Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a383030303a3a2f33332d3333203d3e20323731363337.roa
File:                     323830343a376561343a383030303a3a2f33332d3333203d3e20323731363337.roa (raw, json)
Hash identifier:          V6ubHWlkewCXQZSiS7MuOrTyc9buEwVHYjt7DxKUXI0=
Subject key identifier:   1F:BE:24:91:1D:6F:5B:37:2F:2C:3F:62:FF:5E:8F:A6:1D:B4:C7:91
Certificate issuer:       /CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
Certificate serial:       50C7369A1F4CF339DD2036019091F849E19B4E94
Authority key identifier: FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a383030303a3a2f33332d3333203d3e20323731363337.roa
Signing time:             Wed 31 May 2023 18:53:03 +0000
ROA not before:           Wed 31 May 2023 18:48:03 +0000
ROA not after:            Wed 29 May 2024 18:53:03 +0000
asID:                     271637
IP address blocks:        2804:7ea4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c7:36:9a:1f:4c:f3:39:dd:20:36:01:90:91:f8:49:e1:9b:4e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
        Validity
            Not Before: May 31 18:48:03 2023 GMT
            Not After : May 29 18:53:03 2024 GMT
        Subject: CN=1FBE24911D6F5B372F2C3F62FF5E8FA61DB4C791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:e3:13:1a:eb:e5:ac:81:b1:ac:3c:58:64:
                    77:ab:f7:c8:8b:0b:0d:62:a8:04:e8:a8:b9:c0:83:
                    95:90:a8:20:54:04:70:6b:2e:22:b2:52:6f:56:8f:
                    00:1e:dc:df:e3:58:26:1c:a6:ba:2f:55:3f:95:45:
                    cc:25:eb:8f:08:fe:d0:69:f6:4b:f1:65:10:5c:70:
                    7d:cf:71:e3:66:16:f7:b6:15:01:e8:bf:6c:43:91:
                    c2:4f:53:1e:b7:e8:7a:58:a4:e8:61:4c:5f:62:a8:
                    58:71:9b:7d:8f:5a:16:33:cb:3a:18:28:f4:50:e8:
                    0d:4e:f2:f9:cc:06:cd:8b:33:89:b5:99:b4:12:d4:
                    06:67:c8:0a:50:8f:d9:eb:96:2f:75:32:12:87:8e:
                    e5:98:8a:e9:d0:64:5a:af:3e:92:33:71:fa:c7:5f:
                    63:ad:ff:1b:8c:35:c9:a3:df:c0:73:ad:5c:01:c0:
                    b6:5e:e9:db:16:44:82:ef:07:d4:d3:83:b2:35:22:
                    3f:1e:f8:87:8a:8b:01:1f:2d:d8:01:d9:2d:1b:f9:
                    b0:d2:24:13:c2:ea:4f:b2:9e:3a:29:ab:d2:39:fc:
                    d6:10:69:c4:96:67:f2:87:95:65:78:4a:cf:14:4f:
                    cc:90:ff:28:b5:cb:21:b3:c0:3f:d6:58:15:5a:8d:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BE:24:91:1D:6F:5B:37:2F:2C:3F:62:FF:5E:8F:A6:1D:B4:C7:91
            X509v3 Authority Key Identifier:
                keyid:FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a383030303a3a2f33332d3333203d3e20323731363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ea4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:d3:0e:e5:0f:98:3d:9e:91:8f:d9:e8:e9:d0:ce:d3:0c:
         3f:25:b8:5a:2f:69:c0:38:4e:51:21:77:0e:d7:31:08:b4:4b:
         38:53:ba:bd:82:d6:b5:bc:95:1c:e8:77:5f:1e:08:86:0c:73:
         2f:43:ba:13:d0:ad:17:d9:d4:ff:9f:41:95:cb:9a:3b:06:94:
         17:1c:23:ab:3e:b2:9c:52:28:7e:99:03:04:09:3d:95:80:eb:
         5b:18:bf:a9:d8:21:01:5b:e3:20:2b:b6:7e:35:69:e7:61:bb:
         3e:b2:aa:d5:d9:76:bd:b3:2e:ba:a1:2c:af:f4:4e:e3:1f:48:
         a3:98:b5:07:2c:b9:e1:3a:3c:00:37:a6:47:ab:b3:7b:8d:58:
         16:af:4c:06:c9:a4:0d:49:25:23:f8:41:af:26:8f:8f:42:74:
         78:2c:31:4a:4d:fb:65:da:04:d8:8f:06:3d:b8:a6:bc:82:96:
         d5:ec:87:7e:84:4c:b2:fa:e8:53:73:c9:f9:ca:ba:eb:94:55:
         23:76:45:ae:d5:e8:32:6b:1c:96:2a:0d:48:56:68:e6:24:90:
         de:02:b9:18:e0:df:22:50:0f:fe:6a:48:fd:59:e9:25:59:c9:
         a4:17:8a:bb:4c:11:4b:e6:e1:1f:ab:c6:f1:c4:32:3a:fd:51:
         89:b3:52:70
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUMc2mh9M8zndIDYBkJH4SeGbTpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5RDJCNzMwRjY4RjlCNTNDNTBERDNFNTE0NUZDM0Uw
OENGODRGOTAeFw0yMzA1MzExODQ4MDNaFw0yNDA1MjkxODUzMDNaMDMxMTAvBgNV
BAMTKDFGQkUyNDkxMUQ2RjVCMzcyRjJDM0Y2MkZGNUU4RkE2MURCNEM3OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4eMTGuvlrIGxrDxYZHer98iL
Cw1iqAToqLnAg5WQqCBUBHBrLiKyUm9WjwAe3N/jWCYcprovVT+VRcwl648I/tBp
9kvxZRBccH3PceNmFve2FQHov2xDkcJPUx636HpYpOhhTF9iqFhxm32PWhYzyzoY
KPRQ6A1O8vnMBs2LM4m1mbQS1AZnyApQj9nrli91MhKHjuWYiunQZFqvPpIzcfrH
X2Ot/xuMNcmj38BzrVwBwLZe6dsWRILvB9TTg7I1Ij8e+IeKiwEfLdgB2S0b+bDS
JBPC6k+ynjopq9I5/NYQacSWZ/KHlWV4Ss8UT8yQ/yi1yyGzwD/WWBVajVxDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUH74kkR1vWzcvLD9i/16Pph20x5EwHwYDVR0j
BBgwFoAU/J0rcw9o+bU8UN0+UUX8PgjPhPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2h0dDNIUnJ6VnlaYVl4bXliR3F3eWZZeGd6V28xWW1wa3ZHRFhDbVZm
TDQvMC9GQzlEMkI3MzBGNjhGOUI1M0M1MEREM0U1MTQ1RkMzRTA4Q0Y4NEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDOUQyQjczMEY2OEY5QjUz
QzUwREQzRTUxNDVGQzNFMDhDRjg0RjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dodHQzSFJyelZ5WmFZeG15Ykdxd3lmWXhneldvMVltcGt2R0RYQ21WZkw0LzAv
MzIzODMwMzQzYTM3NjU2MTM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEfqSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCy/dMO5Q+YPZ6Rj9no6dDO0ww/JbhaL2nAOE5RIXcO1zEItEs4U7q9gta1
vJUc6HdfHgiGDHMvQ7oT0K0X2dT/n0GVy5o7BpQXHCOrPrKcUih+mQMECT2VgOtb
GL+p2CEBW+MgK7Z+NWnnYbs+sqrV2Xa9sy66oSyv9E7jH0ijmLUHLLnhOjwAN6ZH
q7N7jVgWr0wGyaQNSSUj+EGvJo+PQnR4LDFKTftl2gTYjwY9uKa8gpbV7Id+hEyy
+uhTc8n5yrrrlFUjdkWu1egyaxyWKg1IVmjmJJDeArkY4N8iUA/+akj9WeklWcmk
F4q7TBFL5uEfq8bxxDI6/VGJs1Jw
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org