Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa
File:                     323830343a313364633a3a2f33322d3334203d3e20323632343238.roa (raw, json)
Hash identifier:          1YbcuBdDpnTqSXXiIHnolOG4Coy7l0kpRZ84oYefxP8=
Subject key identifier:   66:C0:89:9F:23:2D:3C:D1:91:BF:A0:E9:9A:2B:B9:F1:6C:09:75:0D
Certificate issuer:       /CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
Certificate serial:       69C21A8438CDE15A4774D1E7E0A31EF1F3A2F839
Authority key identifier: 2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa
Signing time:             Mon 14 Aug 2023 16:00:27 +0000
ROA not before:           Mon 14 Aug 2023 15:55:27 +0000
ROA not after:            Mon 12 Aug 2024 16:00:27 +0000
asID:                     262428
IP address blocks:        2804:13dc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c2:1a:84:38:cd:e1:5a:47:74:d1:e7:e0:a3:1e:f1:f3:a2:f8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
        Validity
            Not Before: Aug 14 15:55:27 2023 GMT
            Not After : Aug 12 16:00:27 2024 GMT
        Subject: CN=66C0899F232D3CD191BFA0E99A2BB9F16C09750D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:57:93:0d:d2:c2:b9:ec:80:95:ed:dc:27:
                    d1:d6:17:0c:6a:61:00:a8:21:06:4f:95:db:10:9c:
                    83:d7:e3:6e:3e:61:18:23:b9:23:97:76:ba:26:52:
                    28:6f:1e:10:14:25:d7:e9:87:d0:d2:72:9b:5e:e4:
                    6a:01:a0:10:d9:b5:42:83:b5:cf:28:9d:3c:f9:ba:
                    f9:55:7b:77:77:24:3d:2a:ef:85:a6:ae:45:a7:5e:
                    dd:ac:28:2b:a0:72:8d:06:12:87:b7:a8:70:90:09:
                    de:8e:f8:2f:31:3c:fd:1d:c7:d3:09:a7:a3:be:30:
                    23:aa:c6:cc:21:8a:f0:0e:31:d9:f8:d7:f8:3d:39:
                    c0:b3:26:6f:10:72:ea:46:c4:9f:f9:56:f8:48:b7:
                    e4:b7:9f:4e:32:68:3c:7d:a4:46:70:40:3c:f4:22:
                    d9:7b:db:3c:07:f0:4f:d9:e2:f3:ef:37:ea:84:78:
                    26:7d:1a:2b:7c:aa:ea:fb:f2:98:6a:a6:36:1a:06:
                    ea:4d:9f:b0:af:94:7b:9f:2d:5a:fc:e0:3d:73:f3:
                    7f:f1:77:04:2c:51:fd:e3:d5:fa:d9:03:f7:2d:34:
                    b2:bf:34:22:03:1b:3f:41:ad:e1:88:dd:12:6d:2a:
                    01:c4:85:d6:8e:ac:4f:88:f7:da:fa:95:68:53:82:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C0:89:9F:23:2D:3C:D1:91:BF:A0:E9:9A:2B:B9:F1:6C:09:75:0D
            X509v3 Authority Key Identifier:
                keyid:2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:5e:a6:4b:18:4c:4c:b2:6d:b7:fe:98:cf:97:42:c0:b5:
         f4:44:35:36:af:c3:e6:e8:92:da:83:6a:21:18:f9:1f:84:6f:
         4b:59:c9:ac:58:53:99:15:c6:15:eb:ed:cc:63:9a:43:bf:b2:
         a0:3f:99:64:21:ba:ef:77:f7:b7:e8:47:92:af:04:c3:3c:b0:
         d5:0d:29:34:2c:24:81:a3:8b:a4:2c:9b:91:62:cb:32:dc:fd:
         3c:f8:69:dc:96:dd:3e:40:6d:de:c0:6b:7b:40:2e:fe:76:bc:
         0a:89:96:e1:b4:c5:21:35:26:a6:4e:01:d7:b1:1a:2e:29:5b:
         f5:3f:21:e0:22:9d:67:a1:32:f3:9b:28:4d:e6:69:69:49:48:
         ec:dd:4b:af:2a:30:29:02:af:4d:52:3b:71:03:94:c9:fb:21:
         16:00:3d:50:a9:4b:ab:f4:2a:c6:e3:bb:5e:51:f9:b7:80:e9:
         cc:69:48:ed:5f:33:04:c3:07:f9:2a:2e:46:40:5c:bf:a2:da:
         4b:1a:68:05:1b:f8:90:e6:e4:15:ab:dc:23:9a:2e:84:01:4a:
         ab:e2:c8:14:18:21:18:a1:7d:77:d9:9f:59:7a:5a:ef:35:78:
         34:31:16:72:b9:2b:c5:ee:1f:aa:de:3d:1a:ed:5d:b8:0b:fb:
         ef:c0:f5:07
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUacIahDjN4VpHdNHn4KMe8fOi+DkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZGMkY4NDE4M0QwOTYzOThBNTFGQTZGMDQ0RjU3RkND
OEE0NUJCNzAeFw0yMzA4MTQxNTU1MjdaFw0yNDA4MTIxNjAwMjdaMDMxMTAvBgNV
BAMTKDY2QzA4OTlGMjMyRDNDRDE5MUJGQTBFOTlBMkJCOUYxNkMwOTc1MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vFeTDdLCueyAle3cJ9HWFwxq
YQCoIQZPldsQnIPX424+YRgjuSOXdromUihvHhAUJdfph9DScpte5GoBoBDZtUKD
tc8onTz5uvlVe3d3JD0q74WmrkWnXt2sKCugco0GEoe3qHCQCd6O+C8xPP0dx9MJ
p6O+MCOqxswhivAOMdn41/g9OcCzJm8QcupGxJ/5VvhIt+S3n04yaDx9pEZwQDz0
Itl72zwH8E/Z4vPvN+qEeCZ9Git8qur78phqpjYaBupNn7CvlHufLVr84D1z83/x
dwQsUf3j1frZA/ctNLK/NCIDGz9BreGI3RJtKgHEhdaOrE+I99r6lWhTgigDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZsCJnyMtPNGRv6Dpmiu58WwJdQ0wHwYDVR0j
BBgwFoAUL/L4QYPQljmKUfpvBE9X/MikW7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDdwOW5od0xQbXFYUFluWGRhVEM2ZGgxQnVQRHFuY2N4Mk1WZ3U3akN3
WlcvMC8yRkYyRjg0MTgzRDA5NjM5OEE1MUZBNkYwNDRGNTdGQ0M4QTQ1QkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGRjJGODQxODNEMDk2Mzk4
QTUxRkE2RjA0NEY1N0ZDQzhBNDVCQjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3cDluaHdMUG1xWFBZblhkYVRDNmRoMUJ1UERxbmNjeDJNVmd1N2pDd1pXLzAv
MzIzODMwMzQzYTMxMzM2NDYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMy
MzQzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQT3DANBgkqhkiG9w0BAQsFAAOCAQEAPyVepksY
TEyybbf+mM+XQsC19EQ1Nq/D5uiS2oNqIRj5H4RvS1nJrFhTmRXGFevtzGOaQ7+y
oD+ZZCG673f3t+hHkq8Ewzyw1Q0pNCwkgaOLpCybkWLLMtz9PPhp3JbdPkBt3sBr
e0Au/na8ComW4bTFITUmpk4B17EaLilb9T8h4CKdZ6Ey85soTeZpaUlI7N1Lryow
KQKvTVI7cQOUyfshFgA9UKlLq/QqxuO7XlH5t4DpzGlI7V8zBMMH+SouRkBcv6La
SxpoBRv4kObkFavcI5ouhAFKq+LIFBghGKF9d9mfWXpa7zV4NDEWcrkrxe4fqt49
Gu1duAv778D1Bw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org