Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a323030303a3a2f33352d3335203d3e20323636303430.roa
File:                     323830343a333961303a323030303a3a2f33352d3335203d3e20323636303430.roa (raw, json)
Hash identifier:          pohU7FCLGtpSjtDadzLEjQ7P7Sn8ADv2NqM3YaPff+A=
Subject key identifier:   B9:D1:B1:88:8A:E9:CB:58:65:83:3B:BD:75:35:39:D4:65:A5:5C:9C
Certificate issuer:       /CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
Certificate serial:       7F0438FC6DBC141B65C480FBAA099BDC19D44A24
Authority key identifier: 18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a323030303a3a2f33352d3335203d3e20323636303430.roa
Signing time:             Thu 07 Mar 2024 13:26:18 +0000
ROA not before:           Thu 07 Mar 2024 13:21:18 +0000
ROA not after:            Thu 06 Mar 2025 13:26:18 +0000
asID:                     266040
IP address blocks:        2804:39a0:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:04:38:fc:6d:bc:14:1b:65:c4:80:fb:aa:09:9b:dc:19:d4:4a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
        Validity
            Not Before: Mar  7 13:21:18 2024 GMT
            Not After : Mar  6 13:26:18 2025 GMT
        Subject: CN=B9D1B1888AE9CB5865833BBD753539D465A55C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:06:57:22:13:4f:a6:c2:9b:a7:7a:e4:53:
                    e3:94:8b:37:c9:e0:59:97:57:32:59:c3:83:fa:4e:
                    d5:57:83:4e:b1:98:40:f7:1b:e9:a3:ef:e7:7d:87:
                    11:65:77:fb:18:01:5a:81:ab:90:61:57:d7:1f:09:
                    87:db:27:86:b7:90:49:d8:67:aa:da:9e:a7:72:4e:
                    c7:a7:13:cd:83:0d:42:e3:8d:79:14:cd:27:6d:6c:
                    64:b9:c0:2c:bc:0a:c5:b7:6a:e2:0e:43:eb:9c:fa:
                    de:85:36:f5:00:ee:61:2e:af:4b:69:1b:19:f3:52:
                    26:0a:c2:57:6a:77:dc:98:62:28:be:cf:1d:de:a7:
                    c6:c8:b9:85:33:b3:d1:57:bc:52:db:d1:2f:16:21:
                    c6:ac:f0:bb:03:8b:32:85:3e:ac:bb:2f:7c:09:ba:
                    ef:4c:3c:4a:98:68:0f:27:b5:62:d5:c3:df:fd:66:
                    26:54:a4:5a:74:c2:40:15:be:26:ed:22:4e:24:74:
                    e0:98:8d:c2:86:13:ef:09:a7:03:ad:a3:f8:21:e2:
                    49:b4:c4:1c:cd:a1:4c:ff:3d:0a:60:d5:13:b8:24:
                    7e:6b:64:44:11:cf:cf:4e:f5:e7:40:98:c5:83:73:
                    61:e4:dd:24:d0:80:53:34:07:82:2b:bb:2a:01:c9:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D1:B1:88:8A:E9:CB:58:65:83:3B:BD:75:35:39:D4:65:A5:5C:9C
            X509v3 Authority Key Identifier:
                keyid:18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a323030303a3a2f33352d3335203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39a0:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:f1:17:e8:59:92:55:e4:4b:41:a8:f1:0a:6b:ea:7c:04:
         19:a6:11:c6:2e:e7:08:4c:35:ac:d9:8a:21:a9:69:3f:cf:92:
         18:37:aa:59:25:37:ef:9f:1c:d6:ab:54:6c:55:95:6c:eb:5f:
         b5:0a:a1:34:b0:ed:7f:18:27:88:e5:6a:aa:02:58:3d:1a:c4:
         c0:ea:91:d5:dd:6a:df:a3:6b:64:db:bf:ad:fd:f0:99:4a:c9:
         65:6c:1d:18:7b:32:53:d0:4a:46:23:ec:bb:24:23:bb:5b:91:
         d4:18:d1:24:fd:0f:ff:18:7b:93:ec:f7:21:18:dc:b8:21:d6:
         26:49:03:8c:66:a9:b0:92:ee:fa:df:6a:e8:50:75:ee:06:cb:
         2a:7e:21:80:58:b4:c8:b7:11:64:a1:1c:16:9c:c2:c7:35:c2:
         59:f2:8d:ba:12:1a:57:e6:a8:38:6b:d5:b6:67:d6:49:1a:e6:
         af:3f:d6:41:bc:29:87:11:c3:a8:16:94:bc:b3:d6:62:19:cf:
         a9:ba:58:bc:a2:c4:64:9e:70:90:f0:56:9a:1c:29:29:c0:95:
         ee:8b:8d:ed:a0:6e:3c:ba:56:ec:d9:9c:f9:92:dc:5b:56:f4:
         30:44:ae:de:bd:8c:97:b6:90:56:67:3b:47:bd:43:97:8f:36:
         a3:1d:cb:0b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfwQ4/G28FBtlxID7qgmb3BnUSiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg2MTAwQ0QyMkFFOEM0NUQ5QTVFQ0EyRjkyN0U1OTk3
MDc4MERCMTAeFw0yNDAzMDcxMzIxMThaFw0yNTAzMDYxMzI2MThaMDMxMTAvBgNV
BAMTKEI5RDFCMTg4OEFFOUNCNTg2NTgzM0JCRDc1MzUzOUQ0NjVBNTVDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pwZXIhNPpsKbp3rkU+OUizfJ
4FmXVzJZw4P6TtVXg06xmED3G+mj7+d9hxFld/sYAVqBq5BhV9cfCYfbJ4a3kEnY
Z6ranqdyTsenE82DDULjjXkUzSdtbGS5wCy8CsW3auIOQ+uc+t6FNvUA7mEur0tp
GxnzUiYKwldqd9yYYii+zx3ep8bIuYUzs9FXvFLb0S8WIcas8LsDizKFPqy7L3wJ
uu9MPEqYaA8ntWLVw9/9ZiZUpFp0wkAVvibtIk4kdOCYjcKGE+8JpwOto/gh4km0
xBzNoUz/PQpg1RO4JH5rZEQRz89O9edAmMWDc2Hk3STQgFM0B4IruyoByekNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUudGxiIrpy1hlgzu9dTU51GWlXJwwHwYDVR0j
BBgwFoAUGGEAzSKujEXZpeyi+SflmXB4DbEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR4RjNjU3h1NmM3bW9jdkNaeUpjakM5ZVpHYnkzTXpSd0gxNzJvdVJ3
UlEvMC8xODYxMDBDRDIyQUU4QzQ1RDlBNUVDQTJGOTI3RTU5OTcwNzgwREIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE4NjEwMENEMjJBRThDNDVE
OUE1RUNBMkY5MjdFNTk5NzA3ODBEQjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0eEYzY1N4dTZjN21vY3ZDWnlKY2pDOWVaR2J5M016UndIMTcyb3VSd1JRLzAv
MzIzODMwMzQzYTMzMzk2MTMwM2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNjMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEOaAgMA0GCSqGSIb3DQEBCwUA
A4IBAQBq1fEX6FmSVeRLQajxCmvqfAQZphHGLucITDWs2YohqWk/z5IYN6pZJTfv
nxzWq1RsVZVs61+1CqE0sO1/GCeI5WqqAlg9GsTA6pHV3Wrfo2tk27+t/fCZSsll
bB0YezJT0EpGI+y7JCO7W5HUGNEk/Q//GHuT7PchGNy4IdYmSQOMZqmwku7632ro
UHXuBssqfiGAWLTItxFkoRwWnMLHNcJZ8o26EhpX5qg4a9W2Z9ZJGuavP9ZBvCmH
EcOoFpS8s9ZiGc+puli8osRknnCQ8FaaHCkpwJXui43toG48ulbs2Zz5ktxbVvQw
RK7evYyXtpBWZztHvUOXjzajHcsL
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org