Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d313238203d3e20323634343039.roa
File:                     323830343a316532303a31303a3a2f34382d313238203d3e20323634343039.roa (raw, json)
Hash identifier:          y4ZeexhXY8DEPKAAaCzXltqT/LN81yfZ4lbLoJ3ZGbI=
Subject key identifier:   A5:72:96:27:A7:C2:27:E7:4D:DD:3D:98:95:75:98:0F:A8:73:CC:7B
Certificate issuer:       /CN=F6A854F7ADB5F77180FB875F5E7CE73C14AE666D
Certificate serial:       7093D6D43A6CB79F26A41209C0C8EBEF9A2CDA38
Authority key identifier: F6:A8:54:F7:AD:B5:F7:71:80:FB:87:5F:5E:7C:E7:3C:14:AE:66:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d313238203d3e20323634343039.roa
Signing time:             Sun 03 Mar 2024 19:52:33 +0000
ROA not before:           Sun 03 Mar 2024 19:47:33 +0000
ROA not after:            Sun 02 Mar 2025 19:52:33 +0000
asID:                     264409
IP address blocks:        2804:1e20:10::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:93:d6:d4:3a:6c:b7:9f:26:a4:12:09:c0:c8:eb:ef:9a:2c:da:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6A854F7ADB5F77180FB875F5E7CE73C14AE666D
        Validity
            Not Before: Mar  3 19:47:33 2024 GMT
            Not After : Mar  2 19:52:33 2025 GMT
        Subject: CN=A5729627A7C227E74DDD3D989575980FA873CC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4c:9f:d6:4f:13:51:85:bd:4e:44:31:03:da:
                    c0:32:64:3b:ab:99:f9:d9:76:40:9e:f8:f5:b7:b7:
                    1a:f0:31:70:7d:fe:ca:cd:c4:8f:cb:a7:6f:7f:2e:
                    a1:8e:4b:00:61:eb:c8:88:50:32:b9:0d:53:cb:77:
                    60:0a:00:0a:78:50:0a:e3:b9:d9:b9:13:a2:c0:3e:
                    2a:e4:16:25:af:2f:b4:f4:8c:9d:67:fa:14:b8:84:
                    45:01:d0:83:8d:09:5f:55:0a:bf:41:de:4c:ae:1e:
                    6c:23:d3:d3:c4:a2:92:37:1e:42:4d:0e:31:20:d6:
                    e5:a4:ed:d1:a9:13:ee:74:bb:21:4a:14:82:9d:99:
                    38:4a:42:98:e5:4c:c4:58:f4:8c:bd:60:4b:82:0d:
                    bc:d6:bf:56:1c:fe:45:1d:ad:fd:0c:d4:19:6c:02:
                    e0:e8:89:36:4b:93:f7:4e:fb:80:9e:a7:09:2f:41:
                    8b:1b:6c:e4:a5:fd:08:56:23:dd:04:97:50:56:55:
                    02:ec:56:c8:57:dd:12:18:2b:07:36:2c:f1:39:d6:
                    6d:47:31:c7:c3:eb:b3:2f:75:81:17:d2:0a:1c:5a:
                    cd:2c:10:cb:b4:21:30:e0:c7:98:95:60:73:cf:13:
                    50:48:fb:ab:99:9f:d2:61:ec:f1:9c:5c:41:94:c5:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:96:27:A7:C2:27:E7:4D:DD:3D:98:95:75:98:0F:A8:73:CC:7B
            X509v3 Authority Key Identifier:
                keyid:F6:A8:54:F7:AD:B5:F7:71:80:FB:87:5F:5E:7C:E7:3C:14:AE:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6A854F7ADB5F77180FB875F5E7CE73C14AE666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d313238203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:7b:5b:e8:eb:df:9c:93:f4:8a:0d:ee:c2:a8:ee:77:0e:f8:
         ef:3d:17:0d:59:31:e7:26:76:ef:a3:df:2d:b5:f5:7a:48:06:
         09:7f:8a:26:cb:dc:dc:00:67:fe:dd:6f:76:12:63:33:49:f9:
         bc:ff:88:be:d6:ec:85:a4:1c:16:fc:28:63:64:7e:41:75:74:
         e8:fe:f0:1a:10:90:1f:d2:9e:3e:29:da:d0:d7:db:fe:7b:ff:
         5e:45:ca:39:cb:f7:21:be:1f:6f:01:52:76:47:d6:e0:0b:84:
         7f:b5:7b:54:a7:8a:a4:46:63:b2:a7:a0:be:31:62:43:78:d4:
         95:d2:ee:8c:b4:9d:1f:c0:d4:10:42:92:7c:d4:6a:5f:22:fa:
         59:26:3d:d0:b3:7f:90:16:13:84:54:b1:e9:69:30:02:68:ac:
         76:63:3f:44:35:ad:bd:26:29:e4:dc:16:ab:ee:ea:4e:ec:6d:
         42:1e:04:bf:09:79:eb:d2:18:5a:cd:1e:14:67:60:8b:38:cb:
         e2:ba:18:d5:59:07:d2:6f:7d:b3:ba:76:03:83:3b:e4:8b:62:
         75:56:f3:88:28:f6:a7:dc:ff:33:fc:a7:b9:cb:e0:72:6f:ba:
         05:79:e4:5b:c6:3c:27:01:a3:88:85:b3:bc:8e:b4:4f:05:a6:
         1d:69:52:bb
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUcJPW1Dpst58mpBIJwMjr75os2jgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZBODU0RjdBREI1Rjc3MTgwRkI4NzVGNUU3Q0U3M0Mx
NEFFNjY2RDAeFw0yNDAzMDMxOTQ3MzNaFw0yNTAzMDIxOTUyMzNaMDMxMTAvBgNV
BAMTKEE1NzI5NjI3QTdDMjI3RTc0REREM0Q5ODk1NzU5ODBGQTg3M0NDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoTJ/WTxNRhb1ORDED2sAyZDur
mfnZdkCe+PW3txrwMXB9/srNxI/Lp29/LqGOSwBh68iIUDK5DVPLd2AKAAp4UArj
udm5E6LAPirkFiWvL7T0jJ1n+hS4hEUB0IONCV9VCr9B3kyuHmwj09PEopI3HkJN
DjEg1uWk7dGpE+50uyFKFIKdmThKQpjlTMRY9Iy9YEuCDbzWv1Yc/kUdrf0M1Bls
AuDoiTZLk/dO+4CepwkvQYsbbOSl/QhWI90El1BWVQLsVshX3RIYKwc2LPE51m1H
McfD67MvdYEX0gocWs0sEMu0ITDgx5iVYHPPE1BI+6uZn9Jh7PGcXEGUxROHAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUpXKWJ6fCJ+dN3T2YlXWYD6hzzHswHwYDVR0j
BBgwFoAU9qhU962193GA+4dfXnznPBSuZm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzdhaUFhcWh0V0ZxVTFzQWJKaGRBSDV3WjZHdUdieUpOSHk2QjZSdVZp
SGgvMC9GNkE4NTRGN0FEQjVGNzcxODBGQjg3NUY1RTdDRTczQzE0QUU2NjZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y2QTg1NEY3QURCNUY3NzE4
MEZCODc1RjVFN0NFNzNDMTRBRTY2NkQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc3YWlBYXFodFdGcVUxc0FiSmhkQUg1d1o2R3VHYnlKTkh5NkI2UnVWaUhoLzAv
MzIzODMwMzQzYTMxNjUzMjMwM2EzMTMwM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNl
MjAzMjM2MzQzNDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBB4gABAwDQYJKoZIhvcNAQELBQAD
ggEBAI57W+jr35yT9IoN7sKo7ncO+O89Fw1ZMecmdu+j3y219XpIBgl/iibL3NwA
Z/7db3YSYzNJ+bz/iL7W7IWkHBb8KGNkfkF1dOj+8BoQkB/Snj4p2tDX2/57/15F
yjnL9yG+H28BUnZH1uALhH+1e1SniqRGY7KnoL4xYkN41JXS7oy0nR/A1BBCknzU
al8i+lkmPdCzf5AWE4RUselpMAJorHZjP0Q1rb0mKeTcFqvu6k7sbUIeBL8JeevS
GFrNHhRnYIs4y+K6GNVZB9JvfbO6dgODO+SLYnVW84go9qfc/zP8p7nL4HJvugV5
5FvGPCcBo4iFs7yOtE8Fph1pUrs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org