Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/323830343a323062383a313030303a3a2f33362d3336203d3e20323634353130.roa
File:                     323830343a323062383a313030303a3a2f33362d3336203d3e20323634353130.roa (raw, json)
Hash identifier:          nRIkxU2QTovNN172wteIFq6Sn2h4S9oRinVrgQlKng0=
Subject key identifier:   13:5F:40:AA:66:AE:4D:BC:E2:A2:9B:01:3B:19:ED:13:00:42:CB:6C
Certificate issuer:       /CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
Certificate serial:       2586C7AAFF216794942FF0CD7964CFF683516752
Authority key identifier: 67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/323830343a323062383a313030303a3a2f33362d3336203d3e20323634353130.roa
Signing time:             Sun 29 Oct 2023 04:56:34 +0000
ROA not before:           Sun 29 Oct 2023 04:51:34 +0000
ROA not after:            Sun 27 Oct 2024 04:56:34 +0000
asID:                     264510
IP address blocks:        2804:20b8:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:86:c7:aa:ff:21:67:94:94:2f:f0:cd:79:64:cf:f6:83:51:67:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
        Validity
            Not Before: Oct 29 04:51:34 2023 GMT
            Not After : Oct 27 04:56:34 2024 GMT
        Subject: CN=135F40AA66AE4DBCE2A29B013B19ED130042CB6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:25:d7:b4:6e:60:f5:0a:53:42:28:7f:ca:
                    f5:a7:e0:5c:84:68:9e:8c:3e:27:8a:fe:0b:16:05:
                    4d:ca:2d:b6:92:95:15:b3:0f:fd:52:78:a9:be:21:
                    df:b4:e6:cf:cf:b1:40:0a:aa:e9:ee:67:9e:d0:38:
                    5d:22:10:dd:df:69:e7:1b:ed:fa:93:2f:24:ed:ae:
                    99:f8:40:dc:7d:04:31:ad:7f:e8:aa:dd:d1:e8:9b:
                    9f:1f:49:68:28:01:ba:94:03:dd:69:98:d9:ac:96:
                    5a:d0:0d:fc:c9:45:5d:62:5b:a1:15:75:46:00:5a:
                    9e:0e:6d:9b:86:c4:c9:7f:e7:fe:6a:d0:b8:33:da:
                    6b:74:0c:a1:a4:11:9f:68:93:d7:09:36:ff:9c:ec:
                    d1:72:5e:0b:26:86:eb:91:89:4a:33:57:db:e8:35:
                    7e:62:e9:ce:f9:c4:be:28:04:5d:3e:0e:2f:b7:b4:
                    cc:6d:2b:65:c4:fd:12:66:05:0e:c9:be:aa:35:e6:
                    62:b5:19:7a:df:cf:b1:3e:7b:ce:a4:5a:83:15:3b:
                    d8:37:22:84:8f:85:bf:d3:68:ec:60:2a:9b:be:10:
                    ec:e9:40:45:ba:4b:26:1e:aa:e4:a6:95:6e:35:91:
                    20:fd:59:48:c4:1f:bb:52:e1:5d:b7:8e:fd:b0:fd:
                    3b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:40:AA:66:AE:4D:BC:E2:A2:9B:01:3B:19:ED:13:00:42:CB:6C
            X509v3 Authority Key Identifier:
                keyid:67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/67E19ECE95F8080219ADF0EBA93A317A18815FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/323830343a323062383a313030303a3a2f33362d3336203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:ec:41:fb:9b:59:f0:7e:cc:06:46:71:ec:9b:af:93:5b:
         df:88:ca:c3:f9:e2:bc:ba:ef:6a:59:d9:2f:1e:c1:13:b7:d7:
         52:4f:82:a3:4e:ad:ff:82:a4:7b:e6:7d:69:94:f1:7a:dc:4b:
         0c:01:6f:0f:3e:8c:18:f7:b7:24:13:de:db:44:ee:6f:66:18:
         be:e3:36:8c:09:8a:c3:e7:33:c3:bf:54:16:51:db:7a:4a:6e:
         8c:76:7a:3b:c3:da:0a:de:5c:35:fb:7b:77:a8:30:ae:67:93:
         5a:e8:59:cb:f8:e8:30:18:e8:84:df:43:1c:29:64:d7:32:85:
         99:b0:57:49:fa:8e:cf:fc:85:6d:93:b4:61:72:3f:82:a1:58:
         47:fc:84:a0:e0:be:f5:b9:14:0d:c1:52:f3:63:19:72:de:36:
         7c:9b:70:68:e7:15:7c:f8:07:99:55:51:0e:b2:20:42:1e:e9:
         ba:8e:2e:36:a1:60:df:53:70:02:2d:5d:96:44:dd:67:42:1e:
         4e:b7:79:f4:9a:79:91:7f:1f:9a:3e:fd:14:65:e4:d8:43:35:
         d8:6b:60:e6:41:fa:4e:fa:47:ad:84:ba:16:cd:65:9b:05:6a:
         b6:94:2d:c8:6a:90:fe:80:88:37:f2:72:aa:d6:cf:a5:a6:a0:
         58:4c:24:62
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJYbHqv8hZ5SUL/DNeWTP9oNRZ1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFMTlFQ0U5NUY4MDgwMjE5QURGMEVCQTkzQTMxN0Ex
ODgxNUZCRjAeFw0yMzEwMjkwNDUxMzRaFw0yNDEwMjcwNDU2MzRaMDMxMTAvBgNV
BAMTKDEzNUY0MEFBNjZBRTREQkNFMkEyOUIwMTNCMTlFRDEzMDA0MkNCNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUCXXtG5g9QpTQih/yvWn4FyE
aJ6MPieK/gsWBU3KLbaSlRWzD/1SeKm+Id+05s/PsUAKqunuZ57QOF0iEN3faecb
7fqTLyTtrpn4QNx9BDGtf+iq3dHom58fSWgoAbqUA91pmNmsllrQDfzJRV1iW6EV
dUYAWp4ObZuGxMl/5/5q0Lgz2mt0DKGkEZ9ok9cJNv+c7NFyXgsmhuuRiUozV9vo
NX5i6c75xL4oBF0+Di+3tMxtK2XE/RJmBQ7Jvqo15mK1GXrfz7E+e86kWoMVO9g3
IoSPhb/TaOxgKpu+EOzpQEW6SyYequSmlW41kSD9WUjEH7tS4V23jv2w/TuZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUE19AqmauTbziopsBOxntEwBCy2wwHwYDVR0j
BBgwFoAUZ+GezpX4CAIZrfDrqToxehiBX78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dpek0xNTNCYTlrdThjazFHNHJBV2JKNjFuWFVVMXlxM3cxVmdQd3lY
UEEvMS82N0UxOUVDRTk1RjgwODAyMTlBREYwRUJBOTNBMzE3QTE4ODE1RkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3RTE5RUNFOTVGODA4MDIx
OUFERjBFQkE5M0EzMTdBMTg4MTVGQkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXaXpNMTUzQmE5a3U4Y2sxRzRyQVdiSjYxblhVVTF5cTN3MVZnUHd5WFBBLzEv
MzIzODMwMzQzYTMyMzA2MjM4M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM1MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEILgQMA0GCSqGSIb3DQEBCwUA
A4IBAQBF4+xB+5tZ8H7MBkZx7Juvk1vfiMrD+eK8uu9qWdkvHsETt9dST4KjTq3/
gqR75n1plPF63EsMAW8PPowY97ckE97bRO5vZhi+4zaMCYrD5zPDv1QWUdt6Sm6M
dno7w9oK3lw1+3t3qDCuZ5Na6FnL+OgwGOiE30McKWTXMoWZsFdJ+o7P/IVtk7Rh
cj+CoVhH/ISg4L71uRQNwVLzYxly3jZ8m3Bo5xV8+AeZVVEOsiBCHum6ji42oWDf
U3ACLV2WRN1nQh5Ot3n0mnmRfx+aPv0UZeTYQzXYa2DmQfpO+kethLoWzWWbBWq2
lC3IapD+gIg38nKq1s+lpqBYTCRi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org