Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3332203d3e20323637363537.roa
File:                     323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (raw, json)
Hash identifier:          ZG9EZBpELGu7p4hGlN7NGmcGMjkXVPqFV4qBW/22kFY=
Subject key identifier:   47:0F:95:A1:07:12:DC:8F:94:B3:A7:5C:99:AD:2C:2E:52:B9:E9:11
Certificate issuer:       /CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
Certificate serial:       6627081BFCAB640250B4441D0498B206DC71C58D
Authority key identifier: 27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3332203d3e20323637363537.roa
Signing time:             Fri 05 Jan 2024 11:58:57 +0000
ROA not before:           Fri 05 Jan 2024 11:53:57 +0000
ROA not after:            Fri 03 Jan 2025 11:58:57 +0000
asID:                     267657
IP address blocks:        2804:44d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:27:08:1b:fc:ab:64:02:50:b4:44:1d:04:98:b2:06:dc:71:c5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
        Validity
            Not Before: Jan  5 11:53:57 2024 GMT
            Not After : Jan  3 11:58:57 2025 GMT
        Subject: CN=470F95A10712DC8F94B3A75C99AD2C2E52B9E911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:1e:2d:43:9f:f8:38:ab:b3:ac:6e:2d:fc:
                    d2:39:1f:be:c6:14:48:b0:5a:81:81:3d:d0:f9:50:
                    01:f1:e0:c3:1c:20:e6:c1:f2:20:21:00:a1:da:fb:
                    ad:da:94:bf:4d:be:6a:84:95:8c:72:d7:d3:91:cb:
                    1d:88:f9:75:b9:fe:c3:27:fe:42:f3:ca:04:10:a4:
                    2b:42:0d:6d:bb:c3:5d:a6:2f:eb:16:56:71:11:93:
                    dc:52:c9:d1:ef:61:76:60:34:9e:14:6c:92:02:8a:
                    92:da:ee:41:af:a5:20:08:f1:19:41:12:a8:5b:a5:
                    3e:f3:a0:a0:88:5b:92:6e:46:51:33:b8:2b:76:a4:
                    87:c4:19:ac:d4:b5:d4:12:50:1f:a9:fd:d4:fa:9a:
                    78:c2:dd:83:21:c1:a3:d0:9e:3a:29:fe:9c:5c:be:
                    62:98:3d:47:40:9e:de:09:59:04:e3:fe:f9:5c:68:
                    f0:70:21:13:fd:3e:a7:a5:77:47:14:8c:55:17:a6:
                    35:31:d5:1c:77:bb:f9:c6:4e:29:f9:bd:90:2e:67:
                    d3:b0:fc:b3:3e:19:3b:36:86:97:ac:bc:37:06:a9:
                    b2:ea:98:f0:09:53:f0:0f:42:0f:96:69:b5:8c:bd:
                    a8:20:75:2e:58:57:4d:4e:e3:4e:a0:f4:cc:2c:4d:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:95:A1:07:12:DC:8F:94:B3:A7:5C:99:AD:2C:2E:52:B9:E9:11
            X509v3 Authority Key Identifier:
                keyid:27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3332203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:e4:c1:09:e0:28:68:c4:df:9b:94:37:01:ca:68:31:be:ca:
         64:88:2b:20:ee:cf:ad:9b:cb:dc:01:bb:23:16:06:4f:c1:5c:
         91:c9:ff:dd:9a:12:bc:e3:19:d3:fc:99:d8:42:8a:60:af:8b:
         05:14:a0:18:fe:cf:83:7b:f0:a4:33:7d:67:d5:e6:ba:32:7b:
         59:70:4a:33:74:d4:11:13:9d:6b:c0:29:e3:c6:98:83:78:d7:
         6b:3d:50:86:f1:25:c1:99:8d:24:e9:07:59:cb:a7:f6:36:b4:
         ee:bc:1b:5f:48:96:4a:cf:04:38:a1:99:93:fe:49:1f:c7:00:
         b7:2f:5f:bb:32:59:69:60:41:2a:81:99:82:42:35:7a:4a:75:
         9b:d8:28:77:76:45:bc:f1:d5:90:f5:a0:e1:d4:43:ab:b0:03:
         60:ba:e5:89:e3:65:d1:2e:20:f5:eb:0f:29:6d:fa:78:3c:a3:
         ea:61:83:01:f5:30:fe:d1:58:dc:14:cc:8a:82:7f:84:03:e4:
         82:6a:5f:5e:e7:ae:80:0a:8e:c9:75:be:24:d8:64:7f:f4:40:
         3a:cb:64:19:2c:62:99:4b:95:e0:36:d2:9a:e0:8e:13:fb:8b:
         42:a1:c5:f4:b1:07:40:3b:3c:15:e1:d4:d5:25:10:59:e1:91:
         38:79:62:6d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZicIG/yrZAJQtEQdBJiyBtxxxY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCNjI0OEIxRTA1OEUyRUUwQTcxMUJBQUU1RjZDQkRG
NjFDNjEwNDAeFw0yNDAxMDUxMTUzNTdaFw0yNTAxMDMxMTU4NTdaMDMxMTAvBgNV
BAMTKDQ3MEY5NUExMDcxMkRDOEY5NEIzQTc1Qzk5QUQyQzJFNTJCOUU5MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygh4tQ5/4OKuzrG4t/NI5H77G
FEiwWoGBPdD5UAHx4MMcIObB8iAhAKHa+63alL9NvmqElYxy19ORyx2I+XW5/sMn
/kLzygQQpCtCDW27w12mL+sWVnERk9xSydHvYXZgNJ4UbJICipLa7kGvpSAI8RlB
EqhbpT7zoKCIW5JuRlEzuCt2pIfEGazUtdQSUB+p/dT6mnjC3YMhwaPQnjop/pxc
vmKYPUdAnt4JWQTj/vlcaPBwIRP9Pqeld0cUjFUXpjUx1Rx3u/nGTin5vZAuZ9Ow
/LM+GTs2hpesvDcGqbLqmPAJU/APQg+WabWMvaggdS5YV01O406g9MwsTe1BAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURw+VoQcS3I+Us6dcma0sLlK56REwHwYDVR0j
BBgwFoAUJ7Ykix4Fji7gpxG6rl9svfYcYQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41
UzMvMC8yN0I2MjQ4QjFFMDU4RTJFRTBBNzExQkFBRTVGNkNCREY2MUM2MTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3QjYyNDhCMUUwNThFMkVF
MEE3MTFCQUFFNUY2Q0JERjYxQzYxMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZYa3dLd1k1dXlBU3c4UmJ6cTVNeGMxamNUaWJ0MWNyc2tkdVJWSzVONVMzLzAv
MzIzODMwMzQzYTM0MzQ2NDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzYzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARE2DANBgkqhkiG9w0BAQsFAAOCAQEAu+TBCeAo
aMTfm5Q3AcpoMb7KZIgrIO7PrZvL3AG7IxYGT8Fckcn/3ZoSvOMZ0/yZ2EKKYK+L
BRSgGP7Pg3vwpDN9Z9XmujJ7WXBKM3TUEROda8Ap48aYg3jXaz1QhvElwZmNJOkH
Wcun9ja07rwbX0iWSs8EOKGZk/5JH8cAty9fuzJZaWBBKoGZgkI1ekp1m9god3ZF
vPHVkPWg4dRDq7ADYLrlieNl0S4g9esPKW36eDyj6mGDAfUw/tFY3BTMioJ/hAPk
gmpfXueugAqOyXW+JNhkf/RAOstkGSximUuV4DbSmuCOE/uLQqHF9LEHQDs8FeHU
1SUQWeGROHlibQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org