Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346130303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a346130303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          WdFcQNwgQomePewfqiiGcnlomYnOP4SqZSlE+/oQn84=
Subject key identifier:   23:04:06:54:78:F4:5F:4F:F4:2A:C6:6A:97:0A:39:14:BD:AA:61:3E
Certificate issuer:       /CN=C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458
Certificate serial:       0B6ABB8D635F6869838EEAF745A26A10BBC25810
Authority key identifier: C9:7C:F8:9D:A8:C9:7F:B7:6F:8C:2F:7C:04:8F:E8:86:DC:E1:F4:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346130303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Fri 10 Nov 2023 17:12:23 +0000
ROA not before:           Fri 10 Nov 2023 17:07:23 +0000
ROA not after:            Fri 08 Nov 2024 17:12:23 +0000
asID:                     264344
IP address blocks:        2804:2674:4a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6a:bb:8d:63:5f:68:69:83:8e:ea:f7:45:a2:6a:10:bb:c2:58:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458
        Validity
            Not Before: Nov 10 17:07:23 2023 GMT
            Not After : Nov  8 17:12:23 2024 GMT
        Subject: CN=2304065478F45F4FF42AC66A970A3914BDAA613E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:68:47:59:ce:85:99:eb:61:59:ea:9c:5e:
                    4c:ff:b5:2e:d6:0d:a9:36:01:b9:12:af:0a:a6:c0:
                    55:a7:86:c5:7c:13:9c:6b:39:d8:40:01:4c:98:9a:
                    0a:1b:62:75:58:78:3e:52:5a:e1:db:fe:3c:13:1d:
                    30:21:0b:6a:2d:79:f6:7a:91:6f:ed:61:e3:e3:13:
                    1a:d9:f1:e4:ba:74:ea:30:47:ab:1c:87:64:24:8a:
                    d8:3b:7a:20:5a:7d:1a:1a:ea:88:6d:66:ee:3d:ef:
                    4f:77:57:27:4a:67:2d:ff:b0:cf:7b:37:87:b5:73:
                    64:1c:34:b1:07:12:c9:9f:96:02:74:da:eb:d8:4d:
                    4c:11:2d:86:8b:9d:85:24:6b:5e:2e:e6:43:26:c0:
                    64:7e:26:d6:dc:7b:b9:ef:60:7d:d4:e4:b5:1b:f9:
                    93:e6:72:ca:70:cf:f8:51:05:35:37:b8:93:15:93:
                    9b:3e:d5:bb:0f:3d:46:ba:23:26:c6:7f:ca:1d:a0:
                    77:29:a8:64:9d:17:b4:cf:07:82:df:aa:33:28:3b:
                    3d:57:07:ba:80:75:3d:1c:09:c0:99:e2:a8:21:6e:
                    3a:d0:46:f9:ec:bc:13:32:30:7a:3c:bf:1e:b7:98:
                    71:8f:cb:2a:1d:18:18:d5:db:07:26:96:5e:b3:5b:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:04:06:54:78:F4:5F:4F:F4:2A:C6:6A:97:0A:39:14:BD:AA:61:3E
            X509v3 Authority Key Identifier:
                keyid:C9:7C:F8:9D:A8:C9:7F:B7:6F:8C:2F:7C:04:8F:E8:86:DC:E1:F4:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346130303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:b1:1d:2d:1a:79:cf:da:db:7b:83:98:1c:2c:5a:d9:0a:2c:
         cc:85:41:40:5c:27:93:77:f8:f8:a3:50:a6:cf:d2:e5:4d:f6:
         2a:1a:40:98:65:86:cb:55:ba:02:ca:c0:5c:fa:42:45:3d:9f:
         c4:e9:46:d8:b2:45:f6:30:b4:f9:f5:a0:cd:54:7a:37:98:2a:
         b3:80:c1:e7:bb:d4:e2:20:7e:f4:e6:5c:05:c5:ea:08:90:74:
         3f:e1:23:07:5d:0c:6f:c1:4d:a4:8f:b3:ea:ce:59:c7:4d:da:
         8b:6e:a8:fe:57:a6:64:32:e4:69:64:9d:a9:cc:d3:98:52:ef:
         35:f9:9d:9d:64:c1:03:d9:88:e4:ab:1a:e2:c7:3f:3d:7b:04:
         b9:18:fd:3b:76:30:39:dd:37:a2:6e:21:8c:bd:82:6e:b0:f3:
         c8:6d:4a:4b:4e:c7:8b:09:4c:e8:90:35:c8:7f:9c:05:44:71:
         9c:b5:cf:4f:d2:5a:96:e8:5f:59:0b:c0:a9:4a:0b:d3:4d:31:
         f2:51:97:23:6d:f9:ec:67:9c:e3:76:c4:fa:c7:f0:8a:dc:8d:
         28:8f:d7:00:8d:0a:fb:21:1f:a9:a0:46:d0:74:1e:3d:cf:a4:
         d5:03:d3:da:7d:e2:47:4b:d9:8c:dc:5d:a5:bb:70:2e:67:c8:
         db:c2:db:78
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUC2q7jWNfaGmDjur3RaJqELvCWBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3Q0Y4OURBOEM5N0ZCNzZGOEMyRjdDMDQ4RkU4ODZE
Q0UxRjQ1ODAeFw0yMzExMTAxNzA3MjNaFw0yNDExMDgxNzEyMjNaMDMxMTAvBgNV
BAMTKDIzMDQwNjU0NzhGNDVGNEZGNDJBQzY2QTk3MEEzOTE0QkRBQTYxM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkP2hHWc6FmethWeqcXkz/tS7W
Dak2AbkSrwqmwFWnhsV8E5xrOdhAAUyYmgobYnVYeD5SWuHb/jwTHTAhC2otefZ6
kW/tYePjExrZ8eS6dOowR6sch2Qkitg7eiBafRoa6ohtZu497093VydKZy3/sM97
N4e1c2QcNLEHEsmflgJ02uvYTUwRLYaLnYUka14u5kMmwGR+Jtbce7nvYH3U5LUb
+ZPmcspwz/hRBTU3uJMVk5s+1bsPPUa6IybGf8odoHcpqGSdF7TPB4LfqjMoOz1X
B7qAdT0cCcCZ4qghbjrQRvnsvBMyMHo8vx63mHGPyyodGBjV2wcmll6zW/vJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUIwQGVHj0X0/0KsZqlwo5FL2qYT4wHwYDVR0j
BBgwFoAUyXz4najJf7dvjC98BI/ohtzh9FgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC9DOTdDRjg5REE4Qzk3RkI3NkY4QzJGN0MwNDhGRTg4NkRDRTFGNDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5N0NGODlEQThDOTdGQjc2
RjhDMkY3QzA0OEZFODg2RENFMUY0NTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2EzNDYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJnRKMA0GCSqGSIb3DQEBCwUA
A4IBAQBgsR0tGnnP2tt7g5gcLFrZCizMhUFAXCeTd/j4o1Cmz9LlTfYqGkCYZYbL
VboCysBc+kJFPZ/E6UbYskX2MLT59aDNVHo3mCqzgMHnu9TiIH705lwFxeoIkHQ/
4SMHXQxvwU2kj7PqzlnHTdqLbqj+V6ZkMuRpZJ2pzNOYUu81+Z2dZMED2Yjkqxri
xz89ewS5GP07djA53TeibiGMvYJusPPIbUpLTseLCUzokDXIf5wFRHGctc9P0lqW
6F9ZC8CpSgvTTTHyUZcjbfnsZ5zjdsT6x/CK3I0oj9cAjQr7IR+poEbQdB49z6TV
A9PafeJHS9mM3F2lu3AuZ8jbwtt4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org