Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa
File:                     323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa (raw, json)
Hash identifier:          01+HFrMrQg40JrG4NsbhwGazPi87LJNumhOHiVSOlGo=
Subject key identifier:   A1:E6:23:F0:B1:E8:BD:15:9C:7B:70:4F:8F:3F:96:B8:9C:7A:AE:77
Certificate issuer:       /CN=5F930352DE227A8D4CED188F902C873925C9D5ED
Certificate serial:       0D99AFAEC702CE52F1673D4AC92775A9CE3F56F6
Authority key identifier: 5F:93:03:52:DE:22:7A:8D:4C:ED:18:8F:90:2C:87:39:25:C9:D5:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F930352DE227A8D4CED188F902C873925C9D5ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa
Signing time:             Mon 08 Jan 2024 17:03:11 +0000
ROA not before:           Mon 08 Jan 2024 16:58:11 +0000
ROA not after:            Mon 06 Jan 2025 17:03:11 +0000
asID:                     263907
IP address blocks:        2804:2788:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:99:af:ae:c7:02:ce:52:f1:67:3d:4a:c9:27:75:a9:ce:3f:56:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F930352DE227A8D4CED188F902C873925C9D5ED
        Validity
            Not Before: Jan  8 16:58:11 2024 GMT
            Not After : Jan  6 17:03:11 2025 GMT
        Subject: CN=A1E623F0B1E8BD159C7B704F8F3F96B89C7AAE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:d3:db:d9:52:b1:bf:36:6e:e0:bf:5d:a7:
                    8c:96:df:7b:ec:4e:a3:02:c9:a4:52:c1:de:91:2b:
                    3c:b5:a4:6d:98:8f:95:b6:a1:9a:ab:2f:4c:bc:36:
                    53:ba:22:02:64:91:f0:bc:0e:fd:bb:37:be:cd:c1:
                    49:b7:a0:f8:a8:c3:93:9e:59:b0:f5:10:cf:fa:d5:
                    be:19:ca:0e:76:fc:a5:78:7e:9a:5d:64:42:13:55:
                    5a:3b:39:05:f7:29:43:47:93:4e:00:24:fc:e1:be:
                    bd:4b:93:84:50:fb:73:e0:01:a7:99:bf:3b:6b:79:
                    a8:58:ce:cc:a3:f7:7d:09:a4:14:c7:11:6f:ed:d3:
                    4e:f3:d7:69:d1:9f:b2:46:37:56:06:c1:ee:f8:1b:
                    6c:02:dc:46:94:a5:f3:f2:b4:fc:75:ad:ad:93:11:
                    f9:c0:d9:58:6d:55:d6:d2:d0:c3:22:15:43:8e:cb:
                    72:99:6a:f4:67:fc:ed:ca:30:b1:5e:8d:ce:bc:11:
                    78:44:d3:68:20:2b:3f:7f:50:99:57:8f:02:56:33:
                    b4:f4:4c:8f:3d:2f:1f:2c:98:93:7d:c6:42:f2:d6:
                    94:7b:66:a4:f0:94:6e:d4:d3:8d:82:4f:f8:88:b3:
                    9c:e1:6a:cf:78:a1:78:d7:4d:c3:b6:c9:b2:91:2c:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:23:F0:B1:E8:BD:15:9C:7B:70:4F:8F:3F:96:B8:9C:7A:AE:77
            X509v3 Authority Key Identifier:
                keyid:5F:93:03:52:DE:22:7A:8D:4C:ED:18:8F:90:2C:87:39:25:C9:D5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/5F930352DE227A8D4CED188F902C873925C9D5ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F930352DE227A8D4CED188F902C873925C9D5ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:33:e9:a9:58:a1:e7:99:44:65:67:92:f5:da:b3:07:18:fd:
         bb:3f:90:23:b7:65:08:b3:c9:ef:ec:bc:b5:d6:05:10:b3:9a:
         db:b2:df:e6:09:c7:f5:3b:60:e4:7f:56:5f:05:5e:5f:14:f5:
         84:db:71:54:d1:c1:94:07:93:73:6e:c7:23:a8:10:30:52:81:
         6e:e5:f3:b2:5e:6a:13:5c:ce:c4:90:6f:24:8d:1a:09:fa:aa:
         a9:db:04:59:c5:43:5a:e9:63:3e:4e:42:38:c0:2e:a6:5d:5d:
         e9:46:6e:bc:92:e0:cb:94:e7:66:65:cc:1f:04:f8:ac:79:00:
         d4:89:fa:31:51:95:99:b0:e9:02:c1:1e:23:63:8f:09:8f:57:
         77:90:6b:15:fb:46:c1:af:92:b2:9b:ee:93:7f:42:9b:23:4d:
         a7:c0:9b:b7:a6:1a:c9:49:82:60:67:5a:b1:63:da:05:e6:8b:
         5d:46:b2:a9:02:c2:e3:3d:30:27:40:15:b0:b2:39:ca:fa:7b:
         e8:e5:b6:9a:d7:e5:b9:17:cb:6c:b7:7b:56:f0:a1:9d:f2:43:
         f7:89:fd:b6:7b:31:4c:a4:f1:2f:e8:1b:98:84:54:1b:b7:62:
         95:45:90:1c:bc:31:3d:3f:64:9e:ab:60:9c:b3:a1:ca:95:95:
         91:72:69:5b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDZmvrscCzlLxZz1KySd1qc4/VvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY5MzAzNTJERTIyN0E4RDRDRUQxODhGOTAyQzg3Mzky
NUM5RDVFRDAeFw0yNDAxMDgxNjU4MTFaFw0yNTAxMDYxNzAzMTFaMDMxMTAvBgNV
BAMTKEExRTYyM0YwQjFFOEJEMTU5QzdCNzA0RjhGM0Y5NkI4OUM3QUFFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWNPb2VKxvzZu4L9dp4yW33vs
TqMCyaRSwd6RKzy1pG2Yj5W2oZqrL0y8NlO6IgJkkfC8Dv27N77NwUm3oPiow5Oe
WbD1EM/61b4Zyg52/KV4fppdZEITVVo7OQX3KUNHk04AJPzhvr1Lk4RQ+3PgAaeZ
vztreahYzsyj930JpBTHEW/t007z12nRn7JGN1YGwe74G2wC3EaUpfPytPx1ra2T
EfnA2VhtVdbS0MMiFUOOy3KZavRn/O3KMLFejc68EXhE02ggKz9/UJlXjwJWM7T0
TI89Lx8smJN9xkLy1pR7ZqTwlG7U042CT/iIs5zhas94oXjXTcO2ybKRLJDpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUoeYj8LHovRWce3BPjz+WuJx6rncwHwYDVR0j
BBgwFoAUX5MDUt4ieo1M7RiPkCyHOSXJ1e0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmt2eGR5eTNhalJCc3Z5em1TYlRzWjlBVTZLYkF3OVNWellnUUxQYXdS
ekovMC81RjkzMDM1MkRFMjI3QThENENFRDE4OEY5MDJDODczOTI1QzlENUVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGOTMwMzUyREUyMjdBOEQ0
Q0VEMTg4RjkwMkM4NzM5MjVDOUQ1RUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZrdnhkeXkzYWpSQnN2eXptU2JUc1o5QVU2S2JBdzlTVnpZZ1FMUGF3UnpKLzAv
MzIzODMwMzQzYTMyMzczODM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEJ4iAMA0GCSqGSIb3DQEBCwUA
A4IBAQBZM+mpWKHnmURlZ5L12rMHGP27P5Ajt2UIs8nv7Ly11gUQs5rbst/mCcf1
O2Dkf1ZfBV5fFPWE23FU0cGUB5NzbscjqBAwUoFu5fOyXmoTXM7EkG8kjRoJ+qqp
2wRZxUNa6WM+TkI4wC6mXV3pRm68kuDLlOdmZcwfBPiseQDUifoxUZWZsOkCwR4j
Y48Jj1d3kGsV+0bBr5Kym+6Tf0KbI02nwJu3phrJSYJgZ1qxY9oF5otdRrKpAsLj
PTAnQBWwsjnK+nvo5baa1+W5F8tst3tW8KGd8kP3if22ezFMpPEv6BuYhFQbt2KV
RZAcvDE9P2Seq2Ccs6HKlZWRcmlb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org