Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa
File:                     323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa (raw, json)
Hash identifier:          A4MMfhL0+Hm9xwXESxKzTE9PJSYluIaRLJ//G4qY7SA=
Subject key identifier:   08:C1:01:C9:9A:4A:1B:BD:5B:0D:A8:6F:7A:50:C9:42:8C:CC:4F:C8
Certificate issuer:       /CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
Certificate serial:       795810FC5B0F898BB42B9DA167169F23B3BC5AD0
Authority key identifier: BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa
Signing time:             Thu 30 Nov 2023 20:51:20 +0000
ROA not before:           Thu 30 Nov 2023 20:46:20 +0000
ROA not after:            Thu 28 Nov 2024 20:51:20 +0000
asID:                     267999
IP address blocks:        2804:5674:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:58:10:fc:5b:0f:89:8b:b4:2b:9d:a1:67:16:9f:23:b3:bc:5a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
        Validity
            Not Before: Nov 30 20:46:20 2023 GMT
            Not After : Nov 28 20:51:20 2024 GMT
        Subject: CN=08C101C99A4A1BBD5B0DA86F7A50C9428CCC4FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:48:c4:f4:75:f4:3c:94:a3:25:b6:bc:fc:
                    37:64:80:2d:dd:e3:3d:48:af:2a:57:54:17:95:b6:
                    77:fe:56:a4:0a:82:7e:09:ba:54:37:d8:dd:eb:45:
                    d2:7d:a8:ec:df:80:ad:6c:71:2c:75:f9:c3:a3:ed:
                    f3:22:eb:ed:ab:4b:8f:2d:00:6c:59:fc:47:e9:26:
                    2e:7a:7c:41:68:1f:06:c7:47:aa:e9:a0:67:1e:73:
                    7f:a1:54:dc:30:2d:a7:89:fc:71:3b:c7:b4:37:2f:
                    b5:67:af:74:5b:6f:61:07:86:81:8e:71:d6:0f:25:
                    95:e8:e1:96:44:7e:d1:c0:bb:a6:fa:c4:fa:a2:e0:
                    e1:a7:8f:ec:76:d0:79:1a:6d:82:55:9b:be:51:5d:
                    53:31:8b:70:6c:52:e9:b4:25:70:f0:c7:0b:17:62:
                    c8:10:3a:22:76:b5:0f:9d:f8:4e:c8:bb:6c:ef:ff:
                    6f:bd:b9:91:e5:94:0d:da:2b:19:8f:a6:53:aa:38:
                    85:69:31:28:e1:87:fe:9c:21:28:c0:7e:ae:7e:11:
                    fb:09:3b:17:1f:ab:c3:55:d2:52:0a:69:72:11:db:
                    d1:2f:98:9c:3f:2c:56:a1:1b:bf:7b:b1:72:2a:0d:
                    fd:18:0b:f5:71:f0:9c:3b:f5:27:12:da:3e:23:e6:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:01:C9:9A:4A:1B:BD:5B:0D:A8:6F:7A:50:C9:42:8C:CC:4F:C8
            X509v3 Authority Key Identifier:
                keyid:BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c0:81:c5:c0:c6:6b:c8:92:e2:63:c0:41:2b:16:7a:ea:22:c9:
         c2:be:4b:96:ab:88:31:3d:9c:de:05:a9:04:2f:2e:f9:93:78:
         1a:a9:b9:cb:fd:ce:c7:d8:e2:d2:c3:b4:8c:1c:8d:d1:33:69:
         05:0d:da:ca:6d:8e:77:d2:3e:4b:ff:ea:fc:a9:22:cb:03:47:
         88:53:18:9a:93:6d:bf:e2:44:97:a5:96:bf:5e:4f:84:9c:ee:
         dd:2c:f5:64:8a:3f:74:4a:bd:a1:d1:c8:f5:9b:a2:2c:1f:62:
         c4:80:24:be:bc:7c:51:cd:95:a8:f8:80:28:03:75:c4:61:e4:
         ef:4f:8e:4b:db:65:09:9e:f1:62:5a:3d:42:fa:61:62:6c:43:
         f4:03:70:05:a6:b0:50:cf:b2:0d:81:cf:56:75:bf:27:2f:32:
         fe:2d:e4:c4:a3:6d:1a:78:84:0f:6d:36:8a:2c:3f:27:4d:ad:
         98:42:1f:d2:b8:da:48:e5:10:c0:91:cf:ec:e1:b6:d5:b8:83:
         28:2c:b1:bb:55:1b:fc:43:3f:57:48:cf:76:86:b5:e5:c6:f3:
         b5:4f:9b:87:1a:40:8c:18:26:d1:96:f4:70:bf:de:d5:92:18:
         c0:b1:d8:d0:8c:2f:6e:da:0e:3b:a5:64:74:de:07:66:68:83:
         59:9e:42:17
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeVgQ/FsPiYu0K52hZxafI7O8WtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkEwMzg4RTFDQTU5MjRBOTE2QkIxMTY1M0RENDIyODVB
Nzc3NkE0QjAeFw0yMzExMzAyMDQ2MjBaFw0yNDExMjgyMDUxMjBaMDMxMTAvBgNV
BAMTKDA4QzEwMUM5OUE0QTFCQkQ1QjBEQTg2RjdBNTBDOTQyOENDQzRGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyi0jE9HX0PJSjJba8/DdkgC3d
4z1IrypXVBeVtnf+VqQKgn4JulQ32N3rRdJ9qOzfgK1scSx1+cOj7fMi6+2rS48t
AGxZ/EfpJi56fEFoHwbHR6rpoGcec3+hVNwwLaeJ/HE7x7Q3L7Vnr3Rbb2EHhoGO
cdYPJZXo4ZZEftHAu6b6xPqi4OGnj+x20HkabYJVm75RXVMxi3BsUum0JXDwxwsX
YsgQOiJ2tQ+d+E7Iu2zv/2+9uZHllA3aKxmPplOqOIVpMSjhh/6cISjAfq5+EfsJ
Oxcfq8NV0lIKaXIR29EvmJw/LFahG797sXIqDf0YC/Vx8Jw79ScS2j4j5udpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCMEByZpKG71bDahvelDJQozMT8gwHwYDVR0j
BBgwFoAUugOI4cpZJKkWuxFlPdQihad3akswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldy
S2QvMC9CQTAzODhFMUNBNTkyNEE5MTZCQjExNjUzREQ0MjI4NUE3Nzc2QTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBMDM4OEUxQ0E1OTI0QTkx
NkJCMTE2NTNERDQyMjg1QTc3NzZBNEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FtUGpFR2VDeW50MmJTVHU4eDE0R1Z1ZFdmcFdra2ZBZFd2Z2Z1RlpXcktkLzAv
MzIzODMwMzQzYTM1MzYzNzM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVnSAMA0GCSqGSIb3DQEBCwUA
A4IBAQDAgcXAxmvIkuJjwEErFnrqIsnCvkuWq4gxPZzeBakELy75k3gaqbnL/c7H
2OLSw7SMHI3RM2kFDdrKbY530j5L/+r8qSLLA0eIUxiak22/4kSXpZa/Xk+EnO7d
LPVkij90Sr2h0cj1m6IsH2LEgCS+vHxRzZWo+IAoA3XEYeTvT45L22UJnvFiWj1C
+mFibEP0A3AFprBQz7INgc9Wdb8nLzL+LeTEo20aeIQPbTaKLD8nTa2YQh/SuNpI
5RDAkc/s4bbVuIMoLLG7VRv8Qz9XSM92hrXlxvO1T5uHGkCMGCbRlvRwv97VkhjA
sdjQjC9u2g47pWR03gdmaINZnkIX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org