Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a323430303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a323430303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          mPHEjjaGU8GzGHx7eIwGP3Nw2ARayfBQz7UtMbOF+N0=
Subject key identifier:   C1:B5:72:DB:4A:69:17:DA:3C:44:6C:69:52:C9:10:5A:0C:73:EB:9E
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       4D28B7821A2D43401F6AAB6BE84C237FC4CA0032
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a323430303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:45:56 +0000
ROA not before:           Fri 08 Mar 2024 18:40:56 +0000
ROA not after:            Fri 07 Mar 2025 18:45:56 +0000
asID:                     267458
IP address blocks:        2804:41d0:2400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:28:b7:82:1a:2d:43:40:1f:6a:ab:6b:e8:4c:23:7f:c4:ca:00:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:40:56 2024 GMT
            Not After : Mar  7 18:45:56 2025 GMT
        Subject: CN=C1B572DB4A6917DA3C446C6952C9105A0C73EB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:19:8c:71:a5:10:48:57:a9:ff:97:03:2f:
                    78:15:c4:bd:e5:1d:fe:86:13:14:9c:c6:ab:5e:c9:
                    e2:6b:55:7b:5a:28:e6:d8:74:62:ab:54:3a:0a:5e:
                    9f:6e:26:50:6e:96:2e:65:34:22:3d:ed:0e:06:05:
                    bc:35:b9:ca:1d:00:42:50:f2:41:7f:34:cc:89:34:
                    a8:e2:75:6f:16:c3:8a:42:cb:77:6c:3d:d6:3a:f7:
                    85:67:13:b8:03:34:26:91:56:df:09:04:f9:4c:a1:
                    f3:3d:c6:78:c2:17:76:1e:b9:18:87:ef:b4:c0:e9:
                    28:eb:8d:6c:3b:78:4e:41:d6:11:8e:66:2b:00:c7:
                    23:1c:ac:62:a5:3f:d7:b0:5d:4a:f6:b6:3a:fb:b0:
                    83:42:be:61:da:cc:86:a0:b8:5d:20:65:3f:f6:f1:
                    62:7f:ab:e8:2a:86:dd:36:9f:95:57:a7:fc:1a:10:
                    37:5e:7e:02:c8:df:2d:e1:6f:b0:80:55:2b:c6:f1:
                    e1:5d:cd:e6:43:f0:30:6b:31:f3:e3:27:30:93:36:
                    26:e6:a9:5c:0f:1b:87:47:97:59:ee:60:4c:b9:f1:
                    45:8b:ee:d6:61:c5:06:cd:70:d1:b0:72:2c:ff:ad:
                    3a:ca:6f:49:f4:96:55:56:3a:73:de:1d:2d:e5:c9:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B5:72:DB:4A:69:17:DA:3C:44:6C:69:52:C9:10:5A:0C:73:EB:9E
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a323430303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:0a:b9:ca:b8:f9:4f:50:6e:6f:83:67:d7:ec:ec:ab:5d:
         76:ab:81:03:0c:4c:86:85:8f:01:bc:d6:75:ca:bd:26:48:d4:
         66:a5:fe:40:f7:ee:ad:45:23:e3:65:1c:e9:37:33:bd:39:35:
         e4:f8:d2:4c:f2:e6:07:15:ee:f4:cb:3f:39:e0:40:64:d4:f9:
         e3:b8:5c:89:18:74:b5:c7:12:cb:b2:21:68:3f:26:20:a9:8d:
         0f:8b:33:44:9d:07:15:57:c6:e1:99:91:c0:76:52:fe:05:6d:
         53:12:11:c3:fd:6a:ef:3c:1d:ec:aa:fc:d8:d3:83:4a:93:87:
         a7:0d:6c:f8:58:40:6b:87:ab:64:2e:85:ba:dc:1e:be:cd:db:
         90:5f:6c:37:45:a9:cc:ac:8d:12:e7:dc:e7:49:3a:60:93:f1:
         d7:77:a0:4a:b7:b0:81:8b:78:be:27:e0:e2:d1:21:10:8d:b9:
         73:79:89:fb:4b:5e:14:d4:b1:c5:c8:e8:38:a8:6a:4a:46:63:
         e3:b6:30:e0:b8:39:51:f6:97:a0:34:1e:f9:70:8d:8d:a4:82:
         3a:99:18:33:d1:c6:10:c9:65:2d:da:61:70:d2:27:e9:2e:95:
         68:0e:5f:5c:0d:b1:29:78:d4:90:f2:4e:71:0a:24:9b:c8:d2:
         26:d1:2d:31
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTSi3ghotQ0Afaqtr6Ewjf8TKADIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyRDY4MDEwRDc1OUEwRjQ0Rjk5RDgzOTc1NDE4MjRB
RDlEOTc4MTAeFw0yNDAzMDgxODQwNTZaFw0yNTAzMDcxODQ1NTZaMDMxMTAvBgNV
BAMTKEMxQjU3MkRCNEE2OTE3REEzQzQ0NkM2OTUyQzkxMDVBMEM3M0VCOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCochmMcaUQSFep/5cDL3gVxL3l
Hf6GExScxqteyeJrVXtaKObYdGKrVDoKXp9uJlBuli5lNCI97Q4GBbw1ucodAEJQ
8kF/NMyJNKjidW8Ww4pCy3dsPdY694VnE7gDNCaRVt8JBPlMofM9xnjCF3YeuRiH
77TA6SjrjWw7eE5B1hGOZisAxyMcrGKlP9ewXUr2tjr7sINCvmHazIaguF0gZT/2
8WJ/q+gqht02n5VXp/waEDdefgLI3y3hb7CAVSvG8eFdzeZD8DBrMfPjJzCTNibm
qVwPG4dHl1nuYEy58UWL7tZhxQbNcNGwciz/rTrKb0n0llVWOnPeHS3lyUPPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwbVy20ppF9o8RGxpUskQWgxz654wHwYDVR0j
BBgwFoAUfy1oAQ11mg9E+Z2Dl1QYJK2dl4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMC83RjJENjgwMTBENzU5QTBGNDRGOTlEODM5NzU0MTgyNEFEOUQ5NzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGMkQ2ODAxMEQ3NTlBMEY0
NEY5OUQ4Mzk3NTQxODI0QUQ5RDk3ODEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzAv
MzIzODMwMzQzYTM0MzE2NDMwM2EzMjM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM0MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEQdAkMA0GCSqGSIb3DQEBCwUA
A4IBAQAyLwq5yrj5T1Bub4Nn1+zsq112q4EDDEyGhY8BvNZ1yr0mSNRmpf5A9+6t
RSPjZRzpNzO9OTXk+NJM8uYHFe70yz854EBk1PnjuFyJGHS1xxLLsiFoPyYgqY0P
izNEnQcVV8bhmZHAdlL+BW1TEhHD/WrvPB3sqvzY04NKk4enDWz4WEBrh6tkLoW6
3B6+zduQX2w3RanMrI0S59znSTpgk/HXd6BKt7CBi3i+J+Di0SEQjblzeYn7S14U
1LHFyOg4qGpKRmPjtjDguDlR9pegNB75cI2NpII6mRgz0cYQyWUt2mFw0ifpLpVo
Dl9cDbEpeNSQ8k5xCiSbyNIm0S0x
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org