Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a373030303a3a2f33362d3336203d3e20323730383238.roa
File:                     323830343a373230383a373030303a3a2f33362d3336203d3e20323730383238.roa (raw, json)
Hash identifier:          tfos+IUq33bnd911OVXWCclX8ovJLjzP3ig/ntLz8lE=
Subject key identifier:   6D:8C:A3:14:E9:41:A1:FF:D3:F2:0B:F5:FB:E6:2B:23:E6:A6:FF:DF
Certificate issuer:       /CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
Certificate serial:       1F93F86E9003FEBEA3E823BA0C3E680443EB3C16
Authority key identifier: 11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a373030303a3a2f33362d3336203d3e20323730383238.roa
Signing time:             Mon 08 Apr 2024 16:54:22 +0000
ROA not before:           Mon 08 Apr 2024 16:49:22 +0000
ROA not after:            Mon 07 Apr 2025 16:54:22 +0000
asID:                     270828
IP address blocks:        2804:7208:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:93:f8:6e:90:03:fe:be:a3:e8:23:ba:0c:3e:68:04:43:eb:3c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
        Validity
            Not Before: Apr  8 16:49:22 2024 GMT
            Not After : Apr  7 16:54:22 2025 GMT
        Subject: CN=6D8CA314E941A1FFD3F20BF5FBE62B23E6A6FFDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:69:f6:6d:0d:28:41:cf:7f:b4:d5:08:2a:
                    b5:e8:cd:14:41:3d:10:db:5a:97:19:7d:c8:07:fd:
                    d4:29:71:65:d7:c7:b3:bf:87:7b:38:d9:9a:af:bc:
                    b0:05:b3:36:58:38:a5:d5:18:a6:db:19:c7:b4:ba:
                    83:76:f7:ee:24:ad:42:e5:ba:f1:c0:07:b0:a7:7b:
                    e2:6d:56:dc:10:2b:fe:40:07:53:1f:36:08:02:c0:
                    c9:84:ec:56:21:76:71:be:5a:f4:58:be:3c:36:d6:
                    5a:41:74:ba:25:25:bd:e2:20:7d:48:26:64:7b:6f:
                    b3:c0:96:3e:31:27:ee:65:61:ea:f1:a3:aa:80:7b:
                    d8:84:c7:ce:80:cc:5b:85:28:99:d0:84:84:64:23:
                    dc:7d:7b:be:77:bd:e0:03:99:a6:fb:77:24:4e:e6:
                    e3:ac:73:62:6c:5f:1b:33:f4:15:ab:aa:20:06:63:
                    6e:7d:48:ad:93:bc:fe:28:63:64:56:b6:16:96:92:
                    b3:ad:d4:34:9d:e3:a7:ee:4e:4e:d5:1e:40:4e:cc:
                    47:17:18:7a:6c:73:08:b5:5e:a0:85:5c:1c:13:a8:
                    e4:46:e9:c8:07:f4:c1:41:30:df:f1:47:bc:8d:fc:
                    f2:51:86:b2:39:5f:ae:5a:61:7c:1a:6e:85:63:03:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8C:A3:14:E9:41:A1:FF:D3:F2:0B:F5:FB:E6:2B:23:E6:A6:FF:DF
            X509v3 Authority Key Identifier:
                keyid:11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a373030303a3a2f33362d3336203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7208:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:20:2b:93:5e:5c:ae:64:54:c9:ba:48:53:2a:cf:5d:33:c1:
         be:32:71:2b:9b:0b:89:a3:9d:ac:01:5d:6b:2d:1f:03:c5:c5:
         ef:6b:e6:4a:f0:9e:0c:cd:4d:b6:30:ce:3a:04:7c:18:4a:bb:
         42:36:b8:7e:57:b8:6a:4c:f4:32:b1:fb:9c:44:b2:23:af:6f:
         df:14:f8:1a:1c:fb:d6:d2:98:6c:3c:c6:34:08:50:f9:66:d5:
         92:3f:3f:44:3c:22:f5:81:37:3d:16:ca:fc:62:24:db:8a:ad:
         03:99:5c:e4:e1:9d:57:10:bd:5e:69:1b:7b:95:97:c1:5d:96:
         cb:47:33:2c:6f:63:b9:ae:61:6f:30:75:2a:d1:9a:da:65:5d:
         7c:59:be:5f:e0:72:b2:e3:44:ec:83:57:6a:6f:72:a4:2c:c0:
         f7:14:26:45:6e:0a:1f:b6:10:24:7f:72:7a:63:f3:62:3e:25:
         8f:00:9c:64:ae:d9:68:99:22:f3:15:4b:60:fd:07:cf:f0:53:
         80:90:d7:c6:e3:0f:48:88:47:8b:cc:24:ea:5d:e2:24:d9:69:
         83:f8:f5:f5:96:2f:16:57:f2:d9:00:a9:9f:83:c8:66:52:b4:
         ec:a9:f5:de:ee:5f:63:54:1e:a5:7c:93:e7:fc:38:fb:e6:79:
         6c:e5:ba:2f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUH5P4bpAD/r6j6CO6DD5oBEPrPBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBNTlEN0ZDNThERDkzRkQ4MzlFMzZCNjY2RjBBNTI5
NUY5OEU1RjAeFw0yNDA0MDgxNjQ5MjJaFw0yNTA0MDcxNjU0MjJaMDMxMTAvBgNV
BAMTKDZEOENBMzE0RTk0MUExRkZEM0YyMEJGNUZCRTYyQjIzRTZBNkZGREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNomn2bQ0oQc9/tNUIKrXozRRB
PRDbWpcZfcgH/dQpcWXXx7O/h3s42ZqvvLAFszZYOKXVGKbbGce0uoN29+4krULl
uvHAB7Cne+JtVtwQK/5AB1MfNggCwMmE7FYhdnG+WvRYvjw21lpBdLolJb3iIH1I
JmR7b7PAlj4xJ+5lYerxo6qAe9iEx86AzFuFKJnQhIRkI9x9e753veADmab7dyRO
5uOsc2JsXxsz9BWrqiAGY259SK2TvP4oY2RWthaWkrOt1DSd46fuTk7VHkBOzEcX
GHpscwi1XqCFXBwTqORG6cgH9MFBMN/xR7yN/PJRhrI5X65aYXwaboVjAzXfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbYyjFOlBof/T8gv1++YrI+am/98wHwYDVR0j
BBgwFoAUEaWdf8WN2T/YOeNrZm8KUpX5jl8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjhWblVUV3h4S05KbnVrWmZLd3o2SlZXWmpYeUM2dVJ3eHNtU2hGbjZG
ZkcvMC8xMUE1OUQ3RkM1OEREOTNGRDgzOUUzNkI2NjZGMEE1Mjk1Rjk4RTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExQTU5RDdGQzU4REQ5M0ZE
ODM5RTM2QjY2NkYwQTUyOTVGOThFNUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4Vm5VVFd4eEtOSm51a1pmS3d6NkpWV1pqWHlDNnVSd3hzbVNoRm42RmZHLzAv
MzIzODMwMzQzYTM3MzIzMDM4M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEcghwMA0GCSqGSIb3DQEBCwUA
A4IBAQAiICuTXlyuZFTJukhTKs9dM8G+MnErmwuJo52sAV1rLR8DxcXva+ZK8J4M
zU22MM46BHwYSrtCNrh+V7hqTPQysfucRLIjr2/fFPgaHPvW0phsPMY0CFD5ZtWS
Pz9EPCL1gTc9Fsr8YiTbiq0DmVzk4Z1XEL1eaRt7lZfBXZbLRzMsb2O5rmFvMHUq
0ZraZV18Wb5f4HKy40Tsg1dqb3KkLMD3FCZFbgofthAkf3J6Y/NiPiWPAJxkrtlo
mSLzFUtg/QfP8FOAkNfG4w9IiEeLzCTqXeIk2WmD+PX1li8WV/LZAKmfg8hmUrTs
qfXe7l9jVB6lfJPn/Dj75nls5bov
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org