Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/323830343a383130343a3a2f33322d3332203d3e20323732343236.roa
File:                     323830343a383130343a3a2f33322d3332203d3e20323732343236.roa (raw, json)
Hash identifier:          o8F90wgJZAy8V7kbImlGK126nkePeNaqRCP33+7b2Mc=
Subject key identifier:   FA:28:53:A2:4D:7C:56:5A:46:72:DE:09:20:7C:5A:E6:DF:54:16:01
Certificate issuer:       /CN=9B8C523490099065B0F42551BAF70EF4EA8FB26B
Certificate serial:       3CBBAF28FF1C57A1A035F92B79C6E161A7C1D57D
Authority key identifier: 9B:8C:52:34:90:09:90:65:B0:F4:25:51:BA:F7:0E:F4:EA:8F:B2:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B8C523490099065B0F42551BAF70EF4EA8FB26B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/323830343a383130343a3a2f33322d3332203d3e20323732343236.roa
Signing time:             Thu 05 Jan 2023 19:52:51 +0000
ROA not before:           Thu 05 Jan 2023 19:47:51 +0000
ROA not after:            Thu 04 Jan 2024 19:52:51 +0000
asID:                     272426
IP address blocks:        2804:8104::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bb:af:28:ff:1c:57:a1:a0:35:f9:2b:79:c6:e1:61:a7:c1:d5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8C523490099065B0F42551BAF70EF4EA8FB26B
        Validity
            Not Before: Jan  5 19:47:51 2023 GMT
            Not After : Jan  4 19:52:51 2024 GMT
        Subject: CN=FA2853A24D7C565A4672DE09207C5AE6DF541601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:18:78:ab:bd:40:09:64:c4:50:b8:86:ba:
                    fa:f0:75:66:b3:a7:40:5f:10:91:63:ca:e6:ed:18:
                    e2:db:ec:90:1b:56:9a:17:28:de:a0:13:c3:c1:bb:
                    b7:04:2e:e7:c9:7b:99:75:24:a6:d3:24:fe:8c:08:
                    cc:c0:c2:23:0e:01:1c:5d:51:97:89:2c:66:34:82:
                    7c:c2:96:e0:d2:b4:b9:c4:00:86:3f:d7:fd:41:0c:
                    9c:79:3b:f1:d2:67:79:3e:95:55:11:e7:c9:60:c7:
                    cb:9c:25:e8:4b:50:51:52:51:8f:cf:4b:39:49:a5:
                    e9:87:d6:6e:2e:c7:73:8e:fe:44:1d:bd:1f:a5:a5:
                    0c:7a:81:a0:ba:9c:54:d7:70:61:df:be:63:53:2d:
                    7b:df:54:34:1c:55:b1:0c:32:dc:64:d9:7d:45:bb:
                    5c:11:aa:81:71:01:ac:ae:32:13:76:86:67:68:e8:
                    af:a3:29:fd:a4:cd:52:70:20:29:af:3b:13:a4:08:
                    9e:e1:02:7f:04:7d:4f:82:09:91:b5:0b:0d:fc:c6:
                    a8:5b:ea:cc:a3:b9:92:0f:2d:fa:24:91:3d:14:8d:
                    95:36:47:3c:25:71:0f:03:2e:08:2a:1c:e3:50:ec:
                    b8:ec:e8:99:a7:e0:fa:48:48:76:bb:43:aa:d1:3e:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:53:A2:4D:7C:56:5A:46:72:DE:09:20:7C:5A:E6:DF:54:16:01
            X509v3 Authority Key Identifier:
                keyid:9B:8C:52:34:90:09:90:65:B0:F4:25:51:BA:F7:0E:F4:EA:8F:B2:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/9B8C523490099065B0F42551BAF70EF4EA8FB26B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B8C523490099065B0F42551BAF70EF4EA8FB26B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/323830343a383130343a3a2f33322d3332203d3e20323732343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8104::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:27:c9:b8:c0:60:8d:4d:77:af:07:17:7e:48:3b:52:81:
         bd:75:cc:24:05:a3:22:80:f8:db:95:7b:c9:80:ea:ef:e3:f1:
         62:c7:d0:c0:e2:73:76:5d:d9:b3:3b:5b:13:5f:cf:44:c4:b6:
         83:3e:ce:1d:0a:f5:67:2b:b8:e2:13:f9:20:84:56:fd:4b:cd:
         fb:a9:e2:2c:bd:b2:fd:c5:0e:14:b3:53:ea:13:7c:20:0b:a4:
         7d:9f:ef:8c:6a:5e:87:59:02:c5:ac:72:34:7f:28:d9:9e:4f:
         34:e9:0d:3e:52:5d:c8:5a:63:ba:bf:39:db:8e:0e:1e:7a:4b:
         99:cf:1d:52:d9:4a:52:90:49:a8:23:0f:b2:ae:b2:41:41:57:
         33:c7:86:82:1b:8c:74:31:0d:99:a1:5c:6c:9a:fa:0b:55:8f:
         be:b1:cb:b2:33:a6:1a:f9:29:2e:92:68:94:e2:82:b9:af:97:
         8a:9f:d4:b5:b0:55:d1:57:ee:77:f4:de:e8:ae:3e:c0:0d:4c:
         74:cf:f5:94:b5:e7:df:5b:c6:a7:5b:4d:d9:14:ee:68:8b:a0:
         a4:13:5f:6a:d2:3b:75:ae:d3:ea:e6:11:4f:a4:5b:50:8a:7b:
         98:07:7d:4d:dc:1c:a8:88:06:25:39:35:2a:74:72:f8:61:6e:
         14:8b:0e:52
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPLuvKP8cV6GgNfkrecbhYafB1X0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4QzUyMzQ5MDA5OTA2NUIwRjQyNTUxQkFGNzBFRjRF
QThGQjI2QjAeFw0yMzAxMDUxOTQ3NTFaFw0yNDAxMDQxOTUyNTFaMDMxMTAvBgNV
BAMTKEZBMjg1M0EyNEQ3QzU2NUE0NjcyREUwOTIwN0M1QUU2REY1NDE2MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68hh4q71ACWTEULiGuvrwdWaz
p0BfEJFjyubtGOLb7JAbVpoXKN6gE8PBu7cELufJe5l1JKbTJP6MCMzAwiMOARxd
UZeJLGY0gnzCluDStLnEAIY/1/1BDJx5O/HSZ3k+lVUR58lgx8ucJehLUFFSUY/P
SzlJpemH1m4ux3OO/kQdvR+lpQx6gaC6nFTXcGHfvmNTLXvfVDQcVbEMMtxk2X1F
u1wRqoFxAayuMhN2hmdo6K+jKf2kzVJwICmvOxOkCJ7hAn8EfU+CCZG1Cw38xqhb
6syjuZIPLfokkT0UjZU2RzwlcQ8DLggqHONQ7Ljs6Jmn4PpISHa7Q6rRPgDvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+ihTok18VlpGct4JIHxa5t9UFgEwHwYDVR0j
BBgwFoAUm4xSNJAJkGWw9CVRuvcO9OqPsmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05RdDFtUFlhVkRKSEJzWVl5WTRReHdIZWhQSGZEUE54V0FIRDh4WmpT
dnQvMC85QjhDNTIzNDkwMDk5MDY1QjBGNDI1NTFCQUY3MEVGNEVBOEZCMjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlCOEM1MjM0OTAwOTkwNjVC
MEY0MjU1MUJBRjcwRUY0RUE4RkIyNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUXQxbVBZYVZESkhCc1lZeVk0UXh3SGVoUEhmRFBOeFdBSEQ4eFpqU3Z0LzAv
MzIzODMwMzQzYTM4MzEzMDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzQzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASBBDANBgkqhkiG9w0BAQsFAAOCAQEAHSAnybjA
YI1Nd68HF35IO1KBvXXMJAWjIoD425V7yYDq7+PxYsfQwOJzdl3ZsztbE1/PRMS2
gz7OHQr1Zyu44hP5IIRW/UvN+6niLL2y/cUOFLNT6hN8IAukfZ/vjGpeh1kCxaxy
NH8o2Z5PNOkNPlJdyFpjur85244OHnpLmc8dUtlKUpBJqCMPsq6yQUFXM8eGghuM
dDENmaFcbJr6C1WPvrHLsjOmGvkpLpJolOKCua+Xip/UtbBV0Vfud/Te6K4+wA1M
dM/1lLXn31vGp1tN2RTuaIugpBNfatI7da7T6uYRT6RbUIp7mAd9TdwcqIgGJTk1
KnRy+GFuFIsOUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org