Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a383030303a3a2f33332d3333203d3e20323637363033.roa
File:                     323830343a343431633a383030303a3a2f33332d3333203d3e20323637363033.roa (raw, json)
Hash identifier:          ehfe1tYY/0necb58t/flluozPjZ3RYs8IjS02jugb48=
Subject key identifier:   E3:3D:21:2E:3B:0A:45:81:83:AD:80:F1:E5:93:3D:20:4E:5E:E6:90
Certificate issuer:       /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial:       1A8DEE7EB8436535D1C68B2C7C83D4B81F3B811B
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a383030303a3a2f33332d3333203d3e20323637363033.roa
Signing time:             Wed 20 Sep 2023 18:03:32 +0000
ROA not before:           Wed 20 Sep 2023 17:58:32 +0000
ROA not after:            Wed 18 Sep 2024 18:03:32 +0000
asID:                     267603
IP address blocks:        2804:441c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:ee:7e:b8:43:65:35:d1:c6:8b:2c:7c:83:d4:b8:1f:3b:81:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Validity
            Not Before: Sep 20 17:58:32 2023 GMT
            Not After : Sep 18 18:03:32 2024 GMT
        Subject: CN=E33D212E3B0A458183AD80F1E5933D204E5EE690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:c7:c3:d7:c1:e5:2b:dc:e0:50:f6:58:32:
                    aa:b7:9a:f5:54:21:44:d7:d2:66:b8:64:63:2f:38:
                    a4:e2:57:4c:e9:72:ed:89:77:d7:4a:92:c4:19:9a:
                    24:fa:79:c2:df:2c:94:70:78:28:82:86:9c:02:a3:
                    3c:92:c0:18:fd:a2:19:70:ce:e8:89:e2:c0:89:d9:
                    7d:4e:5e:e1:c5:13:f4:41:5e:ce:9d:55:f6:68:6c:
                    01:01:59:70:41:11:f3:d3:55:df:ee:cc:b7:cc:45:
                    0c:2a:26:68:37:c9:df:12:73:8b:ab:a3:4c:91:1c:
                    69:69:5a:e6:99:ad:5a:13:ae:dc:47:83:fc:3f:0b:
                    99:17:b4:8d:e1:0b:92:49:de:c7:4a:10:2c:61:2b:
                    92:16:9f:62:9e:a9:52:57:ae:cb:9b:cf:3b:4e:3d:
                    50:99:be:1a:9f:7b:6c:ee:ff:c4:e9:0b:35:d4:47:
                    a2:61:9d:49:a3:45:a3:18:14:8b:67:cd:8d:4a:49:
                    ab:ec:06:ac:db:cf:da:ec:2b:1a:66:2c:74:38:66:
                    98:c8:f7:a2:73:6c:06:c5:28:17:a9:45:dc:cd:15:
                    22:29:96:8d:25:00:a6:f9:32:04:12:f9:bc:50:cf:
                    48:47:fe:31:65:96:37:84:15:93:8f:5c:a4:aa:17:
                    60:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3D:21:2E:3B:0A:45:81:83:AD:80:F1:E5:93:3D:20:4E:5E:E6:90
            X509v3 Authority Key Identifier:
                keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a383030303a3a2f33332d3333203d3e20323637363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:441c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:46:96:11:d4:bc:ea:cb:c4:40:53:06:74:8b:d6:6e:eb:b7:
         95:d5:3e:86:dc:ee:37:5b:7d:b5:90:17:d0:a3:e5:85:c8:58:
         cd:5a:a0:44:fb:0f:27:7a:a1:60:10:d1:77:f0:d1:e9:e2:e6:
         67:ba:c9:66:22:9e:c0:9d:73:83:ec:65:d4:8b:07:62:8d:4a:
         0d:b8:0c:93:c1:9c:ba:60:dd:08:fb:b9:25:ec:f4:b8:0c:53:
         72:85:b7:52:49:a8:68:67:e4:5a:dc:a0:88:81:db:3a:e2:6a:
         00:58:06:18:1b:6f:c4:fa:da:fc:88:b0:ee:d9:15:9d:16:b2:
         75:f9:67:0f:84:43:69:92:98:8e:a9:5d:c6:d5:5f:00:86:6c:
         7a:86:4b:44:74:94:46:bb:d4:18:22:12:fe:07:f5:ab:35:4b:
         82:b1:fd:fe:0d:09:70:1c:fb:6a:bd:ae:a7:b8:81:cc:ca:0f:
         c2:2d:8e:0c:e9:44:c9:dc:70:fc:d0:fc:ae:fb:49:91:ef:95:
         38:82:d6:9a:26:cc:f7:3c:26:d8:7e:82:ba:8a:40:4c:00:ee:
         7f:2c:58:0f:4c:df:32:39:6c:46:fd:50:37:bf:54:b4:0e:82:
         6a:f5:d3:91:78:34:63:02:eb:08:85:c2:9e:e7:34:65:5b:0e:
         35:d8:cf:e9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGo3ufrhDZTXRxossfIPUuB87gRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q1QzVERDc5QkE2RjlCMTQ5NzBBQUQ0NEY3ODZCNERG
QUQ4OTY1MDAeFw0yMzA5MjAxNzU4MzJaFw0yNDA5MTgxODAzMzJaMDMxMTAvBgNV
BAMTKEUzM0QyMTJFM0IwQTQ1ODE4M0FEODBGMUU1OTMzRDIwNEU1RUU2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNsfD18HlK9zgUPZYMqq3mvVU
IUTX0ma4ZGMvOKTiV0zpcu2Jd9dKksQZmiT6ecLfLJRweCiChpwCozySwBj9ohlw
zuiJ4sCJ2X1OXuHFE/RBXs6dVfZobAEBWXBBEfPTVd/uzLfMRQwqJmg3yd8Sc4ur
o0yRHGlpWuaZrVoTrtxHg/w/C5kXtI3hC5JJ3sdKECxhK5IWn2KeqVJXrsubzztO
PVCZvhqfe2zu/8TpCzXUR6JhnUmjRaMYFItnzY1KSavsBqzbz9rsKxpmLHQ4ZpjI
96JzbAbFKBepRdzNFSIplo0lAKb5MgQS+bxQz0hH/jFlljeEFZOPXKSqF2CzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU4z0hLjsKRYGDrYDx5ZM9IE5e5pAwHwYDVR0j
BBgwFoAUfVxd15um+bFJcKrUT3hrTfrYllAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEh6ek5OY2VVVHRTTHZFalpXemp4VWhKelg4UEFuOUs4UnJDNkI4OXVt
Y3IvMC83RDVDNURENzlCQTZGOUIxNDk3MEFBRDQ0Rjc4NkI0REZBRDg5NjUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdENUM1REQ3OUJBNkY5QjE0
OTcwQUFENDRGNzg2QjRERkFEODk2NTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hIenpOTmNlVVR0U0x2RWpaV3pqeFVoSnpYOFBBbjlLOFJyQzZCODl1bWNyLzAv
MzIzODMwMzQzYTM0MzQzMTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzM2MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygERByAMA0GCSqGSIb3DQEBCwUA
A4IBAQBDRpYR1Lzqy8RAUwZ0i9Zu67eV1T6G3O43W321kBfQo+WFyFjNWqBE+w8n
eqFgENF38NHp4uZnuslmIp7AnXOD7GXUiwdijUoNuAyTwZy6YN0I+7kl7PS4DFNy
hbdSSahoZ+Ra3KCIgds64moAWAYYG2/E+tr8iLDu2RWdFrJ1+WcPhENpkpiOqV3G
1V8Ahmx6hktEdJRGu9QYIhL+B/WrNUuCsf3+DQlwHPtqva6nuIHMyg/CLY4M6UTJ
3HD80Pyu+0mR75U4gtaaJsz3PCbYfoK6ikBMAO5/LFgPTN8yOWxG/VA3v1S0DoJq
9dOReDRjAusIhcKe5zRlWw412M/p
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org