Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a343030303a3a2f33342d3334203d3e20323731353434.roa
File:                     323830343a376432633a343030303a3a2f33342d3334203d3e20323731353434.roa (raw, json)
Hash identifier:          twhv0Nk4oUbkxvASmv6am9PzPkdwftrNP1mnF9HDDFU=
Subject key identifier:   BB:91:7E:B3:1E:64:59:68:BC:CD:45:E7:5F:2C:D7:AB:83:45:2B:C9
Certificate issuer:       /CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
Certificate serial:       0C34A080FDF69DA417DDA5A4C847B4E4F1C43434
Authority key identifier: 98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a343030303a3a2f33342d3334203d3e20323731353434.roa
Signing time:             Sat 27 May 2023 11:34:10 +0000
ROA not before:           Sat 27 May 2023 11:29:10 +0000
ROA not after:            Sat 25 May 2024 11:34:10 +0000
asID:                     271544
IP address blocks:        2804:7d2c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:34:a0:80:fd:f6:9d:a4:17:dd:a5:a4:c8:47:b4:e4:f1:c4:34:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
        Validity
            Not Before: May 27 11:29:10 2023 GMT
            Not After : May 25 11:34:10 2024 GMT
        Subject: CN=BB917EB31E645968BCCD45E75F2CD7AB83452BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:66:a3:45:72:e3:7e:53:34:f5:4c:af:8b:
                    36:ac:48:ba:19:52:94:b7:6b:ce:1d:79:f0:3d:62:
                    57:4f:1c:3f:84:7b:c8:d6:18:dc:d7:82:a9:41:38:
                    65:03:00:6b:ae:fd:bf:f5:7c:db:ec:5e:87:85:ef:
                    3b:53:77:9b:ba:3b:78:7a:60:37:34:f0:75:a1:b5:
                    25:e0:74:e7:2f:b0:3b:bf:ef:89:85:1a:7e:b8:bb:
                    c8:a4:6d:aa:00:59:5b:16:ec:4a:24:ed:2b:45:2a:
                    6f:17:83:d0:86:03:19:4d:9d:56:40:2c:a7:48:89:
                    07:31:8e:c4:f0:cc:4d:09:9a:dd:6d:66:d2:e7:0c:
                    e0:13:30:7f:f9:0d:b9:9e:bf:21:77:7b:bd:24:62:
                    72:89:34:c7:90:88:18:cb:e9:75:1f:09:e9:35:6b:
                    b2:aa:f5:a0:c8:c2:0d:0f:b4:0f:82:6e:dd:e2:b5:
                    17:cc:20:05:df:58:e9:73:3a:da:73:a2:3f:ce:95:
                    82:89:c2:9c:d3:fe:a8:08:9f:52:80:fe:a4:cc:32:
                    d7:cc:25:75:7a:04:90:d2:13:93:26:41:36:f3:05:
                    ee:ce:2c:a8:60:5c:7f:60:00:53:47:da:44:ec:62:
                    24:6f:10:bd:56:23:af:31:ee:0c:9c:6a:0a:f3:50:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:91:7E:B3:1E:64:59:68:BC:CD:45:E7:5F:2C:D7:AB:83:45:2B:C9
            X509v3 Authority Key Identifier:
                keyid:98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a343030303a3a2f33342d3334203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d2c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:69:00:37:ef:1d:ba:fe:81:26:11:1b:8d:c0:0f:33:ff:3d:
         1c:55:a3:5d:cd:2f:71:98:ac:47:52:f1:55:2b:b9:c1:3b:ae:
         09:f9:ff:39:85:14:86:5b:5f:da:c6:fd:67:a5:23:8c:00:63:
         40:e7:c5:4a:07:76:a7:16:9b:40:f7:55:b6:1b:91:f0:71:ca:
         55:90:9e:6d:54:67:17:02:be:40:ad:0c:f9:1b:de:26:ed:c5:
         35:af:b2:ae:0e:87:45:07:f1:f7:28:47:fd:be:55:5f:d8:5d:
         39:4c:d7:57:dc:3f:c6:08:2d:9c:10:e0:ac:2d:ac:8a:2c:74:
         7f:12:6d:e8:e1:03:f6:31:34:17:1d:97:75:1c:eb:9e:30:77:
         de:13:98:6c:ee:38:28:64:51:ec:6c:1a:c8:c9:55:c6:b2:9b:
         5f:e6:f9:5d:9b:af:be:95:61:61:82:40:b1:87:60:d7:3f:58:
         74:ef:77:c5:e3:4d:c3:86:43:97:65:c9:d2:81:66:b8:e1:2e:
         24:6a:01:ac:f8:14:a9:38:5f:c7:4f:ee:19:7b:a3:27:6b:51:
         f4:e9:0d:fc:98:a0:4b:8e:61:7a:a0:69:4f:fd:fe:8b:38:86:
         7d:c9:25:5d:fd:8c:c5:fa:ee:32:2a:e2:ad:47:c1:d3:13:8c:
         d8:c4:59:d8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDDSggP32naQX3aWkyEe05PHENDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg2MDFEQTA2QUU1QzA3RjhDNzNFQjUzQkZCREQzRTU0
RjgxRTJGRjAeFw0yMzA1MjcxMTI5MTBaFw0yNDA1MjUxMTM0MTBaMDMxMTAvBgNV
BAMTKEJCOTE3RUIzMUU2NDU5NjhCQ0NENDVFNzVGMkNEN0FCODM0NTJCQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnD2ajRXLjflM09UyvizasSLoZ
UpS3a84defA9YldPHD+Ee8jWGNzXgqlBOGUDAGuu/b/1fNvsXoeF7ztTd5u6O3h6
YDc08HWhtSXgdOcvsDu/74mFGn64u8ikbaoAWVsW7Eok7StFKm8Xg9CGAxlNnVZA
LKdIiQcxjsTwzE0Jmt1tZtLnDOATMH/5DbmevyF3e70kYnKJNMeQiBjL6XUfCek1
a7Kq9aDIwg0PtA+Cbt3itRfMIAXfWOlzOtpzoj/OlYKJwpzT/qgIn1KA/qTMMtfM
JXV6BJDSE5MmQTbzBe7OLKhgXH9gAFNH2kTsYiRvEL1WI68x7gycagrzUK/lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUu5F+sx5kWWi8zUXnXyzXq4NFK8kwHwYDVR0j
BBgwFoAUmGAdoGrlwH+Mc+tTv73T5U+B4v8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjlKQkRtMWhHTkhURVMyZFJoeGIzYXlrTmtZTXdGSmNzclExQjlidjFm
NkovMC85ODYwMURBMDZBRTVDMDdGOEM3M0VCNTNCRkJERDNFNTRGODFFMkZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4NjAxREEwNkFFNUMwN0Y4
QzczRUI1M0JGQkREM0U1NEY4MUUyRkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5SkJEbTFoR05IVEVTMmRSaHhiM2F5a05rWU13Rkpjc3JRMUI5YnYxZjZKLzAv
MzIzODMwMzQzYTM3NjQzMjYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTM1MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEfSxAMA0GCSqGSIb3DQEBCwUA
A4IBAQB3aQA37x26/oEmERuNwA8z/z0cVaNdzS9xmKxHUvFVK7nBO64J+f85hRSG
W1/axv1npSOMAGNA58VKB3anFptA91W2G5HwccpVkJ5tVGcXAr5ArQz5G94m7cU1
r7KuDodFB/H3KEf9vlVf2F05TNdX3D/GCC2cEOCsLayKLHR/Em3o4QP2MTQXHZd1
HOueMHfeE5hs7jgoZFHsbBrIyVXGsptf5vldm6++lWFhgkCxh2DXP1h073fF403D
hkOXZcnSgWa44S4kagGs+BSpOF/HT+4Ze6Mna1H06Q38mKBLjmF6oGlP/f6LOIZ9
ySVd/YzF+u4yKuKtR8HTE4zYxFnY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org