Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3332203d3e203238323233.roa
File:                     323830343a383461633a3a2f33322d3332203d3e203238323233.roa (raw, json)
Hash identifier:          8M0gfjVxvYvcTkysPaMM7DxDc05TxEhW9iIXreR3Pmc=
Subject key identifier:   F0:3E:EE:80:59:A8:CD:6C:76:F1:45:89:15:C2:78:39:FE:B5:6F:FA
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       0A19FBAD9F1FCA8FBB03FCFA1E1F6CEBF552FA20
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3332203d3e203238323233.roa
Signing time:             Wed 03 May 2023 22:17:02 +0000
ROA not before:           Wed 03 May 2023 22:12:02 +0000
ROA not after:            Wed 01 May 2024 22:17:02 +0000
asID:                     28223
IP address blocks:        2804:84ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:19:fb:ad:9f:1f:ca:8f:bb:03:fc:fa:1e:1f:6c:eb:f5:52:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: May  3 22:12:02 2023 GMT
            Not After : May  1 22:17:02 2024 GMT
        Subject: CN=F03EEE8059A8CD6C76F1458915C27839FEB56FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:35:64:c3:a3:53:eb:70:04:04:40:d4:21:
                    5a:e7:2a:fb:4e:b3:27:73:f0:73:a3:5f:9e:c9:ac:
                    9c:34:15:23:57:97:29:d9:ee:75:43:f9:8c:6e:ee:
                    e0:13:d8:13:56:1b:4e:e0:b0:3e:4d:1e:4a:e6:9b:
                    b1:6f:61:bd:fa:f3:41:07:23:da:f7:57:1a:30:57:
                    e4:f7:0e:9d:a4:a4:40:a5:26:58:21:ff:7a:4a:66:
                    3c:90:6a:0c:f3:fd:82:92:12:0b:8f:06:2e:d8:81:
                    8f:57:61:99:d1:f4:d2:94:28:3a:d3:50:fb:ac:d0:
                    59:16:70:41:89:70:b8:13:16:5b:0e:3b:71:48:8e:
                    a4:80:bc:b9:9a:36:96:86:14:bb:59:6b:c0:3e:ad:
                    a5:c0:f7:77:95:fb:e6:c8:dc:07:83:35:0d:1b:02:
                    a6:51:e7:38:64:09:0a:1a:81:00:5a:f9:06:d3:f4:
                    8e:58:60:f9:cd:7f:89:a9:d7:99:1c:c7:4b:73:82:
                    50:27:e7:b6:86:28:73:18:cc:02:b0:74:29:06:cb:
                    92:41:d3:68:7b:8b:b5:5b:6b:2e:a0:0e:77:a3:17:
                    fc:a9:08:3e:45:7d:09:b5:e6:3b:ac:f4:ad:1f:0e:
                    10:fa:9f:0f:3b:aa:f6:3d:a8:01:a9:41:64:39:08:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3E:EE:80:59:A8:CD:6C:76:F1:45:89:15:C2:78:39:FE:B5:6F:FA
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3332203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:70:f9:08:c2:d3:19:f7:28:6f:06:69:b7:c2:df:70:da:
         9c:48:8a:3a:8f:64:4f:08:1a:2a:c5:0d:cc:f2:83:6d:1e:bd:
         d9:8a:81:c6:e6:ef:27:fc:70:37:52:83:04:d5:ef:1b:dd:5e:
         90:f3:29:bf:5a:23:1c:14:eb:e2:38:99:1c:71:e7:1e:ab:f9:
         17:34:a6:0c:fb:4c:8f:0b:39:18:63:13:e4:12:57:32:1a:60:
         e9:90:1a:78:35:d8:e3:3f:64:af:95:45:8b:c2:3c:20:53:82:
         65:85:8b:09:0e:33:ff:c0:e3:aa:83:6a:96:7a:e5:27:7c:00:
         78:cf:4d:06:88:7d:31:6a:d6:6c:56:b6:50:f3:e8:4d:9f:f4:
         14:b1:13:bf:2e:00:46:76:36:29:fa:3d:be:4a:2e:50:81:75:
         04:c7:33:4d:10:de:27:ad:52:7a:29:0a:ed:1c:46:0e:cd:42:
         15:e3:8a:9c:b1:1c:41:4c:7c:b4:05:b6:0c:f6:53:b0:ac:3d:
         fd:bf:fb:58:30:ef:bb:50:f5:76:1d:fa:c2:f9:9d:1f:1d:10:
         fc:67:5a:96:10:0c:4f:99:e8:55:26:b2:f6:89:76:77:10:ff:
         e5:4c:b6:82:d1:74:8b:c3:41:88:89:94:4d:fe:47:da:50:86:
         89:4a:2f:01
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUChn7rZ8fyo+7A/z6Hh9s6/VS+iAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2M0I4Q0I5M0YyQkE2RkU2NzlDNTQ2MzBCNTI4NUZE
Nzg3OENGMzAeFw0yMzA1MDMyMjEyMDJaFw0yNDA1MDEyMjE3MDJaMDMxMTAvBgNV
BAMTKEYwM0VFRTgwNTlBOENENkM3NkYxNDU4OTE1QzI3ODM5RkVCNTZGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwTVkw6NT63AEBEDUIVrnKvtO
sydz8HOjX57JrJw0FSNXlynZ7nVD+Yxu7uAT2BNWG07gsD5NHkrmm7FvYb3680EH
I9r3VxowV+T3Dp2kpEClJlgh/3pKZjyQagzz/YKSEguPBi7YgY9XYZnR9NKUKDrT
UPus0FkWcEGJcLgTFlsOO3FIjqSAvLmaNpaGFLtZa8A+raXA93eV++bI3AeDNQ0b
AqZR5zhkCQoagQBa+QbT9I5YYPnNf4mp15kcx0tzglAn57aGKHMYzAKwdCkGy5JB
02h7i7Vbay6gDnejF/ypCD5FfQm15jus9K0fDhD6nw87qvY9qAGpQWQ5CPYZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU8D7ugFmozWx28UWJFcJ4Of61b/owHwYDVR0j
BBgwFoAUvmO4y5Pyum/mecVGMLUoX9eHjPMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhSaXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4
c0ovMC9CRTYzQjhDQjkzRjJCQTZGRTY3OUM1NDYzMEI1Mjg1RkQ3ODc4Q0YzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFNjNCOENCOTNGMkJBNkZF
Njc5QzU0NjMwQjUyODVGRDc4NzhDRjMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIUmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzAv
MzIzODMwMzQzYTM4MzQ2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMy
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEhKwwDQYJKoZIhvcNAQELBQADggEBABnUcPkIwtMZ
9yhvBmm3wt9w2pxIijqPZE8IGirFDczyg20evdmKgcbm7yf8cDdSgwTV7xvdXpDz
Kb9aIxwU6+I4mRxx5x6r+Rc0pgz7TI8LORhjE+QSVzIaYOmQGng12OM/ZK+VRYvC
PCBTgmWFiwkOM//A46qDapZ65Sd8AHjPTQaIfTFq1mxWtlDz6E2f9BSxE78uAEZ2
Nin6Pb5KLlCBdQTHM00Q3ietUnopCu0cRg7NQhXjipyxHEFMfLQFtgz2U7CsPf2/
+1gw77tQ9XYd+sL5nR8dEPxnWpYQDE+Z6FUmsvaJdncQ/+VMtoLRdIvDQYiJlE3+
R9pQholKLwE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org