Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa
File:                     323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa (raw, json)
Hash identifier:          5Bk85BpdydG5KjcaxdVJ/NUHboMNcqDlNIPS5LS02jQ=
Subject key identifier:   43:F2:9A:3D:E4:1C:35:41:14:88:AE:CB:94:BD:51:FD:89:60:2C:A7
Certificate issuer:       /CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
Certificate serial:       526B06A0C4A0433DA622080CAA79B18D3B32E7A9
Authority key identifier: 10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa
Signing time:             Mon 04 Mar 2024 19:23:18 +0000
ROA not before:           Mon 04 Mar 2024 19:18:18 +0000
ROA not after:            Mon 03 Mar 2025 19:23:18 +0000
asID:                     266448
IP address blocks:        2804:37fc:2100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6b:06:a0:c4:a0:43:3d:a6:22:08:0c:aa:79:b1:8d:3b:32:e7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
        Validity
            Not Before: Mar  4 19:18:18 2024 GMT
            Not After : Mar  3 19:23:18 2025 GMT
        Subject: CN=43F29A3DE41C35411488AECB94BD51FD89602CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:7d:db:88:36:56:39:ab:29:64:70:2a:14:
                    2b:15:28:61:63:13:1f:fb:2d:53:31:cc:7b:4b:0e:
                    d6:e6:49:54:5d:28:91:a4:54:d7:f3:b3:96:05:90:
                    40:69:6a:ea:40:22:54:ad:1c:c9:e9:cc:3c:5e:b1:
                    73:4c:04:68:b4:e1:ff:ef:e0:b4:fc:22:47:59:9b:
                    53:66:20:d8:cb:84:f9:5c:83:f4:a4:ed:1a:10:16:
                    d8:5a:22:66:0f:6a:d3:f1:4f:47:b1:b5:49:7e:d8:
                    85:32:0b:91:43:93:e6:e1:dc:2b:98:41:ba:8f:60:
                    3c:2c:0b:c2:c8:88:a0:5b:59:81:1b:52:db:ca:28:
                    2d:73:95:ee:37:13:2e:da:be:ee:78:c0:bb:e7:63:
                    c1:10:fa:43:6c:29:3d:80:03:95:dc:1c:a8:c6:ed:
                    4c:01:0c:66:09:2b:d1:04:0e:2e:8c:e1:e1:44:fd:
                    ce:88:b0:b1:f6:14:82:9f:c7:64:81:00:40:b3:5f:
                    2d:b9:63:cf:1a:fb:d6:ed:ab:b7:ac:58:ae:7f:35:
                    9f:08:c1:2e:e1:a2:e1:fa:36:e6:bd:64:81:23:8e:
                    b9:f8:e4:35:1c:a9:7a:08:c9:91:0b:3c:15:fd:27:
                    76:b8:0f:da:ba:b8:c1:9b:03:93:8f:68:ab:b2:41:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F2:9A:3D:E4:1C:35:41:14:88:AE:CB:94:BD:51:FD:89:60:2C:A7
            X509v3 Authority Key Identifier:
                keyid:10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37fc:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:03:16:2b:3d:31:8f:07:ee:35:05:f1:36:45:ce:dd:3f:
         20:6f:65:fb:7e:0f:ff:89:a2:df:da:7b:5a:5c:7f:5f:17:78:
         15:56:5d:b4:e7:8d:14:fc:79:b4:4e:36:75:32:25:91:7a:09:
         9d:5d:ba:1d:f5:71:42:4e:09:c9:a3:63:ef:3f:f9:3b:07:55:
         f2:6b:7d:6b:62:9e:c5:9a:50:20:ac:b7:90:c7:9c:2b:db:b6:
         3a:41:fc:73:dc:a4:92:62:70:23:9c:89:d5:91:4e:58:e4:20:
         57:18:b3:93:39:77:e3:85:ea:53:95:62:44:19:4d:14:a0:81:
         25:e2:35:86:1c:4e:47:40:e0:15:74:31:cb:4b:23:5a:d8:21:
         0f:2e:0a:a5:8a:4c:4c:68:d8:e3:6a:c9:3d:78:fd:d6:78:72:
         55:36:fa:a8:cd:ee:4e:a7:07:31:b7:1c:fa:22:3a:c0:83:9e:
         9e:a1:a6:a0:7f:e4:49:05:de:14:3c:7b:bc:7b:18:53:77:9c:
         ee:92:dd:39:3e:d8:15:c2:f1:24:7c:9b:70:40:75:85:71:7e:
         87:db:91:69:8f:1c:3c:bd:84:e9:b9:75:fe:ee:f6:dc:a9:f4:
         7c:97:3a:1f:5b:b8:31:b2:ef:cc:8e:c8:ef:bf:3e:be:ad:21:
         89:a5:36:fa
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUmsGoMSgQz2mIggMqnmxjTsy56kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBERUMwQTU1QjlBNjI3NDA4RUUxRjFCMEUyQzA5ODU4
ODgxMkZCNTAeFw0yNDAzMDQxOTE4MThaFw0yNTAzMDMxOTIzMThaMDMxMTAvBgNV
BAMTKDQzRjI5QTNERTQxQzM1NDExNDg4QUVDQjk0QkQ1MUZEODk2MDJDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtH3biDZWOaspZHAqFCsVKGFj
Ex/7LVMxzHtLDtbmSVRdKJGkVNfzs5YFkEBpaupAIlStHMnpzDxesXNMBGi04f/v
4LT8IkdZm1NmINjLhPlcg/Sk7RoQFthaImYPatPxT0extUl+2IUyC5FDk+bh3CuY
QbqPYDwsC8LIiKBbWYEbUtvKKC1zle43Ey7avu54wLvnY8EQ+kNsKT2AA5XcHKjG
7UwBDGYJK9EEDi6M4eFE/c6IsLH2FIKfx2SBAECzXy25Y88a+9btq7esWK5/NZ8I
wS7houH6Nua9ZIEjjrn45DUcqXoIyZELPBX9J3a4D9q6uMGbA5OPaKuyQXgnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ/KaPeQcNUEUiK7LlL1R/YlgLKcwHwYDVR0j
BBgwFoAUEN7ApVuaYnQI7h8bDiwJhYiBL7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjlaMTFRVHhlbXk5Sm1EQURQQXhVNVRHMXN0NlE4Zm1hOHZnNWhuakhQ
Y2IvMC8xMERFQzBBNTVCOUE2Mjc0MDhFRTFGMUIwRTJDMDk4NTg4ODEyRkI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwREVDMEE1NUI5QTYyNzQw
OEVFMUYxQjBFMkMwOTg1ODg4MTJGQjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5WjExUVR4ZW15OUptREFEUEF4VTVURzFzdDZROGZtYTh2ZzVobmpIUGNiLzAv
MzIzODMwMzQzYTMzMzc2NjYzM2EzMjMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEN/whMA0GCSqGSIb3DQEBCwUA
A4IBAQBffwMWKz0xjwfuNQXxNkXO3T8gb2X7fg//iaLf2ntaXH9fF3gVVl20540U
/Hm0TjZ1MiWRegmdXbod9XFCTgnJo2PvP/k7B1Xya31rYp7FmlAgrLeQx5wr27Y6
Qfxz3KSSYnAjnInVkU5Y5CBXGLOTOXfjhepTlWJEGU0UoIEl4jWGHE5HQOAVdDHL
SyNa2CEPLgqlikxMaNjjask9eP3WeHJVNvqoze5Opwcxtxz6IjrAg56eoaagf+RJ
Bd4UPHu8exhTd5zukt05PtgVwvEkfJtwQHWFcX6H25Fpjxw8vYTpuXX+7vbcqfR8
lzofW7gxsu/Mjsjvvz6+rSGJpTb6
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org