Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3430203d3e20323637343538.roa
File:                     323830343a343164303a3a2f33322d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          FqJw2mMfH3i9pH5oEOF16gVsdCT8gvnfrDQ0cEpgkes=
Subject key identifier:   74:63:CC:67:AD:44:54:61:8E:DC:E1:66:BD:AE:D2:3D:7F:71:1F:44
Certificate issuer:       /CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
Certificate serial:       7D50401532461F600E304596CCF4BE52257362BA
Authority key identifier: 0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3430203d3e20323637343538.roa
Signing time:             Wed 14 Jun 2023 17:49:36 +0000
ROA not before:           Wed 14 Jun 2023 17:44:36 +0000
ROA not after:            Wed 12 Jun 2024 17:49:36 +0000
asID:                     267458
IP address blocks:        2804:41d0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:50:40:15:32:46:1f:60:0e:30:45:96:cc:f4:be:52:25:73:62:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
        Validity
            Not Before: Jun 14 17:44:36 2023 GMT
            Not After : Jun 12 17:49:36 2024 GMT
        Subject: CN=7463CC67AD4454618EDCE166BDAED23D7F711F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e7:88:35:96:ff:71:82:26:ee:9f:46:7a:1f:
                    1b:78:7d:3b:1b:f4:5d:14:79:75:ac:da:bc:db:ea:
                    e1:47:91:6a:a6:72:97:91:51:0b:aa:8d:9d:f9:f7:
                    2a:cd:e7:6c:fd:ac:ff:9f:ac:7e:08:5c:91:b3:63:
                    11:38:5c:b5:4f:ab:f0:a5:f0:97:4a:95:8b:dd:0f:
                    f9:8b:15:ba:e8:cf:65:f5:51:8f:a4:e9:8d:de:db:
                    88:01:05:f9:e9:3f:24:ad:c3:c0:e6:53:cf:00:24:
                    47:64:d9:e9:12:d0:13:e7:c4:de:12:cd:ee:5d:2b:
                    29:c6:48:a1:8a:06:6e:52:a7:df:59:ce:1a:de:b2:
                    55:a6:ca:c9:78:10:37:d1:2f:da:0d:01:00:14:2f:
                    c2:eb:19:7a:7b:ce:9c:72:35:93:5e:e8:6a:28:99:
                    51:e6:a9:25:d1:60:93:db:a7:f0:72:5e:5d:79:b8:
                    6a:fb:0d:92:1b:c8:5d:be:99:be:12:69:e4:e1:03:
                    01:09:73:7f:93:3d:e7:0a:4d:87:63:17:7b:21:1b:
                    33:66:64:c6:f7:1e:71:86:b9:62:23:2b:52:79:2f:
                    ed:61:92:5f:ef:c1:f7:10:45:1c:59:7e:70:da:54:
                    c1:5d:af:0b:5e:ee:12:fd:9e:cd:84:24:7b:4b:97:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:CC:67:AD:44:54:61:8E:DC:E1:66:BD:AE:D2:3D:7F:71:1F:44
            X509v3 Authority Key Identifier:
                keyid:0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:60:3f:cc:65:7f:51:25:94:f3:70:26:66:e0:24:00:fb:d4:
         7b:e1:0d:f8:5e:8c:95:0b:e7:65:ac:62:f7:2e:86:0e:8c:c6:
         eb:ef:87:0a:bd:5f:a9:f5:2a:69:ea:ab:5c:0e:d3:0b:b6:e9:
         fd:7b:b7:0c:b1:b8:4d:6c:d9:c9:a9:75:2a:36:78:c2:2e:0d:
         86:78:76:03:d1:2d:36:c7:b4:b3:68:8e:3a:7a:45:5f:eb:65:
         d9:49:8b:1a:05:a4:85:70:1c:25:d4:5f:3c:50:71:e8:6a:b3:
         26:6a:84:31:92:3f:72:3e:69:17:6e:c2:64:7e:66:b5:d1:74:
         54:a1:e9:45:b9:00:99:04:0c:cc:22:73:97:06:b3:b2:9c:0e:
         f9:99:19:36:dc:c7:78:31:89:74:9e:01:bb:5a:92:9d:88:d5:
         87:2d:fc:bc:ca:53:4c:50:fd:a4:6d:9b:af:a0:1d:ea:44:dc:
         e6:d6:4c:88:91:08:44:92:0b:f3:2a:78:b1:75:ef:d7:79:38:
         d5:3a:9f:58:8a:97:f7:fa:0f:73:1b:3a:c6:fd:05:d2:0b:5b:
         c4:06:9c:51:10:fb:16:bb:dc:ec:d8:62:d7:75:5c:72:7e:bf:
         ca:58:3a:9f:02:1a:06:87:53:81:ff:38:55:cf:1a:3b:a8:88:
         ea:43:d2:36
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfVBAFTJGH2AOMEWWzPS+UiVzYrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIzMjBDMkU3MkJCNEM2QzQxQjZEOUEzOUZERDRBQTU5
MEM5OUJGMzAeFw0yMzA2MTQxNzQ0MzZaFw0yNDA2MTIxNzQ5MzZaMDMxMTAvBgNV
BAMTKDc0NjNDQzY3QUQ0NDU0NjE4RURDRTE2NkJEQUVEMjNEN0Y3MTFGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr54g1lv9xgibun0Z6Hxt4fTsb
9F0UeXWs2rzb6uFHkWqmcpeRUQuqjZ359yrN52z9rP+frH4IXJGzYxE4XLVPq/Cl
8JdKlYvdD/mLFbroz2X1UY+k6Y3e24gBBfnpPyStw8DmU88AJEdk2ekS0BPnxN4S
ze5dKynGSKGKBm5Sp99ZzhreslWmysl4EDfRL9oNAQAUL8LrGXp7zpxyNZNe6Goo
mVHmqSXRYJPbp/ByXl15uGr7DZIbyF2+mb4SaeThAwEJc3+TPecKTYdjF3shGzNm
ZMb3HnGGuWIjK1J5L+1hkl/vwfcQRRxZfnDaVMFdrwte7hL9ns2EJHtLlxBvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdGPMZ61EVGGO3OFmva7SPX9xH0QwHwYDVR0j
BBgwFoAUCzIMLnK7TGxBttmjn91KpZDJm/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMC8wQjMyMEMyRTcyQkI0QzZDNDFCNkQ5QTM5RkRENEFBNTkwQzk5QkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBCMzIwQzJFNzJCQjRDNkM0
MUI2RDlBMzlGREQ0QUE1OTBDOTlCRjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzAv
MzIzODMwMzQzYTM0MzE2NDMwM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM3
MzQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARB0DANBgkqhkiG9w0BAQsFAAOCAQEASmA/zGV/
USWU83AmZuAkAPvUe+EN+F6MlQvnZaxi9y6GDozG6++HCr1fqfUqaeqrXA7TC7bp
/Xu3DLG4TWzZyal1KjZ4wi4Nhnh2A9EtNse0s2iOOnpFX+tl2UmLGgWkhXAcJdRf
PFBx6GqzJmqEMZI/cj5pF27CZH5mtdF0VKHpRbkAmQQMzCJzlwazspwO+ZkZNtzH
eDGJdJ4Bu1qSnYjVhy38vMpTTFD9pG2br6Ad6kTc5tZMiJEIRJIL8yp4sXXv13k4
1TqfWIqX9/oPcxs6xv0F0gtbxAacURD7Frvc7Nhi13Vccn6/ylg6nwIaBodTgf84
Vc8aO6iI6kPSNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org