Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a3a2f33332d3333203d3e20323730333338.roa
File:                     323830343a366137383a3a2f33332d3333203d3e20323730333338.roa (raw, json)
Hash identifier:          v+AvvI3gAH3LZ+1354JS2iuldQXfFcSzBa2AkU3qvBQ=
Subject key identifier:   A2:0B:7F:6E:CD:8B:B5:ED:F3:9D:4D:E6:72:FF:65:03:F0:60:3B:43
Certificate issuer:       /CN=966322EBF60EAC72722BAA489C53B18FD38FE811
Certificate serial:       10A86B65FC221E228476AAD10D1647E9C98ABAE0
Authority key identifier: 96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a3a2f33332d3333203d3e20323730333338.roa
Signing time:             Mon 18 Dec 2023 15:53:55 +0000
ROA not before:           Mon 18 Dec 2023 15:48:55 +0000
ROA not after:            Mon 16 Dec 2024 15:53:55 +0000
asID:                     270338
IP address blocks:        2804:6a78::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a8:6b:65:fc:22:1e:22:84:76:aa:d1:0d:16:47:e9:c9:8a:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966322EBF60EAC72722BAA489C53B18FD38FE811
        Validity
            Not Before: Dec 18 15:48:55 2023 GMT
            Not After : Dec 16 15:53:55 2024 GMT
        Subject: CN=A20B7F6ECD8BB5EDF39D4DE672FF6503F0603B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:fa:57:04:42:a2:0e:44:af:43:0e:8a:b5:
                    95:f5:f1:b0:a1:38:81:67:4e:5a:e8:a3:fc:44:86:
                    13:8c:3d:07:a3:ea:3d:60:6d:5d:c6:d4:37:83:dc:
                    21:f0:98:b2:ea:ac:d4:fd:c0:c8:c1:a2:0e:ee:e9:
                    72:2d:ef:3b:0b:f3:2d:dd:ba:c5:24:22:92:62:25:
                    d8:60:fd:5b:b6:24:53:cb:ae:88:ee:07:fc:16:5c:
                    06:4e:87:33:a4:80:de:62:94:d6:20:90:cd:cc:52:
                    94:a3:30:75:db:a9:ff:24:4f:eb:d9:78:31:8f:82:
                    7c:d5:c0:67:23:af:00:50:76:95:5c:f9:e6:d2:da:
                    68:26:27:69:48:3b:d0:94:4e:d6:cf:c1:e9:7e:50:
                    da:38:96:37:da:ec:c1:02:ea:14:91:3d:b6:d8:34:
                    57:5d:0a:e7:4c:c6:61:0b:a1:6f:ce:1d:5b:e8:b9:
                    58:8d:97:28:01:1d:ad:98:06:22:c1:10:47:d8:0f:
                    fd:6d:d9:45:9d:79:72:a8:c5:20:56:c8:cb:03:7c:
                    f6:3e:c4:7a:ce:74:4a:71:e6:93:6b:e5:8d:96:65:
                    43:f2:60:57:bd:70:b7:01:6b:13:98:7c:f4:37:d2:
                    98:73:22:23:f3:16:78:c2:5d:07:2c:fd:9a:09:b6:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0B:7F:6E:CD:8B:B5:ED:F3:9D:4D:E6:72:FF:65:03:F0:60:3B:43
            X509v3 Authority Key Identifier:
                keyid:96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/966322EBF60EAC72722BAA489C53B18FD38FE811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a3a2f33332d3333203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a78::/33

    Signature Algorithm: sha256WithRSAEncryption
         c4:52:df:dc:55:cd:1e:c1:ad:81:0e:ba:9b:48:b6:57:60:c0:
         c5:b5:5c:da:e0:75:87:8a:3a:16:48:61:a2:64:e6:34:97:29:
         0d:f4:19:6f:2a:b9:29:91:a0:25:3d:9b:aa:a4:16:00:75:b1:
         ca:4f:86:3b:84:d2:ab:7c:04:92:a6:ae:33:b6:63:25:86:3c:
         07:e7:bc:fa:dc:80:7b:48:ac:25:34:72:e8:97:04:20:42:d4:
         0d:8a:df:8a:dd:f8:99:fd:38:80:db:62:a7:9a:f2:ec:50:53:
         d9:d6:38:10:0c:aa:99:b8:d5:e0:a4:2c:2d:8f:bf:df:50:73:
         9f:80:24:7a:da:50:a4:99:29:ea:ad:c9:a0:ee:3d:72:cf:5d:
         39:9f:77:b4:74:06:8f:45:5e:39:8c:fe:32:0a:f7:de:1f:93:
         08:83:a4:38:9b:3a:8f:ac:c7:55:a3:58:4d:77:2b:28:9b:f6:
         f7:82:63:99:9f:9a:e0:88:18:f5:43:a5:84:d2:27:6b:41:36:
         98:28:5d:e7:3f:79:da:cf:a0:65:c4:0e:b9:76:61:c4:07:2b:
         54:08:b6:5e:3d:5b:32:18:0d:d4:85:d3:d1:27:f2:1e:05:de:
         59:94:68:d3:dc:f4:f3:63:0c:c5:ad:8f:55:4d:d8:22:74:b6:
         e7:ba:4e:87
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEKhrZfwiHiKEdqrRDRZH6cmKuuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY2MzIyRUJGNjBFQUM3MjcyMkJBQTQ4OUM1M0IxOEZE
MzhGRTgxMTAeFw0yMzEyMTgxNTQ4NTVaFw0yNDEyMTYxNTUzNTVaMDMxMTAvBgNV
BAMTKEEyMEI3RjZFQ0Q4QkI1RURGMzlENERFNjcyRkY2NTAzRjA2MDNCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGvpXBEKiDkSvQw6KtZX18bCh
OIFnTlroo/xEhhOMPQej6j1gbV3G1DeD3CHwmLLqrNT9wMjBog7u6XIt7zsL8y3d
usUkIpJiJdhg/Vu2JFPLrojuB/wWXAZOhzOkgN5ilNYgkM3MUpSjMHXbqf8kT+vZ
eDGPgnzVwGcjrwBQdpVc+ebS2mgmJ2lIO9CUTtbPwel+UNo4ljfa7MEC6hSRPbbY
NFddCudMxmELoW/OHVvouViNlygBHa2YBiLBEEfYD/1t2UWdeXKoxSBWyMsDfPY+
xHrOdEpx5pNr5Y2WZUPyYFe9cLcBaxOYfPQ30phzIiPzFnjCXQcs/ZoJtm4jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUogt/bs2Lte3znU3mcv9lA/BgO0MwHwYDVR0j
BBgwFoAUlmMi6/YOrHJyK6pInFOxj9OP6BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHoxUDdMV3JiSExadVBUWkJCRkFyZTdNMko2Q1hSemhGaTgxRTN5ZlpB
NngvMC85NjYzMjJFQkY2MEVBQzcyNzIyQkFBNDg5QzUzQjE4RkQzOEZFODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2NjMyMkVCRjYwRUFDNzI3
MjJCQUE0ODlDNTNCMThGRDM4RkU4MTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh6MVA3TFdyYkhMWnVQVFpCQkZBcmU3TTJKNkNYUnpoRmk4MUUzeWZaQTZ4LzAv
MzIzODMwMzQzYTM2NjEzNzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzMzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARqeAAwDQYJKoZIhvcNAQELBQADggEBAMRS39xV
zR7BrYEOuptItldgwMW1XNrgdYeKOhZIYaJk5jSXKQ30GW8quSmRoCU9m6qkFgB1
scpPhjuE0qt8BJKmrjO2YyWGPAfnvPrcgHtIrCU0cuiXBCBC1A2K34rd+Jn9OIDb
Yqea8uxQU9nWOBAMqpm41eCkLC2Pv99Qc5+AJHraUKSZKeqtyaDuPXLPXTmfd7R0
Bo9FXjmM/jIK994fkwiDpDibOo+sx1WjWE13Kyib9veCY5mfmuCIGPVDpYTSJ2tB
NpgoXec/edrPoGXEDrl2YcQHK1QItl49WzIYDdSF09En8h4F3lmUaNPc9PNjDMWt
j1VN2CJ0tue6Toc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org