Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a383030303a3a2f33332d3333203d3e20323632383038.roa
File:                     323830343a313336383a383030303a3a2f33332d3333203d3e20323632383038.roa (raw, json)
Hash identifier:          MYFcxkZhJ+v2ypsS8nac+avYkLD5PaZ3w64w6fIiEM0=
Subject key identifier:   E3:9B:BF:FC:00:0B:BE:B1:E7:D0:9C:03:69:C0:CA:38:8A:91:47:68
Certificate issuer:       /CN=4C13B91FD6E1DD6926049766E3A0C9ED2EF0F932
Certificate serial:       26FEBBBF7160F19A4BC3A5A131F299918A5F1F00
Authority key identifier: 4C:13:B9:1F:D6:E1:DD:69:26:04:97:66:E3:A0:C9:ED:2E:F0:F9:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C13B91FD6E1DD6926049766E3A0C9ED2EF0F932.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a383030303a3a2f33332d3333203d3e20323632383038.roa
Signing time:             Tue 25 Jun 2024 18:38:23 +0000
ROA not before:           Tue 25 Jun 2024 18:33:23 +0000
ROA not after:            Tue 24 Jun 2025 18:38:23 +0000
asID:                     262808
IP address blocks:        2804:1368:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fe:bb:bf:71:60:f1:9a:4b:c3:a5:a1:31:f2:99:91:8a:5f:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C13B91FD6E1DD6926049766E3A0C9ED2EF0F932
        Validity
            Not Before: Jun 25 18:33:23 2024 GMT
            Not After : Jun 24 18:38:23 2025 GMT
        Subject: CN=E39BBFFC000BBEB1E7D09C0369C0CA388A914768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:c6:00:af:d9:24:6f:77:01:3f:82:ae:84:
                    f3:de:62:78:49:21:45:4d:5a:70:d5:8d:21:c3:a5:
                    0b:4a:0e:bd:79:85:7a:8e:9a:76:c4:2f:1d:e4:44:
                    eb:54:37:6e:93:b8:23:4e:e4:ee:d7:69:79:29:65:
                    76:67:0f:b4:26:ca:79:4e:ad:cf:11:b4:ea:f3:d4:
                    af:2e:25:99:7d:38:12:94:2b:e0:ca:20:5c:a7:dc:
                    08:b2:30:15:6f:a9:b1:27:7b:fd:bd:a2:4c:28:ae:
                    ea:b3:65:96:d4:d2:be:61:f4:3d:49:d1:23:45:e6:
                    78:0c:f2:b6:d3:9d:df:ea:56:f6:ed:87:25:77:6b:
                    9c:1b:34:a3:a1:d8:e5:b0:c0:60:7c:71:95:60:2c:
                    8b:4e:11:fe:b6:33:de:2a:fc:30:ca:10:67:2a:5e:
                    a5:5a:3d:1c:b4:28:b3:9e:66:7a:90:22:bb:db:42:
                    ff:f3:b4:31:3d:1f:9d:6d:56:69:83:4a:fb:50:6b:
                    52:97:9e:25:8a:36:88:bf:90:4d:a3:a6:bb:25:12:
                    54:c0:8e:7c:84:e9:c5:d5:3c:1d:d4:9d:8f:e5:8e:
                    8f:04:48:ac:29:b4:a8:34:f7:7b:79:87:55:67:92:
                    a3:4c:af:37:d3:39:95:07:39:6f:b2:8d:38:ad:98:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9B:BF:FC:00:0B:BE:B1:E7:D0:9C:03:69:C0:CA:38:8A:91:47:68
            X509v3 Authority Key Identifier:
                keyid:4C:13:B9:1F:D6:E1:DD:69:26:04:97:66:E3:A0:C9:ED:2E:F0:F9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/4C13B91FD6E1DD6926049766E3A0C9ED2EF0F932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C13B91FD6E1DD6926049766E3A0C9ED2EF0F932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a383030303a3a2f33332d3333203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1368:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:34:86:fe:e0:ee:be:39:de:e6:86:e2:e4:90:5b:3f:87:31:
         51:ef:1a:64:20:99:bf:20:6c:ce:0b:69:5e:8c:25:de:a3:39:
         09:5e:d2:63:cc:01:7b:57:4f:ad:42:b8:85:6c:e8:22:6f:4b:
         26:02:5b:22:89:60:f7:c7:cb:94:28:6b:57:d9:de:4b:1f:f7:
         65:a2:4e:77:0c:e0:30:bd:09:bb:a8:f4:e5:06:5c:8b:a1:ab:
         4c:d2:f4:ea:4a:77:9e:92:c8:73:08:70:b9:55:97:c6:48:75:
         cb:d2:9e:74:25:00:a3:5b:18:1d:fd:f7:e9:20:7b:2f:75:a9:
         5a:64:e3:71:98:42:5a:86:e8:2c:7e:89:9c:9d:93:95:7b:8b:
         e4:1c:c4:1e:ea:ee:43:31:dc:69:ce:68:e1:78:82:a6:df:60:
         ba:9d:96:6a:9e:c1:4e:1a:c3:74:e8:5d:74:8f:a7:5d:b3:36:
         e5:6a:5c:f4:4d:d1:a3:6b:d8:8e:b2:c5:89:06:9b:eb:a9:15:
         e5:3c:e1:ef:bb:5f:6d:ab:99:8b:9e:fe:f5:48:1a:35:89:7b:
         9a:e0:50:84:33:8d:52:6a:ba:f0:29:39:c9:0c:12:fe:fd:31:
         83:5a:08:d0:0c:0c:24:66:a5:b5:6e:3c:ed:ed:49:cd:89:e3:
         e4:7d:37:11
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJv67v3Fg8ZpLw6WhMfKZkYpfHwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMxM0I5MUZENkUxREQ2OTI2MDQ5NzY2RTNBMEM5RUQy
RUYwRjkzMjAeFw0yNDA2MjUxODMzMjNaFw0yNTA2MjQxODM4MjNaMDMxMTAvBgNV
BAMTKEUzOUJCRkZDMDAwQkJFQjFFN0QwOUMwMzY5QzBDQTM4OEE5MTQ3NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcsYAr9kkb3cBP4KuhPPeYnhJ
IUVNWnDVjSHDpQtKDr15hXqOmnbELx3kROtUN26TuCNO5O7XaXkpZXZnD7QmynlO
rc8RtOrz1K8uJZl9OBKUK+DKIFyn3AiyMBVvqbEne/29okworuqzZZbU0r5h9D1J
0SNF5ngM8rbTnd/qVvbthyV3a5wbNKOh2OWwwGB8cZVgLItOEf62M94q/DDKEGcq
XqVaPRy0KLOeZnqQIrvbQv/ztDE9H51tVmmDSvtQa1KXniWKNoi/kE2jprslElTA
jnyE6cXVPB3UnY/ljo8ESKwptKg093t5h1VnkqNMrzfTOZUHOW+yjTitmKpdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU45u//AALvrHn0JwDacDKOIqRR2gwHwYDVR0j
BBgwFoAUTBO5H9bh3WkmBJdm46DJ7S7w+TIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC80QzEzQjkxRkQ2RTFERDY5MjYwNDk3NjZFM0EwQzlFRDJFRjBGOTMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMTNCOTFGRDZFMURENjky
NjA0OTc2NkUzQTBDOUVEMkVGMEY5MzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzIzODMwMzQzYTMxMzMzNjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMjM4MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEE2iAMA0GCSqGSIb3DQEBCwUA
A4IBAQCFNIb+4O6+Od7mhuLkkFs/hzFR7xpkIJm/IGzOC2lejCXeozkJXtJjzAF7
V0+tQriFbOgib0smAlsiiWD3x8uUKGtX2d5LH/dlok53DOAwvQm7qPTlBlyLoatM
0vTqSneekshzCHC5VZfGSHXL0p50JQCjWxgd/ffpIHsvdalaZONxmEJahugsfomc
nZOVe4vkHMQe6u5DMdxpzmjheIKm32C6nZZqnsFOGsN06F10j6ddszblalz0TdGj
a9iOssWJBpvrqRXlPOHvu19tq5mLnv71SBo1iXua4FCEM41SarrwKTnJDBL+/TGD
WgjQDAwkZqW1bjzt7UnNiePkfTcR
-----END CERTIFICATE-----
Generated at Wed Jun 26 01:38:26 2024 by rpki-client on console-fra.rpki-client.org