Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33332d3333203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33332d3333203d3e20323634353935.roa (raw, json)
Hash identifier:          JfyTayorNInbveltNUx2HaPiRGr+ORrsHh+j/9QF4UM=
Subject key identifier:   C3:12:5E:AB:84:56:0D:83:8C:79:BC:4E:2E:48:AB:B9:43:82:DD:84
Certificate issuer:       /CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
Certificate serial:       67BCC65F4B368F638D34DC5C55F241F9BB7E8607
Authority key identifier: FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33332d3333203d3e20323634353935.roa
Signing time:             Sat 10 Dec 2022 21:23:43 +0000
ROA not before:           Sat 10 Dec 2022 21:18:43 +0000
ROA not after:            Sat 09 Dec 2023 21:23:43 +0000
asID:                     264595
IP address blocks:        2804:2228::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bc:c6:5f:4b:36:8f:63:8d:34:dc:5c:55:f2:41:f9:bb:7e:86:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
        Validity
            Not Before: Dec 10 21:18:43 2022 GMT
            Not After : Dec  9 21:23:43 2023 GMT
        Subject: CN=C3125EAB84560D838C79BC4E2E48ABB94382DD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:b6:6f:0f:37:0a:10:3c:e0:fa:81:b7:e0:
                    1f:af:22:3c:e8:f7:9b:52:e5:a9:3f:6b:a9:89:5e:
                    ec:ec:b6:65:4f:2d:96:a7:ef:81:1f:db:4d:3e:09:
                    98:02:5b:27:02:30:06:d3:d2:69:e8:a6:a9:c8:51:
                    5c:37:b0:a5:85:b2:bc:30:c5:da:f3:04:e1:73:9f:
                    40:ea:82:7d:8d:d4:3d:42:85:a3:9e:50:bd:15:29:
                    d4:5f:84:29:7c:5f:06:96:e4:3c:48:4f:c6:d2:5f:
                    c9:2c:ed:4a:a6:e7:b1:a0:93:f2:c2:02:5d:4e:6f:
                    19:85:e8:4c:dd:74:47:94:b4:4f:33:45:4f:2b:41:
                    ae:b2:2e:78:0a:b8:7d:6c:dd:ab:23:20:4e:bc:5a:
                    9c:cb:1c:58:7d:9a:4b:a1:32:d8:6c:74:08:8e:e9:
                    0c:48:75:5b:c4:42:74:46:46:ea:5b:ae:b9:de:55:
                    58:f3:ec:54:8e:2f:47:ac:5e:e3:8e:26:7f:77:28:
                    2a:d3:65:bb:50:39:1d:8c:d9:f8:f4:36:ab:a6:f2:
                    35:70:d3:61:5a:54:b1:11:38:e6:94:59:fc:34:d4:
                    5a:74:d3:e7:e2:5c:ff:18:9f:bb:61:e1:55:12:d5:
                    61:4f:fd:b7:55:ee:f3:b1:00:c5:2d:65:f2:6f:62:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:12:5E:AB:84:56:0D:83:8C:79:BC:4E:2E:48:AB:B9:43:82:DD:84
            X509v3 Authority Key Identifier:
                keyid:FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33332d3333203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:44:e5:50:52:cf:1f:03:2f:a6:f6:38:d3:b7:dd:1f:93:
         c3:f0:77:b3:f7:06:69:bc:91:b5:59:b4:32:25:1d:c2:68:ad:
         95:13:2a:eb:f7:18:ba:c4:59:da:ed:79:e0:55:ed:93:c8:cc:
         de:7f:dd:c4:42:ef:ab:6c:f7:8e:b9:32:c4:bc:79:00:9a:14:
         b2:db:8d:26:5c:ac:9f:fb:55:fa:4e:ce:7e:69:6f:4f:99:fc:
         95:af:1f:03:56:c2:c9:e3:83:67:95:28:7f:9f:b5:ed:f6:40:
         27:96:cf:01:6f:bd:8d:e9:7c:e3:f0:78:7e:72:0b:40:ba:2e:
         a6:68:51:0b:25:5c:e7:55:66:0f:5f:20:04:2b:b7:29:3e:6e:
         4c:47:cf:9a:da:8b:50:86:8f:33:08:8f:fd:29:86:40:60:5f:
         d5:5e:d1:ed:c0:2a:f0:31:06:a4:f1:76:a1:0c:51:76:03:fe:
         e2:1b:f5:2a:02:4c:de:86:95:30:65:77:55:bb:9e:bb:78:44:
         49:5a:e7:60:43:c7:35:64:30:f9:8b:d6:bb:78:88:89:85:6c:
         0b:c9:1b:e5:3d:3b:c1:8e:da:07:67:ec:21:ed:b1:42:63:92:
         7f:ca:c7:67:a5:e7:ef:c5:f0:ed:52:c7:51:e7:71:32:04:90:
         26:70:b8:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ7zGX0s2j2ONNNxcVfJB+bt+hgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY3MTY2MURGM0Q0NkQwN0ZDMzdCRDcyRjFCNzlEMUQ1
RTg3OTYxQjAeFw0yMjEyMTAyMTE4NDNaFw0yMzEyMDkyMTIzNDNaMDMxMTAvBgNV
BAMTKEMzMTI1RUFCODQ1NjBEODM4Qzc5QkM0RTJFNDhBQkI5NDM4MkREODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MLZvDzcKEDzg+oG34B+vIjzo
95tS5ak/a6mJXuzstmVPLZan74Ef200+CZgCWycCMAbT0mnopqnIUVw3sKWFsrww
xdrzBOFzn0Dqgn2N1D1ChaOeUL0VKdRfhCl8XwaW5DxIT8bSX8ks7Uqm57Ggk/LC
Al1ObxmF6EzddEeUtE8zRU8rQa6yLngKuH1s3asjIE68WpzLHFh9mkuhMthsdAiO
6QxIdVvEQnRGRupbrrneVVjz7FSOL0esXuOOJn93KCrTZbtQOR2M2fj0Nqum8jVw
02FaVLEROOaUWfw01Fp00+fiXP8Yn7th4VUS1WFP/bdV7vOxAMUtZfJvYsrNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwxJeq4RWDYOMebxOLkiruUOC3YQwHwYDVR0j
BBgwFoAU/3FmHfPUbQf8N71y8bedHV6HlhswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVQzOU5TV2laZzNlQXJLRzdYWUtBcFFUV2E2QmdMNURvamR5YmFqR3RG
VXkvMC9GRjcxNjYxREYzRDQ2RDA3RkMzN0JENzJGMUI3OUQxRDVFODc5NjFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGNzE2NjFERjNENDZEMDdG
QzM3QkQ3MkYxQjc5RDFENUU4Nzk2MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VUMzlOU1dpWmczZUFyS0c3WFlLQXBRVFdhNkJnTDVEb2pkeWJhakd0RlV5LzAv
MzIzODMwMzQzYTMyMzIzMjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQiKAAwDQYJKoZIhvcNAQELBQADggEBAFkdROVQ
Us8fAy+m9jjTt90fk8Pwd7P3Bmm8kbVZtDIlHcJorZUTKuv3GLrEWdrteeBV7ZPI
zN5/3cRC76ts9465MsS8eQCaFLLbjSZcrJ/7VfpOzn5pb0+Z/JWvHwNWwsnjg2eV
KH+fte32QCeWzwFvvY3pfOPweH5yC0C6LqZoUQslXOdVZg9fIAQrtyk+bkxHz5ra
i1CGjzMIj/0phkBgX9Ve0e3AKvAxBqTxdqEMUXYD/uIb9SoCTN6GlTBld1W7nrt4
REla52BDxzVkMPmL1rt4iImFbAvJG+U9O8GO2gdn7CHtsUJjkn/Kx2el5+/F8O1S
x1HncTIEkCZwuAY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org