Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/323830343a363133383a3a2f33322d3438203d3e20323639323231.roa
File:                     323830343a363133383a3a2f33322d3438203d3e20323639323231.roa (raw, json)
Hash identifier:          q4k99fT5emiXRlT3FWfyUXxIyieOYAsFMVFkA6ocRnw=
Subject key identifier:   BA:9A:DA:0E:62:C6:D8:D9:AF:B1:27:3A:C4:64:2C:F9:CD:BC:E0:6E
Certificate issuer:       /CN=EF7132FF02D9CBAC357BB2797F0CC7658B128897
Certificate serial:       41870F53E7201D75C20C16D0A5BA4D596404301F
Authority key identifier: EF:71:32:FF:02:D9:CB:AC:35:7B:B2:79:7F:0C:C7:65:8B:12:88:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/323830343a363133383a3a2f33322d3438203d3e20323639323231.roa
Signing time:             Thu 24 Nov 2022 22:29:03 +0000
ROA not before:           Thu 24 Nov 2022 22:24:03 +0000
ROA not after:            Thu 23 Nov 2023 22:29:03 +0000
asID:                     269221
IP address blocks:        2804:6138::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:87:0f:53:e7:20:1d:75:c2:0c:16:d0:a5:ba:4d:59:64:04:30:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7132FF02D9CBAC357BB2797F0CC7658B128897
        Validity
            Not Before: Nov 24 22:24:03 2022 GMT
            Not After : Nov 23 22:29:03 2023 GMT
        Subject: CN=BA9ADA0E62C6D8D9AFB1273AC4642CF9CDBCE06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:50:0a:0b:84:07:78:1f:7c:38:15:29:88:
                    a4:24:5d:81:7e:31:44:7c:c9:38:e8:d4:92:6f:d0:
                    8a:35:08:79:d6:0d:dc:c0:2a:9c:de:5b:a2:a5:0a:
                    ec:7c:19:60:ee:16:5c:26:a2:56:22:73:de:ee:b4:
                    27:6c:2d:3b:2c:63:c9:28:4d:5c:8a:82:00:a2:e9:
                    65:c1:e8:d0:9b:60:e2:55:06:6c:a6:4c:9d:02:48:
                    2d:4d:75:8f:a7:d3:ad:2d:a0:39:c1:cb:6d:10:4c:
                    1f:97:df:2b:ff:34:6e:15:47:85:88:bd:65:1a:44:
                    c0:8d:4d:f8:a2:6a:52:2b:bb:6a:19:f6:4e:c7:27:
                    c4:1f:dc:aa:7d:4b:35:e7:9e:be:2c:27:ea:8b:7a:
                    89:93:88:87:db:2c:61:ac:ae:97:f0:f6:45:d4:ff:
                    1f:50:50:f7:ad:98:4d:51:7b:55:a2:7d:04:76:ab:
                    29:6e:8e:95:2a:df:a6:2b:aa:3f:46:2a:8f:22:d1:
                    38:b1:f7:f1:2a:3f:93:d2:44:2a:08:70:e5:7a:07:
                    d5:13:2c:31:c5:96:ce:7e:3b:e0:e0:7b:81:6e:48:
                    51:ee:aa:62:2c:fd:55:43:c9:07:01:16:75:ce:bd:
                    6e:0d:1a:fe:75:5c:86:cc:d2:64:0a:11:39:0c:92:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9A:DA:0E:62:C6:D8:D9:AF:B1:27:3A:C4:64:2C:F9:CD:BC:E0:6E
            X509v3 Authority Key Identifier:
                keyid:EF:71:32:FF:02:D9:CB:AC:35:7B:B2:79:7F:0C:C7:65:8B:12:88:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/323830343a363133383a3a2f33322d3438203d3e20323639323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6138::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:72:44:a5:ce:2e:81:98:d0:bb:e6:3e:ab:ea:c4:4a:20:
         fc:3f:a2:b0:e3:94:40:4a:89:4d:31:0d:ca:1c:cd:55:eb:c5:
         98:ef:8a:50:38:b6:cc:56:fb:da:a7:e9:22:17:23:01:53:9c:
         6f:b6:d2:53:d8:a7:35:99:c7:e6:5d:fe:0f:fd:ab:8a:2c:80:
         17:d3:28:00:73:dd:cb:20:ef:9e:2d:be:cb:b7:d2:51:4c:a2:
         25:d7:f6:e6:81:49:a0:21:c0:a3:18:4c:f9:16:52:c1:41:b2:
         e4:45:35:0a:33:4c:77:d2:d3:c0:32:33:4b:bf:06:2f:de:3a:
         36:c5:e3:2e:5a:af:1d:56:57:0b:37:65:c3:c1:aa:cb:fc:da:
         03:40:65:b2:d7:5e:54:96:4e:ef:cc:7e:b3:2c:7e:88:d7:5e:
         d1:94:1f:30:87:a6:d9:70:01:a8:c1:d0:f0:ba:f0:fc:74:dc:
         fb:29:71:56:c6:bf:af:be:44:b7:b6:41:60:ea:31:db:ea:53:
         62:3e:f8:45:1b:26:b4:13:b7:00:35:7f:6b:80:22:43:d9:da:
         dd:56:43:1e:3d:72:0f:d7:cd:a8:19:18:55:29:80:d1:ae:7f:
         53:2c:1f:6a:f5:34:f9:94:0a:16:08:ca:46:94:94:2c:20:a1:
         96:6a:e3:6d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQYcPU+cgHXXCDBbQpbpNWWQEMB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY3MTMyRkYwMkQ5Q0JBQzM1N0JCMjc5N0YwQ0M3NjU4
QjEyODg5NzAeFw0yMjExMjQyMjI0MDNaFw0yMzExMjMyMjI5MDNaMDMxMTAvBgNV
BAMTKEJBOUFEQTBFNjJDNkQ4RDlBRkIxMjczQUM0NjQyQ0Y5Q0RCQ0UwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpr1AKC4QHeB98OBUpiKQkXYF+
MUR8yTjo1JJv0Io1CHnWDdzAKpzeW6KlCux8GWDuFlwmolYic97utCdsLTssY8ko
TVyKggCi6WXB6NCbYOJVBmymTJ0CSC1NdY+n060toDnBy20QTB+X3yv/NG4VR4WI
vWUaRMCNTfiialIru2oZ9k7HJ8Qf3Kp9SzXnnr4sJ+qLeomTiIfbLGGsrpfw9kXU
/x9QUPetmE1Re1WifQR2qylujpUq36Yrqj9GKo8i0Tix9/EqP5PSRCoIcOV6B9UT
LDHFls5+O+Dge4FuSFHuqmIs/VVDyQcBFnXOvW4NGv51XIbM0mQKETkMkuFFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUupraDmLG2NmvsSc6xGQs+c284G4wHwYDVR0j
BBgwFoAU73Ey/wLZy6w1e7J5fwzHZYsSiJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkpRN2lWdzlVTHBmbWZCVjlKd0VWRGpZeVRuRnN0UlQzaUJyRjNlM1lm
MnovMC9FRjcxMzJGRjAyRDlDQkFDMzU3QkIyNzk3RjBDQzc2NThCMTI4ODk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGNzEzMkZGMDJEOUNCQUMz
NTdCQjI3OTdGMENDNzY1OEIxMjg4OTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZKUTdpVnc5VUxwZm1mQlY5SndFVkRqWXlUbkZzdFJUM2lCckYzZTNZZjJ6LzAv
MzIzODMwMzQzYTM2MzEzMzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzIzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARhODANBgkqhkiG9w0BAQsFAAOCAQEAaDxyRKXO
LoGY0LvmPqvqxEog/D+isOOUQEqJTTENyhzNVevFmO+KUDi2zFb72qfpIhcjAVOc
b7bSU9inNZnH5l3+D/2riiyAF9MoAHPdyyDvni2+y7fSUUyiJdf25oFJoCHAoxhM
+RZSwUGy5EU1CjNMd9LTwDIzS78GL946NsXjLlqvHVZXCzdlw8Gqy/zaA0Blstde
VJZO78x+syx+iNde0ZQfMIem2XABqMHQ8Lrw/HTc+ylxVsa/r75Et7ZBYOox2+pT
Yj74RRsmtBO3ADV/a4AiQ9na3VZDHj1yD9fNqBkYVSmA0a5/UywfavU0+ZQKFgjK
RpSULCChlmrjbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org