Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa
File:                     323830343a333061383a3a2f33322d3332203d3e20323634393637.roa (raw, json)
Hash identifier:          /Mj4FUOMYsGokDQhCwp3gYzMtCGkWq+Zf5/F7dA3zBg=
Subject key identifier:   FB:CF:3F:13:AE:E4:9F:16:2F:55:0A:39:58:7D:56:89:82:B4:DA:18
Certificate issuer:       /CN=BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15
Certificate serial:       4FA0FC28EC81E7DF873DD171531A5916BABA0C56
Authority key identifier: BF:5A:29:64:D0:4B:4D:AC:FF:DD:8B:96:9D:0A:30:D6:B1:B6:FF:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa
Signing time:             Mon 01 Apr 2024 15:40:14 +0000
ROA not before:           Mon 01 Apr 2024 15:35:14 +0000
ROA not after:            Mon 31 Mar 2025 15:40:14 +0000
asID:                     264967
IP address blocks:        2804:30a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a0:fc:28:ec:81:e7:df:87:3d:d1:71:53:1a:59:16:ba:ba:0c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15
        Validity
            Not Before: Apr  1 15:35:14 2024 GMT
            Not After : Mar 31 15:40:14 2025 GMT
        Subject: CN=FBCF3F13AEE49F162F550A39587D568982B4DA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:f5:73:d9:3b:e0:7c:79:99:af:8f:cf:8f:
                    c2:ae:c6:bf:98:e3:5d:f0:0f:fb:16:b9:af:0a:3e:
                    23:f3:e1:93:d9:64:91:7d:dd:eb:61:94:61:ad:e7:
                    d3:89:56:5f:7e:6f:0d:c6:e8:35:22:a4:2c:e9:fc:
                    b9:45:14:b4:02:e7:9e:e7:0b:ad:17:66:48:2f:d8:
                    f0:bc:91:ce:29:39:84:80:b6:27:b9:70:17:37:1d:
                    f1:7f:53:4a:a5:3a:da:ab:3d:9d:b7:1e:56:d4:33:
                    07:d8:6a:23:4d:ed:e2:57:dc:1d:7a:06:f8:1b:f6:
                    bf:a8:34:7e:68:8f:08:dd:62:bc:3e:b6:3b:aa:3b:
                    77:1c:f6:35:93:de:d1:54:e6:ca:04:e1:58:2c:a4:
                    68:f6:70:d8:13:a9:90:c7:ea:72:ef:00:89:11:5d:
                    82:43:d0:5b:81:c7:1b:9d:2b:df:2b:39:b7:62:dc:
                    c2:4d:8a:19:8c:8c:f7:b0:9e:cf:e5:56:3e:ef:3b:
                    ec:32:fb:b4:bd:f2:84:23:c2:e3:b7:df:99:09:dc:
                    3e:92:e7:28:90:1b:2e:0f:52:70:20:fa:fc:47:ac:
                    8f:50:cd:c2:04:45:0a:79:2f:1f:66:5a:a9:fd:50:
                    fb:43:ec:73:96:f4:09:9f:d5:f3:af:b2:61:ac:58:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:3F:13:AE:E4:9F:16:2F:55:0A:39:58:7D:56:89:82:B4:DA:18
            X509v3 Authority Key Identifier:
                keyid:BF:5A:29:64:D0:4B:4D:AC:FF:DD:8B:96:9D:0A:30:D6:B1:B6:FF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:d2:f4:7a:fe:ee:05:7c:00:82:5e:54:f8:51:aa:e9:84:e3:
         61:66:29:8d:e4:e0:5e:93:cd:b0:df:0d:c1:7f:06:c6:8f:0c:
         ac:c2:0a:c8:e4:08:05:0c:53:04:32:c7:0c:3a:8e:10:87:dc:
         36:c8:ba:5e:c8:d0:4d:d5:fe:6f:6b:32:e2:c6:fd:ce:31:ca:
         c6:93:a5:b1:01:97:67:f5:35:9a:18:52:00:dc:4c:58:17:a0:
         5c:54:c7:ca:45:5a:56:7d:44:b1:03:8e:81:87:1c:38:93:e3:
         14:63:f2:20:e0:2c:32:ed:f4:c8:dc:d5:8c:65:ae:78:43:29:
         0e:31:d5:f5:73:3a:16:53:7f:a8:05:93:7f:52:87:56:ad:58:
         22:89:6a:73:cc:ff:d3:06:de:c2:06:0f:a1:54:54:8a:12:b7:
         f7:16:f2:ba:2d:24:bc:27:6d:e5:1c:59:51:31:78:23:a3:e6:
         1b:6a:48:5b:67:6d:a3:25:e6:9c:0d:18:59:6f:db:70:8d:5c:
         e4:7c:ab:1e:70:bf:9d:63:52:fa:25:da:4e:0c:00:21:23:0d:
         9a:49:20:86:0d:64:66:1a:5f:4d:aa:4a:50:32:2d:f3:17:d8:
         68:4e:25:3d:18:57:95:06:df:1c:b6:72:75:21:ff:85:9c:10:
         31:25:f2:f3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT6D8KOyB59+HPdFxUxpZFrq6DFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY1QTI5NjREMDRCNERBQ0ZGREQ4Qjk2OUQwQTMwRDZC
MUI2RkYxNTAeFw0yNDA0MDExNTM1MTRaFw0yNTAzMzExNTQwMTRaMDMxMTAvBgNV
BAMTKEZCQ0YzRjEzQUVFNDlGMTYyRjU1MEEzOTU4N0Q1Njg5ODJCNERBMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAfVz2TvgfHmZr4/Pj8Kuxr+Y
413wD/sWua8KPiPz4ZPZZJF93ethlGGt59OJVl9+bw3G6DUipCzp/LlFFLQC557n
C60XZkgv2PC8kc4pOYSAtie5cBc3HfF/U0qlOtqrPZ23HlbUMwfYaiNN7eJX3B16
Bvgb9r+oNH5ojwjdYrw+tjuqO3cc9jWT3tFU5soE4VgspGj2cNgTqZDH6nLvAIkR
XYJD0FuBxxudK98rObdi3MJNihmMjPewns/lVj7vO+wy+7S98oQjwuO335kJ3D6S
5yiQGy4PUnAg+vxHrI9QzcIERQp5Lx9mWqn9UPtD7HOW9Amf1fOvsmGsWDFZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+88/E67knxYvVQo5WH1WiYK02hgwHwYDVR0j
BBgwFoAUv1opZNBLTaz/3YuWnQow1rG2/xUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01GVkZkVWhXRkJLWmE1Z3VLU3FQaW5SR2lNbm5Hd2pwaVVuVVJiR1pD
b2kvMC9CRjVBMjk2NEQwNEI0REFDRkZERDhCOTY5RDBBMzBENkIxQjZGRjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNUEyOTY0RDA0QjREQUNG
RkREOEI5NjlEMEEzMEQ2QjFCNkZGMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNRlZGZFVoV0ZCS1phNWd1S1NxUGluUkdpTW5uR3dqcGlVblVSYkdaQ29pLzAv
MzIzODMwMzQzYTMzMzA2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwqDANBgkqhkiG9w0BAQsFAAOCAQEAOtL0ev7u
BXwAgl5U+FGq6YTjYWYpjeTgXpPNsN8NwX8Gxo8MrMIKyOQIBQxTBDLHDDqOEIfc
Nsi6XsjQTdX+b2sy4sb9zjHKxpOlsQGXZ/U1mhhSANxMWBegXFTHykVaVn1EsQOO
gYccOJPjFGPyIOAsMu30yNzVjGWueEMpDjHV9XM6FlN/qAWTf1KHVq1YIolqc8z/
0wbewgYPoVRUihK39xbyui0kvCdt5RxZUTF4I6PmG2pIW2dtoyXmnA0YWW/bcI1c
5HyrHnC/nWNS+iXaTgwAISMNmkkghg1kZhpfTapKUDIt8xfYaE4lPRhXlQbfHLZy
dSH/hZwQMSXy8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org