Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a383030303a3a2f33342d3334203d3e20323730323735.roa
File:                     323830343a363938343a383030303a3a2f33342d3334203d3e20323730323735.roa (raw, json)
Hash identifier:          Hur/k1IhkC4+K0lyoAuydokXqaYcfDWhUYXg/Q11itI=
Subject key identifier:   DE:65:2D:FA:AD:57:DB:AD:5F:24:06:03:60:9C:E9:C7:2C:9F:03:CA
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       7CA10C8A4AC8E88DC005B85423B7709B0E02F73C
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a383030303a3a2f33342d3334203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:15:43 +0000
ROA not before:           Mon 26 Jun 2023 16:10:43 +0000
ROA not after:            Mon 24 Jun 2024 16:15:43 +0000
asID:                     270275
IP address blocks:        2804:6984:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a1:0c:8a:4a:c8:e8:8d:c0:05:b8:54:23:b7:70:9b:0e:02:f7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:10:43 2023 GMT
            Not After : Jun 24 16:15:43 2024 GMT
        Subject: CN=DE652DFAAD57DBAD5F240603609CE9C72C9F03CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:e8:4d:4f:1b:56:a9:1c:90:92:6c:93:2f:
                    8c:90:a8:b7:15:26:b7:2e:a0:1d:70:43:73:57:10:
                    b2:c6:ab:9c:17:39:ee:d2:8b:af:b5:ee:da:f5:6d:
                    16:20:ff:e2:37:f5:0b:eb:03:74:03:79:91:bc:a1:
                    dd:2c:3a:88:d8:da:0d:49:cf:6f:ec:d1:ac:43:24:
                    6d:29:eb:46:f3:de:de:0c:fb:82:69:4f:42:fc:f9:
                    db:79:46:12:3b:03:d3:63:bc:2b:40:48:0e:12:05:
                    9a:f0:b5:4a:dd:10:d1:45:f5:ab:da:f3:b3:eb:3e:
                    8b:fa:9a:74:5d:10:25:ff:2c:61:e4:5e:36:33:93:
                    44:0b:9f:1f:87:a2:c1:25:2e:96:3d:da:ca:e0:32:
                    bd:9b:a1:e6:d0:a6:c4:85:0b:97:f8:18:91:9b:c9:
                    b3:db:91:91:31:9a:2e:d9:4a:80:fa:3d:d1:d1:8a:
                    84:1d:2b:d2:53:01:8c:49:5f:f0:44:b1:af:37:89:
                    42:32:3c:f3:31:26:af:29:78:bc:19:47:96:33:aa:
                    5b:b4:d1:ce:be:3b:8f:f1:1b:a1:ab:6d:1b:d8:e2:
                    31:64:30:b5:cd:a7:3d:45:52:96:93:f2:ec:a3:37:
                    aa:22:f7:ca:69:84:63:d0:8e:0d:d5:e8:1d:15:85:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:65:2D:FA:AD:57:DB:AD:5F:24:06:03:60:9C:E9:C7:2C:9F:03:CA
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a383030303a3a2f33342d3334203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:18:52:b0:1a:c7:da:38:52:2c:63:d5:a2:ca:86:13:6b:
         cc:0a:27:2e:7f:6a:87:16:4a:1f:fc:bc:e1:59:b7:43:84:4c:
         be:27:57:5b:a7:16:3c:f6:f2:c3:7e:d3:53:25:2b:19:8a:36:
         6d:89:ee:fe:cb:15:6f:7d:6f:51:d2:b9:7d:df:44:ab:7c:b8:
         f3:47:68:bd:68:63:3d:33:c9:99:52:ea:b3:85:23:db:5e:dc:
         4d:a5:9d:ed:5c:b6:42:08:aa:c9:a7:09:68:63:74:63:3c:6b:
         a7:b9:ca:4c:31:fd:84:f9:42:b0:d4:05:63:ee:23:68:43:08:
         ea:5c:aa:af:c9:bc:7e:99:0c:75:57:f9:60:b6:20:19:94:0c:
         b6:f9:83:09:0d:d7:23:25:5d:20:b4:4c:56:c9:7d:a7:4e:54:
         8e:cb:4b:09:1e:8e:0e:ce:3e:b4:b8:29:41:2e:9c:64:b0:8c:
         95:b5:69:04:93:ad:2d:20:01:34:13:76:32:4b:f9:73:f3:2d:
         05:9b:0a:f4:ce:e3:95:73:80:ee:97:f1:c0:20:89:59:72:de:
         3c:37:b4:3e:8d:3e:81:28:a2:0f:ce:bd:cd:d6:be:41:aa:e3:
         4f:a6:b1:b8:c3:c0:0b:b2:76:fe:42:38:9d:1c:d3:63:d2:0a:
         66:a3:7c:29
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfKEMikrI6I3ABbhUI7dwmw4C9zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0RTA0NUNDRDYwRjU3RjkzQzNDOTFENUE5QTcxMDA0
MTAyRDQ0QjAeFw0yMzA2MjYxNjEwNDNaFw0yNDA2MjQxNjE1NDNaMDMxMTAvBgNV
BAMTKERFNjUyREZBQUQ1N0RCQUQ1RjI0MDYwMzYwOUNFOUM3MkM5RjAzQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+OhNTxtWqRyQkmyTL4yQqLcV
JrcuoB1wQ3NXELLGq5wXOe7Si6+17tr1bRYg/+I39QvrA3QDeZG8od0sOojY2g1J
z2/s0axDJG0p60bz3t4M+4JpT0L8+dt5RhI7A9NjvCtASA4SBZrwtUrdENFF9ava
87PrPov6mnRdECX/LGHkXjYzk0QLnx+HosElLpY92srgMr2boebQpsSFC5f4GJGb
ybPbkZExmi7ZSoD6PdHRioQdK9JTAYxJX/BEsa83iUIyPPMxJq8peLwZR5Yzqlu0
0c6+O4/xG6GrbRvY4jFkMLXNpz1FUpaT8uyjN6oi98pphGPQjg3V6B0VhUkvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3mUt+q1X261fJAYDYJzpxyyfA8owHwYDVR0j
BBgwFoAUr04EXM1g9X+Tw8kdWppxAEEC1EswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXYyVHB3Y3FqdXV3QU42WFgyVjhkYkxXUUR2cThHUUMyS1VyTGZQYkxr
cnAvMC9BRjRFMDQ1Q0NENjBGNTdGOTNDM0M5MUQ1QTlBNzEwMDQxMDJENDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGNEUwNDVDQ0Q2MEY1N0Y5
M0MzQzkxRDVBOUE3MTAwNDEwMkQ0NEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2MlRwd2NxanV1d0FONlhYMlY4ZGJMV1FEdnE4R1FDMktVckxmUGJMa3JwLzAv
MzIzODMwMzQzYTM2MzkzODM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDMyMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEaYSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBs0RhSsBrH2jhSLGPVosqGE2vMCicuf2qHFkof/LzhWbdDhEy+J1dbpxY8
9vLDftNTJSsZijZtie7+yxVvfW9R0rl930SrfLjzR2i9aGM9M8mZUuqzhSPbXtxN
pZ3tXLZCCKrJpwloY3RjPGunucpMMf2E+UKw1AVj7iNoQwjqXKqvybx+mQx1V/lg
tiAZlAy2+YMJDdcjJV0gtExWyX2nTlSOy0sJHo4Ozj60uClBLpxksIyVtWkEk60t
IAE0E3YyS/lz8y0Fmwr0zuOVc4Dul/HAIIlZct48N7Q+jT6BKKIPzr3N1r5BquNP
prG4w8ALsnb+QjidHNNj0gpmo3wp
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org