Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a383030303a3a2f33342d3334203d3e20323634303931.roa
File:                     323830343a326162633a383030303a3a2f33342d3334203d3e20323634303931.roa (raw, json)
Hash identifier:          o5bmastwHXl7iKGQPKCaxvXgIh5pbTcnQdcoD4Sameg=
Subject key identifier:   9D:85:BD:5A:FA:9B:B2:D5:64:C8:20:FC:1B:AF:91:07:4C:FE:76:2E
Certificate issuer:       /CN=A6768A6B148248844D8E04551B1998D03AB86D3D
Certificate serial:       4C030E1091C32AD0429A274528D34898F73256A6
Authority key identifier: A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a383030303a3a2f33342d3334203d3e20323634303931.roa
Signing time:             Wed 18 Jan 2023 04:06:51 +0000
ROA not before:           Wed 18 Jan 2023 04:01:51 +0000
ROA not after:            Wed 17 Jan 2024 04:06:51 +0000
asID:                     264091
IP address blocks:        2804:2abc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:03:0e:10:91:c3:2a:d0:42:9a:27:45:28:d3:48:98:f7:32:56:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6768A6B148248844D8E04551B1998D03AB86D3D
        Validity
            Not Before: Jan 18 04:01:51 2023 GMT
            Not After : Jan 17 04:06:51 2024 GMT
        Subject: CN=9D85BD5AFA9BB2D564C820FC1BAF91074CFE762E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:e1:44:9f:b3:2f:3f:2f:f8:55:fc:56:4a:
                    76:0e:ae:db:93:13:24:db:8c:f2:f2:e8:9a:cc:5f:
                    49:e5:a6:f7:99:31:17:0c:71:4e:6e:73:f4:58:c1:
                    3b:aa:02:cf:f9:3c:f7:cc:9f:e7:98:c5:17:5a:44:
                    f2:ee:3d:3b:7a:b7:ed:f0:06:2c:33:1c:a1:2e:c3:
                    0a:f9:dd:9c:95:a4:9d:bb:93:6b:43:24:16:ad:4d:
                    36:dd:79:a6:4b:43:c8:fe:24:db:0f:b4:6e:fa:89:
                    88:e7:e0:da:e5:9e:eb:a2:2a:d8:cb:e5:df:20:8e:
                    0e:bb:51:4e:6d:0b:c7:04:73:12:bd:98:24:d2:2f:
                    2d:9b:fa:e3:e5:4b:e5:30:7b:0f:48:7b:7e:94:d7:
                    3a:4b:f2:1b:9f:36:4c:70:e4:e1:40:ca:19:b6:eb:
                    f6:cc:67:02:0f:85:1b:c6:28:2f:4f:a5:d0:bd:d3:
                    1a:7e:69:7f:f0:76:68:3e:d5:ba:2e:48:7d:ff:33:
                    68:c4:86:86:af:3c:80:3d:93:70:27:d5:40:5a:57:
                    6c:b0:dd:b5:5c:0f:ea:6a:e4:50:f0:8b:85:66:34:
                    90:0b:1f:36:3b:f9:50:b3:32:92:8b:a3:da:76:eb:
                    0d:a2:47:b5:38:75:e6:3e:94:fa:d6:56:25:b8:ae:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:85:BD:5A:FA:9B:B2:D5:64:C8:20:FC:1B:AF:91:07:4C:FE:76:2E
            X509v3 Authority Key Identifier:
                keyid:A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a383030303a3a2f33342d3334203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2abc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:55:6b:58:70:9d:6c:5f:4f:c8:04:8b:66:f3:99:60:72:
         51:95:6b:4b:32:bc:33:b9:a9:2c:b3:88:a2:db:e5:c3:48:6d:
         45:7f:31:9b:6e:24:40:50:0e:2a:bd:f7:30:2a:d6:52:a8:36:
         3e:fe:e9:f2:8f:2a:37:57:bf:d6:a7:b2:73:d9:3e:f8:fd:a0:
         18:7c:58:99:36:98:7e:08:24:7c:16:1f:14:c5:a3:ab:08:66:
         a0:5c:3e:a6:eb:3e:dd:d6:4c:fc:95:89:fc:b0:35:6b:c5:22:
         b1:08:f1:fe:4b:df:a7:85:8b:e5:43:6f:00:a0:5f:1c:e3:1a:
         d7:02:31:0e:0d:0d:53:e0:23:73:d7:05:0e:2c:c5:ec:44:96:
         20:a5:9c:f2:a7:ff:cc:24:66:4e:fc:6a:5d:e6:f7:c0:36:80:
         36:5b:8b:05:cf:48:99:f1:54:0b:ef:f6:8c:68:55:e1:c0:89:
         0e:2b:95:be:3b:0e:19:1a:79:75:4c:a6:9b:cf:27:2c:ab:ed:
         97:8e:5d:6e:31:5c:bc:e9:4c:be:3e:d3:57:ef:26:7b:81:b4:
         ae:27:23:74:7f:f5:d9:eb:a5:fa:56:6a:82:69:e4:b8:ec:30:
         e9:d9:d6:5e:86:c9:f7:00:20:74:aa:e2:e9:45:2d:ff:df:4e:
         1a:0a:f1:df
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTAMOEJHDKtBCmidFKNNImPcyVqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY3NjhBNkIxNDgyNDg4NDREOEUwNDU1MUIxOTk4RDAz
QUI4NkQzRDAeFw0yMzAxMTgwNDAxNTFaFw0yNDAxMTcwNDA2NTFaMDMxMTAvBgNV
BAMTKDlEODVCRDVBRkE5QkIyRDU2NEM4MjBGQzFCQUY5MTA3NENGRTc2MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zuFEn7MvPy/4VfxWSnYOrtuT
EyTbjPLy6JrMX0nlpveZMRcMcU5uc/RYwTuqAs/5PPfMn+eYxRdaRPLuPTt6t+3w
BiwzHKEuwwr53ZyVpJ27k2tDJBatTTbdeaZLQ8j+JNsPtG76iYjn4NrlnuuiKtjL
5d8gjg67UU5tC8cEcxK9mCTSLy2b+uPlS+Uwew9Ie36U1zpL8hufNkxw5OFAyhm2
6/bMZwIPhRvGKC9PpdC90xp+aX/wdmg+1bouSH3/M2jEhoavPIA9k3An1UBaV2yw
3bVcD+pq5FDwi4VmNJALHzY7+VCzMpKLo9p26w2iR7U4deY+lPrWViW4rtyfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnYW9WvqbstVkyCD8G6+RB0z+di4wHwYDVR0j
BBgwFoAUpnaKaxSCSIRNjgRVGxmY0Dq4bT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdw
YTUvMC9BNjc2OEE2QjE0ODI0ODg0NEQ4RTA0NTUxQjE5OThEMDNBQjg2RDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E2NzY4QTZCMTQ4MjQ4ODQ0
RDhFMDQ1NTFCMTk5OEQwM0FCODZEM0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLSEZxMzNFanRVcEVyR05QWFl4WldUWEFqeUJhZTZNVVRuc2k3VW43cGE1LzAv
MzIzODMwMzQzYTMyNjE2MjYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEKryAMA0GCSqGSIb3DQEBCwUA
A4IBAQAvplVrWHCdbF9PyASLZvOZYHJRlWtLMrwzuakss4ii2+XDSG1FfzGbbiRA
UA4qvfcwKtZSqDY+/unyjyo3V7/Wp7Jz2T74/aAYfFiZNph+CCR8Fh8UxaOrCGag
XD6m6z7d1kz8lYn8sDVrxSKxCPH+S9+nhYvlQ28AoF8c4xrXAjEODQ1T4CNz1wUO
LMXsRJYgpZzyp//MJGZO/Gpd5vfANoA2W4sFz0iZ8VQL7/aMaFXhwIkOK5W+Ow4Z
Gnl1TKabzycsq+2Xjl1uMVy86Uy+PtNX7yZ7gbSuJyN0f/XZ66X6VmqCaeS47DDp
2dZehsn3ACB0quLpRS3/304aCvHf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org