Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a343030303a3a2f33342d3334203d3e20323635343437.roa
File:                     323830343a333434383a343030303a3a2f33342d3334203d3e20323635343437.roa (raw, json)
Hash identifier:          kmD3+63CURH94WsJXhbYPN1lUkI1S2chL4DA30tJaDc=
Subject key identifier:   27:2E:39:5E:8D:94:0E:D5:B9:1E:0F:1D:08:EF:95:49:A4:5A:F3:32
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       0F7567C9E2325C9EE82DFB3DB4FFE71D68066CC8
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a343030303a3a2f33342d3334203d3e20323635343437.roa
Signing time:             Mon 23 Oct 2023 18:25:22 +0000
ROA not before:           Mon 23 Oct 2023 18:20:22 +0000
ROA not after:            Mon 21 Oct 2024 18:25:22 +0000
asID:                     265447
IP address blocks:        2804:3448:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:75:67:c9:e2:32:5c:9e:e8:2d:fb:3d:b4:ff:e7:1d:68:06:6c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:22 2023 GMT
            Not After : Oct 21 18:25:22 2024 GMT
        Subject: CN=272E395E8D940ED5B91E0F1D08EF9549A45AF332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:d8:46:3d:f6:63:65:46:e9:54:fe:fe:e6:
                    1b:a8:15:78:65:fd:4e:5e:ff:29:7a:60:56:2b:f1:
                    da:57:90:22:08:99:67:30:32:17:58:a8:a4:bb:50:
                    03:0d:0b:eb:23:b2:41:7f:26:8d:f9:1b:26:0b:61:
                    d9:c7:ca:ae:4e:4a:73:4d:40:0d:b8:d8:c2:38:81:
                    8a:75:e0:6a:b1:45:5e:24:0f:98:aa:1f:0c:c5:d1:
                    45:68:ad:46:74:d9:60:46:dd:62:e4:25:87:3d:f5:
                    6a:f3:c0:9a:db:5f:a6:71:54:54:3b:0f:cc:f5:7e:
                    50:c0:86:54:fa:65:1d:80:31:66:af:b2:25:96:9c:
                    cd:ba:3b:72:f9:02:08:d3:09:02:ae:42:ba:dd:9d:
                    65:bb:da:8c:4a:c9:f1:b1:e0:12:e6:a5:c7:29:e0:
                    3d:03:9b:6e:ac:1c:5b:28:f8:e0:f3:0d:11:0c:4f:
                    7a:94:a3:f9:33:80:73:b6:96:a5:b2:88:4d:2e:c0:
                    e9:50:81:19:22:b0:81:56:6f:a7:05:4b:5f:1d:a9:
                    44:d4:02:df:da:7b:da:45:d6:1e:fe:d0:39:2b:60:
                    62:e2:84:37:2b:08:fb:5f:db:85:ae:96:28:a9:cb:
                    e8:97:ff:ce:f6:c8:23:35:09:3d:07:8d:55:c8:77:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2E:39:5E:8D:94:0E:D5:B9:1E:0F:1D:08:EF:95:49:A4:5A:F3:32
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a343030303a3a2f33342d3334203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3448:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:6e:6c:bc:16:a8:5a:01:7a:3d:64:f3:60:b4:ca:ff:fa:
         cf:85:bd:fb:b0:27:b0:a0:56:84:1e:e3:20:65:19:fe:8a:26:
         85:86:dd:52:16:d1:19:63:0d:fe:4f:92:1d:f2:97:ba:a2:3f:
         af:eb:88:42:30:da:f0:46:2a:1f:36:68:27:7a:ce:f5:5c:eb:
         12:6f:76:8a:cc:4e:4c:65:81:27:39:c1:bd:f1:9b:3c:a8:5d:
         fd:28:24:f3:f3:2c:06:be:3b:db:35:98:01:67:3a:fa:d0:6e:
         b3:3d:dc:fe:5e:98:e0:9d:19:b2:5f:48:f7:6f:94:68:8c:a0:
         ce:bd:64:7c:19:4a:cd:43:7f:74:f7:fa:3c:46:3f:b7:76:e1:
         88:99:21:d1:b8:85:0e:6f:84:74:1a:33:7a:9e:39:48:4a:8e:
         0c:22:22:16:99:51:2f:33:cb:50:25:15:4d:38:f3:71:a3:30:
         a6:44:91:d0:1b:54:30:01:54:35:f0:5c:9f:0b:17:ec:07:e6:
         25:e6:62:dc:c0:dd:09:88:d0:ce:c0:e9:7c:03:c4:a0:1a:29:
         5a:bd:23:45:95:94:df:3e:6f:4d:05:47:4c:4d:fa:8d:5a:51:
         ff:09:40:7e:a7:92:70:68:5f:60:0e:c0:eb:8d:fa:ed:49:d1:
         11:9e:88:98
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUD3VnyeIyXJ7oLfs9tP/nHWgGbMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZFQzc4RjQ3RUFBNDBBNkFCQzBFMUVFMjlEMDNCNEQ5
MDY5MDRBMzAeFw0yMzEwMjMxODIwMjJaFw0yNDEwMjExODI1MjJaMDMxMTAvBgNV
BAMTKDI3MkUzOTVFOEQ5NDBFRDVCOTFFMEYxRDA4RUY5NTQ5QTQ1QUYzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDdhGPfZjZUbpVP7+5huoFXhl
/U5e/yl6YFYr8dpXkCIImWcwMhdYqKS7UAMNC+sjskF/Jo35GyYLYdnHyq5OSnNN
QA242MI4gYp14GqxRV4kD5iqHwzF0UVorUZ02WBG3WLkJYc99WrzwJrbX6ZxVFQ7
D8z1flDAhlT6ZR2AMWavsiWWnM26O3L5AgjTCQKuQrrdnWW72oxKyfGx4BLmpccp
4D0Dm26sHFso+ODzDREMT3qUo/kzgHO2lqWyiE0uwOlQgRkisIFWb6cFS18dqUTU
At/ae9pF1h7+0DkrYGLihDcrCPtf24Wuliipy+iX/872yCM1CT0HjVXId+mRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJy45Xo2UDtW5Hg8dCO+VSaRa8zIwHwYDVR0j
BBgwFoAUZux49H6qQKarwOHuKdA7TZBpBKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMC82NkVDNzhGNDdFQUE0MEE2QUJDMEUxRUUyOUQwM0I0RDkwNjkwNEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY2RUM3OEY0N0VBQTQwQTZB
QkMwRTFFRTI5RDAzQjREOTA2OTA0QTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzAv
MzIzODMwMzQzYTMzMzQzNDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM0MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENEhAMA0GCSqGSIb3DQEBCwUA
A4IBAQClDm5svBaoWgF6PWTzYLTK//rPhb37sCewoFaEHuMgZRn+iiaFht1SFtEZ
Yw3+T5Id8pe6oj+v64hCMNrwRiofNmgnes71XOsSb3aKzE5MZYEnOcG98Zs8qF39
KCTz8ywGvjvbNZgBZzr60G6zPdz+XpjgnRmyX0j3b5RojKDOvWR8GUrNQ3909/o8
Rj+3duGImSHRuIUOb4R0GjN6njlISo4MIiIWmVEvM8tQJRVNOPNxozCmRJHQG1Qw
AVQ18FyfCxfsB+Yl5mLcwN0JiNDOwOl8A8SgGilavSNFlZTfPm9NBUdMTfqNWlH/
CUB+p5JwaF9gDsDrjfrtSdERnoiY
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org