Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d3332203d3e20323635313734.roa
File:                     323830343a326263343a3a2f33322d3332203d3e20323635313734.roa (raw, json)
Hash identifier:          TBiWbWOGYf3b9QLrKuYXOGoa2QWeCCFvK7lBwjjKWS8=
Subject key identifier:   8D:2A:F9:B7:8C:0F:76:7A:1E:52:BD:94:47:D3:74:E1:AE:85:C2:4E
Certificate issuer:       /CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
Certificate serial:       25C0DA771649770308F9BC59F6D3D7CEDD4439E5
Authority key identifier: BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d3332203d3e20323635313734.roa
Signing time:             Wed 08 Mar 2023 12:03:07 +0000
ROA not before:           Wed 08 Mar 2023 11:58:07 +0000
ROA not after:            Wed 06 Mar 2024 12:03:07 +0000
asID:                     265174
IP address blocks:        2804:2bc4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c0:da:77:16:49:77:03:08:f9:bc:59:f6:d3:d7:ce:dd:44:39:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
        Validity
            Not Before: Mar  8 11:58:07 2023 GMT
            Not After : Mar  6 12:03:07 2024 GMT
        Subject: CN=8D2AF9B78C0F767A1E52BD9447D374E1AE85C24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7d:3c:c9:bb:c4:72:89:40:64:9c:53:ee:8d:
                    27:4a:31:a6:7d:09:e7:04:64:59:37:cb:3f:4e:a3:
                    4f:cd:2c:b3:ad:15:28:a3:c7:b8:97:c5:12:02:95:
                    7e:24:d2:50:78:41:44:53:ca:2f:4b:35:8b:78:68:
                    b5:cc:53:d8:c8:ce:9b:3d:1b:95:fc:04:44:3d:b9:
                    b7:8e:19:d5:93:02:41:75:68:0f:ac:2d:79:e3:f6:
                    be:94:a3:e2:78:1e:5a:35:12:8f:3d:86:86:f9:2a:
                    5d:4d:56:3c:b3:f6:64:34:fe:16:9b:e0:85:9a:5f:
                    21:9f:f5:15:03:b8:7a:24:a2:5c:a5:7f:af:dd:dd:
                    94:05:d1:45:da:5f:5f:54:d4:2d:b8:c0:b4:9d:83:
                    73:a6:3d:62:51:09:c9:04:9e:c4:ca:9f:d0:c4:4d:
                    81:02:15:b3:26:25:d7:c6:37:c7:51:e8:62:00:6b:
                    0d:f2:7b:6e:39:cb:2f:f1:76:e6:60:7f:59:56:38:
                    44:73:76:47:cd:b2:99:bb:50:b2:ad:67:8f:5c:fb:
                    91:35:9d:23:3d:13:9f:d5:b1:96:f3:1c:c0:8a:b5:
                    4c:e0:3e:b8:38:99:48:19:fc:eb:c5:b6:78:3a:3c:
                    e6:46:b1:d0:03:74:c8:c2:d6:9d:b0:cf:e5:fb:8c:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:F9:B7:8C:0F:76:7A:1E:52:BD:94:47:D3:74:E1:AE:85:C2:4E
            X509v3 Authority Key Identifier:
                keyid:BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d3332203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:08:23:62:ab:49:75:22:ca:2e:c9:f2:23:e9:07:17:86:65:
         5f:c7:f6:29:17:17:2b:a4:d2:84:73:e0:4c:7d:3d:3f:3f:0c:
         65:e3:a9:ee:4d:03:17:7c:c9:f7:91:aa:07:3a:56:1d:f6:3d:
         48:e2:30:4e:a0:20:11:2b:3e:5b:67:0a:9f:8c:03:b9:30:f6:
         32:41:72:53:26:b6:44:49:0b:06:0e:aa:6e:ce:51:2e:79:be:
         e9:98:73:6a:58:ea:dc:3d:41:76:4e:f8:7b:b7:9c:d3:a4:b2:
         13:8e:ba:0a:fe:21:9f:0c:9a:20:74:2d:e5:5b:8d:39:a9:7f:
         10:80:01:c4:66:3e:35:a9:af:35:1e:fc:2d:f1:6d:bf:49:e2:
         8e:9c:2e:31:c7:f3:fd:90:a2:37:9d:20:99:72:1e:4e:96:e7:
         05:f1:0f:48:bd:36:a9:f7:55:b4:63:7e:ad:ac:65:99:4c:e5:
         e6:93:93:41:68:19:c3:36:24:cb:92:7b:69:1b:15:c0:e1:55:
         9e:e9:de:3c:1d:44:81:18:d3:0e:e8:55:33:02:20:29:1f:61:
         b8:18:3c:c4:4c:da:83:b9:35:91:2e:86:52:1e:b4:b5:d5:cf:
         68:e8:e1:72:3f:5a:5f:c6:e6:32:56:c2:6d:5a:66:4b:37:e8:
         c6:4c:9d:1f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJcDadxZJdwMI+bxZ9tPXzt1EOeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFCRjgzNzNCNjg3MEREMzk3MjcyNEZBREI0QjI0MERD
RTk5RTkwQzAeFw0yMzAzMDgxMTU4MDdaFw0yNDAzMDYxMjAzMDdaMDMxMTAvBgNV
BAMTKDhEMkFGOUI3OEMwRjc2N0ExRTUyQkQ5NDQ3RDM3NEUxQUU4NUMyNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXfTzJu8RyiUBknFPujSdKMaZ9
CecEZFk3yz9Oo0/NLLOtFSijx7iXxRIClX4k0lB4QURTyi9LNYt4aLXMU9jIzps9
G5X8BEQ9ubeOGdWTAkF1aA+sLXnj9r6Uo+J4Hlo1Eo89hob5Kl1NVjyz9mQ0/hab
4IWaXyGf9RUDuHokolylf6/d3ZQF0UXaX19U1C24wLSdg3OmPWJRCckEnsTKn9DE
TYECFbMmJdfGN8dR6GIAaw3ye245yy/xduZgf1lWOERzdkfNspm7ULKtZ49c+5E1
nSM9E5/VsZbzHMCKtUzgPrg4mUgZ/OvFtng6POZGsdADdMjC1p2wz+X7jKKTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjSr5t4wPdnoeUr2UR9N04a6Fwk4wHwYDVR0j
BBgwFoAUur+Dc7aHDdOXJyT620skDc6Z6QwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmFOSnZzOFNiTVFIekRHWWloZUptWUtYRmpnV3BRZlRrZFFaMndyOFBK
VzQvMC9CQUJGODM3M0I2ODcwREQzOTcyNzI0RkFEQjRCMjQwRENFOTlFOTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBQkY4MzczQjY4NzBERDM5
NzI3MjRGQURCNEIyNDBEQ0U5OUU5MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZhTkp2czhTYk1RSHpER1lpaGVKbVlLWEZqZ1dwUWZUa2RRWjJ3cjhQSlc0LzAv
MzIzODMwMzQzYTMyNjI2MzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQrxDANBgkqhkiG9w0BAQsFAAOCAQEAiAgjYqtJ
dSLKLsnyI+kHF4ZlX8f2KRcXK6TShHPgTH09Pz8MZeOp7k0DF3zJ95GqBzpWHfY9
SOIwTqAgESs+W2cKn4wDuTD2MkFyUya2REkLBg6qbs5RLnm+6Zhzaljq3D1Bdk74
e7ec06SyE466Cv4hnwyaIHQt5VuNOal/EIABxGY+NamvNR78LfFtv0nijpwuMcfz
/ZCiN50gmXIeTpbnBfEPSL02qfdVtGN+raxlmUzl5pOTQWgZwzYky5J7aRsVwOFV
nunePB1EgRjTDuhVMwIgKR9huBg8xEzag7k1kS6GUh60tdXPaOjhcj9aX8bmMlbC
bVpmSzfoxkydHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org