Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a343030303a3a2f33342d3334203d3e20323633333630.roa
File:                     323830343a313466303a343030303a3a2f33342d3334203d3e20323633333630.roa (raw, json)
Hash identifier:          W6uvdGf2bMWgrGw5TE+8x+YPTVZ9RMikXwtYi7u71LU=
Subject key identifier:   56:A2:74:35:F4:B9:85:B4:51:2F:CB:06:51:73:F6:45:67:B7:82:FC
Certificate issuer:       /CN=87F4FF5C216ACF5746BF34B54ADE14105191CA0E
Certificate serial:       2BDB13225319A1B80C21429EFB1C8B51B1106661
Authority key identifier: 87:F4:FF:5C:21:6A:CF:57:46:BF:34:B5:4A:DE:14:10:51:91:CA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a343030303a3a2f33342d3334203d3e20323633333630.roa
Signing time:             Tue 06 Jun 2023 19:10:59 +0000
ROA not before:           Tue 06 Jun 2023 19:05:59 +0000
ROA not after:            Tue 04 Jun 2024 19:10:59 +0000
asID:                     263360
IP address blocks:        2804:14f0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:db:13:22:53:19:a1:b8:0c:21:42:9e:fb:1c:8b:51:b1:10:66:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87F4FF5C216ACF5746BF34B54ADE14105191CA0E
        Validity
            Not Before: Jun  6 19:05:59 2023 GMT
            Not After : Jun  4 19:10:59 2024 GMT
        Subject: CN=56A27435F4B985B4512FCB065173F64567B782FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:c2:20:24:6e:49:93:1f:7d:2c:81:bc:19:
                    53:1c:d8:56:08:87:4b:be:e4:5b:74:58:f2:0a:e7:
                    88:b6:61:c6:01:29:34:71:8c:27:e4:7c:9d:3c:4b:
                    7f:fc:7c:26:42:46:66:d1:f5:c7:a8:06:ee:93:5c:
                    1e:2e:d8:06:b4:2b:0a:62:03:1d:0b:fa:fd:85:bf:
                    35:f1:68:f6:35:bd:9f:94:26:79:e2:30:a4:bd:b6:
                    3f:71:e7:e7:cd:6f:44:fe:c7:60:3c:66:53:7c:17:
                    82:d7:66:2b:c9:20:4f:b1:7c:27:ac:7e:1f:ce:7d:
                    ab:52:23:38:89:3b:35:d1:c9:29:bd:62:29:ab:3d:
                    4d:95:99:b6:f0:0b:1f:e8:39:b7:97:04:c8:50:47:
                    20:df:33:1a:23:05:13:33:17:6b:2c:32:10:86:8a:
                    37:61:dc:0a:80:f9:54:3f:45:f8:8d:68:d8:13:35:
                    c6:0c:1a:d9:27:56:73:f6:8b:2a:c1:00:0b:5d:e2:
                    58:1c:22:6f:6d:15:53:95:c5:4e:4d:94:69:fa:54:
                    eb:49:2b:31:ed:09:81:ad:a8:1e:0b:94:94:a1:bf:
                    01:2c:4c:33:6d:c9:e1:cd:a2:ac:e5:37:00:50:fa:
                    08:af:01:48:8e:17:8d:30:98:55:11:7f:dd:59:b9:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A2:74:35:F4:B9:85:B4:51:2F:CB:06:51:73:F6:45:67:B7:82:FC
            X509v3 Authority Key Identifier:
                keyid:87:F4:FF:5C:21:6A:CF:57:46:BF:34:B5:4A:DE:14:10:51:91:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a343030303a3a2f33342d3334203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bb:27:92:2d:66:8f:a8:aa:cd:3a:9c:bd:af:fa:61:46:a3:ae:
         7e:8e:8c:1a:00:53:b5:b1:04:c1:6b:67:c2:94:7c:91:47:52:
         88:e2:79:5d:07:64:f0:32:b4:f7:62:16:e0:ab:fa:ac:38:49:
         33:ec:8e:45:77:d9:f7:e8:96:81:4c:41:3c:a9:dd:f6:6b:f8:
         33:21:46:7b:2b:8f:28:7f:2a:f6:c9:d5:e6:aa:85:87:88:1c:
         d7:81:bb:27:d9:c5:50:de:b4:63:d4:1e:5e:73:96:5c:6a:e0:
         88:af:81:0e:ec:d3:8b:29:80:d0:d1:6e:41:fa:b3:f9:47:a7:
         f7:c1:1e:cf:b3:47:77:ec:d3:43:bc:14:a6:f2:72:d4:7f:6b:
         9e:d9:6d:6c:2f:b6:93:09:9c:56:01:bc:27:15:62:1f:d0:ac:
         7e:63:d8:14:7f:56:4c:53:06:45:68:0c:9a:b3:8f:6c:de:37:
         70:19:53:b0:0d:fa:36:03:f4:c6:fe:25:e6:64:4b:14:c8:dd:
         7d:e6:18:ce:31:e1:96:cf:8e:ec:e8:1c:7d:ce:1a:b7:c1:eb:
         bc:1b:7c:ed:c9:34:a1:ce:3f:43:2c:37:c1:c3:dc:33:17:11:
         2f:5f:fc:ce:e3:b0:c7:fc:7c:5f:b8:f3:66:78:7c:08:f3:bd:
         c3:6d:c5:fe
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUK9sTIlMZobgMIUKe+xyLUbEQZmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdGNEZGNUMyMTZBQ0Y1NzQ2QkYzNEI1NEFERTE0MTA1
MTkxQ0EwRTAeFw0yMzA2MDYxOTA1NTlaFw0yNDA2MDQxOTEwNTlaMDMxMTAvBgNV
BAMTKDU2QTI3NDM1RjRCOTg1QjQ1MTJGQ0IwNjUxNzNGNjQ1NjdCNzgyRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8MIgJG5Jkx99LIG8GVMc2FYI
h0u+5Ft0WPIK54i2YcYBKTRxjCfkfJ08S3/8fCZCRmbR9ceoBu6TXB4u2Aa0Kwpi
Ax0L+v2FvzXxaPY1vZ+UJnniMKS9tj9x5+fNb0T+x2A8ZlN8F4LXZivJIE+xfCes
fh/OfatSIziJOzXRySm9YimrPU2VmbbwCx/oObeXBMhQRyDfMxojBRMzF2ssMhCG
ijdh3AqA+VQ/RfiNaNgTNcYMGtknVnP2iyrBAAtd4lgcIm9tFVOVxU5NlGn6VOtJ
KzHtCYGtqB4LlJShvwEsTDNtyeHNoqzlNwBQ+givAUiOF40wmFURf91ZuXN5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUVqJ0NfS5hbRRL8sGUXP2RWe3gvwwHwYDVR0j
BBgwFoAUh/T/XCFqz1dGvzS1St4UEFGRyg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBKM296eFpIZ1R0V3RYTUpZRUZoOTVmRjd0enAxU0RHdWkyS2FETWhm
RXkvMC84N0Y0RkY1QzIxNkFDRjU3NDZCRjM0QjU0QURFMTQxMDUxOTFDQTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3RjRGRjVDMjE2QUNGNTc0
NkJGMzRCNTRBREUxNDEwNTE5MUNBMEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwSjNvenhaSGdUdFd0WE1KWUVGaDk1ZkY3dHpwMVNER3VpMkthRE1oZkV5LzAv
MzIzODMwMzQzYTMxMzQ2NjMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzMzMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEFPBAMA0GCSqGSIb3DQEBCwUA
A4IBAQC7J5ItZo+oqs06nL2v+mFGo65+jowaAFO1sQTBa2fClHyRR1KI4nldB2Tw
MrT3Yhbgq/qsOEkz7I5Fd9n36JaBTEE8qd32a/gzIUZ7K48ofyr2ydXmqoWHiBzX
gbsn2cVQ3rRj1B5ec5ZcauCIr4EO7NOLKYDQ0W5B+rP5R6f3wR7Ps0d37NNDvBSm
8nLUf2ue2W1sL7aTCZxWAbwnFWIf0Kx+Y9gUf1ZMUwZFaAyas49s3jdwGVOwDfo2
A/TG/iXmZEsUyN195hjOMeGWz47s6Bx9zhq3weu8G3ztyTShzj9DLDfBw9wzFxEv
X/zO47DH/HxfuPNmeHwI873DbcX+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org