Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a343030303a3a2f33352d3335203d3e20323637353030.roa
File:                     323830343a343237303a343030303a3a2f33352d3335203d3e20323637353030.roa (raw, json)
Hash identifier:          s4RkaB8BXYY38V6r7eIAzGbVY66fXBMAoQnf12R7oPI=
Subject key identifier:   9B:B9:A6:57:9D:3A:54:2D:34:FC:2D:7D:F2:C9:95:92:0C:2D:E3:FD
Certificate issuer:       /CN=DC87FD17B08D997E8AF16B7244EF356D2F194C83
Certificate serial:       7323716766CAE9B45933C81731965292CD864951
Authority key identifier: DC:87:FD:17:B0:8D:99:7E:8A:F1:6B:72:44:EF:35:6D:2F:19:4C:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a343030303a3a2f33352d3335203d3e20323637353030.roa
Signing time:             Fri 09 Feb 2024 20:28:48 +0000
ROA not before:           Fri 09 Feb 2024 20:23:48 +0000
ROA not after:            Fri 07 Feb 2025 20:28:48 +0000
asID:                     267500
IP address blocks:        2804:4270:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:23:71:67:66:ca:e9:b4:59:33:c8:17:31:96:52:92:cd:86:49:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC87FD17B08D997E8AF16B7244EF356D2F194C83
        Validity
            Not Before: Feb  9 20:23:48 2024 GMT
            Not After : Feb  7 20:28:48 2025 GMT
        Subject: CN=9BB9A6579D3A542D34FC2D7DF2C995920C2DE3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:45:42:08:06:2b:37:fe:d0:84:28:8c:de:
                    56:79:1d:d3:61:51:bb:d5:a9:b0:53:5a:76:1f:1f:
                    56:68:74:49:78:ab:ce:1d:4b:57:a6:76:75:d9:6d:
                    26:15:77:6e:c8:2d:f7:68:af:4c:69:cc:77:16:0a:
                    63:06:be:93:7a:22:ca:65:2a:2b:23:fe:1f:36:35:
                    39:3b:57:a8:29:d6:fd:c7:17:39:f0:0c:66:dd:d5:
                    3d:19:f3:0b:73:a4:04:3b:07:33:4a:3b:a1:fb:be:
                    15:ad:0a:eb:3a:a8:06:b5:87:d6:29:6b:68:ff:00:
                    fb:37:b9:e6:30:75:54:69:19:a8:d7:e7:88:31:36:
                    0a:0e:6a:24:27:ed:14:f3:f0:88:e1:de:4f:a1:3e:
                    ec:63:59:a6:8f:57:f0:f5:06:fa:33:88:dd:53:c4:
                    1b:96:95:f2:90:41:7a:b6:9f:89:51:25:28:60:73:
                    85:1d:0b:01:cb:6b:ab:e8:29:6e:7e:69:fe:d3:1f:
                    04:e9:b8:0a:c5:91:81:c3:ef:31:9f:8d:5a:4f:7d:
                    1c:27:ac:0d:23:cb:e0:8b:bb:0b:7a:3b:56:fe:aa:
                    81:03:41:28:ab:84:02:4f:75:b4:97:01:24:60:62:
                    8c:b3:5f:84:22:5a:7b:2b:6c:c9:b4:b4:8d:12:65:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B9:A6:57:9D:3A:54:2D:34:FC:2D:7D:F2:C9:95:92:0C:2D:E3:FD
            X509v3 Authority Key Identifier:
                keyid:DC:87:FD:17:B0:8D:99:7E:8A:F1:6B:72:44:EF:35:6D:2F:19:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a343030303a3a2f33352d3335203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         99:c4:c6:6d:5f:d9:52:e3:9d:17:ba:24:b1:db:3f:9c:b3:0f:
         c0:54:07:0b:f7:0f:90:f6:d5:5e:13:a1:37:99:f5:07:b2:cc:
         b2:22:43:a6:fb:a2:69:44:07:e3:78:17:39:bd:4c:bb:f9:2d:
         e5:73:c6:43:70:c5:06:a0:81:f1:1e:10:43:bf:3c:2f:78:0a:
         a5:6a:59:a7:cf:29:a8:73:55:b2:f9:c4:77:c4:98:6a:ae:29:
         81:3c:2f:44:53:58:21:06:de:13:6f:0c:3b:57:f2:18:cb:73:
         d9:49:ff:ca:94:0f:42:22:e9:f8:2d:8f:fe:14:79:6f:94:d9:
         38:8e:a8:ec:95:fa:67:97:c2:17:28:e1:f7:56:d1:af:c9:09:
         75:c6:64:d7:c2:58:56:c3:50:e6:83:16:de:0f:91:ed:cb:34:
         3b:88:73:f9:60:94:9c:dd:63:e3:86:a3:c5:cf:a1:d2:97:a9:
         b6:67:cf:2c:48:2b:91:60:78:51:22:e9:b1:a1:b2:9d:41:b1:
         6d:5d:85:14:91:d1:87:3a:67:f9:1f:87:a1:be:4c:c7:9b:58:
         5a:3f:9d:c7:4b:08:5c:2e:3d:da:c1:93:cd:c1:21:11:64:de:
         48:7e:da:ca:33:a9:26:f4:c1:fd:45:64:a7:b6:55:32:60:e7:
         8e:b0:9d:c9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcyNxZ2bK6bRZM8gXMZZSks2GSVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM4N0ZEMTdCMDhEOTk3RThBRjE2QjcyNDRFRjM1NkQy
RjE5NEM4MzAeFw0yNDAyMDkyMDIzNDhaFw0yNTAyMDcyMDI4NDhaMDMxMTAvBgNV
BAMTKDlCQjlBNjU3OUQzQTU0MkQzNEZDMkQ3REYyQzk5NTkyMEMyREUzRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcUVCCAYrN/7QhCiM3lZ5HdNh
UbvVqbBTWnYfH1ZodEl4q84dS1emdnXZbSYVd27ILfdor0xpzHcWCmMGvpN6Ispl
Kisj/h82NTk7V6gp1v3HFznwDGbd1T0Z8wtzpAQ7BzNKO6H7vhWtCus6qAa1h9Yp
a2j/APs3ueYwdVRpGajX54gxNgoOaiQn7RTz8Ijh3k+hPuxjWaaPV/D1BvoziN1T
xBuWlfKQQXq2n4lRJShgc4UdCwHLa6voKW5+af7THwTpuArFkYHD7zGfjVpPfRwn
rA0jy+CLuwt6O1b+qoEDQSirhAJPdbSXASRgYoyzX4QiWnsrbMm0tI0SZd7NAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUm7mmV506VC00/C198smVkgwt4/0wHwYDVR0j
BBgwFoAU3If9F7CNmX6K8WtyRO81bS8ZTIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUZkV3doVTVrTnBrMjZyOUdZZkRqVnNwZkdHWmphSzZmVUx0VFpNUXBC
N0IvMC9EQzg3RkQxN0IwOEQ5OTdFOEFGMTZCNzI0NEVGMzU2RDJGMTk0QzgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDODdGRDE3QjA4RDk5N0U4
QUYxNkI3MjQ0RUYzNTZEMkYxOTRDODMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlGZFd3aFU1a05wazI2cjlHWWZEalZzcGZHR1pqYUs2ZlVMdFRaTVFwQjdCLzAv
MzIzODMwMzQzYTM0MzIzNzMwM2EzNDMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNzM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEQnBAMA0GCSqGSIb3DQEBCwUA
A4IBAQCZxMZtX9lS450XuiSx2z+csw/AVAcL9w+Q9tVeE6E3mfUHssyyIkOm+6Jp
RAfjeBc5vUy7+S3lc8ZDcMUGoIHxHhBDvzwveAqlalmnzymoc1Wy+cR3xJhqrimB
PC9EU1ghBt4Tbww7V/IYy3PZSf/KlA9CIun4LY/+FHlvlNk4jqjslfpnl8IXKOH3
VtGvyQl1xmTXwlhWw1DmgxbeD5HtyzQ7iHP5YJSc3WPjhqPFz6HSl6m2Z88sSCuR
YHhRIumxobKdQbFtXYUUkdGHOmf5H4ehvkzHm1haP53HSwhcLj3awZPNwSERZN5I
ftrKM6km9MH9RWSntlUyYOeOsJ3J
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org