Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a343a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a343a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          yrsAT2RxmLR5TVvSmYZ5gqgjsoHMswBj2RG8xYsYG6g=
Subject key identifier:   B0:1A:29:2A:45:23:14:53:C8:7B:99:AB:C9:A6:10:11:3C:56:E1:5A
Certificate issuer:       /CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
Certificate serial:       5DE82EE9D2DCD14FB5CFD09729EF81E70503F19C
Authority key identifier: 97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a343a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Tue 24 Jan 2023 18:27:54 +0000
ROA not before:           Tue 24 Jan 2023 18:22:54 +0000
ROA not after:            Tue 23 Jan 2024 18:27:54 +0000
asID:                     262617
IP address blocks:        2804:3d74:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e8:2e:e9:d2:dc:d1:4f:b5:cf:d0:97:29:ef:81:e7:05:03:f1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
        Validity
            Not Before: Jan 24 18:22:54 2023 GMT
            Not After : Jan 23 18:27:54 2024 GMT
        Subject: CN=B01A292A45231453C87B99ABC9A610113C56E15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:2a:01:f0:10:52:1d:1d:c1:30:8d:70:80:
                    b3:77:66:e7:65:c6:70:4e:63:07:de:3b:be:f5:59:
                    a9:f8:84:d4:21:98:aa:6e:1d:43:db:c0:15:34:fe:
                    01:f3:1f:9f:2f:b0:69:e8:2e:3b:f9:8d:51:21:77:
                    38:41:73:e9:6c:ba:a7:3a:19:3b:b5:67:66:5d:40:
                    13:74:d5:de:fc:ff:aa:b5:b9:55:06:39:ed:13:26:
                    95:4b:91:d0:57:a7:a2:c5:8b:64:4a:44:43:79:39:
                    49:19:7e:49:6c:c4:06:3e:94:e8:2b:1c:ac:3e:9e:
                    78:4b:49:3d:7b:f2:19:8d:74:4a:5a:e6:3a:9b:59:
                    67:6b:db:5d:f0:32:c3:c2:22:03:4b:48:00:60:eb:
                    40:e8:9f:d3:74:db:1c:84:9f:90:2c:ed:86:ad:50:
                    cd:92:0a:6b:0b:96:6f:87:2a:00:ce:de:6d:38:ca:
                    cf:b5:71:8a:ef:7e:02:da:f8:13:74:9b:95:35:77:
                    cc:ae:c8:ac:52:dc:e4:3b:87:5f:5d:2e:f5:e5:41:
                    13:82:c6:7d:9a:a6:a9:df:9a:25:bb:e3:ad:20:94:
                    45:ca:4d:4e:c2:43:1d:3f:96:cb:a1:cc:2b:42:6d:
                    a5:c8:fe:db:0f:f4:ee:a1:14:8e:c9:8e:44:9f:99:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1A:29:2A:45:23:14:53:C8:7B:99:AB:C9:A6:10:11:3C:56:E1:5A
            X509v3 Authority Key Identifier:
                keyid:97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a343a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:76:67:6e:c9:e6:12:40:94:17:f3:42:2f:17:32:f0:29:ef:
         71:aa:9a:ce:06:7a:87:3c:dd:c1:7e:35:d5:a4:0e:37:45:b1:
         74:62:bc:05:78:4e:f1:4d:22:72:53:8c:a8:f0:64:7c:86:9d:
         ac:8f:f8:0b:51:57:56:89:7a:6e:65:7f:53:1b:02:de:0b:7a:
         ab:6a:f4:55:1d:2f:a3:dc:73:a7:09:ae:21:b6:1c:29:c9:5c:
         3c:c5:ed:3e:6b:95:7b:b7:33:22:2d:5a:06:ef:28:24:e6:19:
         68:76:6c:92:e5:c3:5a:0d:e9:af:fa:ff:19:56:26:37:ab:3e:
         80:35:28:0f:43:e2:cb:62:be:78:f4:53:f9:22:70:0c:39:51:
         75:37:eb:b8:64:14:57:b3:24:25:bd:49:21:eb:bb:f5:c9:35:
         65:3e:6f:01:12:3a:5a:33:38:a2:5c:05:3a:88:e7:d8:d8:c0:
         b9:e3:0b:36:6f:ba:d5:7d:dc:51:81:1e:a3:11:43:f0:b5:bc:
         f7:64:13:80:65:77:e1:af:96:ec:b4:4f:2c:04:f7:e7:56:67:
         be:f2:38:81:37:48:7e:60:27:f1:e1:1a:a5:d9:3e:e1:f2:1e:
         af:1e:bf:07:d0:19:0e:53:d8:4e:90:dc:96:ce:a7:78:68:dd:
         95:da:49:d6
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUXegu6dLc0U+1z9CXKe+B5wUD8ZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdFMzk0RkU4NTQ2MTNDRTk3ODRCMUQ2NEQ4MDVBQkZG
MERGOTIyQzAeFw0yMzAxMjQxODIyNTRaFw0yNDAxMjMxODI3NTRaMDMxMTAvBgNV
BAMTKEIwMUEyOTJBNDUyMzE0NTNDODdCOTlBQkM5QTYxMDExM0M1NkUxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAioB8BBSHR3BMI1wgLN3Zudl
xnBOYwfeO771Wan4hNQhmKpuHUPbwBU0/gHzH58vsGnoLjv5jVEhdzhBc+lsuqc6
GTu1Z2ZdQBN01d78/6q1uVUGOe0TJpVLkdBXp6LFi2RKREN5OUkZfklsxAY+lOgr
HKw+nnhLST178hmNdEpa5jqbWWdr213wMsPCIgNLSABg60Don9N02xyEn5As7Yat
UM2SCmsLlm+HKgDO3m04ys+1cYrvfgLa+BN0m5U1d8yuyKxS3OQ7h19dLvXlQROC
xn2apqnfmiW7460glEXKTU7CQx0/lsuhzCtCbaXI/tsP9O6hFI7JjkSfmUjbAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUsBopKkUjFFPIe5mryaYQETxW4VowHwYDVR0j
BBgwFoAUl+OU/oVGE86XhLHWTYBav/DfkiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMC85N0UzOTRGRTg1NDYxM0NFOTc4NEIxRDY0RDgwNUFCRkYwREY5MjJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3RTM5NEZFODU0NjEzQ0U5
Nzg0QjFENjREODA1QUJGRjBERjkyMkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzAv
MzIzODMwMzQzYTMzNjQzNzM0M2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMjM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPXQABDANBgkqhkiG9w0BAQsFAAOCAQEA
InZnbsnmEkCUF/NCLxcy8CnvcaqazgZ6hzzdwX411aQON0WxdGK8BXhO8U0iclOM
qPBkfIadrI/4C1FXVol6bmV/UxsC3gt6q2r0VR0vo9xzpwmuIbYcKclcPMXtPmuV
e7czIi1aBu8oJOYZaHZskuXDWg3pr/r/GVYmN6s+gDUoD0Piy2K+ePRT+SJwDDlR
dTfruGQUV7MkJb1JIeu79ck1ZT5vARI6WjM4olwFOojn2NjAueMLNm+61X3cUYEe
oxFD8LW892QTgGV34a+W7LRPLAT351ZnvvI4gTdIfmAn8eEapdk+4fIerx6/B9AZ
DlPYTpDcls6neGjdldpJ1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org