Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa
File:                     323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa (raw, json)
Hash identifier:          KkNcPt/RWZV4ViVD5C2z1p5IkEwqbZg8AQ6X0ZBUewg=
Subject key identifier:   B5:96:D3:F6:67:91:E5:F4:73:32:1D:97:E9:D8:3D:47:A4:05:0C:A9
Certificate issuer:       /CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
Certificate serial:       1A4348930311C236391630D4B5EC5EB70D15B3A9
Authority key identifier: 33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa
Signing time:             Sat 10 Jun 2023 22:26:29 +0000
ROA not before:           Sat 10 Jun 2023 22:21:29 +0000
ROA not after:            Sat 08 Jun 2024 22:26:29 +0000
asID:                     271134
IP address blocks:        2804:76c8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:43:48:93:03:11:c2:36:39:16:30:d4:b5:ec:5e:b7:0d:15:b3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Validity
            Not Before: Jun 10 22:21:29 2023 GMT
            Not After : Jun  8 22:26:29 2024 GMT
        Subject: CN=B596D3F66791E5F473321D97E9D83D47A4050CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:36:ce:3f:8e:91:a3:c4:b3:54:83:71:3f:
                    24:0e:68:2f:02:da:38:80:fb:5c:f9:81:bb:23:6a:
                    c2:e8:a7:5b:f1:bf:01:e9:3f:eb:50:a8:ca:34:9d:
                    e9:98:41:26:85:71:4f:74:c3:2c:da:96:14:06:39:
                    9f:69:49:d2:8a:de:16:14:1e:4d:5b:97:af:c2:b2:
                    5d:14:53:4d:47:e3:c8:fe:06:67:52:18:c9:82:c9:
                    75:0a:52:41:7f:37:5d:4e:1b:09:4a:cf:ef:46:34:
                    e8:fd:73:8d:55:85:b6:ee:e1:ae:94:5a:70:b9:fa:
                    e3:08:de:59:2d:b3:0c:2d:fd:2e:f7:00:12:9d:b8:
                    3f:6c:e0:44:f8:b0:9a:af:da:8d:59:13:d7:4a:ee:
                    44:0c:fd:02:e7:07:cd:c2:fd:a0:f5:5c:df:2d:ef:
                    6a:3c:ed:3a:65:5f:e3:e6:8a:39:d1:51:52:0e:1c:
                    de:fb:8b:eb:aa:34:1b:0d:8d:67:4c:f2:97:8d:dc:
                    0c:02:6c:de:86:86:7a:f6:bb:42:34:96:86:b1:25:
                    7d:32:38:5d:42:b8:30:05:8f:51:4f:a5:51:fe:4e:
                    af:09:41:d3:a2:3e:98:3f:11:56:75:98:37:16:5b:
                    49:da:45:86:2e:82:57:f1:d7:1e:57:fe:2d:57:1c:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:96:D3:F6:67:91:E5:F4:73:32:1D:97:E9:D8:3D:47:A4:05:0C:A9
            X509v3 Authority Key Identifier:
                keyid:33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:ab:6b:94:7d:0d:19:c9:69:05:7a:d4:f5:10:6a:f2:16:e2:
         53:7b:a5:06:bf:67:a5:b8:ea:ff:26:b4:b1:c9:7d:99:1c:fa:
         1b:ea:29:c6:de:99:32:51:90:2b:0a:29:8a:8d:f7:58:5b:ed:
         00:70:e3:1b:18:5a:1f:a2:db:db:c8:7e:76:72:67:64:82:f2:
         3f:06:2a:b5:cd:da:d6:c1:2e:2e:af:6a:a6:01:6f:71:9b:fe:
         26:92:02:51:52:78:04:e5:9c:71:1e:a3:2b:e5:a3:57:b5:89:
         0d:13:6a:aa:cb:72:24:42:c3:d8:2a:5d:dc:70:5a:97:6b:ff:
         5a:82:77:42:1d:9c:1f:da:9f:5e:4f:9b:87:0e:a5:b4:8e:80:
         55:6c:fd:b0:0a:6b:51:c5:0d:26:ce:ac:02:7b:be:4a:d5:d8:
         3c:bc:d3:e7:fa:75:24:fc:66:8d:d4:37:7b:f0:5f:82:5e:ae:
         a6:24:a3:65:9b:b8:b2:16:f0:4f:df:ac:97:2a:02:f3:f6:60:
         43:03:b1:31:3d:09:b7:eb:37:e0:36:3c:b3:6e:e2:1e:74:c4:
         d8:c9:40:3b:48:d8:f5:1d:d6:f7:b0:7d:1c:7a:ae:90:11:a5:
         8d:98:97:e7:8b:30:ce:3a:54:9f:8c:f5:70:f6:57:97:8e:b7:
         6f:e6:05:21
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGkNIkwMRwjY5FjDUtexetw0Vs6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMwNDNGNzkwRDZBOTE4QTVFQjI4QzRCM0QwNEQ4ODA1
NjA5RDBCNzAeFw0yMzA2MTAyMjIxMjlaFw0yNDA2MDgyMjI2MjlaMDMxMTAvBgNV
BAMTKEI1OTZEM0Y2Njc5MUU1RjQ3MzMyMUQ5N0U5RDgzRDQ3QTQwNTBDQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn0DbOP46Ro8SzVINxPyQOaC8C
2jiA+1z5gbsjasLop1vxvwHpP+tQqMo0nemYQSaFcU90wyzalhQGOZ9pSdKK3hYU
Hk1bl6/Csl0UU01H48j+BmdSGMmCyXUKUkF/N11OGwlKz+9GNOj9c41Vhbbu4a6U
WnC5+uMI3lktswwt/S73ABKduD9s4ET4sJqv2o1ZE9dK7kQM/QLnB83C/aD1XN8t
72o87TplX+PmijnRUVIOHN77i+uqNBsNjWdM8peN3AwCbN6Ghnr2u0I0loaxJX0y
OF1CuDAFj1FPpVH+Tq8JQdOiPpg/EVZ1mDcWW0naRYYuglfx1x5X/i1XHD7dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUtZbT9meR5fRzMh2X6dg9R6QFDKkwHwYDVR0j
BBgwFoAUMwQ/eQ1qkYpesoxLPQTYgFYJ0LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhVM1FoTWF0aldYQW8yWEUzVTkzekxTR0hHY0JFR1pycmQ2MTdnTWFw
NHovMC8zMzA0M0Y3OTBENkE5MThBNUVCMjhDNEIzRDA0RDg4MDU2MDlEMEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzMDQzRjc5MEQ2QTkxOEE1
RUIyOEM0QjNEMDREODgwNTYwOUQwQjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoVTNRaE1hdGpXWEFvMlhFM1U5M3pMU0dIR2NCRUdacnJkNjE3Z01hcDR6LzAv
MzIzODMwMzQzYTM3MzY2MzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMxMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEdsiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAQq2uUfQ0ZyWkFetT1EGryFuJTe6UGv2eluOr/JrSxyX2ZHPob6inG3pky
UZArCimKjfdYW+0AcOMbGFofotvbyH52cmdkgvI/Biq1zdrWwS4ur2qmAW9xm/4m
kgJRUngE5ZxxHqMr5aNXtYkNE2qqy3IkQsPYKl3ccFqXa/9agndCHZwf2p9eT5uH
DqW0joBVbP2wCmtRxQ0mzqwCe75K1dg8vNPn+nUk/GaN1Dd78F+CXq6mJKNlm7iy
FvBP36yXKgLz9mBDA7ExPQm36zfgNjyzbuIedMTYyUA7SNj1Hdb3sH0ceq6QEaWN
mJfnizDOOlSfjPVw9leXjrdv5gUh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org