Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a383030303a3a2f33342d3334203d3e20323633363532.roa
File:                     323830343a313064633a383030303a3a2f33342d3334203d3e20323633363532.roa (raw, json)
Hash identifier:          iK87c9Yvk9L/J1CSvRzVrbVcWHp4QV3jIXQqzVo8Z4M=
Subject key identifier:   A9:74:B8:BB:E2:BF:26:EA:F1:A9:A8:87:D1:59:6F:AC:90:07:0B:87
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       6F4A592BA74C24010EDCA7962AD867BDCD31F5F3
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a383030303a3a2f33342d3334203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:57 +0000
ROA not before:           Thu 16 Nov 2023 15:23:57 +0000
ROA not after:            Thu 14 Nov 2024 15:28:57 +0000
asID:                     263652
IP address blocks:        2804:10dc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4a:59:2b:a7:4c:24:01:0e:dc:a7:96:2a:d8:67:bd:cd:31:f5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:57 2023 GMT
            Not After : Nov 14 15:28:57 2024 GMT
        Subject: CN=A974B8BBE2BF26EAF1A9A887D1596FAC90070B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:25:b7:64:5e:49:5d:b5:23:2f:bc:d7:03:
                    8a:30:ad:cc:1a:ea:df:5c:59:ee:a6:89:9a:78:0f:
                    b5:a0:a7:68:f5:4a:94:86:b6:44:c5:b6:d7:d3:9c:
                    35:3c:e6:3f:8c:8e:17:31:31:c4:ef:41:74:0f:ae:
                    5e:68:c9:5f:e6:94:ed:47:e8:17:cd:35:a7:1a:5a:
                    5b:3f:55:2b:7a:ca:b3:57:f6:8b:1a:38:08:71:cf:
                    cf:70:b0:3a:29:85:bb:24:cf:3c:3b:05:62:2f:14:
                    ea:da:91:1a:5c:84:b4:e0:cc:80:71:79:2f:11:2f:
                    8b:0b:31:2d:e3:d8:cc:86:59:91:75:de:8a:a6:65:
                    24:8a:d7:75:36:7e:46:c1:ff:56:2a:9a:a4:90:ac:
                    54:fe:98:a3:16:bc:fe:41:40:6e:81:0a:2e:ad:ec:
                    32:78:a4:76:f1:dd:0a:bd:cd:65:36:b4:89:b1:0e:
                    a8:dc:7e:71:48:e4:34:d7:90:94:29:ad:d3:6a:14:
                    bd:c8:c3:c6:47:4c:d7:03:6a:d4:6a:86:af:62:f6:
                    7f:df:8f:07:61:6e:8b:80:7b:40:1e:07:a5:cf:72:
                    88:a4:13:a3:c5:47:fe:5f:0c:35:d4:7b:0c:a2:92:
                    40:06:c0:2d:b9:b4:5b:4c:a7:c3:27:01:f6:37:cc:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:B8:BB:E2:BF:26:EA:F1:A9:A8:87:D1:59:6F:AC:90:07:0B:87
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a383030303a3a2f33342d3334203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:8f:fb:13:bc:67:dc:62:f9:8d:9d:9c:f0:e5:66:84:e6:b5:
         42:b6:7b:0f:db:54:31:77:12:09:90:00:29:0f:f5:34:3b:02:
         9f:e9:b7:5a:37:37:35:ed:a6:07:7c:19:24:f2:98:86:55:b9:
         50:c6:4a:01:bb:2f:d9:10:3a:78:da:3d:bb:35:b0:96:62:ea:
         46:db:38:8a:d7:28:7e:8b:ca:93:e9:06:02:e6:bf:7d:df:52:
         ef:4e:2c:da:56:51:f5:01:65:f7:0e:26:31:d9:97:e8:52:1d:
         16:ff:65:9d:d4:92:ac:6e:8c:72:84:19:5a:39:11:09:c8:1f:
         6e:09:6b:4d:e1:2d:09:4f:9b:84:02:f1:b6:29:8f:95:b0:3e:
         0b:e7:49:9f:6c:12:c8:1f:2f:33:96:fa:42:2f:51:e6:4d:eb:
         c4:5b:91:c0:f5:2b:3e:63:85:b7:68:05:91:e7:1e:bc:ed:98:
         45:76:70:7e:a4:f6:93:cd:0b:be:21:42:aa:33:08:c7:70:d7:
         7e:c8:ce:1e:0c:79:74:72:67:3f:62:85:8b:c6:45:15:5c:34:
         4e:ab:35:1d:4e:ba:8e:89:c1:63:d6:64:e8:15:31:42:bd:e4:
         b4:d9:71:4f:0a:69:65:e9:21:b8:b3:33:1a:15:5a:13:e8:d0:
         2b:26:2c:fd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUb0pZK6dMJAEO3KeWKthnvc0x9fMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA3MkZCMzhCRTBGRjQwRUMxNzI5NUIxNjM1MkM0MTg0
MTA2RUZBODAeFw0yMzExMTYxNTIzNTdaFw0yNDExMTQxNTI4NTdaMDMxMTAvBgNV
BAMTKEE5NzRCOEJCRTJCRjI2RUFGMUE5QTg4N0QxNTk2RkFDOTAwNzBCODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgyW3ZF5JXbUjL7zXA4owrcwa
6t9cWe6miZp4D7Wgp2j1SpSGtkTFttfTnDU85j+MjhcxMcTvQXQPrl5oyV/mlO1H
6BfNNacaWls/VSt6yrNX9osaOAhxz89wsDophbskzzw7BWIvFOrakRpchLTgzIBx
eS8RL4sLMS3j2MyGWZF13oqmZSSK13U2fkbB/1YqmqSQrFT+mKMWvP5BQG6BCi6t
7DJ4pHbx3Qq9zWU2tImxDqjcfnFI5DTXkJQprdNqFL3Iw8ZHTNcDatRqhq9i9n/f
jwdhbouAe0AeB6XPcoikE6PFR/5fDDXUewyikkAGwC25tFtMp8MnAfY3zJlHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqXS4u+K/JurxqaiH0VlvrJAHC4cwHwYDVR0j
BBgwFoAUEHL7OL4P9A7BcpWxY1LEGEEG76gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1kzdWM1Q0xrOUhGc00yRFN3ZHRRb2hWQ1lCd1NBdDd3YlE0TVFoZWhL
OW8vMS8xMDcyRkIzOEJFMEZGNDBFQzE3Mjk1QjE2MzUyQzQxODQxMDZFRkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNzJGQjM4QkUwRkY0MEVD
MTcyOTVCMTYzNTJDNDE4NDEwNkVGQTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZM3VjNUNMazlIRnNNMkRTd2R0UW9oVkNZQndTQXQ3d2JRNE1RaGVoSzlvLzEv
MzIzODMwMzQzYTMxMzA2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEENyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBaj/sTvGfcYvmNnZzw5WaE5rVCtnsP21QxdxIJkAApD/U0OwKf6bdaNzc1
7aYHfBkk8piGVblQxkoBuy/ZEDp42j27NbCWYupG2ziK1yh+i8qT6QYC5r9931Lv
TizaVlH1AWX3DiYx2ZfoUh0W/2Wd1JKsboxyhBlaOREJyB9uCWtN4S0JT5uEAvG2
KY+VsD4L50mfbBLIHy8zlvpCL1HmTevEW5HA9Ss+Y4W3aAWR5x687ZhFdnB+pPaT
zQu+IUKqMwjHcNd+yM4eDHl0cmc/YoWLxkUVXDROqzUdTrqOicFj1mToFTFCveS0
2XFPCmll6SG4szMaFVoT6NArJiz9
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org