Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/323830343a326134633a3a2f33322d3332203d3e203533313637.roa
File:                     323830343a326134633a3a2f33322d3332203d3e203533313637.roa (raw, json)
Hash identifier:          SLB62nqay+tL4/XA16M9vuvLD6m2MOmVQtF14RGt9TY=
Subject key identifier:   89:63:9D:DF:C0:84:49:2E:26:DF:74:60:27:4E:22:D1:E5:E2:FF:39
Certificate issuer:       /CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
Certificate serial:       4218B9CF43897DA58A9FE44F5A8D794A6297EBD8
Authority key identifier: 9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/323830343a326134633a3a2f33322d3332203d3e203533313637.roa
Signing time:             Tue 26 Dec 2023 18:34:31 +0000
ROA not before:           Tue 26 Dec 2023 18:29:31 +0000
ROA not after:            Tue 24 Dec 2024 18:34:31 +0000
asID:                     53167
IP address blocks:        2804:2a4c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:18:b9:cf:43:89:7d:a5:8a:9f:e4:4f:5a:8d:79:4a:62:97:eb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
        Validity
            Not Before: Dec 26 18:29:31 2023 GMT
            Not After : Dec 24 18:34:31 2024 GMT
        Subject: CN=89639DDFC084492E26DF7460274E22D1E5E2FF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:8d:63:3b:c8:66:3b:5c:dd:3a:cf:5f:83:
                    66:4c:97:f2:bc:73:d9:7b:88:3c:6a:22:cf:7e:72:
                    a0:16:d1:58:cd:b8:2d:2d:51:ea:4d:d9:04:7d:3f:
                    c9:bb:35:de:75:18:c8:17:d7:a8:b5:dd:8b:4e:20:
                    75:9d:91:c3:38:cc:6c:6a:7e:32:44:5e:1a:cd:0a:
                    88:24:00:85:f5:d7:26:34:8c:c9:39:fe:c3:66:fc:
                    b4:fd:aa:f2:f9:d3:e3:50:45:c2:75:41:a6:1e:1c:
                    b3:c2:89:24:08:2d:d4:70:66:5b:95:40:f2:b1:cc:
                    b1:c8:ab:84:8b:30:24:1d:7a:cf:18:9d:4f:1c:f5:
                    c8:87:96:e8:01:24:3c:05:03:c6:96:a3:f8:12:06:
                    e5:48:eb:3e:de:e0:cf:fa:c8:2b:ba:5b:e1:b9:73:
                    95:22:d7:94:b1:df:5c:98:15:56:57:6a:b6:1e:fe:
                    75:d8:7d:dc:d4:13:09:7d:51:c7:c4:b2:fd:ea:fb:
                    0c:ca:95:04:38:40:ae:50:1e:2f:e4:00:7a:b5:7e:
                    a9:51:e5:0e:21:36:9f:ca:24:1a:8c:40:7e:59:f2:
                    5c:ac:4a:4b:5f:a9:88:d7:5d:10:17:d1:03:f7:45:
                    dd:50:23:8d:53:42:94:76:81:87:2a:b1:9a:41:60:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:63:9D:DF:C0:84:49:2E:26:DF:74:60:27:4E:22:D1:E5:E2:FF:39
            X509v3 Authority Key Identifier:
                keyid:9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/323830343a326134633a3a2f33322d3332203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:00:0f:6b:78:78:70:f3:51:a2:e1:21:a3:7d:94:f1:c0:dc:
         e8:2a:da:a0:d3:49:46:ab:c9:b3:00:ef:69:a2:25:34:5c:e8:
         8e:d8:fe:12:01:1c:f3:bb:fa:18:3c:59:a4:cb:f6:df:6b:aa:
         06:fd:bc:87:1f:35:6e:41:01:04:d9:df:0e:45:cc:9a:7e:29:
         3f:11:84:7a:bc:0e:1c:cb:ae:d4:26:a3:58:60:a4:66:69:0f:
         77:19:dc:3a:af:c0:52:e0:e1:95:46:81:99:bf:73:66:e5:05:
         23:54:c2:ba:76:67:ad:ea:5e:ef:65:7c:6a:1c:2c:ad:2f:48:
         f2:d7:9e:b0:b9:89:d5:05:d8:b1:c1:92:2e:1c:43:1e:a6:bb:
         78:1c:3b:7a:e5:75:11:4e:3e:a1:8e:b1:bb:3f:27:a5:7e:a0:
         55:25:f8:99:dc:bf:7f:d0:c0:a0:03:78:40:b7:94:f9:e2:dd:
         0d:a5:25:aa:a4:c4:ba:01:81:13:eb:00:d3:16:d0:2a:45:59:
         01:32:81:b4:92:9c:3b:71:87:01:68:37:43:11:6d:d1:8e:2b:
         4c:1d:77:83:a6:4d:55:c3:5d:5e:0d:1b:a7:b2:36:ec:55:c5:
         7e:c7:e7:4c:53:58:b8:19:35:b3:32:18:f2:7f:d0:3d:17:c0:
         59:72:a0:34
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQhi5z0OJfaWKn+RPWo15SmKX69gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI2NjlCQTAzN0YyQzlBOTFCOUY1MUE0NEJEREI2N0Iy
RTIzRTZBQjAeFw0yMzEyMjYxODI5MzFaFw0yNDEyMjQxODM0MzFaMDMxMTAvBgNV
BAMTKDg5NjM5RERGQzA4NDQ5MkUyNkRGNzQ2MDI3NEUyMkQxRTVFMkZGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzo1jO8hmO1zdOs9fg2ZMl/K8
c9l7iDxqIs9+cqAW0VjNuC0tUepN2QR9P8m7Nd51GMgX16i13YtOIHWdkcM4zGxq
fjJEXhrNCogkAIX11yY0jMk5/sNm/LT9qvL50+NQRcJ1QaYeHLPCiSQILdRwZluV
QPKxzLHIq4SLMCQdes8YnU8c9ciHlugBJDwFA8aWo/gSBuVI6z7e4M/6yCu6W+G5
c5Ui15Sx31yYFVZXarYe/nXYfdzUEwl9UcfEsv3q+wzKlQQ4QK5QHi/kAHq1fqlR
5Q4hNp/KJBqMQH5Z8lysSktfqYjXXRAX0QP3Rd1QI41TQpR2gYcqsZpBYFJrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUiWOd38CESS4m33RgJ04i0eXi/zkwHwYDVR0j
BBgwFoAUm2aboDfyyakbn1GkS922ey4j5qswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1pGUlVWaTJVNFpqUTc4QmdFRjc5TlFmelZ4RjVMeFRUOXZ2ZDlvZHUx
VlAvMC85QjY2OUJBMDM3RjJDOUE5MUI5RjUxQTQ0QkREQjY3QjJFMjNFNkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlCNjY5QkEwMzdGMkM5QTkx
QjlGNTFBNDRCRERCNjdCMkUyM0U2QUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NaRlJVVmkyVTRaalE3OEJnRUY3OU5RZnpWeEY1THhUVDl2dmQ5b2R1MVZQLzAv
MzIzODMwMzQzYTMyNjEzNDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMzMx
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEKkwwDQYJKoZIhvcNAQELBQADggEBALoAD2t4eHDz
UaLhIaN9lPHA3Ogq2qDTSUarybMA72miJTRc6I7Y/hIBHPO7+hg8WaTL9t9rqgb9
vIcfNW5BAQTZ3w5FzJp+KT8RhHq8DhzLrtQmo1hgpGZpD3cZ3DqvwFLg4ZVGgZm/
c2blBSNUwrp2Z63qXu9lfGocLK0vSPLXnrC5idUF2LHBki4cQx6mu3gcO3rldRFO
PqGOsbs/J6V+oFUl+Jncv3/QwKADeEC3lPni3Q2lJaqkxLoBgRPrANMW0CpFWQEy
gbSSnDtxhwFoN0MRbdGOK0wdd4OmTVXDXV4NG6eyNuxVxX7H50xTWLgZNbMyGPJ/
0D0XwFlyoDQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org