Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/323830343a323866383a343130313a3a2f34382d3438203d3e20323633393930.roa
File:                     323830343a323866383a343130313a3a2f34382d3438203d3e20323633393930.roa (raw, json)
Hash identifier:          E1MNhOFdT6AwRCSZ6n7XFaYfyfpcgJPfnMlYaReZlVI=
Subject key identifier:   A9:FE:6A:C9:58:6B:33:8A:20:B5:07:63:06:D2:12:5B:FB:D0:81:BC
Certificate issuer:       /CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
Certificate serial:       33ECE4CA99EF6AB60A73324E661460859E6C5D9D
Authority key identifier: 75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/323830343a323866383a343130313a3a2f34382d3438203d3e20323633393930.roa
Signing time:             Sat 13 Apr 2024 16:13:19 +0000
ROA not before:           Sat 13 Apr 2024 16:08:19 +0000
ROA not after:            Sat 12 Apr 2025 16:13:19 +0000
asID:                     263990
IP address blocks:        2804:28f8:4101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ec:e4:ca:99:ef:6a:b6:0a:73:32:4e:66:14:60:85:9e:6c:5d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
        Validity
            Not Before: Apr 13 16:08:19 2024 GMT
            Not After : Apr 12 16:13:19 2025 GMT
        Subject: CN=A9FE6AC9586B338A20B5076306D2125BFBD081BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:ae:e4:12:29:2f:f2:77:52:ac:2c:46:4c:
                    e3:bc:aa:b3:98:8d:b8:47:a0:af:3f:d1:1a:43:c9:
                    6a:af:fa:81:0d:90:f6:77:7a:95:4c:3d:c9:af:5c:
                    a5:43:9c:90:a7:e6:f7:f0:18:a1:aa:0d:d8:c2:28:
                    e0:8b:c8:38:2f:03:a2:18:a9:bd:a3:33:0a:9a:7b:
                    52:a2:6b:85:b5:58:c9:01:a2:82:98:14:62:51:71:
                    4d:34:ab:1c:63:6c:75:7b:b4:14:4e:ba:03:c9:a6:
                    a3:b8:42:07:bd:20:c4:36:b1:29:ef:70:74:fb:17:
                    7f:da:50:54:69:64:aa:9c:d5:2f:5a:08:36:8d:7d:
                    ed:14:5e:fc:31:58:72:3c:0f:3a:33:7d:33:42:08:
                    93:7b:47:71:28:b2:a1:6e:f5:4d:8e:ab:91:ab:cd:
                    dc:1e:74:c1:10:be:85:6b:47:3f:c4:37:ac:c3:fd:
                    54:de:f6:3e:28:73:b0:48:05:54:e7:15:19:30:72:
                    7e:0d:f6:a7:cc:e5:ab:7e:67:00:66:75:4c:33:dc:
                    d2:9a:68:1c:e0:fc:d0:41:ea:55:08:ae:f9:22:24:
                    12:71:43:e7:46:e2:d7:b9:ab:b8:2a:0b:21:f3:0b:
                    bd:47:f6:f4:14:33:2b:a2:6b:64:f7:80:05:7b:06:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:6A:C9:58:6B:33:8A:20:B5:07:63:06:D2:12:5B:FB:D0:81:BC
            X509v3 Authority Key Identifier:
                keyid:75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/323830343a323866383a343130313a3a2f34382d3438203d3e20323633393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f8:4101::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:da:71:9b:f8:16:c6:47:78:ec:b0:27:a5:68:39:fe:e2:e2:
         f2:22:67:60:e0:ca:2e:12:9f:6f:53:80:79:cf:81:b6:1a:d9:
         45:df:b1:55:3f:31:54:60:5e:2c:59:df:3b:73:96:30:55:31:
         29:63:de:ad:96:07:93:81:27:7f:51:9f:2c:27:4f:10:01:31:
         3e:b4:f3:ee:98:3f:ac:c0:dc:26:8e:e7:7a:24:d5:02:2a:df:
         db:ac:44:55:41:0e:7f:5c:62:14:ed:43:2e:6a:06:0c:b2:79:
         51:b9:95:08:64:fc:72:8a:c6:d0:d5:09:31:30:1f:99:89:c8:
         e0:93:d9:9f:bc:b4:82:09:64:79:1a:ef:c6:bb:ed:46:28:4f:
         35:06:43:0b:77:9f:73:3a:3b:38:d9:d3:57:6c:27:38:b4:09:
         0e:5f:76:67:35:4c:f9:f0:bb:02:d0:35:29:80:ac:ce:ed:37:
         ef:8a:90:38:82:75:a7:aa:52:2d:4c:63:05:62:82:2b:53:5f:
         04:86:a6:82:c0:e7:8b:98:f7:3c:3e:60:3c:6e:aa:98:58:be:
         ff:0f:67:a2:1a:25:91:db:6c:96:2c:87:5b:7d:80:03:4e:57:
         13:62:78:72:07:a3:26:af:94:be:77:58:b0:2c:3f:e3:0c:4a:
         97:15:6f:63
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUM+zkypnvarYKczJOZhRghZ5sXZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVDMzI3Q0IwRDJFNDcyRTBDREU0M0I0QTZDMDg2MDZD
QjBFQjBGNTAeFw0yNDA0MTMxNjA4MTlaFw0yNTA0MTIxNjEzMTlaMDMxMTAvBgNV
BAMTKEE5RkU2QUM5NTg2QjMzOEEyMEI1MDc2MzA2RDIxMjVCRkJEMDgxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjq7kEikv8ndSrCxGTOO8qrOY
jbhHoK8/0RpDyWqv+oENkPZ3epVMPcmvXKVDnJCn5vfwGKGqDdjCKOCLyDgvA6IY
qb2jMwqae1Kia4W1WMkBooKYFGJRcU00qxxjbHV7tBROugPJpqO4Qge9IMQ2sSnv
cHT7F3/aUFRpZKqc1S9aCDaNfe0UXvwxWHI8DzozfTNCCJN7R3EosqFu9U2Oq5Gr
zdwedMEQvoVrRz/EN6zD/VTe9j4oc7BIBVTnFRkwcn4N9qfM5at+ZwBmdUwz3NKa
aBzg/NBB6lUIrvkiJBJxQ+dG4te5q7gqCyHzC71H9vQUMyuia2T3gAV7BpitAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUqf5qyVhrM4ogtQdjBtISW/vQgbwwHwYDVR0j
BBgwFoAUdcMnyw0uRy4M3kO0psCGBssOsPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWt6cG1SRm5XVWJ0MWNyajhkb3ZBUWZhb01vd0hmUmVvRE5wa3ZQVkx0
d2kvMS83NUMzMjdDQjBEMkU0NzJFMENERTQzQjRBNkMwODYwNkNCMEVCMEY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1QzMyN0NCMEQyRTQ3MkUw
Q0RFNDNCNEE2QzA4NjA2Q0IwRUIwRjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlrenBtUkZuV1VidDFjcmo4ZG92QVFmYW9Nb3dIZlJlb0ROcGt2UFZMdHdpLzEv
MzIzODMwMzQzYTMyMzg2NjM4M2EzNDMxMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMzM5MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEKPhBATANBgkqhkiG9w0BAQsF
AAOCAQEAaNpxm/gWxkd47LAnpWg5/uLi8iJnYODKLhKfb1OAec+BthrZRd+xVT8x
VGBeLFnfO3OWMFUxKWPerZYHk4Enf1GfLCdPEAExPrTz7pg/rMDcJo7neiTVAirf
26xEVUEOf1xiFO1DLmoGDLJ5UbmVCGT8corG0NUJMTAfmYnI4JPZn7y0gglkeRrv
xrvtRihPNQZDC3efczo7ONnTV2wnOLQJDl92ZzVM+fC7AtA1KYCszu0374qQOIJ1
p6pSLUxjBWKCK1NfBIamgsDni5j3PD5gPG6qmFi+/w9noholkdtsliyHW32AA05X
E2J4cgejJq+UvndYsCw/4wxKlxVvYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org