Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa
File:                     323830343a356466303a3a2f33322d3332203d3e20323639303032.roa (raw, json)
Hash identifier:          I89snUY7dXP/PQJv/2vqqm0Myjudomgworr87m08iXc=
Subject key identifier:   3F:21:FC:60:26:63:90:F0:F0:CD:86:01:90:60:93:BA:8B:6A:C9:7A
Certificate issuer:       /CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
Certificate serial:       3EB7521C71788A58F940E6448FF185D8B376E84D
Authority key identifier: F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa
Signing time:             Thu 15 Feb 2024 21:51:41 +0000
ROA not before:           Thu 15 Feb 2024 21:46:41 +0000
ROA not after:            Thu 13 Feb 2025 21:51:41 +0000
asID:                     269002
IP address blocks:        2804:5df0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b7:52:1c:71:78:8a:58:f9:40:e6:44:8f:f1:85:d8:b3:76:e8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
        Validity
            Not Before: Feb 15 21:46:41 2024 GMT
            Not After : Feb 13 21:51:41 2025 GMT
        Subject: CN=3F21FC60266390F0F0CD8601906093BA8B6AC97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:04:fa:84:3a:20:76:69:1a:d0:49:72:ad:
                    00:57:d5:cb:21:09:73:65:2f:f8:c7:d7:ce:07:bd:
                    5c:e5:79:71:23:e0:87:0c:ce:94:85:92:b0:25:61:
                    22:37:fe:fc:29:45:8e:6d:bc:2c:6b:d5:cb:70:c2:
                    42:cd:c6:f2:8f:bc:db:95:b8:09:4f:98:a5:66:d3:
                    84:ce:d6:27:ca:e9:25:84:e6:33:50:c2:67:ee:63:
                    65:24:1c:0a:24:a5:2d:b0:f1:0f:c5:84:4e:62:ee:
                    ab:dc:51:61:fe:99:48:ea:dd:ba:e5:5e:f5:a2:45:
                    0e:42:1a:49:97:75:c6:48:a9:5d:2b:c7:58:a1:2a:
                    ce:c8:a6:f2:e4:c8:c1:20:e4:45:9b:7b:b0:26:c1:
                    d0:4a:f4:f3:3f:b3:2a:87:78:55:50:37:92:ff:35:
                    c4:60:01:f9:14:ec:92:c1:89:8d:ed:76:f0:1e:48:
                    bd:f7:5d:01:77:43:0b:0c:bd:13:ed:41:04:48:3e:
                    2f:06:2f:3e:f2:da:34:05:98:83:97:03:b9:48:33:
                    1a:04:af:ff:66:10:c5:40:eb:89:60:3a:aa:5d:73:
                    9f:2e:c9:43:fc:15:de:89:33:5c:64:1a:b7:58:6b:
                    42:66:84:29:80:d2:a7:62:db:1f:85:88:d6:94:4f:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:FC:60:26:63:90:F0:F0:CD:86:01:90:60:93:BA:8B:6A:C9:7A
            X509v3 Authority Key Identifier:
                keyid:F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:ab:89:18:68:de:ff:1f:6a:be:2a:2a:4c:96:37:d9:71:
         08:11:c8:d7:f9:89:a2:3c:64:0c:31:f4:21:1d:20:dd:92:d7:
         b9:39:2b:96:5a:62:7c:0a:56:df:a7:7a:f3:f9:2a:e4:05:c7:
         4d:66:81:95:b4:0b:74:49:c2:df:2c:59:13:6e:a1:f4:36:b4:
         08:04:bc:1c:f8:af:28:ab:eb:fb:d4:12:84:df:17:d7:c6:49:
         85:3a:be:5c:4f:ac:c9:4c:67:80:0d:b6:d6:30:ff:71:50:af:
         f6:e3:d5:2d:cd:59:99:7e:cc:35:c2:67:83:f0:37:d7:67:28:
         e2:fe:12:b2:73:de:75:a6:60:fa:b7:2b:26:2d:41:5b:24:14:
         55:f4:37:0b:79:32:c5:e4:7e:04:d8:57:99:72:03:ff:9e:bd:
         5d:ff:19:72:4d:be:9c:5b:aa:6a:7b:44:be:e7:c5:b4:d5:c7:
         ca:9a:5d:de:7a:00:51:2a:8a:1a:e4:ea:15:54:19:e2:21:cf:
         8a:ac:40:9f:d3:45:1e:84:4c:d1:19:eb:63:0d:2c:04:d2:21:
         40:87:cb:fc:50:61:66:68:47:dd:ff:64:37:f4:aa:5d:10:75:
         1e:6a:a2:6b:30:b5:23:3e:eb:68:9e:77:d5:53:50:a1:f3:60:
         1c:8d:e8:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPrdSHHF4ilj5QOZEj/GF2LN26E0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OEE4M0Q3OEREMTJBM0NEOTVFNTIxNzYwRjk3OEUx
RjJCODgxOTAeFw0yNDAyMTUyMTQ2NDFaFw0yNTAyMTMyMTUxNDFaMDMxMTAvBgNV
BAMTKDNGMjFGQzYwMjY2MzkwRjBGMENEODYwMTkwNjA5M0JBOEI2QUM5N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIAT6hDogdmka0ElyrQBX1csh
CXNlL/jH184HvVzleXEj4IcMzpSFkrAlYSI3/vwpRY5tvCxr1ctwwkLNxvKPvNuV
uAlPmKVm04TO1ifK6SWE5jNQwmfuY2UkHAokpS2w8Q/FhE5i7qvcUWH+mUjq3brl
XvWiRQ5CGkmXdcZIqV0rx1ihKs7IpvLkyMEg5EWbe7AmwdBK9PM/syqHeFVQN5L/
NcRgAfkU7JLBiY3tdvAeSL33XQF3QwsMvRPtQQRIPi8GLz7y2jQFmIOXA7lIMxoE
r/9mEMVA64lgOqpdc58uyUP8Fd6JM1xkGrdYa0JmhCmA0qdi2x+FiNaUTzjfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPyH8YCZjkPDwzYYBkGCTuotqyXowHwYDVR0j
BBgwFoAU85ioPXjdEqPNleUhdg+Xjh8riBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2tBTHRDV2RaVTczVUhkQnlDcUwxQ21BblFrYnM2UGJxZDlWRGgyeHVO
bU0vMC9GMzk4QTgzRDc4REQxMkEzQ0Q5NUU1MjE3NjBGOTc4RTFGMkI4ODE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzOThBODNENzhERDEyQTND
RDk1RTUyMTc2MEY5NzhFMUYyQjg4MTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdrQUx0Q1dkWlU3M1VIZEJ5Q3FMMUNtQW5Ra2JzNlBicWQ5VkRoMnh1Tm1NLzAv
MzIzODMwMzQzYTM1NjQ2NjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzAzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARd8DANBgkqhkiG9w0BAQsFAAOCAQEAazqriRho
3v8far4qKkyWN9lxCBHI1/mJojxkDDH0IR0g3ZLXuTkrllpifApW36d68/kq5AXH
TWaBlbQLdEnC3yxZE26h9Da0CAS8HPivKKvr+9QShN8X18ZJhTq+XE+syUxngA22
1jD/cVCv9uPVLc1ZmX7MNcJng/A312co4v4SsnPedaZg+rcrJi1BWyQUVfQ3C3ky
xeR+BNhXmXID/569Xf8Zck2+nFuqantEvufFtNXHyppd3noAUSqKGuTqFVQZ4iHP
iqxAn9NFHoRM0RnrYw0sBNIhQIfL/FBhZmhH3f9kN/SqXRB1HmqiazC1Iz7raJ53
1VNQofNgHI3osg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org