Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a343030303a3a2f33342d3334203d3e203238323235.roa
File:                     323830343a363230633a343030303a3a2f33342d3334203d3e203238323235.roa (raw, json)
Hash identifier:          poP0GR3vficHJAI90+OaEfsL6ViOri5CVPY4omz7sLQ=
Subject key identifier:   8D:FC:C0:1C:33:11:5A:6E:E5:E8:D8:EA:FF:02:A1:39:96:1A:E9:8E
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       32F42AE506136080145206CCC8259A31374A3321
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a343030303a3a2f33342d3334203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:16 +0000
ROA not before:           Tue 09 Jan 2024 12:51:16 +0000
ROA not after:            Tue 07 Jan 2025 12:56:16 +0000
asID:                     28225
IP address blocks:        2804:620c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f4:2a:e5:06:13:60:80:14:52:06:cc:c8:25:9a:31:37:4a:33:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:16 2024 GMT
            Not After : Jan  7 12:56:16 2025 GMT
        Subject: CN=8DFCC01C33115A6EE5E8D8EAFF02A139961AE98E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:88:e3:a2:d9:fc:28:36:0a:22:50:3e:51:
                    ba:06:17:99:64:9c:44:91:75:86:96:56:89:db:58:
                    65:75:f6:b9:fa:bc:12:5e:9b:f0:be:05:a7:c0:ee:
                    65:a4:67:d3:e5:64:d1:25:a7:3f:d3:27:0c:81:e0:
                    e6:a9:e7:68:c0:95:7b:5c:be:a0:29:03:d4:e6:6f:
                    f6:95:97:90:95:2d:06:c7:30:7c:2b:a7:93:64:b6:
                    ce:fe:10:7c:81:3f:37:39:a3:9b:da:c5:8d:19:d3:
                    b8:7a:e1:3c:4b:e5:ff:3b:bc:96:44:3a:13:ef:a0:
                    b5:05:96:bb:74:85:0a:67:12:e3:dc:82:b4:21:c4:
                    7f:66:0f:53:72:1e:7e:96:c9:1b:28:fb:54:16:2d:
                    ea:59:6d:3d:ec:42:34:9c:48:17:5a:bb:ed:2e:d7:
                    20:86:89:7a:fe:35:7f:f7:19:b2:4f:93:b6:25:0c:
                    4d:5c:6b:60:d3:2a:26:7b:ad:a0:e7:0d:3e:a5:dc:
                    25:ad:20:15:06:34:94:f3:a8:70:d9:d8:14:21:b1:
                    fe:90:de:7a:09:01:5d:6b:87:5c:70:dc:81:18:69:
                    90:b4:19:47:92:34:d4:48:9d:fd:5c:36:09:90:f6:
                    92:6f:c5:0a:75:b6:a3:cd:04:ad:d6:a1:52:2a:e3:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FC:C0:1C:33:11:5A:6E:E5:E8:D8:EA:FF:02:A1:39:96:1A:E9:8E
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a343030303a3a2f33342d3334203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:620c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:09:3c:d4:0b:73:f8:d7:28:06:b4:73:68:dd:93:f7:91:
         f3:ea:7f:19:5d:1a:a7:a5:0d:b0:12:60:e9:65:38:28:28:a8:
         ec:d5:be:6a:9f:cf:b7:7c:f8:bf:9c:2d:6f:ff:dc:c7:43:17:
         53:71:53:97:f6:6e:85:5a:27:95:1e:ac:2a:dd:2e:b9:c1:33:
         da:b4:0a:e5:ad:bf:25:4a:b9:80:e2:e9:b1:96:ef:1a:83:23:
         66:cb:7b:89:5f:91:06:e7:53:bd:b0:1b:ff:d6:c7:61:13:e8:
         af:40:a3:60:ee:ef:19:22:ef:19:b2:0d:09:fc:ce:1d:4d:aa:
         43:1f:57:c2:4d:78:df:1e:df:6b:81:f5:3b:eb:dc:56:c0:21:
         e3:0c:53:21:db:85:fd:0a:9b:0e:cd:91:6f:61:11:be:74:9b:
         2d:ae:5f:b2:48:8d:bd:5f:1a:9a:7a:dc:68:ba:0c:88:84:52:
         57:6e:66:d1:63:0c:4b:83:cd:53:b6:d4:ca:72:14:08:de:7b:
         8d:7a:5b:39:f2:31:64:69:d9:e6:90:4d:29:d4:4c:26:26:3c:
         63:c2:eb:6e:90:50:19:20:89:b4:13:a6:7d:b8:b8:14:23:ac:
         c8:8b:93:44:cb:32:b1:50:b7:69:c6:9d:d4:d8:3a:eb:05:1a:
         15:9c:ce:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMvQq5QYTYIAUUgbMyCWaMTdKMyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5REE3Mjk1MkY1MDdFODc4Njc2NTgzNThEODFDRUZC
REI2NzY4NjAeFw0yNDAxMDkxMjUxMTZaFw0yNTAxMDcxMjU2MTZaMDMxMTAvBgNV
BAMTKDhERkNDMDFDMzMxMTVBNkVFNUU4RDhFQUZGMDJBMTM5OTYxQUU5OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7Yjjotn8KDYKIlA+UboGF5lk
nESRdYaWVonbWGV19rn6vBJem/C+BafA7mWkZ9PlZNElpz/TJwyB4Oap52jAlXtc
vqApA9Tmb/aVl5CVLQbHMHwrp5Nkts7+EHyBPzc5o5vaxY0Z07h64TxL5f87vJZE
OhPvoLUFlrt0hQpnEuPcgrQhxH9mD1NyHn6WyRso+1QWLepZbT3sQjScSBdau+0u
1yCGiXr+NX/3GbJPk7YlDE1ca2DTKiZ7raDnDT6l3CWtIBUGNJTzqHDZ2BQhsf6Q
3noJAV1rh1xw3IEYaZC0GUeSNNRInf1cNgmQ9pJvxQp1tqPNBK3WoVIq4yfLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjfzAHDMRWm7l6Njq/wKhOZYa6Y4wHwYDVR0j
BBgwFoAUoJ2nKVL1B+h4Z2WDWNgc7722doYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY
akgvMS9BMDlEQTcyOTUyRjUwN0U4Nzg2NzY1ODM1OEQ4MUNFRkJEQjY3Njg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOURBNzI5NTJGNTA3RTg3
ODY3NjU4MzU4RDgxQ0VGQkRCNjc2ODYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzEv
MzIzODMwMzQzYTM2MzIzMDYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzgzMjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBGIMQDANBgkqhkiG9w0BAQsFAAOC
AQEAVKoJPNQLc/jXKAa0c2jdk/eR8+p/GV0ap6UNsBJg6WU4KCio7NW+ap/Pt3z4
v5wtb//cx0MXU3FTl/ZuhVonlR6sKt0uucEz2rQK5a2/JUq5gOLpsZbvGoMjZst7
iV+RBudTvbAb/9bHYRPor0CjYO7vGSLvGbINCfzOHU2qQx9Xwk143x7fa4H1O+vc
VsAh4wxTIduF/QqbDs2Rb2ERvnSbLa5fskiNvV8amnrcaLoMiIRSV25m0WMMS4PN
U7bUynIUCN57jXpbOfIxZGnZ5pBNKdRMJiY8Y8LrbpBQGSCJtBOmfbi4FCOsyIuT
RMsysVC3acad1Ng66wUaFZzOvw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org