Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313330303a3a2f34302d3434203d3e20323634303235.roa
File:                     323830343a323939633a313330303a3a2f34302d3434203d3e20323634303235.roa (raw, json)
Hash identifier:          sYxrCggBOvAV19FSHtbjHzxWqWqC51o9e5SVz9WWpyM=
Subject key identifier:   FE:34:F8:DB:41:4E:7F:C2:CF:3E:03:0A:35:A8:85:84:1C:C9:3A:6E
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       04254B227B3A1FFEFCDDDC8B16036A0B726D8322
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313330303a3a2f34302d3434203d3e20323634303235.roa
Signing time:             Mon 11 Mar 2024 12:30:04 +0000
ROA not before:           Mon 11 Mar 2024 12:25:04 +0000
ROA not after:            Mon 10 Mar 2025 12:30:04 +0000
asID:                     264025
IP address blocks:        2804:299c:1300::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:25:4b:22:7b:3a:1f:fe:fc:dd:dc:8b:16:03:6a:0b:72:6d:83:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar 11 12:25:04 2024 GMT
            Not After : Mar 10 12:30:04 2025 GMT
        Subject: CN=FE34F8DB414E7FC2CF3E030A35A885841CC93A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:78:f4:6c:6b:bf:0f:b4:a2:cc:34:1a:e9:
                    04:2e:96:c1:68:6d:d7:5c:0a:3f:4b:02:98:13:1a:
                    62:50:97:f9:da:38:6c:33:48:ae:9a:91:76:f9:2d:
                    b1:8a:ae:cd:2d:14:08:ee:6f:10:f2:ef:ce:f2:b7:
                    a1:e3:ba:d8:98:3d:05:9d:c9:b1:f0:37:4b:d3:97:
                    6a:43:04:8f:a2:6c:a9:1e:a7:67:08:ed:51:f9:b5:
                    c5:56:5a:11:10:65:97:0e:0a:81:65:46:b9:ad:50:
                    ee:fc:52:8f:e8:e4:2f:d8:50:5f:60:eb:24:78:3e:
                    f6:f2:b8:78:9d:35:36:70:1c:34:33:6a:19:c9:9a:
                    f4:7b:00:bd:55:97:68:e6:cb:3c:ea:41:c5:b1:c4:
                    c6:db:3f:fc:dc:9f:ee:7c:67:bd:18:d6:4a:87:d8:
                    05:51:4c:5c:ef:8c:1b:12:69:7c:9c:35:fb:6f:c9:
                    a6:5d:2e:da:4d:38:05:d5:3c:89:2e:93:53:5a:32:
                    86:28:a4:15:4c:32:97:6c:9f:f1:a9:b9:4a:02:14:
                    40:23:5c:56:f6:1c:4e:fa:bc:52:d8:95:45:b7:a2:
                    37:6a:f7:45:da:85:d8:12:65:1a:30:ac:03:ff:8a:
                    24:e5:25:bc:56:1c:b9:09:c1:6f:aa:52:86:ea:38:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:34:F8:DB:41:4E:7F:C2:CF:3E:03:0A:35:A8:85:84:1C:C9:3A:6E
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313330303a3a2f34302d3434203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:66:50:a4:2b:07:3c:27:a4:b1:d0:f2:c8:b1:ec:2b:37:dd:
         f4:12:f3:5c:0c:f5:c5:a1:82:2f:cc:0d:0f:70:04:45:81:a0:
         7a:be:aa:e8:20:a6:3a:34:8e:f2:ae:1e:7f:a7:23:c6:60:99:
         24:65:f6:3d:1f:eb:dd:28:5e:a4:8d:fe:09:e8:97:ec:3a:9e:
         77:bf:17:01:04:ef:ea:bb:cf:ec:be:cc:5a:b5:57:f0:98:7b:
         e0:48:fd:97:0b:44:fa:bb:7a:e5:f1:83:46:f5:97:ab:98:81:
         3c:73:76:cd:2f:9d:eb:be:d1:75:a8:c4:ab:7e:99:e3:d2:12:
         83:25:94:52:94:a8:b8:70:c8:0a:02:20:3c:d0:95:19:73:87:
         29:b5:9f:fb:4a:19:7b:2b:30:b6:20:f8:01:24:49:43:3f:67:
         54:f2:e1:83:ec:ba:5e:2c:d9:4e:4c:eb:07:0e:7a:ce:81:1c:
         18:db:de:41:f4:d5:f6:0a:90:d8:5b:32:ab:53:02:d0:a0:86:
         e9:a7:f6:eb:20:8f:42:0c:eb:15:57:d6:52:a2:62:24:ca:a6:
         c2:6b:97:06:02:ea:be:20:be:bb:a1:aa:b1:60:0a:84:9a:8a:
         49:73:f9:e5:4a:28:c1:ee:be:2a:2b:a3:23:a1:c6:29:2d:a5:
         bd:a6:3b:25
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBCVLIns6H/783dyLFgNqC3JtgyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI3Q0EyRUE0RjczOEYwMTM3RTUwQjIyQkFEOTU3QzVF
NkY1QUEwNDAeFw0yNDAzMTExMjI1MDRaFw0yNTAzMTAxMjMwMDRaMDMxMTAvBgNV
BAMTKEZFMzRGOERCNDE0RTdGQzJDRjNFMDMwQTM1QTg4NTg0MUNDOTNBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WHj0bGu/D7SizDQa6QQulsFo
bddcCj9LApgTGmJQl/naOGwzSK6akXb5LbGKrs0tFAjubxDy787yt6HjutiYPQWd
ybHwN0vTl2pDBI+ibKkep2cI7VH5tcVWWhEQZZcOCoFlRrmtUO78Uo/o5C/YUF9g
6yR4PvbyuHidNTZwHDQzahnJmvR7AL1Vl2jmyzzqQcWxxMbbP/zcn+58Z70Y1kqH
2AVRTFzvjBsSaXycNftvyaZdLtpNOAXVPIkuk1NaMoYopBVMMpdsn/GpuUoCFEAj
XFb2HE76vFLYlUW3ojdq90XahdgSZRowrAP/iiTlJbxWHLkJwW+qUobqOFvhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/jT420FOf8LPPgMKNaiFhBzJOm4wHwYDVR0j
BBgwFoAUEnyi6k9zjwE35QsiutlXxeb1qgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC8xMjdDQTJFQTRGNzM4RjAxMzdFNTBCMjJCQUQ5NTdDNUU2RjVBQTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyN0NBMkVBNEY3MzhGMDEz
N0U1MEIyMkJBRDk1N0M1RTZGNUFBMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzIzODMwMzQzYTMyMzkzOTYzM2EzMTMzMzAzMDNhM2EyZjM0MzAyZDM0MzQyMDNk
M2UyMDMyMzYzNDMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEKZwTMA0GCSqGSIb3DQEBCwUA
A4IBAQCTZlCkKwc8J6Sx0PLIsewrN930EvNcDPXFoYIvzA0PcARFgaB6vqroIKY6
NI7yrh5/pyPGYJkkZfY9H+vdKF6kjf4J6JfsOp53vxcBBO/qu8/svsxatVfwmHvg
SP2XC0T6u3rl8YNG9ZermIE8c3bNL53rvtF1qMSrfpnj0hKDJZRSlKi4cMgKAiA8
0JUZc4cptZ/7Shl7KzC2IPgBJElDP2dU8uGD7LpeLNlOTOsHDnrOgRwY295B9NX2
CpDYWzKrUwLQoIbpp/brII9CDOsVV9ZSomIkyqbCa5cGAuq+IL67oaqxYAqEmopJ
c/nlSijB7r4qK6MjocYpLaW9pjsl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org