Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa
File:                     323830343a326362383a3a2f33322d313238203d3e20323635323339.roa (raw, json)
Hash identifier:          L2xe2aPQomRl4FYAi38HVZk+Heojhw31yEXR0bIrWxE=
Subject key identifier:   A0:33:44:6D:26:90:22:35:C0:2F:8B:AD:F2:52:A2:D9:23:01:A2:56
Certificate issuer:       /CN=F555F07ECB5BB29A57C2CD48AB80591E9CAFE297
Certificate serial:       5E00CFA3BC32360845852665F6499B2FC15E69F3
Authority key identifier: F5:55:F0:7E:CB:5B:B2:9A:57:C2:CD:48:AB:80:59:1E:9C:AF:E2:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa
Signing time:             Thu 04 Apr 2024 17:40:02 +0000
ROA not before:           Thu 04 Apr 2024 17:35:02 +0000
ROA not after:            Thu 03 Apr 2025 17:40:02 +0000
asID:                     265239
IP address blocks:        2804:2cb8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:00:cf:a3:bc:32:36:08:45:85:26:65:f6:49:9b:2f:c1:5e:69:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F555F07ECB5BB29A57C2CD48AB80591E9CAFE297
        Validity
            Not Before: Apr  4 17:35:02 2024 GMT
            Not After : Apr  3 17:40:02 2025 GMT
        Subject: CN=A033446D26902235C02F8BADF252A2D92301A256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:e0:97:cf:4d:1c:e6:4e:84:b4:2b:6e:65:
                    02:5a:6c:15:85:1b:b1:21:89:04:91:04:2f:b1:df:
                    2b:dc:55:8f:3f:ba:63:94:04:ee:57:85:88:f3:e3:
                    51:28:7a:09:ab:4a:a6:a8:71:80:7e:7f:0d:0a:ac:
                    38:5e:4d:48:50:3f:11:75:ed:a5:e6:7b:1b:df:55:
                    bd:86:40:02:e6:b3:94:c5:48:05:aa:88:8d:7e:dc:
                    b9:cd:24:6d:8d:02:21:5e:c6:12:b2:d6:27:a6:83:
                    42:00:66:f1:8e:6a:80:c9:6e:d4:f8:29:b6:d6:3e:
                    9e:44:4a:e6:20:a0:24:6f:6b:0f:08:5c:1e:7f:78:
                    59:16:19:fe:b0:1e:b2:e2:f4:dc:cf:71:e8:7b:1b:
                    2f:6e:4f:0a:20:d8:75:25:3f:ea:e7:20:6f:95:cd:
                    e8:c6:46:81:c7:7c:ab:21:5f:40:54:c5:a4:32:81:
                    cb:63:7d:8a:ab:33:13:22:6a:7e:6b:63:1a:a3:06:
                    f9:4b:f2:cf:fa:68:b3:cf:8f:f9:2e:38:4e:fe:8c:
                    8c:9f:49:cc:78:99:03:d5:eb:48:38:55:b1:fa:50:
                    72:8d:5a:4b:64:cd:47:db:9f:31:08:2f:76:52:e4:
                    ea:8f:db:d2:0d:ca:8c:b9:1d:38:23:28:ba:54:2e:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:33:44:6D:26:90:22:35:C0:2F:8B:AD:F2:52:A2:D9:23:01:A2:56
            X509v3 Authority Key Identifier:
                keyid:F5:55:F0:7E:CB:5B:B2:9A:57:C2:CD:48:AB:80:59:1E:9C:AF:E2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:3e:97:e8:92:36:29:e3:9c:d0:75:a5:3f:14:18:f0:a9:86:
         84:63:5d:45:ba:ca:55:ab:fd:24:e5:51:2d:98:3c:dd:de:af:
         1d:a1:b8:bd:eb:77:f0:3f:78:94:d3:b0:85:b1:c0:e8:f9:7d:
         bc:9f:73:78:38:cb:23:38:e2:dd:f6:59:5f:36:47:f0:25:76:
         5e:d2:ce:f4:d1:3f:05:68:71:31:be:d6:c7:a2:96:7f:db:85:
         ff:31:61:e0:2a:f7:e4:09:67:25:07:13:80:9f:f3:87:4a:4c:
         44:af:79:21:21:66:9d:fd:d6:e1:c5:24:51:b2:e3:be:8a:f9:
         9f:ec:67:89:22:eb:6a:04:43:c9:5d:2e:f3:2f:45:b4:5c:38:
         9d:6d:f6:e1:52:68:e1:3f:f7:bf:ec:ae:aa:27:14:de:81:4d:
         0f:6b:27:a8:db:a9:9b:c8:94:38:cd:b6:dc:f8:09:3b:94:84:
         d9:4f:01:c4:2d:a9:8b:39:b5:19:b9:45:2d:1f:5a:b3:35:3a:
         1c:01:01:a1:a8:38:45:9b:c7:e6:65:23:11:bc:46:81:ea:cf:
         90:89:45:a2:1a:5f:e2:78:f0:a8:05:0e:b2:34:0e:fa:ed:6e:
         01:c7:6c:10:e3:f8:d4:65:b1:64:92:87:9a:56:c8:22:38:23:
         93:9e:9a:74
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUXgDPo7wyNghFhSZl9kmbL8FeafMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU1NUYwN0VDQjVCQjI5QTU3QzJDRDQ4QUI4MDU5MUU5
Q0FGRTI5NzAeFw0yNDA0MDQxNzM1MDJaFw0yNTA0MDMxNzQwMDJaMDMxMTAvBgNV
BAMTKEEwMzM0NDZEMjY5MDIyMzVDMDJGOEJBREYyNTJBMkQ5MjMwMUEyNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOuCXz00c5k6EtCtuZQJabBWF
G7EhiQSRBC+x3yvcVY8/umOUBO5XhYjz41EoegmrSqaocYB+fw0KrDheTUhQPxF1
7aXmexvfVb2GQALms5TFSAWqiI1+3LnNJG2NAiFexhKy1iemg0IAZvGOaoDJbtT4
KbbWPp5ESuYgoCRvaw8IXB5/eFkWGf6wHrLi9NzPceh7Gy9uTwog2HUlP+rnIG+V
zejGRoHHfKshX0BUxaQygctjfYqrMxMian5rYxqjBvlL8s/6aLPPj/kuOE7+jIyf
Scx4mQPV60g4VbH6UHKNWktkzUfbnzEIL3ZS5OqP29INyoy5HTgjKLpULpQzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUoDNEbSaQIjXAL4ut8lKi2SMBolYwHwYDVR0j
BBgwFoAU9VXwfstbsppXws1Iq4BZHpyv4pcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZLTEFmY05GNkdCazVxRUVzUGUzRENEb1BIdXNOb2k0VTY4NDJkQ2k0
d0MvMS9GNTU1RjA3RUNCNUJCMjlBNTdDMkNENDhBQjgwNTkxRTlDQUZFMjk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1NTVGMDdFQ0I1QkIyOUE1
N0MyQ0Q0OEFCODA1OTFFOUNBRkUyOTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWS0xBZmNORjZHQms1cUVFc1BlM0RDRG9QSHVzTm9pNFU2ODQyZENpNHdDLzEv
MzIzODMwMzQzYTMyNjM2MjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCy4MA0GCSqGSIb3DQEBCwUAA4IBAQAWPpfo
kjYp45zQdaU/FBjwqYaEY11FuspVq/0k5VEtmDzd3q8dobi963fwP3iU07CFscDo
+X28n3N4OMsjOOLd9llfNkfwJXZe0s700T8FaHExvtbHopZ/24X/MWHgKvfkCWcl
BxOAn/OHSkxEr3khIWad/dbhxSRRsuO+ivmf7GeJIutqBEPJXS7zL0W0XDidbfbh
UmjhP/e/7K6qJxTegU0Payeo26mbyJQ4zbbc+Ak7lITZTwHELamLObUZuUUtH1qz
NTocAQGhqDhFm8fmZSMRvEaB6s+QiUWiGl/iePCoBQ6yNA767W4Bx2wQ4/jUZbFk
koeaVsgiOCOTnpp0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org