Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a383030303a3a2f33332d3333203d3e20323637333339.roa
File:                     323830343a346266343a383030303a3a2f33332d3333203d3e20323637333339.roa (raw, json)
Hash identifier:          gcTiCPaKpCFQarxSdwUw1xoldVrOw6/TB8MlryWe6Qg=
Subject key identifier:   F6:27:01:8D:26:FB:C7:13:4A:27:00:B1:E2:5A:27:BF:62:58:B6:A3
Certificate issuer:       /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial:       451DEEA9EEF96009E0AC1AEBCAF7A5D8BA03CFA1
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a383030303a3a2f33332d3333203d3e20323637333339.roa
Signing time:             Sun 09 Jul 2023 04:08:01 +0000
ROA not before:           Sun 09 Jul 2023 04:03:01 +0000
ROA not after:            Sun 07 Jul 2024 04:08:01 +0000
asID:                     267339
IP address blocks:        2804:4bf4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1d:ee:a9:ee:f9:60:09:e0:ac:1a:eb:ca:f7:a5:d8:ba:03:cf:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
        Validity
            Not Before: Jul  9 04:03:01 2023 GMT
            Not After : Jul  7 04:08:01 2024 GMT
        Subject: CN=F627018D26FBC7134A2700B1E25A27BF6258B6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:5b:cd:dc:e0:eb:c8:50:64:d0:2f:b2:d3:
                    49:01:31:3e:5d:3c:a4:4a:95:b1:01:b2:81:18:16:
                    6a:07:24:83:7c:72:1b:fe:0a:bf:d6:2f:d9:f2:32:
                    ee:19:85:ec:d4:7f:ce:31:5d:e3:2a:3b:2c:96:8b:
                    e9:68:90:ca:80:b5:33:f1:43:ff:98:fd:f3:c5:f2:
                    d3:b0:cb:1d:84:90:7a:86:bc:3f:d9:ec:ba:3d:a6:
                    ff:4a:53:1c:51:24:80:e3:e4:db:e4:00:18:29:25:
                    98:f0:b3:8d:21:5d:87:d5:f8:f5:a1:fe:3f:79:bb:
                    a0:2f:00:ab:fb:a0:10:e4:c5:15:9e:f5:da:9f:a4:
                    63:a4:ed:f5:03:e6:ac:9d:a7:e0:74:3f:eb:c5:cd:
                    b3:64:38:a5:d2:b7:71:68:57:64:a0:df:e7:70:14:
                    fb:eb:85:cf:07:27:87:ed:e4:61:d7:12:92:c4:e2:
                    68:27:3c:a2:fb:b7:bf:90:7d:34:07:22:fb:5d:c3:
                    40:96:cd:45:f4:be:f6:d2:e0:d5:a2:c5:cf:19:d6:
                    c5:49:b0:27:d2:b7:f1:c1:8b:ba:79:4b:13:87:dd:
                    51:e2:98:1b:82:a2:f8:c2:f8:12:55:e4:ba:ac:9e:
                    5b:c3:54:e8:12:88:7b:2e:d4:84:6d:74:c5:fa:6f:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:27:01:8D:26:FB:C7:13:4A:27:00:B1:E2:5A:27:BF:62:58:B6:A3
            X509v3 Authority Key Identifier:
                keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a383030303a3a2f33332d3333203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bf4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:f8:15:2b:32:5b:16:6b:89:61:0e:34:67:c5:8f:61:ce:
         34:bf:0e:14:a6:ef:2b:40:17:02:e0:b3:67:d8:bf:31:44:1b:
         0a:02:b1:80:19:88:2f:ba:95:41:bb:d4:9e:f6:83:10:67:45:
         a1:94:c2:d7:23:78:af:16:e8:c1:8d:9c:ac:dc:2c:5b:e3:aa:
         5f:58:90:0c:95:5a:04:2b:ac:ea:cc:bb:65:27:52:29:c3:cb:
         ec:14:5d:c8:f6:03:a7:43:00:61:cc:13:39:85:ae:4a:67:f4:
         3d:7f:d8:58:76:c5:c8:8b:12:c7:b9:2b:b8:ca:61:ae:1b:e2:
         be:bb:94:e9:88:4c:5f:74:47:fe:3d:39:e2:5f:94:8e:46:ce:
         95:5d:e9:db:74:c3:42:2e:c5:b8:4c:1a:02:fb:5d:5b:59:ff:
         33:90:ba:62:87:0b:00:77:87:60:53:04:a8:27:e6:60:ad:7d:
         12:4c:3a:18:5f:39:14:3f:38:53:9d:fb:b9:34:25:6d:32:f7:
         eb:fa:56:02:e7:10:91:67:6c:68:bc:f8:a1:b0:fb:b5:e0:68:
         a7:26:f5:20:0c:4c:c1:6c:bf:3c:c2:1d:14:05:1c:50:86:f8:
         f0:80:49:d3:cf:0e:08:d3:c4:18:d6:02:b7:ec:51:17:22:6d:
         fa:89:75:bd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURR3uqe75YAngrBrryvel2LoDz6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5MDg3RTU1ODQ2Mjc0NDc3QUIwRTQ1OTdGRDc1NERC
MDUwOTIwMzAeFw0yMzA3MDkwNDAzMDFaFw0yNDA3MDcwNDA4MDFaMDMxMTAvBgNV
BAMTKEY2MjcwMThEMjZGQkM3MTM0QTI3MDBCMUUyNUEyN0JGNjI1OEI2QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2a1vN3ODryFBk0C+y00kBMT5d
PKRKlbEBsoEYFmoHJIN8chv+Cr/WL9nyMu4ZhezUf84xXeMqOyyWi+lokMqAtTPx
Q/+Y/fPF8tOwyx2EkHqGvD/Z7Lo9pv9KUxxRJIDj5NvkABgpJZjws40hXYfV+PWh
/j95u6AvAKv7oBDkxRWe9dqfpGOk7fUD5qydp+B0P+vFzbNkOKXSt3FoV2Sg3+dw
FPvrhc8HJ4ft5GHXEpLE4mgnPKL7t7+QfTQHIvtdw0CWzUX0vvbS4NWixc8Z1sVJ
sCfSt/HBi7p5SxOH3VHimBuCovjC+BJV5LqsnlvDVOgSiHsu1IRtdMX6b0wZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU9icBjSb7xxNKJwCx4lonv2JYtqMwHwYDVR0j
BBgwFoAUoJCH5VhGJ0R3qw5Fl/11TbBQkgMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9CYndxeFg5MURleGgxVFRxeng5WDlab0ZDNFQ1VEw0OGIycVJTcm9E
WVcvMC9BMDkwODdFNTU4NDYyNzQ0NzdBQjBFNDU5N0ZENzU0REIwNTA5MjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOTA4N0U1NTg0NjI3NDQ3
N0FCMEU0NTk3RkQ3NTREQjA1MDkyMDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvQmJ3cXhYOTFEZXhoMVRUcXp4OVg5Wm9GQzRUNVRMNDhiMnFSU3JvRFlXLzAv
MzIzODMwMzQzYTM0NjI2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzMzMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygES/SAMA0GCSqGSIb3DQEBCwUA
A4IBAQABv/gVKzJbFmuJYQ40Z8WPYc40vw4Upu8rQBcC4LNn2L8xRBsKArGAGYgv
upVBu9Se9oMQZ0WhlMLXI3ivFujBjZys3Cxb46pfWJAMlVoEK6zqzLtlJ1Ipw8vs
FF3I9gOnQwBhzBM5ha5KZ/Q9f9hYdsXIixLHuSu4ymGuG+K+u5TpiExfdEf+PTni
X5SORs6VXenbdMNCLsW4TBoC+11bWf8zkLpihwsAd4dgUwSoJ+ZgrX0STDoYXzkU
PzhTnfu5NCVtMvfr+lYC5xCRZ2xovPihsPu14GinJvUgDEzBbL88wh0UBRxQhvjw
gEnTzw4I08QY1gK37FEXIm36iXW9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org