Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a393330303a3a2f34302d3430203d3e20323632363633.roa
File:                     323830343a373166383a393330303a3a2f34302d3430203d3e20323632363633.roa (raw, json)
Hash identifier:          tZkDAC7Bn6oHEUxEqZ2U9o4U0D1koq5NfXPI+8B+2TE=
Subject key identifier:   46:9A:ED:E8:89:57:B5:A8:6A:60:C5:0C:1E:19:85:72:BD:65:73:CE
Certificate issuer:       /CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
Certificate serial:       1782AB29E036A139B2A9E2CB8C98B136667AF087
Authority key identifier: 4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a393330303a3a2f34302d3430203d3e20323632363633.roa
Signing time:             Sat 03 Feb 2024 15:58:10 +0000
ROA not before:           Sat 03 Feb 2024 15:53:10 +0000
ROA not after:            Sat 01 Feb 2025 15:58:10 +0000
asID:                     262663
IP address blocks:        2804:71f8:9300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:82:ab:29:e0:36:a1:39:b2:a9:e2:cb:8c:98:b1:36:66:7a:f0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
        Validity
            Not Before: Feb  3 15:53:10 2024 GMT
            Not After : Feb  1 15:58:10 2025 GMT
        Subject: CN=469AEDE88957B5A86A60C50C1E198572BD6573CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:87:1e:fe:25:5a:39:0f:28:ec:4f:b4:2d:d5:
                    fe:60:79:9d:d3:b1:d1:60:de:e3:20:c6:95:9f:f8:
                    13:31:ab:6d:40:b7:a1:1f:eb:e5:67:27:de:a2:48:
                    69:40:62:75:4a:84:ce:23:e2:6c:21:41:2d:1d:42:
                    a5:d2:c6:3e:8f:d0:3e:3f:91:c2:3a:4a:b3:02:40:
                    04:42:c1:b7:3d:9e:dc:f4:2f:1c:9c:ce:c3:6b:b0:
                    e8:81:ca:e3:a9:2b:0d:13:a5:d8:96:78:8e:dc:0a:
                    f1:ca:27:49:8b:5f:c1:e7:cb:92:0f:2c:80:04:15:
                    84:b1:90:9b:59:de:23:d8:28:88:dd:d7:71:51:9b:
                    f1:15:cf:99:04:2b:83:b1:99:23:a5:e2:e6:db:33:
                    66:21:55:91:fd:e6:4f:7c:8f:53:39:e6:a2:be:b7:
                    6b:6d:68:ad:df:1e:80:4a:dd:e5:b1:65:66:90:59:
                    8c:c1:f8:23:1e:79:ef:6c:6b:aa:00:eb:98:76:39:
                    de:7d:0b:58:8d:3d:9d:b1:ae:df:33:f0:23:64:83:
                    aa:d3:63:36:07:ce:82:93:31:8d:16:77:a4:71:76:
                    4c:45:a9:bf:4d:15:64:94:c5:be:40:b7:62:6e:ba:
                    c9:e5:f4:bf:e5:48:b8:27:f3:2c:82:38:7f:43:b5:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9A:ED:E8:89:57:B5:A8:6A:60:C5:0C:1E:19:85:72:BD:65:73:CE
            X509v3 Authority Key Identifier:
                keyid:4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a393330303a3a2f34302d3430203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71f8:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:18:2c:e4:22:07:ac:95:8b:fa:8b:93:2a:9f:11:d2:b0:dd:
         fe:cc:c2:6e:a6:b8:e1:ee:91:e8:07:18:29:df:b0:bc:26:fd:
         01:06:8b:6b:0e:41:45:23:22:5c:7f:b8:ec:6e:98:2f:7f:f2:
         f1:22:15:d4:8d:db:f8:b6:e1:12:a6:d9:e0:b0:5f:5f:3e:05:
         69:f5:82:57:28:85:1c:b7:5c:0a:88:fe:f5:b4:87:15:5f:26:
         37:43:61:a8:34:b3:d7:e5:b6:26:e3:ab:61:fa:9d:7e:85:d5:
         89:fc:b1:93:48:9f:04:96:e2:69:66:b6:5a:39:91:ad:40:6b:
         31:76:ea:0a:81:11:dc:b5:f2:2a:ce:ee:41:f3:e2:74:d1:67:
         0e:75:b2:7f:90:18:cc:88:c2:4a:b8:9b:86:de:82:36:c1:33:
         6b:5d:57:d5:4f:a6:4c:5b:51:1d:31:b8:23:6d:d0:55:5a:e3:
         10:ac:05:e2:0e:71:03:e6:0d:f8:7f:c3:e3:5a:2f:c1:67:f3:
         a6:f1:db:d2:18:e8:ad:ca:5d:5e:b8:96:18:94:19:97:0b:07:
         4d:b6:32:68:78:b4:12:1f:03:33:d7:5a:5b:5e:60:a2:ad:75:
         85:03:f1:ff:bf:d5:6a:c1:be:d6:68:c4:92:c6:6e:92:22:5c:
         8e:58:e3:16
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUF4KrKeA2oTmyqeLLjJixNmZ68IcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUyNkRCOUFEMUYzN0ZDMTYxNkQwQTIzQTQ3NUIwOERB
QTJGRjI2NjAeFw0yNDAyMDMxNTUzMTBaFw0yNTAyMDExNTU4MTBaMDMxMTAvBgNV
BAMTKDQ2OUFFREU4ODk1N0I1QTg2QTYwQzUwQzFFMTk4NTcyQkQ2NTczQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2hx7+JVo5DyjsT7Qt1f5geZ3T
sdFg3uMgxpWf+BMxq21At6Ef6+VnJ96iSGlAYnVKhM4j4mwhQS0dQqXSxj6P0D4/
kcI6SrMCQARCwbc9ntz0LxyczsNrsOiByuOpKw0TpdiWeI7cCvHKJ0mLX8Hny5IP
LIAEFYSxkJtZ3iPYKIjd13FRm/EVz5kEK4OxmSOl4ubbM2YhVZH95k98j1M55qK+
t2ttaK3fHoBK3eWxZWaQWYzB+CMeee9sa6oA65h2Od59C1iNPZ2xrt8z8CNkg6rT
YzYHzoKTMY0Wd6RxdkxFqb9NFWSUxb5At2Juusnl9L/lSLgn8yyCOH9DtYy9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURprt6IlXtahqYMUMHhmFcr1lc84wHwYDVR0j
BBgwFoAUTibbmtHzf8FhbQojpHWwjaov8mYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlpMYnVrOXFpaThaV2lSR1RjVm4zZGFtSGV1aHBDbmV4M1ZrNllXOWZT
Ym0vMC80RTI2REI5QUQxRjM3RkMxNjE2RDBBMjNBNDc1QjA4REFBMkZGMjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFMjZEQjlBRDFGMzdGQzE2
MTZEMEEyM0E0NzVCMDhEQUEyRkYyNjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaTGJ1azlxaWk4WldpUkdUY1ZuM2RhbUhldWhwQ25leDNWazZZVzlmU2JtLzAv
MzIzODMwMzQzYTM3MzE2NjM4M2EzOTMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMjM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcfiTMA0GCSqGSIb3DQEBCwUA
A4IBAQAWGCzkIgeslYv6i5MqnxHSsN3+zMJuprjh7pHoBxgp37C8Jv0BBotrDkFF
IyJcf7jsbpgvf/LxIhXUjdv4tuESptngsF9fPgVp9YJXKIUct1wKiP71tIcVXyY3
Q2GoNLPX5bYm46th+p1+hdWJ/LGTSJ8EluJpZrZaOZGtQGsxduoKgRHctfIqzu5B
8+J00WcOdbJ/kBjMiMJKuJuG3oI2wTNrXVfVT6ZMW1EdMbgjbdBVWuMQrAXiDnED
5g34f8PjWi/BZ/Om8dvSGOityl1euJYYlBmXCwdNtjJoeLQSHwMz11pbXmCirXWF
A/H/v9Vqwb7WaMSSxm6SIlyOWOMW
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org