Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa
File:                     323830343a346638633a3a2f33322d3438203d3e20323638333333.roa (raw, json)
Hash identifier:          yn1P1n6XUy6dgQ3rEiK+/wN/PwseIj1Mz7RpOjqC7dE=
Subject key identifier:   3F:4D:D2:9D:B1:73:BB:52:56:A8:3E:AB:3F:CE:72:9F:46:3D:5D:3A
Certificate issuer:       /CN=F8F3AFA8F2547E8F53F83D47223BB2283026004A
Certificate serial:       5E4CCF9C943569CC57B3E825F8E1E7EABC5D37F5
Authority key identifier: F8:F3:AF:A8:F2:54:7E:8F:53:F8:3D:47:22:3B:B2:28:30:26:00:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa
Signing time:             Wed 25 Oct 2023 21:29:30 +0000
ROA not before:           Wed 25 Oct 2023 21:24:30 +0000
ROA not after:            Wed 23 Oct 2024 21:29:30 +0000
asID:                     268333
IP address blocks:        2804:4f8c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4c:cf:9c:94:35:69:cc:57:b3:e8:25:f8:e1:e7:ea:bc:5d:37:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F3AFA8F2547E8F53F83D47223BB2283026004A
        Validity
            Not Before: Oct 25 21:24:30 2023 GMT
            Not After : Oct 23 21:29:30 2024 GMT
        Subject: CN=3F4DD29DB173BB5256A83EAB3FCE729F463D5D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:ef:10:f0:aa:89:ff:e5:14:0e:69:c5:a2:
                    9c:bc:7a:06:de:1b:ce:8e:96:e6:c4:24:48:f9:c1:
                    33:8e:59:29:e2:15:87:7f:c4:8a:8a:9c:29:68:94:
                    9a:81:f2:cf:3e:33:b0:2d:5c:33:8a:7f:84:21:04:
                    94:29:03:41:20:3f:d4:ec:3d:01:47:3b:fc:23:0e:
                    8e:95:71:4b:9a:9b:6c:cf:84:2d:6e:68:4a:84:33:
                    05:d9:ed:4a:cf:88:c5:0c:40:56:7b:72:f8:62:a4:
                    70:dc:c6:db:25:ce:e9:ab:0c:87:cf:33:05:5a:cd:
                    b8:3b:8f:6c:41:02:44:be:bd:c6:97:03:06:44:ad:
                    15:4a:7a:bb:91:2b:cf:a0:95:a1:76:11:49:88:46:
                    ac:83:c4:b4:76:b8:43:c3:fd:28:3d:c6:af:a5:bc:
                    7b:1f:c3:c9:ce:dd:e0:08:15:2a:2e:fc:f4:c0:f2:
                    7d:7d:63:ee:c2:a4:25:39:fe:33:ad:1d:22:78:93:
                    33:09:ee:3f:d1:38:84:4f:a0:fd:ff:ff:0c:ba:9d:
                    ab:e4:b2:94:f3:b3:5a:24:0f:62:3c:9c:d6:f3:6c:
                    15:f1:59:cc:45:fa:80:9f:e9:88:41:ae:36:83:2b:
                    14:86:36:06:84:26:06:26:ed:e8:86:4b:9a:d1:5e:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4D:D2:9D:B1:73:BB:52:56:A8:3E:AB:3F:CE:72:9F:46:3D:5D:3A
            X509v3 Authority Key Identifier:
                keyid:F8:F3:AF:A8:F2:54:7E:8F:53:F8:3D:47:22:3B:B2:28:30:26:00:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:09:62:4a:42:16:7a:d8:9a:a4:28:1d:8e:86:4c:87:97:9c:
         45:f5:e1:ff:64:81:8e:44:b9:c7:68:5c:42:97:49:04:27:37:
         c7:09:8b:32:67:90:2c:1c:33:c0:b1:67:9b:af:27:c4:cd:54:
         28:e1:65:28:46:05:6a:34:0a:47:ef:87:26:4c:6d:ba:6d:ed:
         59:3a:5d:13:48:89:e0:5a:5f:c3:d6:3c:34:05:7e:7d:8e:ee:
         e8:40:e0:0d:9e:f0:3b:73:25:72:0c:13:03:15:74:e8:aa:fd:
         09:0d:61:c1:d2:d7:04:a6:dd:c4:48:20:16:6f:a9:4a:09:a6:
         08:e5:a2:54:98:76:37:31:ba:87:5f:a7:be:24:36:0f:2d:d3:
         3c:70:eb:a3:3b:21:2a:a6:8b:ab:a6:48:97:ed:c2:63:3e:a6:
         59:1e:52:a3:8d:2d:45:80:a9:ef:a6:4a:e8:6e:9e:70:3a:a1:
         4a:ef:ee:c4:02:03:c7:f1:12:69:40:bd:bd:6e:72:82:e3:e3:
         78:34:67:df:68:2f:6e:a2:b6:f3:32:dc:5e:5b:f6:12:6b:40:
         22:7a:db:7e:74:77:50:27:cd:5b:2e:b8:c7:0b:bc:f7:4e:ed:
         01:48:42:2d:f9:93:11:46:40:dd:9d:40:3a:1e:a0:f5:17:6e:
         2e:14:cb:30
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXkzPnJQ1acxXs+gl+OHn6rxdN/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhGM0FGQThGMjU0N0U4RjUzRjgzRDQ3MjIzQkIyMjgz
MDI2MDA0QTAeFw0yMzEwMjUyMTI0MzBaFw0yNDEwMjMyMTI5MzBaMDMxMTAvBgNV
BAMTKDNGNEREMjlEQjE3M0JCNTI1NkE4M0VBQjNGQ0U3MjlGNDYzRDVEM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9u8Q8KqJ/+UUDmnFopy8egbe
G86OlubEJEj5wTOOWSniFYd/xIqKnClolJqB8s8+M7AtXDOKf4QhBJQpA0EgP9Ts
PQFHO/wjDo6VcUuam2zPhC1uaEqEMwXZ7UrPiMUMQFZ7cvhipHDcxtslzumrDIfP
MwVazbg7j2xBAkS+vcaXAwZErRVKeruRK8+glaF2EUmIRqyDxLR2uEPD/Sg9xq+l
vHsfw8nO3eAIFSou/PTA8n19Y+7CpCU5/jOtHSJ4kzMJ7j/ROIRPoP3//wy6navk
spTzs1okD2I8nNbzbBXxWcxF+oCf6YhBrjaDKxSGNgaEJgYm7eiGS5rRXuzBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUP03SnbFzu1JWqD6rP85yn0Y9XTowHwYDVR0j
BBgwFoAU+POvqPJUfo9T+D1HIjuyKDAmAEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWFDaTNuTXBpeHhYVE1VNE5zWkt6V1phVjM5MXk3SFZDZXVDTkJNTVJI
ZXYvMC9GOEYzQUZBOEYyNTQ3RThGNTNGODNENDcyMjNCQjIyODMwMjYwMDRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4RjNBRkE4RjI1NDdFOEY1
M0Y4M0Q0NzIyM0JCMjI4MzAyNjAwNEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlhQ2kzbk1waXh4WFRNVTROc1pLeldaYVYzOTF5N0hWQ2V1Q05CTU1SSGV2LzAv
MzIzODMwMzQzYTM0NjYzODYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzMzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARPjDANBgkqhkiG9w0BAQsFAAOCAQEAlgliSkIW
etiapCgdjoZMh5ecRfXh/2SBjkS5x2hcQpdJBCc3xwmLMmeQLBwzwLFnm68nxM1U
KOFlKEYFajQKR++HJkxtum3tWTpdE0iJ4Fpfw9Y8NAV+fY7u6EDgDZ7wO3MlcgwT
AxV06Kr9CQ1hwdLXBKbdxEggFm+pSgmmCOWiVJh2NzG6h1+nviQ2Dy3TPHDrozsh
KqaLq6ZIl+3CYz6mWR5So40tRYCp76ZK6G6ecDqhSu/uxAIDx/ESaUC9vW5yguPj
eDRn32gvbqK28zLcXlv2EmtAInrbfnR3UCfNWy64xwu8907tAUhCLfmTEUZA3Z1A
Oh6g9RduLhTLMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org