Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a333433633a3a2f33322d3332203d3e20323633363635.roa
File:                     323830343a333433633a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier:          H1VQ71GiuLfMw7DvlVtXhobx0XE9k0dI8/sQR0do/ss=
Subject key identifier:   6E:F6:AB:13:0F:B1:8B:1C:35:95:B8:49:D0:C4:16:F0:83:53:1A:96
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       5F28ACD413E9F158338E926C7D015CBF74B8B851
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a333433633a3a2f33322d3332203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:32 +0000
ROA not before:           Mon 08 Apr 2024 20:06:32 +0000
ROA not after:            Mon 07 Apr 2025 20:11:32 +0000
asID:                     263665
IP address blocks:        2804:343c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:28:ac:d4:13:e9:f1:58:33:8e:92:6c:7d:01:5c:bf:74:b8:b8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:32 2024 GMT
            Not After : Apr  7 20:11:32 2025 GMT
        Subject: CN=6EF6AB130FB18B1C3595B849D0C416F083531A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:00:5b:43:bd:c4:bd:d7:15:b9:f4:15:d6:
                    98:d3:62:9e:3b:30:12:3b:f4:c4:94:9b:60:7f:db:
                    ad:37:9b:4b:eb:1c:48:c4:f7:f4:e7:c6:77:20:8d:
                    cc:76:b3:ac:25:24:d9:52:53:50:cf:c6:24:8b:4f:
                    ec:b0:ec:9d:2c:0a:63:52:ab:12:2c:83:70:2b:2b:
                    91:9f:6b:e5:4f:6c:90:f5:e2:12:10:70:52:ad:05:
                    43:bf:1c:a8:c0:6a:d1:7a:88:27:30:ed:ea:86:26:
                    a4:bd:20:17:af:84:0a:a7:b7:ca:0c:26:4d:07:30:
                    93:65:15:69:67:2c:49:d5:f9:60:c4:34:c9:02:22:
                    8a:b4:c4:2c:e6:f8:a4:80:f1:78:62:c1:0e:11:de:
                    4a:d1:51:57:bb:a4:70:6c:c3:06:22:c6:cc:91:c4:
                    6c:76:57:d6:9c:ae:ea:3e:6b:df:83:67:82:2f:ba:
                    84:d7:86:30:9f:7b:61:4b:f0:e2:84:94:99:d5:ed:
                    a3:5a:31:e5:56:33:f7:ff:d0:c7:af:fd:be:3a:b3:
                    15:3b:d6:5d:b4:cd:8f:59:44:ac:a4:04:6e:11:69:
                    c0:1b:0e:87:65:36:e8:19:36:4a:70:75:da:dc:3a:
                    20:db:43:a0:0d:cb:5b:89:0b:55:a8:a6:82:e5:63:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F6:AB:13:0F:B1:8B:1C:35:95:B8:49:D0:C4:16:F0:83:53:1A:96
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a333433633a3a2f33322d3332203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:343c::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:51:05:ff:40:73:92:1d:08:bf:c0:56:5e:1f:07:5e:c4:35:
         3d:29:2f:66:d4:33:85:74:09:4d:8b:58:e5:f0:67:05:1d:bd:
         66:71:ec:7a:27:88:4b:fc:2b:71:a3:30:3f:60:92:93:5c:c3:
         84:ef:80:3f:53:d8:55:e5:75:40:fc:3d:5e:f8:88:05:2f:ea:
         91:8c:48:15:da:e7:0d:47:74:be:b8:02:30:51:c6:fe:0b:1c:
         92:14:3b:a4:56:9c:83:f3:2a:dc:08:bc:05:ab:38:1e:03:b3:
         e6:f7:72:03:89:bd:c5:df:e4:90:42:76:7f:1b:c4:15:1e:af:
         be:eb:8f:b1:c5:4f:21:a6:8b:74:b0:1a:5c:b5:b7:c9:8e:72:
         d6:5e:90:52:7e:7f:b0:43:03:52:ea:b6:a8:75:2b:64:d7:99:
         96:88:33:2e:a2:86:af:c4:a4:27:95:35:55:aa:e7:8e:2c:43:
         3b:a2:ac:0b:71:4b:ac:d7:41:be:75:06:a4:81:7d:80:99:16:
         4c:99:3d:02:10:90:7e:d4:c2:71:e9:30:4a:05:d4:50:66:52:
         1f:64:bc:5d:15:43:9c:e5:4e:39:a2:d3:ef:a8:b3:ad:73:41:
         95:05:6f:2f:ea:70:21:76:02:17:00:5e:5a:4a:9a:64:fa:37:
         6d:db:3b:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXyis1BPp8VgzjpJsfQFcv3S4uFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVGODNENzZCM0RDMzI2RENDRTg0NjM1MDhEREIwMDVE
QzU0NTg5NjAeFw0yNDA0MDgyMDA2MzJaFw0yNTA0MDcyMDExMzJaMDMxMTAvBgNV
BAMTKDZFRjZBQjEzMEZCMThCMUMzNTk1Qjg0OUQwQzQxNkYwODM1MzFBOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fgBbQ73EvdcVufQV1pjTYp47
MBI79MSUm2B/2603m0vrHEjE9/Tnxncgjcx2s6wlJNlSU1DPxiSLT+yw7J0sCmNS
qxIsg3ArK5Gfa+VPbJD14hIQcFKtBUO/HKjAatF6iCcw7eqGJqS9IBevhAqnt8oM
Jk0HMJNlFWlnLEnV+WDENMkCIoq0xCzm+KSA8XhiwQ4R3krRUVe7pHBswwYixsyR
xGx2V9acruo+a9+DZ4IvuoTXhjCfe2FL8OKElJnV7aNaMeVWM/f/0Mev/b46sxU7
1l20zY9ZRKykBG4RacAbDodlNugZNkpwddrcOiDbQ6ANy1uJC1WopoLlY7JxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbvarEw+xixw1lbhJ0MQW8INTGpYwHwYDVR0j
BBgwFoAUnvg9drPcMm3M6EY1CN2wBdxUWJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMS85RUY4M0Q3NkIzREMzMjZEQ0NFODQ2MzUwOEREQjAwNURDNTQ1ODk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFRjgzRDc2QjNEQzMyNkRD
Q0U4NDYzNTA4RERCMDA1REM1NDU4OTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzEv
MzIzODMwMzQzYTMzMzQzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzYzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0PDANBgkqhkiG9w0BAQsFAAOCAQEAk1EF/0Bz
kh0Iv8BWXh8HXsQ1PSkvZtQzhXQJTYtY5fBnBR29ZnHseieIS/wrcaMwP2CSk1zD
hO+AP1PYVeV1QPw9XviIBS/qkYxIFdrnDUd0vrgCMFHG/gsckhQ7pFacg/Mq3Ai8
Bas4HgOz5vdyA4m9xd/kkEJ2fxvEFR6vvuuPscVPIaaLdLAaXLW3yY5y1l6QUn5/
sEMDUuq2qHUrZNeZlogzLqKGr8SkJ5U1VarnjixDO6KsC3FLrNdBvnUGpIF9gJkW
TJk9AhCQftTCcekwSgXUUGZSH2S8XRVDnOVOOaLT76izrXNBlQVvL+pwIXYCFwBe
WkqaZPo3bds76A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org