Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a343030303a3a2f33342d3334203d3e20323636323637.roa
File:                     323830343a336435303a343030303a3a2f33342d3334203d3e20323636323637.roa (raw, json)
Hash identifier:          aMFAAUh+mvC0WZCpAPIESobIlnQobBFFSox42fJTvRo=
Subject key identifier:   A2:63:4C:78:04:A0:86:82:15:94:78:4B:10:AF:57:37:BB:55:A9:B5
Certificate issuer:       /CN=87940368E0E1033E9A6E2EB09AF0257ED36CF825
Certificate serial:       6EFF03DF8B6D952E77FD132512FD84E4DFA4F660
Authority key identifier: 87:94:03:68:E0:E1:03:3E:9A:6E:2E:B0:9A:F0:25:7E:D3:6C:F8:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87940368E0E1033E9A6E2EB09AF0257ED36CF825.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a343030303a3a2f33342d3334203d3e20323636323637.roa
Signing time:             Wed 02 Aug 2023 15:23:19 +0000
ROA not before:           Wed 02 Aug 2023 15:18:19 +0000
ROA not after:            Wed 31 Jul 2024 15:23:19 +0000
asID:                     266267
IP address blocks:        2804:3d50:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ff:03:df:8b:6d:95:2e:77:fd:13:25:12:fd:84:e4:df:a4:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87940368E0E1033E9A6E2EB09AF0257ED36CF825
        Validity
            Not Before: Aug  2 15:18:19 2023 GMT
            Not After : Jul 31 15:23:19 2024 GMT
        Subject: CN=A2634C7804A086821594784B10AF5737BB55A9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:89:78:d0:cc:f5:a1:8d:3e:25:ac:3b:0d:
                    b8:9f:e2:0b:52:4d:c2:8c:b7:f8:85:55:df:87:25:
                    4d:c2:6c:d7:a4:74:98:58:a0:02:8a:95:e7:db:0b:
                    c3:40:23:c9:21:27:34:99:8f:78:05:fa:29:84:e3:
                    cb:8c:5e:97:91:bb:ca:8c:79:26:3e:52:6a:ff:1a:
                    51:7d:d8:ac:43:0f:3d:33:ce:44:19:af:3a:18:6b:
                    47:1e:50:01:a3:01:28:34:06:51:75:13:fc:e2:0b:
                    92:2a:18:0c:0d:2d:fd:aa:35:5f:c0:83:58:58:e8:
                    a7:21:99:77:5e:6d:cc:4e:d9:96:91:98:ef:0d:9b:
                    3b:3e:f2:6d:6d:eb:0f:8b:72:02:ae:84:7e:2f:2b:
                    85:2f:68:76:ee:7e:97:74:ba:f8:73:6f:3d:92:72:
                    29:86:50:e8:40:d0:c3:99:e6:d4:b9:27:31:a4:ab:
                    02:ef:2a:ac:34:6c:52:53:3b:d5:75:4c:c2:a8:e9:
                    8d:02:e3:95:be:ab:b7:d6:ae:ba:a2:68:3f:49:71:
                    c0:79:fa:e1:71:50:28:e3:45:30:ac:2b:0a:c1:a6:
                    0a:66:f2:40:a0:79:5d:26:9e:94:85:2f:db:3e:15:
                    dd:03:1e:be:23:25:fb:e5:b8:c2:c9:0f:ad:a0:ed:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:63:4C:78:04:A0:86:82:15:94:78:4B:10:AF:57:37:BB:55:A9:B5
            X509v3 Authority Key Identifier:
                keyid:87:94:03:68:E0:E1:03:3E:9A:6E:2E:B0:9A:F0:25:7E:D3:6C:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/87940368E0E1033E9A6E2EB09AF0257ED36CF825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87940368E0E1033E9A6E2EB09AF0257ED36CF825.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a343030303a3a2f33342d3334203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d50:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:87:97:43:56:f9:07:21:22:c5:87:f9:9d:44:be:3f:60:
         68:3a:8c:2e:35:de:72:37:17:aa:a2:81:c7:1c:c4:13:f9:1f:
         22:28:ae:84:11:e2:bf:6f:62:04:8c:1c:07:d0:58:27:ce:04:
         a6:ed:4c:ec:b9:bd:86:a6:7d:b1:5f:b3:64:37:0b:e9:ac:81:
         34:0a:1e:77:5a:3a:52:22:6d:42:39:14:6f:f0:9a:6f:79:0f:
         84:61:f0:3d:73:a1:9d:1f:90:4e:f7:57:f3:3f:90:c2:a6:0d:
         c3:cc:04:d0:bf:f7:77:8b:82:f9:e3:73:ee:6d:a9:12:39:58:
         ee:5d:59:a6:77:7c:1c:8a:6d:f9:7c:3f:ac:0c:a2:c4:f8:28:
         76:f6:36:55:58:ea:12:1c:08:15:8e:11:89:57:54:e0:34:72:
         f0:29:80:ea:8a:75:bd:ab:fe:d0:58:6f:eb:a6:01:bc:88:68:
         81:59:86:1c:fc:bd:af:a2:e1:3f:e1:fa:e6:68:74:ce:45:6c:
         cf:93:89:e0:a8:53:b3:21:ea:52:8b:b1:04:d5:b6:b6:ea:8d:
         b3:87:2f:cd:9e:d4:d9:ee:58:d9:84:c5:17:89:d1:5c:47:b5:
         e5:7f:26:27:b2:e4:0c:14:dd:be:fc:43:0b:06:ee:0d:2f:56:
         f7:2e:a9:82
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbv8D34ttlS53/RMlEv2E5N+k9mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc5NDAzNjhFMEUxMDMzRTlBNkUyRUIwOUFGMDI1N0VE
MzZDRjgyNTAeFw0yMzA4MDIxNTE4MTlaFw0yNDA3MzExNTIzMTlaMDMxMTAvBgNV
BAMTKEEyNjM0Qzc4MDRBMDg2ODIxNTk0Nzg0QjEwQUY1NzM3QkI1NUE5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmo4l40Mz1oY0+Jaw7Dbif4gtS
TcKMt/iFVd+HJU3CbNekdJhYoAKKlefbC8NAI8khJzSZj3gF+imE48uMXpeRu8qM
eSY+Umr/GlF92KxDDz0zzkQZrzoYa0ceUAGjASg0BlF1E/ziC5IqGAwNLf2qNV/A
g1hY6KchmXdebcxO2ZaRmO8Nmzs+8m1t6w+LcgKuhH4vK4UvaHbufpd0uvhzbz2S
cimGUOhA0MOZ5tS5JzGkqwLvKqw0bFJTO9V1TMKo6Y0C45W+q7fWrrqiaD9JccB5
+uFxUCjjRTCsKwrBpgpm8kCgeV0mnpSFL9s+Fd0DHr4jJfvluMLJD62g7TAJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUomNMeASghoIVlHhLEK9XN7tVqbUwHwYDVR0j
BBgwFoAUh5QDaODhAz6abi6wmvAlftNs+CUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdVckREWGdnN1JOVjZaRHJSeEhYV0NKd0x1SFVmaldhaTZrV1dRaTV1
cVQvMC84Nzk0MDM2OEUwRTEwMzNFOUE2RTJFQjA5QUYwMjU3RUQzNkNGODI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3OTQwMzY4RTBFMTAzM0U5
QTZFMkVCMDlBRjAyNTdFRDM2Q0Y4MjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3VXJERFhnZzdSTlY2WkRyUnhIWFdDSndMdUhVZmpXYWk2a1dXUWk1dXFULzAv
MzIzODMwMzQzYTMzNjQzNTMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMyMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPVBAMA0GCSqGSIb3DQEBCwUA
A4IBAQA/AIeXQ1b5ByEixYf5nUS+P2BoOowuNd5yNxeqooHHHMQT+R8iKK6EEeK/
b2IEjBwH0FgnzgSm7Uzsub2Gpn2xX7NkNwvprIE0Ch53WjpSIm1CORRv8JpveQ+E
YfA9c6GdH5BO91fzP5DCpg3DzATQv/d3i4L543PubakSOVjuXVmmd3wcim35fD+s
DKLE+Ch29jZVWOoSHAgVjhGJV1TgNHLwKYDqinW9q/7QWG/rpgG8iGiBWYYc/L2v
ouE/4frmaHTORWzPk4ngqFOzIepSi7EE1ba26o2zhy/NntTZ7ljZhMUXidFcR7Xl
fyYnsuQMFN2+/EMLBu4NL1b3LqmC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org