Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a383030303a3a2f33342d3334203d3e20323633363235.roa
File:                     323830343a313033383a383030303a3a2f33342d3334203d3e20323633363235.roa (raw, json)
Hash identifier:          Sm74/aicD5JdXjkOzPrj+oEeC9l/XJ/Gw+/yLpSrRaY=
Subject key identifier:   4B:3F:9E:1B:D9:62:41:D3:14:06:C4:22:8B:96:87:27:E6:19:22:D3
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       0777B62FE6857E2B647DA3E6D6104C74BD30710D
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a383030303a3a2f33342d3334203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:29 +0000
ROA not before:           Tue 05 Dec 2023 16:27:29 +0000
ROA not after:            Tue 03 Dec 2024 16:32:29 +0000
asID:                     263625
IP address blocks:        2804:1038:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:77:b6:2f:e6:85:7e:2b:64:7d:a3:e6:d6:10:4c:74:bd:30:71:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:29 2023 GMT
            Not After : Dec  3 16:32:29 2024 GMT
        Subject: CN=4B3F9E1BD96241D31406C4228B968727E61922D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:56:58:82:1f:e0:52:9e:b9:f6:0a:4f:fc:
                    46:40:40:0a:15:c1:06:d8:8e:5e:41:be:0d:a4:da:
                    ad:37:da:5c:63:f2:34:2c:0f:c1:b9:91:80:51:c1:
                    96:42:f2:fc:4d:9b:63:d1:e3:9a:33:85:f2:5c:6c:
                    3a:f4:59:44:1c:cd:b0:ab:31:3a:cc:d4:2f:cc:ca:
                    1e:19:4d:11:f3:ba:f7:c6:db:bb:13:77:32:f5:3a:
                    7d:5e:4f:26:31:55:82:14:cd:75:9f:6c:f3:c6:7c:
                    70:78:49:c1:73:1d:7a:5d:dd:52:e6:44:5f:11:7a:
                    4b:42:a2:45:e4:2e:5b:83:68:fd:4a:78:af:8f:e2:
                    a0:3c:62:d8:f5:46:40:b8:e9:85:86:cf:cf:4f:b9:
                    b8:a3:40:f7:3c:96:a3:25:bf:7e:85:b8:e3:81:f4:
                    9c:0f:66:d3:c2:fc:70:8a:3f:f5:79:ad:9d:b1:83:
                    b6:5b:ed:ec:35:ed:99:43:a0:72:34:96:9f:c7:bf:
                    9d:1c:fa:17:36:76:d0:cb:4b:ec:4d:be:d8:f9:fb:
                    7d:fc:de:80:3c:00:b4:2f:f9:77:11:c6:0e:55:b0:
                    60:18:ac:a6:be:5e:f0:c9:1d:7d:47:1a:43:41:63:
                    e7:04:ea:63:ef:45:ae:ac:71:de:8e:65:d8:fe:8d:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:9E:1B:D9:62:41:D3:14:06:C4:22:8B:96:87:27:E6:19:22:D3
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a383030303a3a2f33342d3334203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1038:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:27:c9:0d:8c:96:24:35:df:40:21:f3:63:43:1e:50:0d:94:
         71:3b:4f:08:d4:59:87:a4:2a:ba:a4:b4:f5:fe:58:a4:03:08:
         24:02:97:1f:27:37:b3:7c:f1:de:5c:1d:26:a2:66:66:fd:c0:
         ac:f7:a7:b8:3d:2d:34:0f:08:8b:60:f7:aa:00:01:7f:04:4a:
         b5:8d:6e:2f:e2:96:41:8f:ff:c2:20:ca:18:60:11:cd:0c:88:
         c9:9b:eb:d9:1b:db:a7:e5:62:ad:44:0d:f8:52:14:40:88:b5:
         41:84:ce:cf:1b:f4:b8:51:f0:91:0b:33:61:f0:76:86:08:df:
         04:c1:d4:41:73:38:d4:e3:d6:f9:4f:0a:2d:0c:79:91:c1:1a:
         2b:c4:e4:40:f6:38:7c:85:05:b7:39:e4:70:d2:35:9e:68:61:
         eb:e1:76:a3:fd:c5:3d:bb:42:b8:ec:1c:34:cd:83:cb:63:60:
         20:c4:a7:b6:17:08:ce:24:4d:78:29:eb:a2:2d:33:46:09:66:
         b2:cc:df:65:4f:d4:a5:e1:a9:8c:83:91:c4:9b:ec:91:3b:cd:
         65:5a:80:81:a4:ed:94:c3:1b:25:de:f6:58:df:ef:c0:d4:01:
         0d:08:1a:fc:8e:6f:19:d6:ea:e1:fb:66:88:e1:1d:93:35:29:
         38:ec:6d:2a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUB3e2L+aFfitkfaPm1hBMdL0wcQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI4OEEzQUUwMDEwMjAzNkM4RUM5MUIyMjg1NEYxREU0
MTBENTlDMjAeFw0yMzEyMDUxNjI3MjlaFw0yNDEyMDMxNjMyMjlaMDMxMTAvBgNV
BAMTKDRCM0Y5RTFCRDk2MjQxRDMxNDA2QzQyMjhCOTY4NzI3RTYxOTIyRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPFZYgh/gUp659gpP/EZAQAoV
wQbYjl5Bvg2k2q032lxj8jQsD8G5kYBRwZZC8vxNm2PR45ozhfJcbDr0WUQczbCr
MTrM1C/Myh4ZTRHzuvfG27sTdzL1On1eTyYxVYIUzXWfbPPGfHB4ScFzHXpd3VLm
RF8RektCokXkLluDaP1KeK+P4qA8Ytj1RkC46YWGz89PubijQPc8lqMlv36FuOOB
9JwPZtPC/HCKP/V5rZ2xg7Zb7ew17ZlDoHI0lp/Hv50c+hc2dtDLS+xNvtj5+338
3oA8ALQv+XcRxg5VsGAYrKa+XvDJHX1HGkNBY+cE6mPvRa6scd6OZdj+jWRnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSz+eG9liQdMUBsQii5aHJ+YZItMwHwYDVR0j
BBgwFoAU+4ijrgAQIDbI7JGyKFTx3kENWcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05tb3ozeGlwSHprU3F2U01xa2RXMlM5U2R6V2Q3bldBNjJFTWlRRVBZ
ZkgvMC9GQjg4QTNBRTAwMTAyMDM2QzhFQzkxQjIyODU0RjFERTQxMEQ1OUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCODhBM0FFMDAxMDIwMzZD
OEVDOTFCMjI4NTRGMURFNDEwRDU5QzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NObW96M3hpcEh6a1NxdlNNcWtkVzJTOVNkeldkN25XQTYyRU1pUUVQWWZILzAv
MzIzODMwMzQzYTMxMzAzMzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEDiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCtJ8kNjJYkNd9AIfNjQx5QDZRxO08I1FmHpCq6pLT1/likAwgkApcfJzez
fPHeXB0momZm/cCs96e4PS00DwiLYPeqAAF/BEq1jW4v4pZBj//CIMoYYBHNDIjJ
m+vZG9un5WKtRA34UhRAiLVBhM7PG/S4UfCRCzNh8HaGCN8EwdRBczjU49b5Twot
DHmRwRorxORA9jh8hQW3OeRw0jWeaGHr4Xaj/cU9u0K47Bw0zYPLY2AgxKe2FwjO
JE14KeuiLTNGCWayzN9lT9Sl4amMg5HEm+yRO81lWoCBpO2Uwxsl3vZY3+/A1AEN
CBr8jm8Z1urh+2aI4R2TNSk47G0q
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org