Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a653030313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          LuID3Jhx3uxSrnTNokP/MNG4RQKSc0Ixt//p44K50e4=
Subject key identifier:   E5:C5:02:D6:E3:70:BD:69:51:E4:2A:B9:FA:4A:19:96:54:DB:13:71
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       4AC469188C451850429CBE2897055B53A789F6A3
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:00 +0000
ROA not before:           Thu 04 Apr 2024 11:29:00 +0000
ROA not after:            Thu 03 Apr 2025 11:34:00 +0000
asID:                     264422
IP address blocks:        2804:1e58:e001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c4:69:18:8c:45:18:50:42:9c:be:28:97:05:5b:53:a7:89:f6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:00 2024 GMT
            Not After : Apr  3 11:34:00 2025 GMT
        Subject: CN=E5C502D6E370BD6951E42AB9FA4A199654DB1371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:75:c0:d7:ce:1a:07:d6:1e:54:68:7b:33:
                    00:f5:b3:e6:bb:40:99:2e:4a:b3:ee:c4:65:ed:74:
                    3a:a2:8f:65:fc:fa:ea:7e:b9:59:25:cb:1d:df:f0:
                    f6:ff:04:eb:bd:81:4e:16:32:ee:ae:9d:10:bb:65:
                    56:df:86:c2:82:73:20:52:26:cf:db:48:23:68:33:
                    ac:d5:d2:d0:cb:8d:44:8f:0a:a3:be:d1:67:74:76:
                    09:c1:a4:c9:ca:49:e0:36:4b:15:fe:27:d0:27:6d:
                    c1:1d:e4:c7:4d:d6:ad:57:92:0a:c5:40:51:62:1b:
                    e3:d3:36:61:38:c2:e7:18:6f:14:cf:27:70:ab:05:
                    b3:2e:d6:06:f3:43:7f:63:e7:fa:3d:90:c1:08:ed:
                    f4:e8:cc:03:a6:88:55:56:c9:37:a0:2f:6a:e6:73:
                    af:2f:b7:03:fb:3f:73:09:c2:97:01:3d:8d:f1:01:
                    9a:03:c8:86:81:62:4c:f3:95:d2:e5:26:d7:b1:f5:
                    a7:69:80:fd:88:79:56:8f:50:5d:6a:f1:6c:e4:94:
                    ac:89:9d:7b:29:ea:2c:ee:e4:fc:1f:e9:3c:03:6a:
                    a9:6b:88:ac:f8:71:28:9f:f3:f1:db:ad:7c:c5:59:
                    0e:f8:ae:08:fc:96:a9:2f:88:ea:84:23:2e:71:26:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C5:02:D6:E3:70:BD:69:51:E4:2A:B9:FA:4A:19:96:54:DB:13:71
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e001::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:d8:8a:cc:e6:fa:1c:89:20:a5:2e:df:01:50:74:bb:7e:
         ca:3f:01:c8:2c:7c:2a:09:3b:16:cc:69:5b:9b:57:ed:91:79:
         8b:13:22:7a:1a:3e:26:e1:18:a9:9b:7f:1f:e1:1c:95:d0:cd:
         d9:73:4a:42:44:90:49:31:e6:2d:14:03:53:71:d7:04:4c:8e:
         de:f0:1d:34:4f:08:98:12:a0:e6:f8:ea:a4:a2:80:23:77:e3:
         70:e1:a5:29:3b:5b:1c:20:f2:7d:9c:33:95:9c:4d:12:05:8a:
         40:98:e3:fd:7d:c4:3b:33:18:e2:39:6e:94:a8:09:46:4d:7a:
         a3:97:cc:a8:d5:a6:b2:b8:24:22:43:be:fd:28:2f:9f:d8:73:
         7e:65:56:8a:53:0f:b0:8e:9d:90:0b:85:1f:6c:93:a0:77:cc:
         92:28:e7:19:e4:de:0e:68:b6:67:f9:6c:ae:17:b4:0a:ee:fd:
         c2:1e:98:a2:b6:5a:0a:97:b8:53:0e:2f:16:64:50:91:94:c5:
         33:8b:7e:52:39:8a:54:a2:b9:94:45:ef:fb:db:22:1a:df:48:
         80:22:6d:7b:2d:65:9b:51:53:64:14:9a:88:da:8e:4e:42:0a:
         7d:f0:7b:68:51:ef:47:71:44:bd:0a:60:1d:d2:a6:4a:0b:5c:
         1b:36:d2:13
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUSsRpGIxFGFBCnL4olwVbU6eJ9qMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlBNzNDOTcwMTRBMEYxQzAyQzIyQkJGMDExNTFCOUM4
RjA2RkQ1MzAeFw0yNDA0MDQxMTI5MDBaFw0yNTA0MDMxMTM0MDBaMDMxMTAvBgNV
BAMTKEU1QzUwMkQ2RTM3MEJENjk1MUU0MkFCOUZBNEExOTk2NTREQjEzNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2nXA184aB9YeVGh7MwD1s+a7
QJkuSrPuxGXtdDqij2X8+up+uVklyx3f8Pb/BOu9gU4WMu6unRC7ZVbfhsKCcyBS
Js/bSCNoM6zV0tDLjUSPCqO+0Wd0dgnBpMnKSeA2SxX+J9AnbcEd5MdN1q1XkgrF
QFFiG+PTNmE4wucYbxTPJ3CrBbMu1gbzQ39j5/o9kMEI7fTozAOmiFVWyTegL2rm
c68vtwP7P3MJwpcBPY3xAZoDyIaBYkzzldLlJtex9adpgP2IeVaPUF1q8WzklKyJ
nXsp6izu5Pwf6TwDaqlriKz4cSif8/HbrXzFWQ74rgj8lqkviOqEIy5xJr81AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU5cUC1uNwvWlR5Cq5+koZllTbE3EwHwYDVR0j
BBgwFoAU+ac8lwFKDxwCwiu/ARUbnI8G/VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMS9GOUE3M0M5NzAxNEEwRjFDMDJDMjJCQkYwMTE1MUI5QzhGMDZGRDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5QTczQzk3MDE0QTBGMUMw
MkMyMkJCRjAxMTUxQjlDOEYwNkZENTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzEv
MzIzODMwMzQzYTMxNjUzNTM4M2E2NTMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHljgATANBgkqhkiG9w0BAQsF
AAOCAQEAjc/Yiszm+hyJIKUu3wFQdLt+yj8ByCx8Kgk7FsxpW5tX7ZF5ixMieho+
JuEYqZt/H+EcldDN2XNKQkSQSTHmLRQDU3HXBEyO3vAdNE8ImBKg5vjqpKKAI3fj
cOGlKTtbHCDyfZwzlZxNEgWKQJjj/X3EOzMY4jlulKgJRk16o5fMqNWmsrgkIkO+
/Sgvn9hzfmVWilMPsI6dkAuFH2yToHfMkijnGeTeDmi2Z/lsrhe0Cu79wh6YorZa
Cpe4Uw4vFmRQkZTFM4t+UjmKVKK5lEXv+9siGt9IgCJtey1lm1FTZBSaiNqOTkIK
ffB7aFHvR3FEvQpgHdKmSgtcGzbSEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org