Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a343030303a3a2f33342d3334203d3e20323635393836.roa
File:                     323830343a343064633a343030303a3a2f33342d3334203d3e20323635393836.roa (raw, json)
Hash identifier:          /iPBuzqyLCrBmhXSaxvo6sXwFiy0tYjqRnoMvArVNB8=
Subject key identifier:   3A:D6:1D:8E:62:CD:50:66:2B:AC:64:C5:3B:65:74:AA:59:17:1A:FA
Certificate issuer:       /CN=C99F440A77FA805AD87B90E49EB02EDB6ADA0197
Certificate serial:       2380349B7EF46EBFC34AA55A74A7BCF021B33631
Authority key identifier: C9:9F:44:0A:77:FA:80:5A:D8:7B:90:E4:9E:B0:2E:DB:6A:DA:01:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a343030303a3a2f33342d3334203d3e20323635393836.roa
Signing time:             Fri 11 Aug 2023 17:49:04 +0000
ROA not before:           Fri 11 Aug 2023 17:44:04 +0000
ROA not after:            Fri 09 Aug 2024 17:49:04 +0000
asID:                     265986
IP address blocks:        2804:40dc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:80:34:9b:7e:f4:6e:bf:c3:4a:a5:5a:74:a7:bc:f0:21:b3:36:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99F440A77FA805AD87B90E49EB02EDB6ADA0197
        Validity
            Not Before: Aug 11 17:44:04 2023 GMT
            Not After : Aug  9 17:49:04 2024 GMT
        Subject: CN=3AD61D8E62CD50662BAC64C53B6574AA59171AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:ce:68:83:97:dc:ec:ad:bc:77:8a:8d:55:
                    91:f2:e5:53:90:d4:09:2f:d8:c2:17:4d:f7:ec:63:
                    a1:34:cd:c0:05:e5:c3:f8:bc:db:17:5a:44:d6:58:
                    a7:04:ef:5a:b2:ce:a9:4a:73:a9:7d:3c:a6:f3:c5:
                    77:a2:51:d0:8d:4a:41:2b:bd:93:09:31:87:6d:11:
                    03:bc:6c:42:a7:79:1f:af:b1:51:46:8f:5c:d1:d8:
                    a0:76:4b:e5:24:95:fd:a4:18:d9:0b:fc:8d:84:4a:
                    f0:4c:4c:f7:a8:a3:e5:29:8c:46:10:46:b2:07:7f:
                    02:07:b3:e6:30:6c:d5:c3:cd:25:d6:94:00:9c:83:
                    57:11:81:e1:e0:6a:a3:22:20:b4:0f:c7:de:71:5c:
                    e8:32:86:4a:05:84:a9:3a:62:f1:be:71:bf:69:db:
                    e6:9d:15:f9:db:16:42:6a:a7:2a:00:a8:54:e5:42:
                    6d:83:aa:c5:f8:e1:31:35:df:9a:27:cb:7d:29:49:
                    17:0b:79:ba:94:86:82:96:0b:6a:6d:1a:c4:63:97:
                    fd:97:2b:1c:e4:10:0a:10:b5:06:8b:d2:ca:c3:df:
                    e8:cf:91:ce:47:66:c7:fa:8b:7f:79:7e:91:45:a7:
                    a1:9d:e9:f6:ec:b3:e5:d7:6d:0d:2e:cf:33:a2:7e:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D6:1D:8E:62:CD:50:66:2B:AC:64:C5:3B:65:74:AA:59:17:1A:FA
            X509v3 Authority Key Identifier:
                keyid:C9:9F:44:0A:77:FA:80:5A:D8:7B:90:E4:9E:B0:2E:DB:6A:DA:01:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a343030303a3a2f33342d3334203d3e20323635393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40dc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:ed:40:a0:5b:84:c7:90:e1:d3:e8:cf:77:32:85:23:a5:
         74:e7:dd:8a:c6:21:66:da:1f:0c:62:bf:dd:9c:28:65:59:9f:
         98:94:5a:62:02:b4:ff:e0:23:c2:26:27:79:b5:89:46:26:53:
         91:c8:75:bb:38:35:88:36:f1:c2:4b:0b:de:cb:60:a3:bf:cb:
         95:4d:89:9d:d4:da:22:56:e8:8f:60:4d:83:f3:29:eb:e4:5f:
         c1:6d:74:dd:7d:46:1b:92:48:e0:d8:70:b7:27:4c:fd:94:37:
         9b:6e:a8:c2:a5:00:8a:f1:26:84:6f:d8:73:09:85:4c:3e:90:
         76:cb:84:ae:86:f1:68:87:02:c3:e2:f6:32:f8:94:ec:2a:f7:
         55:05:3f:e0:eb:e0:49:a6:df:2b:61:64:cb:7b:86:7f:86:e7:
         9a:77:48:d4:93:ee:5a:45:e4:b1:67:5a:8f:de:c6:64:df:eb:
         08:4b:7e:36:4b:e2:6a:92:d6:fa:d0:b6:5c:70:81:97:00:66:
         29:75:ae:87:a5:39:96:2a:17:b0:57:d4:a9:bc:30:ad:58:dc:
         e5:35:c3:1f:cc:18:d5:19:83:7a:09:ea:71:48:f6:1e:29:00:
         58:0f:db:71:cc:da:79:2d:b5:20:5d:7e:d5:5c:dd:c2:27:2c:
         0a:de:b4:d9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUI4A0m370br/DSqVadKe88CGzNjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk5RjQ0MEE3N0ZBODA1QUQ4N0I5MEU0OUVCMDJFREI2
QURBMDE5NzAeFw0yMzA4MTExNzQ0MDRaFw0yNDA4MDkxNzQ5MDRaMDMxMTAvBgNV
BAMTKDNBRDYxRDhFNjJDRDUwNjYyQkFDNjRDNTNCNjU3NEFBNTkxNzFBRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClR85og5fc7K28d4qNVZHy5VOQ
1Akv2MIXTffsY6E0zcAF5cP4vNsXWkTWWKcE71qyzqlKc6l9PKbzxXeiUdCNSkEr
vZMJMYdtEQO8bEKneR+vsVFGj1zR2KB2S+Uklf2kGNkL/I2ESvBMTPeoo+UpjEYQ
RrIHfwIHs+YwbNXDzSXWlACcg1cRgeHgaqMiILQPx95xXOgyhkoFhKk6YvG+cb9p
2+adFfnbFkJqpyoAqFTlQm2DqsX44TE135ony30pSRcLebqUhoKWC2ptGsRjl/2X
KxzkEAoQtQaL0srD3+jPkc5HZsf6i395fpFFp6Gd6fbss+XXbQ0uzzOiftBRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOtYdjmLNUGYrrGTFO2V0qlkXGvowHwYDVR0j
BBgwFoAUyZ9ECnf6gFrYe5DknrAu22raAZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWk0VFVoNnlmcTV3cFpCYURxRWhTZHg5TWtkbkhIYXZtVjhUeHdSNzU5
blIvMC9DOTlGNDQwQTc3RkE4MDVBRDg3QjkwRTQ5RUIwMkVEQjZBREEwMTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5OUY0NDBBNzdGQTgwNUFE
ODdCOTBFNDlFQjAyRURCNkFEQTAxOTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpNFRVaDZ5ZnE1d3BaQmFEcUVoU2R4OU1rZG5ISGF2bVY4VHh3Ujc1OW5SLzAv
MzIzODMwMzQzYTM0MzA2NDYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM5MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQNxAMA0GCSqGSIb3DQEBCwUA
A4IBAQALPe1AoFuEx5Dh0+jPdzKFI6V0592KxiFm2h8MYr/dnChlWZ+YlFpiArT/
4CPCJid5tYlGJlORyHW7ODWINvHCSwvey2Cjv8uVTYmd1NoiVuiPYE2D8ynr5F/B
bXTdfUYbkkjg2HC3J0z9lDebbqjCpQCK8SaEb9hzCYVMPpB2y4SuhvFohwLD4vYy
+JTsKvdVBT/g6+BJpt8rYWTLe4Z/huead0jUk+5aReSxZ1qP3sZk3+sIS342S+Jq
ktb60LZccIGXAGYpda6HpTmWKhewV9SpvDCtWNzlNcMfzBjVGYN6CepxSPYeKQBY
D9txzNp5LbUgXX7VXN3CJywK3rTZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org