Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa
File:                     323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa (raw, json)
Hash identifier:          xLAz+ePB2mKfZwbSqHzMAeKeDoJt+oopWx2FSHEN8Q8=
Subject key identifier:   D7:1E:63:BB:E3:D5:B9:BA:EF:CC:41:74:AB:41:8D:AB:DE:AE:FA:64
Certificate issuer:       /CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
Certificate serial:       3A77880E47780474F3E09039C95D4F764DB6133D
Authority key identifier: 17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa
Signing time:             Thu 26 Oct 2023 18:38:17 +0000
ROA not before:           Thu 26 Oct 2023 18:33:17 +0000
ROA not after:            Thu 24 Oct 2024 18:38:17 +0000
asID:                     263049
IP address blocks:        2804:fe0:1880::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:88:0e:47:78:04:74:f3:e0:90:39:c9:5d:4f:76:4d:b6:13:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
        Validity
            Not Before: Oct 26 18:33:17 2023 GMT
            Not After : Oct 24 18:38:17 2024 GMT
        Subject: CN=D71E63BBE3D5B9BAEFCC4174AB418DABDEAEFA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cd:f3:25:dd:a7:1d:83:ab:0a:5a:1f:0f:bc:
                    bc:b9:f7:ef:8a:5e:28:8a:31:cb:c7:6a:06:3c:6a:
                    e7:44:47:b1:25:d1:48:7a:ea:a4:9a:cd:eb:45:dc:
                    a3:69:b3:b2:f9:ab:01:c2:a0:d2:09:46:f1:31:ec:
                    5a:c1:75:6e:f1:a5:a6:e3:c0:2f:81:72:6a:77:2b:
                    13:96:da:6a:b3:ee:42:b6:27:9e:e6:65:d2:b5:c4:
                    3f:dc:9e:3c:54:04:d7:4a:13:cd:a5:a6:2a:e1:cf:
                    18:5b:d6:cc:b2:35:0b:00:01:1d:b7:86:63:f0:14:
                    ba:cd:d2:9e:14:38:52:41:14:31:13:d2:e0:7d:5a:
                    e6:8f:04:36:22:33:82:55:66:34:fb:d8:3a:58:ee:
                    bd:ed:07:4a:21:c2:0b:72:84:ab:c5:f9:bd:c9:bd:
                    3b:84:e8:fa:16:7b:0e:4f:55:7e:c3:51:a0:d0:34:
                    dd:e1:c3:69:71:6c:37:94:e2:d5:2c:3d:16:ad:ec:
                    e0:93:41:40:09:fc:81:b8:07:70:67:7b:bf:4e:12:
                    8c:b0:2b:07:de:42:97:64:af:5f:2e:2e:9d:04:5a:
                    d2:a3:35:9b:65:86:88:ee:8b:55:e5:f5:d7:84:10:
                    ac:f4:45:05:59:16:07:f6:b2:ff:75:5d:2a:a8:60:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1E:63:BB:E3:D5:B9:BA:EF:CC:41:74:AB:41:8D:AB:DE:AE:FA:64
            X509v3 Authority Key Identifier:
                keyid:17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0:1880::/41

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:94:43:49:88:83:7d:72:ca:3d:da:a4:d3:88:62:8f:69:
         26:73:ab:96:97:73:8a:f6:8d:3f:f5:d7:af:21:39:01:a6:59:
         57:d7:95:3a:6f:c7:a4:55:36:5b:f2:ea:17:96:44:ab:18:12:
         ec:33:53:26:2d:63:a0:e5:75:c2:73:f3:15:d0:be:ec:7e:bf:
         cc:d7:17:9f:f7:fe:2c:64:05:71:e8:71:5c:b2:c5:b5:07:c7:
         2d:10:0b:21:18:ae:81:c9:e8:45:7e:a7:f1:0c:25:05:69:f3:
         d1:0f:22:33:34:56:c8:34:f9:2a:7c:4f:2a:42:ce:b8:80:47:
         81:c5:ef:35:25:44:44:f2:4c:f9:af:1f:ea:db:1d:d0:8f:ad:
         62:8f:27:a5:51:60:e1:11:23:50:09:6e:28:d3:f3:82:0e:bf:
         ac:cb:08:8a:c6:1c:1e:a0:f1:82:f0:f6:30:b0:54:8c:7f:e8:
         b5:b1:b2:7f:6a:71:eb:8b:58:8d:4a:f9:d3:fb:6f:48:a0:a2:
         28:9e:e4:db:7c:e8:60:ff:6a:c3:2f:11:b4:92:e2:98:a0:05:
         b1:5d:1f:b8:1b:7a:5d:81:0c:4c:cb:80:69:d7:f8:ba:ab:40:
         73:eb:ce:1f:77:ef:0f:b4:62:76:0b:44:5f:38:37:fc:3d:81:
         34:ed:ca:ff
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUOneIDkd4BHTz4JA5yV1Pdk22Ez0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTczRDgwQjdGODQ0QjVBQ0Y1RkU2NzM5NDUzQ0JFODYw
QzBGRTc1MzAeFw0yMzEwMjYxODMzMTdaFw0yNDEwMjQxODM4MTdaMDMxMTAvBgNV
BAMTKEQ3MUU2M0JCRTNENUI5QkFFRkNDNDE3NEFCNDE4REFCREVBRUZBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwzfMl3acdg6sKWh8PvLy59++K
XiiKMcvHagY8audER7El0Uh66qSazetF3KNps7L5qwHCoNIJRvEx7FrBdW7xpabj
wC+Bcmp3KxOW2mqz7kK2J57mZdK1xD/cnjxUBNdKE82lpirhzxhb1syyNQsAAR23
hmPwFLrN0p4UOFJBFDET0uB9WuaPBDYiM4JVZjT72DpY7r3tB0ohwgtyhKvF+b3J
vTuE6PoWew5PVX7DUaDQNN3hw2lxbDeU4tUsPRat7OCTQUAJ/IG4B3Bne79OEoyw
KwfeQpdkr18uLp0EWtKjNZtlhojui1Xl9deEEKz0RQVZFgf2sv91XSqoYMe7AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU1x5ju+PVubrvzEF0q0GNq96u+mQwHwYDVR0j
BBgwFoAUFz2At/hEtaz1/mc5RTy+hgwP51MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRGTHBzbnZGTjhuSk0yTjU4TXNTM0g3UWh6V3dKY0c2NEZMS1VoWGp0
dFEvMC8xNzNEODBCN0Y4NDRCNUFDRjVGRTY3Mzk0NTNDQkU4NjBDMEZFNzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE3M0Q4MEI3Rjg0NEI1QUNG
NUZFNjczOTQ1M0NCRTg2MEMwRkU3NTMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkRkxwc252Rk44bkpNMk41OE1zUzNIN1Foeld3SmNHNjRGTEtVaFhqdHRRLzAv
MzIzODMwMzQzYTY2NjUzMDNhMzEzODM4MzAzYTNhMmYzNDMxMmQzNDMxMjAzZDNl
MjAzMjM2MzMzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwcoBA/gGIAwDQYJKoZIhvcNAQELBQAD
ggEBAJ+TlENJiIN9cso92qTTiGKPaSZzq5aXc4r2jT/1168hOQGmWVfXlTpvx6RV
Nlvy6heWRKsYEuwzUyYtY6DldcJz8xXQvux+v8zXF5/3/ixkBXHocVyyxbUHxy0Q
CyEYroHJ6EV+p/EMJQVp89EPIjM0Vsg0+Sp8TypCzriAR4HF7zUlRETyTPmvH+rb
HdCPrWKPJ6VRYOERI1AJbijT84IOv6zLCIrGHB6g8YLw9jCwVIx/6LWxsn9qceuL
WI1K+dP7b0igoiie5Nt86GD/asMvEbSS4pigBbFdH7gbel2BDEzLgGnX+LqrQHPr
zh937w+0YnYLRF84N/w9gTTtyv8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org