Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a653130303a3a2f34302d3430203d3e20323638343731.roa
File:                     323830343a353162343a653130303a3a2f34302d3430203d3e20323638343731.roa (raw, json)
Hash identifier:          bPtUFf2hmTvU3wwQTMXzq+0bGHK3HeH20yDxzetIwpI=
Subject key identifier:   FB:A6:56:A6:46:B6:F4:28:5E:5D:CC:AC:00:70:AC:02:FF:54:0C:BB
Certificate issuer:       /CN=7F000801D88E7BA8E23FCDDC396CC2FE198D022F
Certificate serial:       2945F127854853121C16936AB4153C5E65A183A7
Authority key identifier: 7F:00:08:01:D8:8E:7B:A8:E2:3F:CD:DC:39:6C:C2:FE:19:8D:02:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a653130303a3a2f34302d3430203d3e20323638343731.roa
Signing time:             Sun 05 May 2024 14:23:45 +0000
ROA not before:           Sun 05 May 2024 14:18:45 +0000
ROA not after:            Sun 04 May 2025 14:23:45 +0000
asID:                     268471
IP address blocks:        2804:51b4:e100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:45:f1:27:85:48:53:12:1c:16:93:6a:b4:15:3c:5e:65:a1:83:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F000801D88E7BA8E23FCDDC396CC2FE198D022F
        Validity
            Not Before: May  5 14:18:45 2024 GMT
            Not After : May  4 14:23:45 2025 GMT
        Subject: CN=FBA656A646B6F4285E5DCCAC0070AC02FF540CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d9:83:27:0d:af:91:c7:70:82:ac:e1:b9:0e:
                    28:57:6c:73:07:5c:b9:53:42:8b:4b:36:b9:e8:56:
                    e7:f7:9c:04:2a:97:56:21:a7:9a:e2:4e:8f:66:db:
                    85:ad:40:bc:51:58:1a:0f:f1:92:51:d3:2e:df:10:
                    fa:c1:7c:b9:89:60:5e:ad:c4:06:11:a9:0a:bc:d7:
                    ab:72:41:c5:44:f6:6d:1f:41:8d:98:69:67:f5:96:
                    ef:16:68:0b:99:dd:3f:57:f4:2c:16:22:1f:25:2b:
                    83:24:ae:f6:93:d9:c7:86:7e:cd:b6:d6:f2:d8:d2:
                    b2:f5:57:93:04:2d:9b:1b:04:53:a9:66:1f:d3:83:
                    e0:4f:88:c1:c6:69:b1:55:c4:02:2a:98:4d:7d:6c:
                    39:54:8d:74:11:8c:cf:33:25:64:f5:39:56:23:0c:
                    a7:87:33:85:ca:23:9c:77:30:4b:e2:46:ca:f6:dd:
                    8b:22:f4:76:3e:d0:d2:07:7c:57:6a:22:57:9d:c5:
                    35:08:07:d3:82:72:f8:17:26:72:7c:81:5e:f7:18:
                    24:71:8e:3e:c0:45:f1:e7:20:a5:4c:3a:c1:94:f2:
                    96:80:20:1f:87:b0:40:bc:09:fc:5c:6d:2e:ea:cd:
                    cc:ab:fb:98:b8:91:ce:1a:cf:39:24:a4:75:10:64:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A6:56:A6:46:B6:F4:28:5E:5D:CC:AC:00:70:AC:02:FF:54:0C:BB
            X509v3 Authority Key Identifier:
                keyid:7F:00:08:01:D8:8E:7B:A8:E2:3F:CD:DC:39:6C:C2:FE:19:8D:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a653130303a3a2f34302d3430203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:27:44:e6:ce:cf:f6:35:44:08:93:62:b3:cf:3c:c4:77:e4:
         87:85:62:7e:da:ca:7c:3f:04:fe:67:f8:9c:ea:22:59:d6:43:
         8d:1d:60:89:8e:98:78:8c:5d:78:8c:b2:12:46:20:13:46:8f:
         05:d8:a3:e3:13:1d:c9:a0:d2:72:61:7e:9f:a2:ab:bd:b9:14:
         f6:bc:1c:0a:24:99:ad:a8:52:52:f2:26:55:ee:31:7f:20:af:
         b5:f3:fa:a0:d8:38:59:c8:86:eb:9a:2e:bf:2d:1e:b8:62:01:
         da:61:f1:9d:23:0a:f0:8f:e8:7b:e5:6c:bb:04:ba:d7:92:be:
         23:68:ff:0a:e8:26:d0:51:2c:a7:16:b4:8e:d4:45:70:9d:86:
         1e:c2:e9:ca:52:58:54:e7:0b:97:bd:d8:0b:c0:df:b0:33:9c:
         34:9b:da:93:97:3c:62:eb:97:77:56:2f:cd:e4:c3:d8:ec:70:
         c3:a2:40:3a:89:c6:59:df:ad:94:44:c5:94:0a:df:00:de:0a:
         ff:77:89:b3:29:b5:ae:ef:6a:7c:2e:d7:e3:71:5c:23:76:b1:
         3a:9b:11:08:97:aa:0f:16:79:36:74:b8:57:53:22:f5:2f:3d:
         48:06:10:45:69:ee:15:61:7e:9f:59:09:af:b9:af:3e:4e:41:
         23:eb:25:c7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKUXxJ4VIUxIcFpNqtBU8XmWhg6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YwMDA4MDFEODhFN0JBOEUyM0ZDRERDMzk2Q0MyRkUx
OThEMDIyRjAeFw0yNDA1MDUxNDE4NDVaFw0yNTA1MDQxNDIzNDVaMDMxMTAvBgNV
BAMTKEZCQTY1NkE2NDZCNkY0Mjg1RTVEQ0NBQzAwNzBBQzAyRkY1NDBDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2YMnDa+Rx3CCrOG5DihXbHMH
XLlTQotLNrnoVuf3nAQql1Yhp5riTo9m24WtQLxRWBoP8ZJR0y7fEPrBfLmJYF6t
xAYRqQq816tyQcVE9m0fQY2YaWf1lu8WaAuZ3T9X9CwWIh8lK4MkrvaT2ceGfs22
1vLY0rL1V5MELZsbBFOpZh/Tg+BPiMHGabFVxAIqmE19bDlUjXQRjM8zJWT1OVYj
DKeHM4XKI5x3MEviRsr23Ysi9HY+0NIHfFdqIledxTUIB9OCcvgXJnJ8gV73GCRx
jj7ARfHnIKVMOsGU8paAIB+HsEC8CfxcbS7qzcyr+5i4kc4azzkkpHUQZEu3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+6ZWpka29CheXcysAHCsAv9UDLswHwYDVR0j
BBgwFoAUfwAIAdiOe6jiP83cOWzC/hmNAi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFhV1p1M3BvRmZYVUZYS2Q4Tk5pZU1zQVh0SGkyaHFFdFN5SzRyUlBZ
Y3QvMC83RjAwMDgwMUQ4OEU3QkE4RTIzRkNEREMzOTZDQzJGRTE5OEQwMjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGMDAwODAxRDg4RTdCQThF
MjNGQ0REQzM5NkNDMkZFMTk4RDAyMkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZxYVdadTNwb0ZmWFVGWEtkOE5OaWVNc0FYdEhpMmhxRXRTeUs0clJQWWN0LzAv
MzIzODMwMzQzYTM1MzE2MjM0M2E2NTMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM0MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEUbThMA0GCSqGSIb3DQEBCwUA
A4IBAQCuJ0Tmzs/2NUQIk2KzzzzEd+SHhWJ+2sp8PwT+Z/ic6iJZ1kONHWCJjph4
jF14jLISRiATRo8F2KPjEx3JoNJyYX6foqu9uRT2vBwKJJmtqFJS8iZV7jF/IK+1
8/qg2DhZyIbrmi6/LR64YgHaYfGdIwrwj+h75Wy7BLrXkr4jaP8K6CbQUSynFrSO
1EVwnYYewunKUlhU5wuXvdgLwN+wM5w0m9qTlzxi65d3Vi/N5MPY7HDDokA6icZZ
362URMWUCt8A3gr/d4mzKbWu72p8LtfjcVwjdrE6mxEIl6oPFnk2dLhXUyL1Lz1I
BhBFae4VYX6fWQmvua8+TkEj6yXH
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org