Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a383030303a3a2f33342d3334203d3e20323636323637.roa
File:                     323830343a336435303a383030303a3a2f33342d3334203d3e20323636323637.roa (raw, json)
Hash identifier:          I7hFf9myssbSTZzqGQwjFH2HMkNhA8ZR5S+RtPWVHeo=
Subject key identifier:   C9:1D:F7:3D:64:58:ED:90:39:2B:53:BF:11:CB:9E:FF:4F:54:27:AD
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       038BCF77B63B977DFD742C7ED9296AA55AB4A63F
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a383030303a3a2f33342d3334203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:38:05 +0000
ROA not before:           Thu 03 Aug 2023 17:33:05 +0000
ROA not after:            Thu 01 Aug 2024 17:38:05 +0000
asID:                     266267
IP address blocks:        2804:3d50:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8b:cf:77:b6:3b:97:7d:fd:74:2c:7e:d9:29:6a:a5:5a:b4:a6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:33:05 2023 GMT
            Not After : Aug  1 17:38:05 2024 GMT
        Subject: CN=C91DF73D6458ED90392B53BF11CB9EFF4F5427AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:51:9e:92:d2:5c:72:8c:24:03:69:5c:4a:
                    c5:62:a6:9f:90:bc:6d:df:3d:91:5c:13:85:7f:2b:
                    77:96:2c:d1:cb:a0:aa:fb:62:68:69:29:19:1c:b6:
                    65:91:c4:3a:86:cb:a7:c7:86:b8:aa:00:3d:50:e4:
                    97:b7:66:67:b6:bf:85:f2:19:1a:fa:ff:c2:d0:8a:
                    a9:9d:d2:ff:b8:f2:d3:5e:22:3a:fa:5d:3b:e0:d9:
                    cc:fd:02:2b:04:b0:38:cf:5c:40:26:f3:24:54:a2:
                    de:8d:c1:f0:63:61:4e:b3:31:dc:5f:88:85:a4:7a:
                    99:a4:6c:00:bb:6f:af:3e:99:6b:20:7c:da:e3:4b:
                    b2:e9:c7:1e:d7:06:5a:b9:0a:2f:1a:e7:bb:57:59:
                    16:42:f4:d1:26:ab:03:cf:5f:5d:a5:6a:b6:35:3e:
                    59:3c:77:ca:1d:89:50:89:06:78:50:94:59:fb:2c:
                    e1:c0:6b:a2:83:0c:25:e5:a0:9b:be:16:99:ef:ed:
                    e8:42:09:bc:bd:8e:a7:7d:93:39:72:d8:a4:73:3c:
                    50:f9:06:4b:98:ca:67:8f:26:e4:df:59:ad:44:ae:
                    0f:07:4c:d3:6b:81:4f:9c:c7:19:d5:b6:d8:e6:a2:
                    8e:c3:77:46:be:70:d2:3d:34:74:88:d5:a9:01:de:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1D:F7:3D:64:58:ED:90:39:2B:53:BF:11:CB:9E:FF:4F:54:27:AD
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/323830343a336435303a383030303a3a2f33342d3334203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d50:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         18:5a:08:d1:69:65:73:db:f1:b7:53:d7:32:98:6c:39:d6:2d:
         a4:25:c6:c4:a5:56:13:96:80:00:a4:cf:d2:e1:f2:ed:cd:d4:
         8e:a8:15:4f:9b:1c:3c:36:9c:1f:a2:b4:e3:c2:09:03:7f:df:
         f4:85:5f:82:24:7a:78:a1:af:72:0f:93:ca:39:b2:6f:b2:f5:
         8b:c2:3e:68:08:ab:67:6c:76:50:cd:15:94:f5:38:3e:17:36:
         8c:6b:fe:07:44:0e:85:0c:4e:6e:db:5d:e4:f7:c4:6e:59:39:
         8a:e9:bc:46:c9:36:66:ee:ec:18:ee:9a:18:79:73:df:5b:64:
         61:04:09:92:23:2a:4d:f3:5f:b5:5c:71:92:95:c3:f8:e3:69:
         3f:da:9f:ab:60:17:f6:7e:7e:19:49:3a:64:69:a9:f1:9e:f9:
         38:e7:c2:47:38:f0:d9:71:0d:4a:de:0f:5c:05:be:af:39:52:
         75:67:ef:0e:a4:e4:f5:4f:8c:82:9b:bb:bb:29:38:6c:78:0b:
         71:56:2d:81:27:f3:2c:93:cf:1f:4a:16:4c:53:2c:ff:17:14:
         b5:69:1d:a0:31:24:e0:15:e7:36:e5:51:c6:8a:5e:33:64:68:
         9c:f6:48:a1:e7:df:a9:7d:d7:de:20:b1:8d:55:96:08:7e:ce:
         d3:43:6e:86
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUA4vPd7Y7l339dCx+2SlqpVq0pj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM4Rjg5NDgzMjQxRjdGNjU3REU2ODQ2Q0JEQjJCQTA0
NDM4N0Y5ODAeFw0yMzA4MDMxNzMzMDVaFw0yNDA4MDExNzM4MDVaMDMxMTAvBgNV
BAMTKEM5MURGNzNENjQ1OEVEOTAzOTJCNTNCRjExQ0I5RUZGNEY1NDI3QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsglGektJccowkA2lcSsVipp+Q
vG3fPZFcE4V/K3eWLNHLoKr7YmhpKRkctmWRxDqGy6fHhriqAD1Q5Je3Zme2v4Xy
GRr6/8LQiqmd0v+48tNeIjr6XTvg2cz9AisEsDjPXEAm8yRUot6NwfBjYU6zMdxf
iIWkepmkbAC7b68+mWsgfNrjS7Lpxx7XBlq5Ci8a57tXWRZC9NEmqwPPX12larY1
Plk8d8odiVCJBnhQlFn7LOHAa6KDDCXloJu+Fpnv7ehCCby9jqd9kzly2KRzPFD5
BkuYymePJuTfWa1Erg8HTNNrgU+cxxnVttjmoo7Dd0a+cNI9NHSI1akB3ihdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUyR33PWRY7ZA5K1O/Ecue/09UJ60wHwYDVR0j
BBgwFoAU3I+JSDJB9/ZX3mhGy9sroEQ4f5gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdVckREWGdnN1JOVjZaRHJSeEhYV0NKd0x1SFVmaldhaTZrV1dRaTV1
cVQvMC9EQzhGODk0ODMyNDFGN0Y2NTdERTY4NDZDQkRCMkJBMDQ0Mzg3Rjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDOEY4OTQ4MzI0MUY3RjY1
N0RFNjg0NkNCREIyQkEwNDQzODdGOTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3VXJERFhnZzdSTlY2WkRyUnhIWFdDSndMdUhVZmpXYWk2a1dXUWk1dXFULzAv
MzIzODMwMzQzYTMzNjQzNTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMyMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPVCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAYWgjRaWVz2/G3U9cymGw51i2kJcbEpVYTloAApM/S4fLtzdSOqBVPmxw8
NpwforTjwgkDf9/0hV+CJHp4oa9yD5PKObJvsvWLwj5oCKtnbHZQzRWU9Tg+FzaM
a/4HRA6FDE5u213k98RuWTmK6bxGyTZm7uwY7poYeXPfW2RhBAmSIypN81+1XHGS
lcP442k/2p+rYBf2fn4ZSTpkaanxnvk458JHOPDZcQ1K3g9cBb6vOVJ1Z+8OpOT1
T4yCm7u7KThseAtxVi2BJ/Msk88fShZMUyz/FxS1aR2gMSTgFec25VHGil4zZGic
9kih59+pfdfeILGNVZYIfs7TQ26G
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org