Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/323830343a386634633a3a2f33322d313238203d3e20323733343832.roa
File:                     323830343a386634633a3a2f33322d313238203d3e20323733343832.roa (raw, json)
Hash identifier:          FJgLm3Ktz1QE690U91W4/gUGDgaf57xAPtlVGRVCsL0=
Subject key identifier:   F9:51:36:8B:A2:51:A8:CC:85:EA:AB:AC:51:E3:36:76:67:7E:B7:D8
Certificate issuer:       /CN=6BC7A9AAA1524E25FBB41C692F74C8291CFE1EA4
Certificate serial:       3D45297014A1FD2EEFB7D2E7EF9F71116BC8C50B
Authority key identifier: 6B:C7:A9:AA:A1:52:4E:25:FB:B4:1C:69:2F:74:C8:29:1C:FE:1E:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BC7A9AAA1524E25FBB41C692F74C8291CFE1EA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/323830343a386634633a3a2f33322d313238203d3e20323733343832.roa
Signing time:             Mon 01 Apr 2024 11:27:59 +0000
ROA not before:           Mon 01 Apr 2024 11:22:59 +0000
ROA not after:            Mon 31 Mar 2025 11:27:59 +0000
asID:                     273482
IP address blocks:        2804:8f4c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:45:29:70:14:a1:fd:2e:ef:b7:d2:e7:ef:9f:71:11:6b:c8:c5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BC7A9AAA1524E25FBB41C692F74C8291CFE1EA4
        Validity
            Not Before: Apr  1 11:22:59 2024 GMT
            Not After : Mar 31 11:27:59 2025 GMT
        Subject: CN=F951368BA251A8CC85EAABAC51E33676677EB7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:76:4e:38:92:9a:9d:e3:77:63:a6:80:cb:
                    cd:95:d5:03:fa:9a:e3:60:70:49:d3:92:d0:e6:68:
                    7c:86:6e:70:6c:5d:72:cc:05:53:6c:56:c2:6e:74:
                    e1:77:1c:80:62:ed:40:b1:dc:33:98:b7:cc:1b:3e:
                    36:d8:c1:6d:ee:e6:13:80:99:d9:9f:2f:13:56:90:
                    ae:58:74:b5:c0:f5:fc:ac:a2:4a:df:0e:99:e2:78:
                    fd:b3:78:e4:7c:62:82:14:c4:22:db:9b:36:31:47:
                    14:0a:66:05:2a:21:4b:c3:21:87:6f:6b:ef:55:c9:
                    7b:26:28:47:1a:fc:b5:d0:29:98:7e:11:9d:6d:ab:
                    26:75:c9:db:32:65:5b:8c:31:48:cb:85:f7:a9:b8:
                    57:02:27:e0:14:d0:b4:c3:cc:59:65:1d:13:f0:d9:
                    dd:e4:6c:c1:f5:61:c0:3b:13:7d:46:ed:3f:0b:af:
                    0f:13:2d:96:40:f0:16:0e:ff:e8:9a:38:b9:04:58:
                    d7:34:66:31:b3:e6:96:93:37:a0:8c:40:fb:11:a3:
                    60:b2:06:73:fd:e0:f4:74:9c:7b:46:eb:d5:54:3f:
                    e9:74:68:83:88:86:c9:1f:5f:05:ee:02:99:d6:c4:
                    5b:3b:76:c9:20:6a:3a:87:75:6f:19:e0:0b:d3:36:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:51:36:8B:A2:51:A8:CC:85:EA:AB:AC:51:E3:36:76:67:7E:B7:D8
            X509v3 Authority Key Identifier:
                keyid:6B:C7:A9:AA:A1:52:4E:25:FB:B4:1C:69:2F:74:C8:29:1C:FE:1E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/6BC7A9AAA1524E25FBB41C692F74C8291CFE1EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BC7A9AAA1524E25FBB41C692F74C8291CFE1EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/323830343a386634633a3a2f33322d313238203d3e20323733343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:ed:b1:6a:b5:05:e5:b5:35:89:10:2d:50:1e:62:6b:58:a9:
         3a:2d:e9:a4:69:65:65:d6:24:ca:f7:30:1e:95:8d:57:8a:e0:
         36:95:3a:d6:0d:4c:a1:78:bf:88:9e:3c:9b:82:80:6e:d8:34:
         9e:d0:a5:38:7c:b0:18:80:fd:77:5f:5c:25:53:7a:13:77:9f:
         b4:e2:fc:61:eb:c1:90:2a:55:35:26:36:f6:53:c0:25:88:50:
         31:d4:9d:64:31:e9:cb:d0:a9:f7:23:88:dd:58:43:6b:40:d8:
         7a:f8:9f:3f:8e:2e:08:31:6a:2b:11:76:e3:29:e9:fe:a8:ed:
         25:2b:a8:d8:ae:75:87:93:28:77:99:43:9f:dc:f1:5a:a3:d4:
         3f:07:6f:5a:27:a5:95:09:a8:a1:86:57:98:34:ad:65:37:34:
         aa:07:6a:9d:5b:2a:89:71:dc:a5:6f:a4:6d:24:ed:10:9f:fd:
         01:dc:57:9d:b5:1e:c4:00:5f:d0:ca:a9:5e:e5:40:4b:83:80:
         2d:0c:cc:f4:23:a7:65:4b:aa:0d:28:07:c9:29:4a:d4:28:32:
         1e:31:2a:ee:1d:2b:00:18:ae:11:ea:2e:a5:b0:59:a7:23:3f:
         cc:08:5e:e8:7c:65:9e:0f:54:29:2f:a2:66:35:26:31:2a:92:
         2d:b7:ff:b2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPUUpcBSh/S7vt9Ln759xEWvIxQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJDN0E5QUFBMTUyNEUyNUZCQjQxQzY5MkY3NEM4Mjkx
Q0ZFMUVBNDAeFw0yNDA0MDExMTIyNTlaFw0yNTAzMzExMTI3NTlaMDMxMTAvBgNV
BAMTKEY5NTEzNjhCQTI1MUE4Q0M4NUVBQUJBQzUxRTMzNjc2Njc3RUI3RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZXZOOJKaneN3Y6aAy82V1QP6
muNgcEnTktDmaHyGbnBsXXLMBVNsVsJudOF3HIBi7UCx3DOYt8wbPjbYwW3u5hOA
mdmfLxNWkK5YdLXA9fysokrfDpnieP2zeOR8YoIUxCLbmzYxRxQKZgUqIUvDIYdv
a+9VyXsmKEca/LXQKZh+EZ1tqyZ1ydsyZVuMMUjLhfepuFcCJ+AU0LTDzFllHRPw
2d3kbMH1YcA7E31G7T8Lrw8TLZZA8BYO/+iaOLkEWNc0ZjGz5paTN6CMQPsRo2Cy
BnP94PR0nHtG69VUP+l0aIOIhskfXwXuApnWxFs7dskgajqHdW8Z4AvTNtTXAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+VE2i6JRqMyF6qusUeM2dmd+t9gwHwYDVR0j
BBgwFoAUa8epqqFSTiX7tBxpL3TIKRz+HqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEQ1U3ZWbVVoY0dVVjlzbW5zWnVWQ1Jjb2tYaXZLZnN4R1pzZVc2VWtF
RGgvMC82QkM3QTlBQUExNTI0RTI1RkJCNDFDNjkyRjc0QzgyOTFDRkUxRUE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZCQzdBOUFBQTE1MjRFMjVG
QkI0MUM2OTJGNzRDODI5MUNGRTFFQTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hENVN2Vm1VaGNHVVY5c21uc1p1VkNSY29rWGl2S2ZzeEdac2VXNlVrRURoLzAv
MzIzODMwMzQzYTM4NjYzNDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNDM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI9MMA0GCSqGSIb3DQEBCwUAA4IBAQCj7bFq
tQXltTWJEC1QHmJrWKk6LemkaWVl1iTK9zAelY1XiuA2lTrWDUyheL+InjybgoBu
2DSe0KU4fLAYgP13X1wlU3oTd5+04vxh68GQKlU1Jjb2U8AliFAx1J1kMenL0Kn3
I4jdWENrQNh6+J8/ji4IMWorEXbjKen+qO0lK6jYrnWHkyh3mUOf3PFao9Q/B29a
J6WVCaihhleYNK1lNzSqB2qdWyqJcdylb6RtJO0Qn/0B3FedtR7EAF/Qyqle5UBL
g4AtDMz0I6dlS6oNKAfJKUrUKDIeMSruHSsAGK4R6i6lsFmnIz/MCF7ofGWeD1Qp
L6JmNSYxKpItt/+y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org