Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a343030303a3a2f33342d3334203d3e20323636313831.roa
File:                     323830343a3562303a343030303a3a2f33342d3334203d3e20323636313831.roa (raw, json)
Hash identifier:          nYAkpDBjLjRTqMzswMdW/IvySfVJGKragM4XB6ub9dE=
Subject key identifier:   43:66:77:3C:58:CD:4E:6F:E2:F3:3D:83:12:03:E1:C1:FC:4D:0B:AF
Certificate issuer:       /CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
Certificate serial:       47CCBDF5364083EBAF6B36472E94EB5B1391FC65
Authority key identifier: 60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a343030303a3a2f33342d3334203d3e20323636313831.roa
Signing time:             Thu 29 Jun 2023 14:57:39 +0000
ROA not before:           Thu 29 Jun 2023 14:52:39 +0000
ROA not after:            Thu 27 Jun 2024 14:57:39 +0000
asID:                     266181
IP address blocks:        2804:5b0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:cc:bd:f5:36:40:83:eb:af:6b:36:47:2e:94:eb:5b:13:91:fc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
        Validity
            Not Before: Jun 29 14:52:39 2023 GMT
            Not After : Jun 27 14:57:39 2024 GMT
        Subject: CN=4366773C58CD4E6FE2F33D831203E1C1FC4D0BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:00:35:bc:b4:81:07:4d:9d:d2:96:14:61:
                    d1:e0:de:b1:63:fd:c2:17:53:7f:7e:0d:87:eb:e3:
                    46:be:95:43:31:12:5d:56:99:e9:ae:0a:11:a8:86:
                    7c:7d:5d:53:e1:10:04:a0:60:5b:1c:96:66:89:01:
                    99:5c:a1:fc:53:b4:0d:60:ca:d2:2a:04:a8:77:0c:
                    3f:ad:35:08:f8:5b:67:9a:7d:9c:e5:e9:58:e0:e3:
                    a9:fb:41:1a:60:a8:d7:a0:ea:2d:08:cf:05:06:75:
                    29:f2:b7:18:0e:b4:29:08:b9:ce:79:67:76:a1:d1:
                    f8:54:55:81:2f:ad:1c:e2:f0:52:d1:22:4f:eb:4a:
                    76:7e:43:24:15:4e:8d:83:93:93:16:38:09:b7:60:
                    cf:81:b5:81:03:95:3e:98:64:3e:3e:6c:a9:d8:f9:
                    77:b4:f5:ee:da:64:b2:21:86:bc:7b:f2:cb:d3:a2:
                    09:f2:0d:e8:68:e4:ef:17:bc:27:a5:fd:c6:c9:5b:
                    00:d7:84:38:41:a7:24:b0:03:9c:f7:29:4b:df:b9:
                    db:d1:ff:35:39:b3:f2:30:ca:b8:45:85:bc:be:86:
                    83:0a:99:2f:20:31:26:33:9f:b0:3e:ba:8d:91:55:
                    ee:18:ca:c1:e3:27:77:66:e3:5a:ba:12:29:77:d7:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:66:77:3C:58:CD:4E:6F:E2:F3:3D:83:12:03:E1:C1:FC:4D:0B:AF
            X509v3 Authority Key Identifier:
                keyid:60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a343030303a3a2f33342d3334203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         90:4c:76:8a:6b:dc:fa:d6:c5:96:22:11:dd:f8:fe:fc:22:1e:
         7b:d1:7b:eb:ab:f0:72:c4:4f:6b:fd:09:1b:8d:77:b6:d6:89:
         8b:b5:37:d5:59:57:21:53:62:10:a2:d5:e5:c8:91:95:ab:d5:
         f8:9c:92:71:18:bf:61:d5:5b:b2:33:e4:da:01:60:ed:5d:e2:
         45:d3:61:52:11:dd:71:7e:60:7f:74:bd:b7:81:54:ac:15:b2:
         11:90:9a:bb:0c:5d:95:cc:4f:d3:cc:d1:e7:b2:69:db:ad:a0:
         e4:65:04:23:9d:fe:ae:c5:36:d6:e7:53:37:d3:1a:5f:04:94:
         2e:f9:cb:8f:08:5e:b0:e6:26:07:73:21:81:54:e5:ce:ac:d7:
         0a:99:8c:dc:13:16:c2:ac:b2:a3:50:da:de:95:eb:ff:44:99:
         71:77:1d:e9:5a:25:05:6c:93:57:b1:60:d9:e1:e9:4a:e3:48:
         d1:a1:ca:ab:f3:dd:1a:6f:ee:40:9e:b9:91:37:4f:4f:f1:3a:
         12:84:bc:66:c8:06:80:6b:e1:4b:72:65:2a:83:31:e0:ff:e4:
         39:4c:27:51:63:ee:61:fa:2f:76:1b:8d:56:9d:33:af:e8:17:
         61:3c:ea:d8:aa:27:e0:90:d2:51:59:cc:a2:d7:85:bc:e2:d8:
         21:4d:da:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUR8y99TZAg+uvazZHLpTrWxOR/GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBFOTRBRjcyQUNERkZDMThGOTE1MTI2MUE5MkY3OEU1
Q0U4RkY2RjAeFw0yMzA2MjkxNDUyMzlaFw0yNDA2MjcxNDU3MzlaMDMxMTAvBgNV
BAMTKDQzNjY3NzNDNThDRDRFNkZFMkYzM0Q4MzEyMDNFMUMxRkM0RDBCQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcIQA1vLSBB02d0pYUYdHg3rFj
/cIXU39+DYfr40a+lUMxEl1WmemuChGohnx9XVPhEASgYFsclmaJAZlcofxTtA1g
ytIqBKh3DD+tNQj4W2eafZzl6Vjg46n7QRpgqNeg6i0IzwUGdSnytxgOtCkIuc55
Z3ah0fhUVYEvrRzi8FLRIk/rSnZ+QyQVTo2Dk5MWOAm3YM+BtYEDlT6YZD4+bKnY
+Xe09e7aZLIhhrx78svTognyDeho5O8XvCel/cbJWwDXhDhBpySwA5z3KUvfudvR
/zU5s/IwyrhFhby+hoMKmS8gMSYzn7A+uo2RVe4YysHjJ3dm41q6Eil310TPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQ2Z3PFjNTm/i8z2DEgPhwfxNC68wHwYDVR0j
BBgwFoAUYOlK9yrN/8GPkVEmGpL3jlzo/28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dRdUhLajNpVHBOdGprZDUxOXA1NnFTSHpGWEx3YlUzTjJhVHNGVU52
bTUvMC82MEU5NEFGNzJBQ0RGRkMxOEY5MTUxMjYxQTkyRjc4RTVDRThGRjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYwRTk0QUY3MkFDREZGQzE4
RjkxNTEyNjFBOTJGNzhFNUNFOEZGNkYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXUXVIS2ozaVRwTnRqa2Q1MTlwNTZxU0h6RlhMd2JVM04yYVRzRlVOdm01LzAv
MzIzODMwMzQzYTM1NjIzMDNhMzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzYzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBAWwQDANBgkqhkiG9w0BAQsFAAOC
AQEAkEx2imvc+tbFliIR3fj+/CIee9F766vwcsRPa/0JG413ttaJi7U31VlXIVNi
EKLV5ciRlavV+JyScRi/YdVbsjPk2gFg7V3iRdNhUhHdcX5gf3S9t4FUrBWyEZCa
uwxdlcxP08zR57Jp262g5GUEI53+rsU21udTN9MaXwSULvnLjwhesOYmB3MhgVTl
zqzXCpmM3BMWwqyyo1Da3pXr/0SZcXcd6VolBWyTV7Fg2eHpSuNI0aHKq/PdGm/u
QJ65kTdPT/E6EoS8ZsgGgGvhS3JlKoMx4P/kOUwnUWPuYfovdhuNVp0zr+gXYTzq
2Kon4JDSUVnMoteFvOLYIU3a3w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org