Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa
File:                     323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa (raw, json)
Hash identifier:          Km5zK9X5FPtbAOcLY7FWOT3VQiR+S2mvFRQfsYFmEYA=
Subject key identifier:   A4:A9:D2:17:B0:99:EE:4F:57:95:A7:04:54:9E:96:AC:64:E1:C8:AA
Certificate issuer:       /CN=5F930352DE227A8D4CED188F902C873925C9D5ED
Certificate serial:       3DAE7FBB278E2C0F1401BDB8456CCB7756BEB6C8
Authority key identifier: 5F:93:03:52:DE:22:7A:8D:4C:ED:18:8F:90:2C:87:39:25:C9:D5:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F930352DE227A8D4CED188F902C873925C9D5ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa
Signing time:             Mon 08 Jan 2024 17:03:12 +0000
ROA not before:           Mon 08 Jan 2024 16:58:12 +0000
ROA not after:            Mon 06 Jan 2025 17:03:12 +0000
asID:                     263907
IP address blocks:        2804:2788:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ae:7f:bb:27:8e:2c:0f:14:01:bd:b8:45:6c:cb:77:56:be:b6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F930352DE227A8D4CED188F902C873925C9D5ED
        Validity
            Not Before: Jan  8 16:58:12 2024 GMT
            Not After : Jan  6 17:03:12 2025 GMT
        Subject: CN=A4A9D217B099EE4F5795A704549E96AC64E1C8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:3c:0d:53:52:43:c4:ca:7a:1b:1b:dd:ee:
                    54:25:37:9f:05:f1:8b:b2:f2:d3:4f:a9:16:18:37:
                    99:d4:d7:5c:9f:5d:7d:b7:57:d8:d6:96:e7:38:43:
                    64:a3:97:c1:9d:d7:6b:85:d0:89:24:c0:6b:1c:f8:
                    ff:48:ed:bd:df:7c:c8:27:6f:02:ca:bb:12:2a:74:
                    8e:c1:9d:ea:b1:22:35:d3:02:a8:6d:c7:a3:cf:d8:
                    57:c1:59:3f:68:99:01:e8:97:20:b1:94:29:e9:c1:
                    60:3c:a2:50:07:e1:f4:2f:c4:34:4e:37:f7:12:48:
                    19:64:ea:9b:61:e0:ed:90:a7:d7:61:e8:98:b1:92:
                    d6:70:d2:d0:68:8f:e4:df:da:63:6d:03:53:77:02:
                    dc:5e:d3:d1:ad:7c:04:a8:9b:9e:2c:83:1e:46:30:
                    a0:ed:48:3a:45:d8:1f:3c:79:7d:59:a2:c0:68:3a:
                    15:0a:0a:db:c8:d3:32:3c:3b:4e:d1:83:7d:2e:b6:
                    9a:f6:77:e7:bf:f1:ee:22:3c:00:78:c8:fa:1c:bf:
                    0b:e4:cf:56:49:bf:ce:fe:e6:97:85:04:43:e4:12:
                    bc:35:3a:f1:ac:4b:c0:98:dc:d7:04:00:a7:c1:61:
                    b0:c8:02:48:5c:55:39:e5:8b:e8:0a:8c:6e:b4:98:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A9:D2:17:B0:99:EE:4F:57:95:A7:04:54:9E:96:AC:64:E1:C8:AA
            X509v3 Authority Key Identifier:
                keyid:5F:93:03:52:DE:22:7A:8D:4C:ED:18:8F:90:2C:87:39:25:C9:D5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/5F930352DE227A8D4CED188F902C873925C9D5ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F930352DE227A8D4CED188F902C873925C9D5ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         65:ab:93:53:d3:88:84:61:da:c6:84:03:15:af:bf:e0:da:b0:
         74:77:6c:0c:92:1b:45:ef:05:1d:88:0d:bc:73:6b:74:6b:9a:
         e9:ac:5a:a6:a2:b0:e4:0a:87:d3:b6:17:91:80:7a:08:fb:21:
         61:74:af:87:76:9c:d9:96:6d:df:f5:24:15:5c:e8:20:ab:03:
         94:e1:9c:3a:17:db:68:d4:0f:4c:2e:5d:46:5a:77:af:59:dd:
         8d:03:27:5e:9b:0a:d1:ab:89:72:80:c3:d7:9c:11:ae:e2:0b:
         b9:4e:74:55:00:5f:d0:e5:88:e0:9e:47:af:44:91:4d:f9:30:
         b6:a8:cc:50:d1:d1:ca:72:4e:8e:f3:47:f6:12:95:55:b4:5b:
         7b:4a:79:8e:42:c7:bc:59:cb:b9:9e:d9:bb:76:01:0e:f5:72:
         fe:5a:3f:59:32:bc:c6:c2:46:1e:55:cf:90:7c:1e:a3:77:d8:
         2c:49:c2:4c:de:0a:39:9d:c8:df:6c:7a:2b:a4:21:4e:b8:3c:
         24:b7:7a:cc:30:38:b5:69:ad:ea:ac:28:68:9e:e7:40:dd:b9:
         d2:00:a4:a1:0d:96:4b:31:8c:40:c6:54:b8:23:73:62:14:4e:
         17:21:d0:e8:ba:ff:fb:a0:90:8f:5d:96:06:61:14:ac:a3:c0:
         d8:7b:46:9f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPa5/uyeOLA8UAb24RWzLd1a+tsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY5MzAzNTJERTIyN0E4RDRDRUQxODhGOTAyQzg3Mzky
NUM5RDVFRDAeFw0yNDAxMDgxNjU4MTJaFw0yNTAxMDYxNzAzMTJaMDMxMTAvBgNV
BAMTKEE0QTlEMjE3QjA5OUVFNEY1Nzk1QTcwNDU0OUU5NkFDNjRFMUM4QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKjwNU1JDxMp6Gxvd7lQlN58F
8Yuy8tNPqRYYN5nU11yfXX23V9jWluc4Q2Sjl8Gd12uF0IkkwGsc+P9I7b3ffMgn
bwLKuxIqdI7BneqxIjXTAqhtx6PP2FfBWT9omQHolyCxlCnpwWA8olAH4fQvxDRO
N/cSSBlk6pth4O2Qp9dh6JixktZw0tBoj+Tf2mNtA1N3Atxe09GtfASom54sgx5G
MKDtSDpF2B88eX1ZosBoOhUKCtvI0zI8O07Rg30utpr2d+e/8e4iPAB4yPocvwvk
z1ZJv87+5peFBEPkErw1OvGsS8CY3NcEAKfBYbDIAkhcVTnli+gKjG60mLc9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpKnSF7CZ7k9XlacEVJ6WrGThyKowHwYDVR0j
BBgwFoAUX5MDUt4ieo1M7RiPkCyHOSXJ1e0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmt2eGR5eTNhalJCc3Z5em1TYlRzWjlBVTZLYkF3OVNWellnUUxQYXdS
ekovMC81RjkzMDM1MkRFMjI3QThENENFRDE4OEY5MDJDODczOTI1QzlENUVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGOTMwMzUyREUyMjdBOEQ0
Q0VEMTg4RjkwMkM4NzM5MjVDOUQ1RUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZrdnhkeXkzYWpSQnN2eXptU2JUc1o5QVU2S2JBdzlTVnpZZ1FMUGF3UnpKLzAv
MzIzODMwMzQzYTMyMzczODM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEJ4jAMA0GCSqGSIb3DQEBCwUA
A4IBAQBlq5NT04iEYdrGhAMVr7/g2rB0d2wMkhtF7wUdiA28c2t0a5rprFqmorDk
CofTtheRgHoI+yFhdK+HdpzZlm3f9SQVXOggqwOU4Zw6F9to1A9MLl1GWnevWd2N
AydemwrRq4lygMPXnBGu4gu5TnRVAF/Q5YjgnkevRJFN+TC2qMxQ0dHKck6O80f2
EpVVtFt7SnmOQse8Wcu5ntm7dgEO9XL+Wj9ZMrzGwkYeVc+QfB6jd9gsScJM3go5
ncjfbHorpCFOuDwkt3rMMDi1aa3qrChonudA3bnSAKShDZZLMYxAxlS4I3NiFE4X
IdDouv/7oJCPXZYGYRSso8DYe0af
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org