Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa
File:                     323830343a376561343a3a2f33332d3333203d3e20323731363337.roa (raw, json)
Hash identifier:          9OvlwZvTzRyFJ8y2szohhN+Wejz+bQx4T38UdldbPDc=
Subject key identifier:   54:EF:08:62:C3:7D:A0:D4:2E:B2:F7:6E:5A:69:5D:5E:16:CD:C5:D8
Certificate issuer:       /CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
Certificate serial:       243CD4AC81EDE09FB204458B798F7383666116CE
Authority key identifier: FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa
Signing time:             Wed 31 May 2023 18:53:04 +0000
ROA not before:           Wed 31 May 2023 18:48:04 +0000
ROA not after:            Wed 29 May 2024 18:53:04 +0000
asID:                     271637
IP address blocks:        2804:7ea4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3c:d4:ac:81:ed:e0:9f:b2:04:45:8b:79:8f:73:83:66:61:16:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
        Validity
            Not Before: May 31 18:48:04 2023 GMT
            Not After : May 29 18:53:04 2024 GMT
        Subject: CN=54EF0862C37DA0D42EB2F76E5A695D5E16CDC5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:9e:84:92:c3:7f:ec:0e:3d:f5:63:0f:ca:
                    b0:ec:79:27:fc:97:b6:a7:e9:03:cb:0b:19:d7:e2:
                    e7:c7:6e:24:99:6d:b7:0a:57:71:70:71:1f:8f:22:
                    53:99:70:ea:4e:5b:2b:fa:6d:28:b6:3c:94:85:f5:
                    b9:fa:f0:3c:a3:cf:2b:74:ed:db:8b:46:bd:1a:9c:
                    70:b0:e4:96:4d:02:a4:51:77:fb:55:57:79:12:f2:
                    1a:9f:ad:55:4c:11:38:56:0e:a0:e8:5e:50:88:0f:
                    e2:89:2d:e1:f6:82:cb:13:1b:4f:f7:1f:0e:4e:ba:
                    0d:1e:03:3c:7e:b9:d6:d1:02:fb:16:cc:3e:e6:48:
                    e7:cf:67:5c:b7:cb:f3:47:1b:33:bc:fc:5a:77:46:
                    f3:fd:5a:38:6d:f6:e4:a6:c1:06:51:07:1d:95:46:
                    3c:ca:d4:2d:8c:c0:6c:cf:a1:98:39:91:71:60:da:
                    e8:b2:1e:ca:39:dc:bc:08:d8:02:83:ec:21:3f:62:
                    95:cc:14:2b:f1:44:52:15:3f:47:d3:50:22:af:ad:
                    20:11:30:ad:96:f6:59:c4:5e:99:82:1d:8f:d1:24:
                    f0:82:eb:65:80:77:fb:e9:76:39:14:90:29:d6:76:
                    0a:b3:0f:9d:fb:6d:72:ea:6d:e1:12:44:b1:9c:be:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EF:08:62:C3:7D:A0:D4:2E:B2:F7:6E:5A:69:5D:5E:16:CD:C5:D8
            X509v3 Authority Key Identifier:
                keyid:FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ea4::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:41:21:ec:76:ae:41:65:b1:31:a6:39:32:04:d0:20:79:27:
         2d:b1:20:2b:7e:4a:7b:53:f3:5f:8f:3d:b3:0e:35:53:62:19:
         9a:0f:f9:f5:9d:0c:d2:86:6d:66:d5:2b:11:45:48:43:b4:1f:
         4e:c9:0f:48:c7:e2:d2:7e:4e:4f:1a:50:de:d9:0b:b0:2f:08:
         3f:3c:21:e5:4b:57:31:ee:35:ae:d5:29:7c:c4:67:ce:92:39:
         5f:45:bc:f2:4c:74:e3:cb:02:b8:f4:db:44:cc:f9:0d:dc:6d:
         60:dc:fc:ac:a9:cf:92:13:88:14:49:e2:54:21:92:c0:14:f4:
         09:9b:6d:74:00:ce:a6:1f:e3:a7:5f:91:ed:ef:4c:d5:19:72:
         90:d4:f7:56:de:48:e2:a9:3d:fd:b9:a0:23:42:6a:a3:04:9d:
         0d:c0:9b:f1:8e:3c:0d:64:24:1e:b6:0f:66:87:3d:ba:f0:c8:
         33:f5:65:5e:17:7f:db:6e:00:ff:66:a8:d1:fa:04:69:31:a7:
         93:d0:d8:a6:c3:75:0e:4c:7b:a6:eb:4f:c0:c0:20:30:24:16:
         a5:6a:3d:08:3f:72:db:45:b4:5f:3d:2d:0b:fd:9a:26:26:47:
         17:bb:f0:4f:e7:28:1a:59:ac:08:6d:20:dd:af:ba:6e:98:9f:
         04:c9:78:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJDzUrIHt4J+yBEWLeY9zg2ZhFs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5RDJCNzMwRjY4RjlCNTNDNTBERDNFNTE0NUZDM0Uw
OENGODRGOTAeFw0yMzA1MzExODQ4MDRaFw0yNDA1MjkxODUzMDRaMDMxMTAvBgNV
BAMTKDU0RUYwODYyQzM3REEwRDQyRUIyRjc2RTVBNjk1RDVFMTZDREM1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOJ6EksN/7A499WMPyrDseSf8
l7an6QPLCxnX4ufHbiSZbbcKV3FwcR+PIlOZcOpOWyv6bSi2PJSF9bn68Dyjzyt0
7duLRr0anHCw5JZNAqRRd/tVV3kS8hqfrVVMEThWDqDoXlCID+KJLeH2gssTG0/3
Hw5Oug0eAzx+udbRAvsWzD7mSOfPZ1y3y/NHGzO8/Fp3RvP9Wjht9uSmwQZRBx2V
RjzK1C2MwGzPoZg5kXFg2uiyHso53LwI2AKD7CE/YpXMFCvxRFIVP0fTUCKvrSAR
MK2W9lnEXpmCHY/RJPCC62WAd/vpdjkUkCnWdgqzD537bXLqbeESRLGcvgOlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVO8IYsN9oNQusvduWmldXhbNxdgwHwYDVR0j
BBgwFoAU/J0rcw9o+bU8UN0+UUX8PgjPhPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2h0dDNIUnJ6VnlaYVl4bXliR3F3eWZZeGd6V28xWW1wa3ZHRFhDbVZm
TDQvMC9GQzlEMkI3MzBGNjhGOUI1M0M1MEREM0U1MTQ1RkMzRTA4Q0Y4NEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDOUQyQjczMEY2OEY5QjUz
QzUwREQzRTUxNDVGQzNFMDhDRjg0RjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dodHQzSFJyelZ5WmFZeG15Ykdxd3lmWXhneldvMVltcGt2R0RYQ21WZkw0LzAv
MzIzODMwMzQzYTM3NjU2MTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzYzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR+pAAwDQYJKoZIhvcNAQELBQADggEBAEZBIex2
rkFlsTGmOTIE0CB5Jy2xICt+SntT81+PPbMONVNiGZoP+fWdDNKGbWbVKxFFSEO0
H07JD0jH4tJ+Tk8aUN7ZC7AvCD88IeVLVzHuNa7VKXzEZ86SOV9FvPJMdOPLArj0
20TM+Q3cbWDc/Kypz5ITiBRJ4lQhksAU9AmbbXQAzqYf46dfke3vTNUZcpDU91be
SOKpPf25oCNCaqMEnQ3Am/GOPA1kJB62D2aHPbrwyDP1ZV4Xf9tuAP9mqNH6BGkx
p5PQ2KbDdQ5Me6brT8DAIDAkFqVqPQg/cttFtF89LQv9miYmRxe78E/nKBpZrAht
IN2vum6YnwTJeOk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org