Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/323830343a323463343a3230303a3a2f34302d3430203d3e20323634323431.roa
File:                     323830343a323463343a3230303a3a2f34302d3430203d3e20323634323431.roa (raw, json)
Hash identifier:          kYwJnpNco3RiaqTUSBR+K0f/rzZCZzwIThMhUiBdfNo=
Subject key identifier:   73:A6:8A:F0:80:41:84:92:68:0B:98:FD:06:29:CC:1A:43:51:D9:76
Certificate issuer:       /CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
Certificate serial:       72FB849E31B3E4683EAE331A42F7777CAF252A3C
Authority key identifier: 5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/323830343a323463343a3230303a3a2f34302d3430203d3e20323634323431.roa
Signing time:             Tue 28 Mar 2023 12:04:01 +0000
ROA not before:           Tue 28 Mar 2023 11:59:01 +0000
ROA not after:            Tue 26 Mar 2024 12:04:01 +0000
asID:                     264241
IP address blocks:        2804:24c4:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fb:84:9e:31:b3:e4:68:3e:ae:33:1a:42:f7:77:7c:af:25:2a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
        Validity
            Not Before: Mar 28 11:59:01 2023 GMT
            Not After : Mar 26 12:04:01 2024 GMT
        Subject: CN=73A68AF080418492680B98FD0629CC1A4351D976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:47:2d:e3:19:d3:b8:e2:79:c7:45:8f:de:
                    8b:d1:cf:9a:64:c2:d7:ef:38:ef:0b:1a:dc:50:16:
                    a1:90:6b:e3:44:bc:21:b3:20:96:0a:71:03:88:ed:
                    b0:c2:1b:21:2e:d4:91:bb:cc:f0:12:ab:ab:e1:c7:
                    b6:6f:e2:1e:72:47:56:01:67:1f:8d:ab:f6:71:c4:
                    ea:51:90:6c:9e:de:3d:45:de:e7:1e:b4:27:da:6e:
                    e1:1c:3d:7f:ed:07:d5:b8:37:f4:16:b8:04:25:7d:
                    5a:45:8f:8c:a3:c3:7d:e2:57:fe:51:60:4a:74:0e:
                    a2:fe:21:18:bd:53:c6:04:fa:62:25:65:75:eb:50:
                    f9:ee:6c:b5:a2:a7:50:63:a5:84:c9:41:fe:26:35:
                    7a:e1:e7:25:45:b6:8b:12:bf:88:0c:4e:f5:ea:e7:
                    a7:fc:b0:b0:93:2a:11:09:58:8c:2b:88:46:c3:33:
                    bc:e5:87:52:ac:dd:7f:06:95:15:6b:d1:a5:55:60:
                    03:ae:2c:82:99:7c:07:b9:d2:00:0e:16:14:4e:1e:
                    5c:9d:3c:95:18:4a:05:03:94:bd:ab:88:15:f0:58:
                    36:ef:a6:16:8b:20:02:c7:6d:d2:f9:21:d4:a7:e8:
                    6b:06:b7:99:3b:2f:4b:0c:a0:fb:53:22:63:85:c5:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A6:8A:F0:80:41:84:92:68:0B:98:FD:06:29:CC:1A:43:51:D9:76
            X509v3 Authority Key Identifier:
                keyid:5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/323830343a323463343a3230303a3a2f34302d3430203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24c4:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:8f:0a:7b:1a:dc:a4:b5:0a:eb:77:0d:4e:d6:77:4a:b3:3a:
         5c:21:24:44:c3:f2:23:27:35:77:66:d9:bc:cf:22:27:27:04:
         fd:e7:2d:df:86:c7:61:f4:80:37:5d:8b:c9:a5:f4:95:3c:37:
         ee:dc:ea:38:b8:0d:54:f6:49:7d:44:14:40:54:26:02:92:e7:
         88:88:e4:4b:df:2b:5d:a1:a0:e0:6c:c3:29:ab:1e:e0:85:c6:
         32:6f:42:3c:d5:ce:3c:f6:7f:70:01:6c:62:ff:de:30:9e:80:
         35:11:48:51:a4:a2:86:39:b1:fa:84:3e:be:e6:86:a5:99:a4:
         34:1b:a4:9e:6b:ce:cb:bd:c5:11:9d:3f:c1:b9:0c:8b:67:02:
         f1:7e:26:b2:47:1e:61:00:a8:05:50:8f:60:67:55:b2:b0:24:
         e4:fa:22:34:57:d8:3c:34:83:49:c5:74:1f:a0:66:af:b1:b5:
         1d:f4:3d:fa:68:f4:3a:18:a6:c8:b1:0d:62:ba:52:a7:fc:3b:
         bd:21:09:61:17:58:e0:c5:4c:58:88:fa:00:1f:94:d7:9b:a0:
         c4:43:cd:e1:f4:ef:9d:55:34:89:c5:17:b4:fd:f7:33:2d:0f:
         13:a6:84:d1:ed:40:64:fb:b3:63:5b:4d:e8:50:8b:fa:a2:43:
         50:4a:c7:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcvuEnjGz5Gg+rjMaQvd3fK8lKjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY4RkZCMUZBNkExMkNBMzk0MjU1RjUwMzEzOTlEOUEx
MzdCM0VDNzAeFw0yMzAzMjgxMTU5MDFaFw0yNDAzMjYxMjA0MDFaMDMxMTAvBgNV
BAMTKDczQTY4QUYwODA0MTg0OTI2ODBCOThGRDA2MjlDQzFBNDM1MUQ5NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmkct4xnTuOJ5x0WP3ovRz5pk
wtfvOO8LGtxQFqGQa+NEvCGzIJYKcQOI7bDCGyEu1JG7zPASq6vhx7Zv4h5yR1YB
Zx+Nq/ZxxOpRkGye3j1F3ucetCfabuEcPX/tB9W4N/QWuAQlfVpFj4yjw33iV/5R
YEp0DqL+IRi9U8YE+mIlZXXrUPnubLWip1BjpYTJQf4mNXrh5yVFtosSv4gMTvXq
56f8sLCTKhEJWIwriEbDM7zlh1Ks3X8GlRVr0aVVYAOuLIKZfAe50gAOFhROHlyd
PJUYSgUDlL2riBXwWDbvphaLIALHbdL5IdSn6GsGt5k7L0sMoPtTImOFxSaJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc6aK8IBBhJJoC5j9BinMGkNR2XYwHwYDVR0j
BBgwFoAUX4/7H6ahLKOUJV9QMTmdmhN7PscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0E0UDYzYjkyUkJHVmNrRXQ5eE16UmVZWEdtSlN1V0NSSnVGck5uSHdv
MzcvMC81RjhGRkIxRkE2QTEyQ0EzOTQyNTVGNTAzMTM5OUQ5QTEzN0IzRUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGOEZGQjFGQTZBMTJDQTM5
NDI1NUY1MDMxMzk5RDlBMTM3QjNFQzcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdBNFA2M2I5MlJCR1Zja0V0OXhNelJlWVhHbUpTdVdDUkp1RnJObkh3bzM3LzAv
MzIzODMwMzQzYTMyMzQ2MzM0M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzQzMjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCTEAjANBgkqhkiG9w0BAQsFAAOC
AQEAD48KexrcpLUK63cNTtZ3SrM6XCEkRMPyIyc1d2bZvM8iJycE/ect34bHYfSA
N12LyaX0lTw37tzqOLgNVPZJfUQUQFQmApLniIjkS98rXaGg4GzDKase4IXGMm9C
PNXOPPZ/cAFsYv/eMJ6ANRFIUaSihjmx+oQ+vuaGpZmkNBuknmvOy73FEZ0/wbkM
i2cC8X4mskceYQCoBVCPYGdVsrAk5PoiNFfYPDSDScV0H6Bmr7G1HfQ9+mj0Ohim
yLENYrpSp/w7vSEJYRdY4MVMWIj6AB+U15ugxEPN4fTvnVU0icUXtP33My0PE6aE
0e1AZPuzY1tN6FCL+qJDUErHbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org