Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa
File:                     323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa (raw, json)
Hash identifier:          gjQTCDpN2y2SCfXxoL6pZdZfNwc1whRZwN0cM2wl4p4=
Subject key identifier:   EF:74:D9:E9:9C:BB:1B:53:97:D7:3A:95:0E:C4:4B:85:24:DF:1C:96
Certificate issuer:       /CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Certificate serial:       70457D2D67D98D7F655F6B398334FD215AFC1951
Authority key identifier: 32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa
Signing time:             Sat 23 Sep 2023 17:54:24 +0000
ROA not before:           Sat 23 Sep 2023 17:49:24 +0000
ROA not after:            Sat 21 Sep 2024 17:54:24 +0000
asID:                     264479
IP address blocks:        2804:203c:8000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:7d:2d:67:d9:8d:7f:65:5f:6b:39:83:34:fd:21:5a:fc:19:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3225A9367BE412857B6DFF323F2D20F155EF273C
        Validity
            Not Before: Sep 23 17:49:24 2023 GMT
            Not After : Sep 21 17:54:24 2024 GMT
        Subject: CN=EF74D9E99CBB1B5397D73A950EC44B8524DF1C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:74:62:6a:ec:eb:d7:55:d4:b6:f9:e8:92:
                    f7:8c:eb:e2:3b:3c:27:ee:af:ff:ce:14:73:42:fc:
                    53:5f:af:9c:3f:0b:ab:4d:50:a4:4d:14:23:94:7d:
                    59:76:52:bf:56:90:44:c1:54:eb:80:fe:88:59:44:
                    e9:1e:30:6f:90:21:a9:4a:dc:3a:f9:47:b1:b2:0b:
                    51:fd:ce:2e:bc:16:b6:c3:15:52:ac:c1:69:89:55:
                    31:d0:4d:20:78:b5:1b:e1:65:40:89:11:c1:8c:de:
                    db:2f:b3:f3:44:79:49:65:89:57:0a:4c:d1:09:77:
                    b1:8c:80:06:4d:62:a6:1a:92:51:9d:f0:e3:3c:f4:
                    db:01:fd:94:5d:60:27:62:b4:fb:6c:dd:fe:a7:96:
                    dc:34:b6:3e:43:8b:ac:62:70:55:5c:6e:74:08:a4:
                    5c:87:87:65:cb:97:3a:7d:bc:07:8a:a7:7a:10:fc:
                    0d:5f:a3:be:9a:49:d2:3b:55:8b:8f:aa:e5:ec:4d:
                    ed:12:79:28:37:9b:5f:8c:e6:19:a0:1f:ae:64:88:
                    f3:8d:bf:9f:0c:56:dc:2e:f3:89:b1:9b:e4:9c:6f:
                    fb:57:83:9f:db:dc:0b:69:26:77:dd:a1:d8:32:7a:
                    3f:ef:74:26:40:89:c9:b0:2f:09:73:50:df:0e:6a:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:D9:E9:9C:BB:1B:53:97:D7:3A:95:0E:C4:4B:85:24:DF:1C:96
            X509v3 Authority Key Identifier:
                keyid:32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3225A9367BE412857B6DFF323F2D20F155EF273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:8a:a6:49:c0:24:b2:cb:b7:28:48:b2:85:75:df:3e:6d:9e:
         65:b8:3d:20:3f:77:35:b2:49:a1:21:45:f9:92:d9:7e:d1:c3:
         38:07:d9:77:0f:6c:53:7b:02:31:ac:33:37:56:eb:51:29:b4:
         c0:81:57:89:fa:38:89:c6:9d:bb:29:d3:5d:29:85:dc:49:f4:
         31:b5:99:6b:cd:56:88:77:09:88:d6:5e:50:d2:fd:29:02:7c:
         40:7e:c1:57:6b:17:31:a1:33:5c:dd:83:a1:2c:23:d1:c0:93:
         25:74:94:04:d2:3a:fd:d9:34:2b:fa:3e:ec:d1:95:76:6c:f6:
         69:bd:80:0c:7d:95:79:4e:fa:cb:fa:1a:a1:59:ed:69:14:b7:
         55:f6:86:60:38:69:9a:82:7a:f7:37:a6:7a:b9:dd:ab:13:85:
         1e:bd:48:9b:f2:42:ef:0f:d8:18:bd:24:34:cb:7f:58:6a:a3:
         13:46:d0:74:b5:d9:a7:7d:9d:fe:4d:a6:5e:4b:da:39:a3:28:
         19:65:2b:d4:ac:5a:d1:8c:5a:b3:ff:7c:71:c0:14:67:82:46:
         3b:28:ff:e7:33:59:c1:93:42:fd:6b:c4:92:d5:b9:37:c4:d3:
         18:05:bc:62:91:51:92:53:8c:9a:cc:6c:bf:52:39:83:38:61:
         40:eb:b4:bb
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUcEV9LWfZjX9lX2s5gzT9IVr8GVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyNUE5MzY3QkU0MTI4NTdCNkRGRjMyM0YyRDIwRjE1
NUVGMjczQzAeFw0yMzA5MjMxNzQ5MjRaFw0yNDA5MjExNzU0MjRaMDMxMTAvBgNV
BAMTKEVGNzREOUU5OUNCQjFCNTM5N0Q3M0E5NTBFQzQ0Qjg1MjRERjFDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKHRiauzr11XUtvnokveM6+I7
PCfur//OFHNC/FNfr5w/C6tNUKRNFCOUfVl2Ur9WkETBVOuA/ohZROkeMG+QIalK
3Dr5R7GyC1H9zi68FrbDFVKswWmJVTHQTSB4tRvhZUCJEcGM3tsvs/NEeUlliVcK
TNEJd7GMgAZNYqYaklGd8OM89NsB/ZRdYCditPts3f6nltw0tj5Di6xicFVcbnQI
pFyHh2XLlzp9vAeKp3oQ/A1fo76aSdI7VYuPquXsTe0SeSg3m1+M5hmgH65kiPON
v58MVtwu84mxm+Scb/tXg5/b3AtpJnfdodgyej/vdCZAicmwLwlzUN8OaiT1AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU73TZ6Zy7G1OX1zqVDsRLhSTfHJYwHwYDVR0j
BBgwFoAUMiWpNnvkEoV7bf8yPy0g8VXvJzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMC8zMjI1QTkzNjdCRTQxMjg1N0I2REZGMzIzRjJEMjBGMTU1RUYyNzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMjVBOTM2N0JFNDEyODU3
QjZERkYzMjNGMkQyMEYxNTVFRjI3M0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzAv
MzIzODMwMzQzYTMyMzAzMzYzM2EzODMwMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzNDM0MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEIDyAADANBgkqhkiG9w0BAQsF
AAOCAQEAQYqmScAkssu3KEiyhXXfPm2eZbg9ID93NbJJoSFF+ZLZftHDOAfZdw9s
U3sCMawzN1brUSm0wIFXifo4icaduynTXSmF3En0MbWZa81WiHcJiNZeUNL9KQJ8
QH7BV2sXMaEzXN2DoSwj0cCTJXSUBNI6/dk0K/o+7NGVdmz2ab2ADH2VeU76y/oa
oVntaRS3VfaGYDhpmoJ69zemerndqxOFHr1Im/JC7w/YGL0kNMt/WGqjE0bQdLXZ
p32d/k2mXkvaOaMoGWUr1Kxa0Yxas/98ccAUZ4JGOyj/5zNZwZNC/WvEktW5N8TT
GAW8YpFRklOMmsxsv1I5gzhhQOu0uw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org