Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a313030303a3a2f34302d3430203d3e20323637393836.roa
File:                     323830343a353634303a313030303a3a2f34302d3430203d3e20323637393836.roa (raw, json)
Hash identifier:          taPprGKOIOX+u/tlEqCkvY0pozqRHzreDYyKJBOnDxs=
Subject key identifier:   8E:BD:89:59:C3:F0:7F:EF:70:89:AC:69:9F:D7:84:0E:4E:5C:57:4E
Certificate issuer:       /CN=8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A
Certificate serial:       629BB01CA278CA2B4F759C203ACB4F68053F3CC0
Authority key identifier: 8F:B9:2C:AE:23:D0:DE:35:CE:9F:CF:F3:EF:73:D5:9A:E2:96:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a313030303a3a2f34302d3430203d3e20323637393836.roa
Signing time:             Thu 12 Jan 2023 23:00:00 +0000
ROA not before:           Thu 12 Jan 2023 22:55:00 +0000
ROA not after:            Thu 11 Jan 2024 23:00:00 +0000
asID:                     267986
IP address blocks:        2804:5640:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9b:b0:1c:a2:78:ca:2b:4f:75:9c:20:3a:cb:4f:68:05:3f:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A
        Validity
            Not Before: Jan 12 22:55:00 2023 GMT
            Not After : Jan 11 23:00:00 2024 GMT
        Subject: CN=8EBD8959C3F07FEF7089AC699FD7840E4E5C574E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:aa:f7:43:a4:cd:d3:67:5d:20:22:43:bd:
                    31:de:4e:b5:ae:54:33:ec:c0:15:3b:de:da:9d:55:
                    b3:d3:f6:08:79:79:58:46:40:a9:f6:aa:6f:31:d0:
                    82:65:9d:d8:72:07:35:d3:73:8f:06:b9:86:e7:46:
                    57:f5:f3:4a:0e:50:f2:b8:ef:c0:e9:d4:25:63:2b:
                    06:34:77:90:21:02:ef:bf:af:3d:82:aa:24:28:1d:
                    f3:1f:5e:98:df:72:8a:a4:a4:86:54:b2:35:24:44:
                    0f:03:9b:85:4b:91:5f:e2:58:8c:b0:b8:74:40:63:
                    32:c3:82:c6:87:2a:6d:b6:5a:17:ae:2f:56:9e:05:
                    2d:74:53:2e:71:1f:cf:5e:94:d6:81:a4:f5:1d:0f:
                    34:8e:b1:bb:ba:f9:24:60:0a:df:21:3d:c0:70:85:
                    b4:c7:4a:67:86:11:07:e7:6a:d8:dd:b2:16:6e:eb:
                    0d:db:44:ae:69:2a:f9:5c:2a:e1:2d:71:7a:a7:47:
                    79:ef:4c:94:0f:d1:59:4b:d3:c9:b5:d1:9e:eb:7f:
                    31:45:fa:e6:16:12:6f:8a:e3:bb:c3:65:c8:71:63:
                    37:33:84:de:69:51:d4:bd:7d:51:9c:97:a4:ea:58:
                    11:16:31:b5:7f:4f:5b:00:21:57:e8:8e:8c:91:65:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:89:59:C3:F0:7F:EF:70:89:AC:69:9F:D7:84:0E:4E:5C:57:4E
            X509v3 Authority Key Identifier:
                keyid:8F:B9:2C:AE:23:D0:DE:35:CE:9F:CF:F3:EF:73:D5:9A:E2:96:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/323830343a353634303a313030303a3a2f34302d3430203d3e20323637393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5640:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:27:84:8f:ca:cb:d7:b8:9a:ff:1b:d7:7c:8f:2c:d2:43:25:
         a3:e1:3c:5c:ce:9c:a8:ca:39:2c:75:a8:ad:da:45:23:be:43:
         c1:6c:5e:f4:30:5c:4f:dd:76:f4:17:e5:53:90:d6:c0:e7:25:
         48:b5:a4:e7:7d:61:78:00:ab:c5:db:81:63:6d:18:f0:69:93:
         27:fa:4a:c3:71:5d:43:f1:cf:78:f3:c6:7b:32:ae:89:23:2f:
         64:05:6c:3a:41:ef:41:a1:b8:cd:2c:a9:4f:d5:d3:b2:21:19:
         83:79:41:84:e8:87:ad:36:e4:11:94:13:8d:d1:db:f8:03:37:
         f9:2c:10:f5:11:d6:95:a3:6c:ea:17:01:1b:14:82:c5:f5:b9:
         32:61:2e:0a:d8:70:55:86:47:23:a4:fe:da:e4:d7:fe:ec:41:
         f7:e3:88:fb:72:f0:14:52:17:f0:7c:7e:21:23:a2:e3:90:9e:
         5f:c1:a4:46:6e:ae:e1:6e:94:ae:4a:d6:5c:3f:55:27:39:60:
         e1:3f:78:a6:58:4a:27:ec:eb:28:05:9d:d8:41:0a:08:0b:a9:
         dd:08:62:2e:2b:74:0d:54:ff:79:d3:87:68:34:ba:b7:e2:75:
         ac:e6:76:3a:78:69:36:b9:7b:39:a3:0e:04:f3:f9:6f:b8:62:
         d6:63:b7:cc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYpuwHKJ4yitPdZwgOstPaAU/PMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZCOTJDQUUyM0QwREUzNUNFOUZDRkYzRUY3M0Q1OUFF
Mjk2MkIwQTAeFw0yMzAxMTIyMjU1MDBaFw0yNDAxMTEyMzAwMDBaMDMxMTAvBgNV
BAMTKDhFQkQ4OTU5QzNGMDdGRUY3MDg5QUM2OTlGRDc4NDBFNEU1QzU3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYyar3Q6TN02ddICJDvTHeTrWu
VDPswBU73tqdVbPT9gh5eVhGQKn2qm8x0IJlndhyBzXTc48GuYbnRlf180oOUPK4
78Dp1CVjKwY0d5AhAu+/rz2CqiQoHfMfXpjfcoqkpIZUsjUkRA8Dm4VLkV/iWIyw
uHRAYzLDgsaHKm22WheuL1aeBS10Uy5xH89elNaBpPUdDzSOsbu6+SRgCt8hPcBw
hbTHSmeGEQfnatjdshZu6w3bRK5pKvlcKuEtcXqnR3nvTJQP0VlL08m10Z7rfzFF
+uYWEm+K47vDZchxYzczhN5pUdS9fVGcl6TqWBEWMbV/T1sAIVfojoyRZS0nAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjr2JWcPwf+9wiaxpn9eEDk5cV04wHwYDVR0j
BBgwFoAUj7ksriPQ3jXOn8/z73PVmuKWKwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjFabzRVNWRkcDltZUZGTlhOV3luUjJwUDRaV0JEVUtVY1Jac1FRTWJZ
ck0vMC84RkI5MkNBRTIzRDBERTM1Q0U5RkNGRjNFRjczRDU5QUUyOTYyQjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGQjkyQ0FFMjNEMERFMzVD
RTlGQ0ZGM0VGNzNENTlBRTI5NjJCMEEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YxWm80VTVkZHA5bWVGRk5YTld5blIycFA0WldCRFVLVWNSWnNRUU1iWXJNLzAv
MzIzODMwMzQzYTM1MzYzNDMwM2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM5MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEVkAQMA0GCSqGSIb3DQEBCwUA
A4IBAQBIJ4SPysvXuJr/G9d8jyzSQyWj4Txczpyoyjksdait2kUjvkPBbF70MFxP
3Xb0F+VTkNbA5yVItaTnfWF4AKvF24FjbRjwaZMn+krDcV1D8c9488Z7Mq6JIy9k
BWw6Qe9BobjNLKlP1dOyIRmDeUGE6IetNuQRlBON0dv4Azf5LBD1EdaVo2zqFwEb
FILF9bkyYS4K2HBVhkcjpP7a5Nf+7EH344j7cvAUUhfwfH4hI6LjkJ5fwaRGbq7h
bpSuStZcP1UnOWDhP3imWEon7OsoBZ3YQQoIC6ndCGIuK3QNVP9504doNLq34nWs
5nY6eGk2uXs5ow4E8/lvuGLWY7fM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org