Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/323830343a313761633a3a2f33322d3332203d3e20323633313634.roa
File:                     323830343a313761633a3a2f33322d3332203d3e20323633313634.roa (raw, json)
Hash identifier:          DjmtpYNoEICsakt7fGthlOWvfjKsdyUbDy0Onuea3BE=
Subject key identifier:   19:64:3F:14:14:27:6D:5F:92:92:64:C2:2E:75:A8:63:D1:FA:22:D1
Certificate issuer:       /CN=991F9EF30E0F0974AA97C60E2654F0833FACCA1B
Certificate serial:       735FB5619A1EB641D517588EE53EF882F820E687
Authority key identifier: 99:1F:9E:F3:0E:0F:09:74:AA:97:C6:0E:26:54:F0:83:3F:AC:CA:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/323830343a313761633a3a2f33322d3332203d3e20323633313634.roa
Signing time:             Sun 07 Apr 2024 22:17:49 +0000
ROA not before:           Sun 07 Apr 2024 22:12:49 +0000
ROA not after:            Sun 06 Apr 2025 22:17:49 +0000
asID:                     263164
IP address blocks:        2804:17ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5f:b5:61:9a:1e:b6:41:d5:17:58:8e:e5:3e:f8:82:f8:20:e6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991F9EF30E0F0974AA97C60E2654F0833FACCA1B
        Validity
            Not Before: Apr  7 22:12:49 2024 GMT
            Not After : Apr  6 22:17:49 2025 GMT
        Subject: CN=19643F1414276D5F929264C22E75A863D1FA22D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:d7:03:ee:ae:ec:73:9e:aa:76:c9:62:0e:
                    9a:f5:30:f2:6a:27:df:81:f3:ef:eb:56:73:df:03:
                    76:76:2e:b1:8a:a9:67:ac:21:4c:a8:a1:70:15:33:
                    ad:88:23:4e:be:23:8b:ae:06:10:e9:98:4b:d7:fd:
                    f9:04:0f:41:50:56:f7:c8:e4:9e:c4:1d:53:92:f5:
                    8e:f3:d5:11:18:8e:75:fd:52:5c:f3:35:92:0f:8f:
                    e0:d7:98:0b:0d:de:5c:e8:9d:28:84:41:e1:c9:e5:
                    9b:d9:9c:cd:54:f7:f4:af:6d:fe:25:dc:63:07:c0:
                    6d:c4:15:fe:08:ea:17:47:c5:08:42:df:e3:74:14:
                    e1:4d:49:20:c5:13:9b:cc:b0:e4:de:2c:4a:4c:bb:
                    f9:38:cc:5d:da:4e:24:6d:84:1e:34:e4:10:2a:8f:
                    e5:ab:76:1a:b3:81:23:bc:4f:28:14:37:50:68:51:
                    5e:90:4c:2c:c3:3a:b9:f6:4e:69:e1:90:bb:cf:37:
                    69:e0:66:55:b9:43:f2:bf:d1:03:9c:15:59:42:49:
                    87:6c:27:9a:56:5c:fd:ed:4c:4c:f1:60:e4:51:6e:
                    54:7a:98:d3:44:7a:2a:24:bd:e0:0b:d9:4f:cf:45:
                    41:32:6e:7f:11:af:94:06:6b:6f:50:7e:5b:f6:92:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:3F:14:14:27:6D:5F:92:92:64:C2:2E:75:A8:63:D1:FA:22:D1
            X509v3 Authority Key Identifier:
                keyid:99:1F:9E:F3:0E:0F:09:74:AA:97:C6:0E:26:54:F0:83:3F:AC:CA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/323830343a313761633a3a2f33322d3332203d3e20323633313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:48:ee:6b:43:5e:f8:6c:f1:24:cf:58:6c:9e:eb:6b:ba:
         37:41:7b:e6:7c:33:34:3d:cf:ef:1c:90:25:65:e2:31:c8:9f:
         6e:e4:d3:6c:ec:05:c0:a0:65:4f:77:3d:4f:d4:86:b9:61:7c:
         0b:ce:4f:1a:bd:df:f9:cd:d4:09:05:3d:b3:a2:5b:e9:9c:5b:
         b1:e9:47:9a:e6:7f:3d:68:7e:cb:29:a5:dd:4c:80:f3:bd:1f:
         02:43:15:d0:ee:b0:0e:9d:f0:cb:08:50:fb:cb:2e:08:fc:20:
         49:33:3a:da:78:13:a5:1b:42:7a:30:9a:06:d8:9a:2a:2c:b4:
         74:b5:d5:cf:56:7a:72:61:2b:3c:2f:0c:e3:4c:b6:40:9e:fb:
         26:4e:04:01:6f:9f:37:e3:b9:0b:cb:e2:34:d9:18:d8:8c:51:
         35:69:10:32:df:bf:df:6e:a5:be:ac:f6:43:ab:86:81:f1:cd:
         f3:05:21:59:ec:79:f2:1d:bd:c5:c7:99:74:30:2e:d2:d7:77:
         34:a6:5e:9f:a3:38:37:03:5e:f5:40:dd:b0:54:c0:e9:8e:65:
         ea:eb:a2:6d:d5:44:6d:47:9f:35:ad:74:2f:59:34:b9:0f:cd:
         ee:9e:9f:5e:79:b8:b7:49:78:c5:78:ba:fb:a9:7c:ad:52:5d:
         bc:08:dd:5e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUc1+1YZoetkHVF1iO5T74gvgg5ocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxRjlFRjMwRTBGMDk3NEFBOTdDNjBFMjY1NEYwODMz
RkFDQ0ExQjAeFw0yNDA0MDcyMjEyNDlaFw0yNTA0MDYyMjE3NDlaMDMxMTAvBgNV
BAMTKDE5NjQzRjE0MTQyNzZENUY5MjkyNjRDMjJFNzVBODYzRDFGQTIyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYg9cD7q7sc56qdsliDpr1MPJq
J9+B8+/rVnPfA3Z2LrGKqWesIUyooXAVM62II06+I4uuBhDpmEvX/fkED0FQVvfI
5J7EHVOS9Y7z1REYjnX9UlzzNZIPj+DXmAsN3lzonSiEQeHJ5ZvZnM1U9/Svbf4l
3GMHwG3EFf4I6hdHxQhC3+N0FOFNSSDFE5vMsOTeLEpMu/k4zF3aTiRthB405BAq
j+WrdhqzgSO8TygUN1BoUV6QTCzDOrn2TmnhkLvPN2ngZlW5Q/K/0QOcFVlCSYds
J5pWXP3tTEzxYORRblR6mNNEeiokveAL2U/PRUEybn8Rr5QGa29Qflv2ktCvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGWQ/FBQnbV+SkmTCLnWoY9H6ItEwHwYDVR0j
BBgwFoAUmR+e8w4PCXSql8YOJlTwgz+syhswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF1SDZrSkU4VkhoeHhYVlU2bzdCS0R3ZXVLQ0tMaFhqYkJhR2UxUHR4
TEQvMS85OTFGOUVGMzBFMEYwOTc0QUE5N0M2MEUyNjU0RjA4MzNGQUNDQTFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5MUY5RUYzMEUwRjA5NzRB
QTk3QzYwRTI2NTRGMDgzM0ZBQ0NBMUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdUg2a0pFOFZIaHh4WFZVNm83QktEd2V1S0NLTGhYamJCYUdlMVB0eExELzEv
MzIzODMwMzQzYTMxMzc2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzEzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQXrDANBgkqhkiG9w0BAQsFAAOCAQEAmH1I7mtD
Xvhs8STPWGye62u6N0F75nwzND3P7xyQJWXiMcifbuTTbOwFwKBlT3c9T9SGuWF8
C85PGr3f+c3UCQU9s6Jb6ZxbselHmuZ/PWh+yyml3UyA870fAkMV0O6wDp3wywhQ
+8suCPwgSTM62ngTpRtCejCaBtiaKiy0dLXVz1Z6cmErPC8M40y2QJ77Jk4EAW+f
N+O5C8viNNkY2IxRNWkQMt+/326lvqz2Q6uGgfHN8wUhWex58h29xceZdDAu0td3
NKZen6M4NwNe9UDdsFTA6Y5l6uuibdVEbUefNa10L1k0uQ/N7p6fXnm4t0l4xXi6
+6l8rVJdvAjdXg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org