Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a3a2f33342d3334203d3e20323634333933.roa
File:                     323830343a316463383a3a2f33342d3334203d3e20323634333933.roa (raw, json)
Hash identifier:          fUfHr4T3YJApOWflTe1SfH+iPppkUtg/AvR69huQIJc=
Subject key identifier:   9E:21:AD:D4:20:9F:F4:C3:E2:16:8B:4C:EA:3F:38:25:E9:A4:4C:67
Certificate issuer:       /CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Certificate serial:       01FD30125A4E40B062909278B40ADBA56AE7E555
Authority key identifier: 9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a3a2f33342d3334203d3e20323634333933.roa
Signing time:             Tue 10 Jan 2023 12:18:30 +0000
ROA not before:           Tue 10 Jan 2023 12:13:30 +0000
ROA not after:            Tue 09 Jan 2024 12:18:30 +0000
asID:                     264393
IP address blocks:        2804:1dc8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fd:30:12:5a:4e:40:b0:62:90:92:78:b4:0a:db:a5:6a:e7:e5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
        Validity
            Not Before: Jan 10 12:13:30 2023 GMT
            Not After : Jan  9 12:18:30 2024 GMT
        Subject: CN=9E21ADD4209FF4C3E2168B4CEA3F3825E9A44C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:bc:f9:5f:40:9c:9c:7e:03:fc:1c:10:fa:
                    19:3c:00:ae:d1:69:55:b9:28:e8:3b:3a:33:51:d5:
                    19:e1:49:27:4a:28:dc:a6:ec:2f:4c:b7:64:37:95:
                    16:d6:33:30:9d:b7:44:8c:8a:77:83:97:af:42:20:
                    97:d0:bb:ae:be:9e:c8:04:a0:a3:d9:bc:98:4d:7a:
                    32:34:88:83:60:3a:02:d1:69:1f:66:6c:db:2b:3f:
                    50:bf:f0:dc:f3:47:8b:3e:bb:69:e6:02:14:b8:aa:
                    f2:18:94:7d:94:c6:07:9b:6b:e0:0d:f1:c4:86:4c:
                    c6:3e:98:bc:24:fc:bc:2f:3d:f2:24:39:2e:f1:8c:
                    56:02:bf:a6:ef:02:3d:67:cf:ff:62:7b:ee:a4:3c:
                    43:94:4e:f1:f3:85:3a:6c:69:b3:bd:a8:1d:3f:53:
                    4d:c7:02:c3:ac:c3:03:74:51:ae:bf:cf:14:a6:8c:
                    b9:e5:82:87:31:1a:ae:bd:6f:85:3d:e3:6a:ad:34:
                    bb:a4:d8:9c:1e:dc:05:5f:75:3e:1e:c3:7c:0a:f0:
                    5c:ba:5a:26:76:8a:5c:29:da:e7:19:e4:1f:35:d1:
                    26:08:0d:2a:21:38:e7:f1:51:2b:da:32:af:5f:18:
                    9b:12:9b:6a:c3:96:00:43:80:90:11:a9:5c:1f:97:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:21:AD:D4:20:9F:F4:C3:E2:16:8B:4C:EA:3F:38:25:E9:A4:4C:67
            X509v3 Authority Key Identifier:
                keyid:9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a3a2f33342d3334203d3e20323634333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc8::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:37:f7:39:9a:63:93:8c:52:c9:7e:4e:f0:8f:07:09:38:32:
         7d:46:40:77:5b:79:49:dd:6a:ae:ec:08:4f:25:ff:b2:83:49:
         cb:e0:e0:7b:c1:30:36:ce:b5:43:b0:d6:11:13:b6:14:fd:a5:
         a0:a6:e7:2d:b0:95:4b:09:80:ee:fa:6d:21:a8:9d:d0:b9:da:
         f8:7f:04:81:1f:31:62:c8:bf:5e:ce:69:97:d4:5b:35:b5:0a:
         73:39:20:29:1d:3f:82:7c:7b:35:de:6b:79:41:d8:a0:32:c8:
         5a:b9:8c:74:1e:5b:50:46:3a:e0:57:2b:f8:aa:73:3a:fb:6a:
         59:c5:72:77:91:cf:22:31:8b:71:cd:ae:c2:cd:31:0b:62:b8:
         07:51:94:d3:30:dd:f7:af:fd:a7:3d:11:7f:38:33:e9:69:62:
         db:d3:1e:6b:ac:12:e2:6e:84:78:30:cc:35:e2:f1:98:2e:50:
         a2:cc:fa:d7:6d:23:e1:96:44:19:b0:dc:2b:21:96:87:9d:3b:
         57:1e:7e:32:5e:2c:8d:72:10:43:d6:9c:3b:f6:71:19:9b:c3:
         71:6d:29:78:ae:5a:8b:25:49:03:4f:18:28:49:90:a6:0a:05:
         05:4d:f0:bb:58:c8:33:1b:f5:b5:72:b7:8e:52:86:d3:6a:9b:
         bb:46:76:21
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAf0wElpOQLBikJJ4tArbpWrn5VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEzRUFCOTAzRjNEOTIxMDRDMDA4QjZDNjUyRUEyMUND
RkFDQkYwRDAeFw0yMzAxMTAxMjEzMzBaFw0yNDAxMDkxMjE4MzBaMDMxMTAvBgNV
BAMTKDlFMjFBREQ0MjA5RkY0QzNFMjE2OEI0Q0VBM0YzODI1RTlBNDRDNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XLz5X0CcnH4D/BwQ+hk8AK7R
aVW5KOg7OjNR1RnhSSdKKNym7C9Mt2Q3lRbWMzCdt0SMineDl69CIJfQu66+nsgE
oKPZvJhNejI0iINgOgLRaR9mbNsrP1C/8NzzR4s+u2nmAhS4qvIYlH2Uxgeba+AN
8cSGTMY+mLwk/LwvPfIkOS7xjFYCv6bvAj1nz/9ie+6kPEOUTvHzhTpsabO9qB0/
U03HAsOswwN0Ua6/zxSmjLnlgocxGq69b4U942qtNLuk2Jwe3AVfdT4ew3wK8Fy6
WiZ2ilwp2ucZ5B810SYIDSohOOfxUSvaMq9fGJsSm2rDlgBDgJARqVwfl1shAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUniGt1CCf9MPiFotM6j84JemkTGcwHwYDVR0j
BBgwFoAUmj6rkD89khBMAItsZS6iHM+svw0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkE4a2FNNWVFN24ya2lWaXpqU0NFZ2dvUnNiR2dCRkNncE1Db3J4cHpy
bUEvMC85QTNFQUI5MDNGM0Q5MjEwNEMwMDhCNkM2NTJFQTIxQ0NGQUNCRjBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBM0VBQjkwM0YzRDkyMTA0
QzAwOEI2QzY1MkVBMjFDQ0ZBQ0JGMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JBOGthTTVlRTduMmtpVml6alNDRWdnb1JzYkdnQkZDZ3BNQ29yeHB6cm1BLzAv
MzIzODMwMzQzYTMxNjQ2MzM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM0
MzMzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQdyAAwDQYJKoZIhvcNAQELBQADggEBAAg39zma
Y5OMUsl+TvCPBwk4Mn1GQHdbeUndaq7sCE8l/7KDScvg4HvBMDbOtUOw1hETthT9
paCm5y2wlUsJgO76bSGondC52vh/BIEfMWLIv17OaZfUWzW1CnM5ICkdP4J8ezXe
a3lB2KAyyFq5jHQeW1BGOuBXK/iqczr7alnFcneRzyIxi3HNrsLNMQtiuAdRlNMw
3fev/ac9EX84M+lpYtvTHmusEuJuhHgwzDXi8ZguUKLM+tdtI+GWRBmw3Cshloed
O1cefjJeLI1yEEPWnDv2cRmbw3FtKXiuWoslSQNPGChJkKYKBQVN8LtYyDMb9bVy
t45ShtNqm7tGdiE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org