Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a313030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a313030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          mq2D1p52FwCvzin4DiNtGKsfBlrycDsTuD5lPEOjL9A=
Subject key identifier:   52:46:A7:E5:4D:BE:FF:CB:B4:A1:29:D6:87:55:DC:C5:B5:3F:33:8D
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       5B6628932475384FC095D44DCA2F563D94C5C98A
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a313030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:23 +0000
ROA not before:           Wed 03 Apr 2024 13:48:23 +0000
ROA not after:            Wed 02 Apr 2025 13:53:23 +0000
asID:                     270266
IP address blocks:        2804:6960:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:66:28:93:24:75:38:4f:c0:95:d4:4d:ca:2f:56:3d:94:c5:c9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:23 2024 GMT
            Not After : Apr  2 13:53:23 2025 GMT
        Subject: CN=5246A7E54DBEFFCBB4A129D68755DCC5B53F338D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:c0:b4:ca:63:34:b3:ad:6b:1e:4d:02:fd:
                    b0:ac:c9:db:04:06:a7:38:17:72:05:99:4c:0e:02:
                    5d:69:00:3f:97:39:91:f8:60:1a:36:a7:1b:b5:5c:
                    c8:5f:54:22:77:ef:80:c2:c5:95:c5:62:68:4c:d5:
                    f3:98:68:67:d2:5d:e6:19:d6:94:54:a1:fc:ad:9f:
                    3d:c6:6b:3b:47:e5:f3:91:40:96:bc:f0:fe:4e:35:
                    0f:43:2d:99:c0:d8:55:2d:bf:1b:20:83:c9:51:12:
                    c6:98:2d:64:96:94:ef:9b:cf:40:ec:74:d3:da:33:
                    b7:e5:87:6e:0c:62:b6:f7:6c:11:d6:10:b7:71:cf:
                    5f:6c:3d:97:19:8c:01:cf:f3:2e:32:a7:9b:80:76:
                    89:31:15:1e:26:a3:2e:6d:77:44:7a:47:dc:c1:e8:
                    93:68:ed:f2:10:44:1a:37:b5:0e:bf:b4:ce:d7:56:
                    a3:ad:05:47:80:56:f1:2c:64:08:fe:5b:ce:b0:96:
                    b9:4a:4e:f2:46:93:e0:e2:ff:28:be:1d:f5:54:01:
                    c9:95:38:25:62:b1:4e:46:ba:fe:75:58:40:a6:4c:
                    d1:38:30:e0:b5:fb:0a:e0:fe:1d:12:76:f2:83:5d:
                    a5:5e:7c:28:63:c9:94:96:a2:be:0b:5e:bb:ae:af:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:A7:E5:4D:BE:FF:CB:B4:A1:29:D6:87:55:DC:C5:B5:3F:33:8D
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a313030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:dc:c6:de:2f:ea:2c:ce:f9:03:ba:e1:61:82:21:34:4a:
         86:62:27:e6:56:c7:43:29:20:fb:11:29:ac:0e:6c:88:ba:84:
         ff:37:4c:b5:88:20:58:df:e8:ba:77:85:90:bc:92:14:94:ed:
         9c:b3:c6:c1:8a:63:3b:bc:f0:4d:c4:1b:18:9c:90:1e:23:6a:
         3a:96:ea:20:1b:b4:c2:7a:ff:56:7d:fe:47:a2:08:98:b9:8b:
         ee:65:3f:13:4a:cf:1c:e1:39:4e:1f:35:a9:19:9d:de:18:a3:
         c3:a2:01:7b:d1:ab:4c:b5:bd:a3:43:71:b5:82:4c:11:12:24:
         ff:95:7c:31:d6:0a:d9:6a:06:c2:1a:95:93:c4:61:fb:6e:12:
         1c:ba:17:e9:42:99:2e:c8:a8:1e:8d:0f:28:05:40:f6:0e:b4:
         3f:cb:24:c3:f7:05:98:23:e8:3b:62:2a:5f:8b:dc:f1:92:3c:
         55:bc:90:5a:3e:50:4f:29:a6:b5:9d:09:f4:1a:c7:1e:38:cf:
         a1:10:92:62:b9:47:e3:fa:2b:86:e1:2c:c5:bc:61:bb:59:7d:
         57:00:62:d5:e9:98:5f:5d:e9:9f:b0:3f:d0:db:ff:bb:9c:33:
         91:05:db:d1:ea:1f:13:aa:5c:ea:c9:ca:d2:c5:2c:1f:ab:e8:
         7c:19:08:3e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUW2YokyR1OE/AldRNyi9WPZTFyYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg0NzBDMTBBQzY0NEJFRjRERjI2NjkyNEM0RTA4MzJD
OEZCQThBMjAeFw0yNDA0MDMxMzQ4MjNaFw0yNTA0MDIxMzUzMjNaMDMxMTAvBgNV
BAMTKDUyNDZBN0U1NERCRUZGQ0JCNEExMjlENjg3NTVEQ0M1QjUzRjMzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdcC0ymM0s61rHk0C/bCsydsE
Bqc4F3IFmUwOAl1pAD+XOZH4YBo2pxu1XMhfVCJ374DCxZXFYmhM1fOYaGfSXeYZ
1pRUofytnz3GaztH5fORQJa88P5ONQ9DLZnA2FUtvxsgg8lREsaYLWSWlO+bz0Ds
dNPaM7flh24MYrb3bBHWELdxz19sPZcZjAHP8y4yp5uAdokxFR4moy5td0R6R9zB
6JNo7fIQRBo3tQ6/tM7XVqOtBUeAVvEsZAj+W86wlrlKTvJGk+Di/yi+HfVUAcmV
OCVisU5Guv51WECmTNE4MOC1+wrg/h0SdvKDXaVefChjyZSWor4LXruur3P5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUkan5U2+/8u0oSnWh1XcxbU/M40wHwYDVR0j
BBgwFoAUuEcMEKxkS+9N8maSTE4IMsj7qKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hydVFhSHZMVE1nV3FZTmJFNk16SnVDenI0ZEdiVmNVUjRRS3lQZldz
cHkvMC9CODQ3MEMxMEFDNjQ0QkVGNERGMjY2OTI0QzRFMDgzMkM4RkJBOEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4NDcwQzEwQUM2NDRCRUY0
REYyNjY5MjRDNEUwODMyQzhGQkE4QTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYcnVRYUh2TFRNZ1dxWU5iRTZNekp1Q3pyNGRHYlZjVVI0UUt5UGZXc3B5LzAv
MzIzODMwMzQzYTM2MzkzNjMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEaWAQMA0GCSqGSIb3DQEBCwUA
A4IBAQB+ddzG3i/qLM75A7rhYYIhNEqGYifmVsdDKSD7ESmsDmyIuoT/N0y1iCBY
3+i6d4WQvJIUlO2cs8bBimM7vPBNxBsYnJAeI2o6luogG7TCev9Wff5HogiYuYvu
ZT8TSs8c4TlOHzWpGZ3eGKPDogF70atMtb2jQ3G1gkwREiT/lXwx1grZagbCGpWT
xGH7bhIcuhfpQpkuyKgejQ8oBUD2DrQ/yyTD9wWYI+g7Yipfi9zxkjxVvJBaPlBP
Kaa1nQn0GsceOM+hEJJiuUfj+iuG4SzFvGG7WX1XAGLV6ZhfXemfsD/Q2/+7nDOR
BdvR6h8TqlzqycrSxSwfq+h8GQg+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org