d0:18:b0:c2:0a:50:42:
         28:27:38:bf:b2:a0:08:d9:a3:f8:1a:ef:52:d2:0a:31:d9:ca:
         d3:bc:9e:22:ff:85:e2:c7:8a:6a:28:d0:b1:f3:ac:a8:99:2b:
         22:bc:19:60:ee:cb:d0:15:5d:4d:54:31:25:c4:f3:1d:0e:38:
         a7:8c:71:24:03:43:cb:40:2f:62:06:39:f7:93:92:4e:72:7e:
         4a:b2:2d:80:6d:df:78:1e:7e:01:0c:52:e0:fa:1b:40:9d:c7:
         2f:54:95:f5:f1:10:b9:36:ec:9b:67:46:d4:16:ec:cd:69:83:
         05:2c:6e:7e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaYy9GKOEO8O3Bds9ureJ+F/QgxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM0QzJGODFDOTlCNUQxRkU3RDQyQjc1OThFMzAyNDc0
RDMxQzgzQjAeFw0yNDAyMDkxNzE0MDBaFw0yNTAyMDcxNzE5MDBaMDMxMTAvBgNV
BAMTKDdBOUE1Mzc5RDVGNzYxMzBFMzI4QkExNUJBQTdFNDQ5QzRBOEUxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThAWRxtWwaPoTeLgDnMqsdOCj
6yohmn8HvFDyC+OYrIFQ2bDRdP+EXnDSjwj6Y8dlVYhL/7T06IdGM96C3H/Avdzr
lcw8TAD/qgZjIQAQ92/64N+nc4ucLCkVvNpDulc4/ICE5PvD6OjRVncYnuZv0WXY
IHztu6jX+pHakXYmyRL64cTMpqZJZV148pSQLXb3JFal3YQapGKPf5+YFIZrDMGq
Xy3J56fGYBMusLrPsP3bnSyzny0aTnr3KXmKtIRdMn47leIhsi6bWCuLXltXSi1i
5k5X6SDXxApqEY8QnX/EFDRLcGMu/0Oa5hIOQS1raJZNl0FhRuC0Zpo7bEBvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUeppTedX3YTDjKLoVuqfkScSo4WcwHwYDVR0j
BBgwFoAUDEwvgcmbXR/n1Ct1mOMCR00xyDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpq
OHUvMC8wQzRDMkY4MUM5OUI1RDFGRTdENDJCNzU5OEUzMDI0NzREMzFDODNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDNEMyRjgxQzk5QjVEMUZF
N0Q0MkI3NTk4RTMwMjQ3NEQzMUM4M0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaNFBqalB1ZzJkYnJOYW1iNWZtMUxnTjVMaVBROUJZYVA1VXUzbllKajh1LzAv
MzIzODMwMzQzYTMxMzAzMDM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEASAMA0GCSqGSIb3DQEBCwUA
A4IBAQB0AeMoWLT+0WW0LMIzlLlMD7JsSfFkg6VjMhgOxqg4cO9Nx9p8rOwc57y6
y8yOfS3wYC8pgL88Z3+CPKktxvATBS5w+FT3ZqhwqZLJsbq8in+wgz5jS5SbpcXl
Ut6vdBxPTlzw7Vyrx9S0FDGMvYlsbHXuQoz16v34AvVFB+YwONhetHMb8oyi09AY
sMIKUEIoJzi/sqAI2aP4Gu9S0gox2crTvJ4i/4Xix4pqKNCx86yomSsivBlg7svQ
FV1NVDElxPMdDjinjHEkA0PLQC9iBjn3k5JOcn5Ksi2Abd94Hn4BDFLg+htAnccv
VJX18RC5NuybZ0bUFuzNaYMFLG5+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org