Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33342d3334203d3e20323731353434.roa
File:                     323830343a376432633a3a2f33342d3334203d3e20323731353434.roa (raw, json)
Hash identifier:          mtIFXjEFia90phEAzP3uoFwRn5QBHD2NvU+a6x5vcqI=
Subject key identifier:   E3:10:A3:87:84:A8:0C:7E:94:7C:6D:21:6B:40:E2:90:A9:70:71:3A
Certificate issuer:       /CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
Certificate serial:       3FA996437FA0BF2459CF476A8DF581CA3F49A768
Authority key identifier: 98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33342d3334203d3e20323731353434.roa
Signing time:             Sat 27 May 2023 11:34:07 +0000
ROA not before:           Sat 27 May 2023 11:29:07 +0000
ROA not after:            Sat 25 May 2024 11:34:07 +0000
asID:                     271544
IP address blocks:        2804:7d2c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a9:96:43:7f:a0:bf:24:59:cf:47:6a:8d:f5:81:ca:3f:49:a7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
        Validity
            Not Before: May 27 11:29:07 2023 GMT
            Not After : May 25 11:34:07 2024 GMT
        Subject: CN=E310A38784A80C7E947C6D216B40E290A970713A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:67:a8:ca:b1:cd:e7:5b:df:47:82:4c:b4:
                    34:91:0c:4d:9c:41:4a:97:ea:7b:56:ac:95:3d:19:
                    6f:fc:ed:1a:14:25:c1:29:a2:26:65:08:e0:3e:bc:
                    da:e0:83:88:05:7a:18:e1:96:10:d1:c9:34:40:1d:
                    c5:ae:40:bb:cf:5a:a6:8d:18:3a:e0:fa:2a:ba:ec:
                    54:5a:66:10:96:2e:96:7f:bc:e6:1d:11:83:74:44:
                    2b:5d:d4:fc:a9:0a:1a:cf:c0:70:99:34:43:e1:37:
                    6e:f3:b2:c0:95:84:2d:dc:ee:f4:6d:85:62:3f:d1:
                    3a:1e:7e:84:ee:7c:ca:4b:08:5b:0d:ff:2c:ca:bb:
                    ad:33:77:df:01:5a:8a:14:d4:c3:ed:96:c4:de:71:
                    b0:2b:62:f5:1d:15:06:47:d8:b3:d8:65:b5:76:4c:
                    f3:32:8a:0f:38:7f:af:2e:3a:33:c3:56:dc:c3:ad:
                    88:68:ba:4f:e7:a4:31:be:a2:38:b7:3a:68:20:c6:
                    86:84:c6:b3:44:5f:92:f6:87:e5:6d:e6:ea:c5:e0:
                    d1:a2:03:f3:9a:17:35:04:31:90:21:4d:12:bd:0e:
                    7d:f8:4a:ea:42:72:3b:68:94:27:3b:85:cc:7e:d1:
                    94:00:97:f9:23:b4:50:74:9f:6e:f3:51:e0:25:b4:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:10:A3:87:84:A8:0C:7E:94:7C:6D:21:6B:40:E2:90:A9:70:71:3A
            X509v3 Authority Key Identifier:
                keyid:98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33342d3334203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d2c::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:f8:e3:65:88:47:d1:3e:39:d7:62:8f:57:a6:4f:72:79:e4:
         54:9c:3e:7a:2f:45:8e:c3:82:14:53:e7:a7:e0:26:15:c9:58:
         1d:fa:47:b8:74:49:75:97:6c:c2:6f:60:68:ab:e6:9b:12:32:
         f1:49:06:f6:ad:d3:a3:32:40:40:ea:ee:c3:21:2a:0b:46:24:
         12:8c:9e:e5:e3:c1:24:e3:24:a6:de:0e:28:12:fb:ce:20:4f:
         79:88:35:80:dd:10:c8:ef:bf:d1:d6:97:71:45:36:e7:93:5c:
         3f:bc:d6:f2:23:3f:6a:12:14:28:07:e5:10:02:7e:38:e6:65:
         91:9c:d9:c1:50:fa:7d:76:d7:dd:69:eb:a6:19:09:56:8f:eb:
         4f:6e:4c:c2:a1:ea:6d:10:1f:04:ca:9f:8b:5c:c9:20:d4:8e:
         60:dc:5f:87:68:aa:84:bf:f8:cd:d3:16:7b:cd:9e:ba:41:f4:
         64:b9:20:20:03:19:fc:b3:53:4f:b6:0a:29:dd:7f:95:b2:a4:
         3a:e5:a2:07:95:83:8e:a6:55:b7:4e:de:cd:8b:f6:e9:64:2d:
         cf:63:fd:cf:a4:4a:04:22:0f:54:21:a3:42:bd:b4:20:e0:8e:
         03:23:01:65:c8:ab:14:2f:e3:37:9d:4c:44:8d:e4:c0:87:b9:
         b4:a3:30:33
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP6mWQ3+gvyRZz0dqjfWByj9Jp2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg2MDFEQTA2QUU1QzA3RjhDNzNFQjUzQkZCREQzRTU0
RjgxRTJGRjAeFw0yMzA1MjcxMTI5MDdaFw0yNDA1MjUxMTM0MDdaMDMxMTAvBgNV
BAMTKEUzMTBBMzg3ODRBODBDN0U5NDdDNkQyMTZCNDBFMjkwQTk3MDcxM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kmeoyrHN51vfR4JMtDSRDE2c
QUqX6ntWrJU9GW/87RoUJcEpoiZlCOA+vNrgg4gFehjhlhDRyTRAHcWuQLvPWqaN
GDrg+iq67FRaZhCWLpZ/vOYdEYN0RCtd1PypChrPwHCZNEPhN27zssCVhC3c7vRt
hWI/0ToefoTufMpLCFsN/yzKu60zd98BWooU1MPtlsTecbArYvUdFQZH2LPYZbV2
TPMyig84f68uOjPDVtzDrYhouk/npDG+oji3OmggxoaExrNEX5L2h+Vt5urF4NGi
A/OaFzUEMZAhTRK9Dn34SupCcjtolCc7hcx+0ZQAl/kjtFB0n27zUeAltO8zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4xCjh4SoDH6UfG0ha0DikKlwcTowHwYDVR0j
BBgwFoAUmGAdoGrlwH+Mc+tTv73T5U+B4v8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjlKQkRtMWhHTkhURVMyZFJoeGIzYXlrTmtZTXdGSmNzclExQjlidjFm
NkovMC85ODYwMURBMDZBRTVDMDdGOEM3M0VCNTNCRkJERDNFNTRGODFFMkZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4NjAxREEwNkFFNUMwN0Y4
QzczRUI1M0JGQkREM0U1NEY4MUUyRkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5SkJEbTFoR05IVEVTMmRSaHhiM2F5a05rWU13Rkpjc3JRMUI5YnYxZjZKLzAv
MzIzODMwMzQzYTM3NjQzMjYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMx
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR9LAAwDQYJKoZIhvcNAQELBQADggEBAKr442WI
R9E+Oddij1emT3J55FScPnovRY7DghRT56fgJhXJWB36R7h0SXWXbMJvYGir5psS
MvFJBvat06MyQEDq7sMhKgtGJBKMnuXjwSTjJKbeDigS+84gT3mINYDdEMjvv9HW
l3FFNueTXD+81vIjP2oSFCgH5RACfjjmZZGc2cFQ+n12191p66YZCVaP609uTMKh
6m0QHwTKn4tcySDUjmDcX4doqoS/+M3TFnvNnrpB9GS5ICADGfyzU0+2Cindf5Wy
pDrlogeVg46mVbdO3s2L9ulkLc9j/c+kSgQiD1Qho0K9tCDgjgMjAWXIqxQv4zed
TESN5MCHubSjMDM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org