Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/323830343a376130383a3a2f33322d3334203d3e20323731333433.roa
File:                     323830343a376130383a3a2f33322d3334203d3e20323731333433.roa (raw, json)
Hash identifier:          vPtOxraHrQ8gbKI5lB2yX6l92SzvL3VAeb16mr3zYD0=
Subject key identifier:   8E:92:92:38:A6:45:31:90:00:53:23:B6:45:42:F4:14:8F:49:16:65
Certificate issuer:       /CN=717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2
Certificate serial:       0FFD1DF98EC41C3C26885D52C9654EC04BBFB7DA
Authority key identifier: 71:70:34:ED:5F:FB:B4:D5:BA:BA:C1:AC:A4:3A:16:7B:4F:81:92:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/323830343a376130383a3a2f33322d3334203d3e20323731333433.roa
Signing time:             Sun 19 Mar 2023 13:28:36 +0000
ROA not before:           Sun 19 Mar 2023 13:23:36 +0000
ROA not after:            Sun 17 Mar 2024 13:28:36 +0000
asID:                     271343
IP address blocks:        2804:7a08::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fd:1d:f9:8e:c4:1c:3c:26:88:5d:52:c9:65:4e:c0:4b:bf:b7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2
        Validity
            Not Before: Mar 19 13:23:36 2023 GMT
            Not After : Mar 17 13:28:36 2024 GMT
        Subject: CN=8E929238A6453190005323B64542F4148F491665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:40:f2:a3:1c:65:65:d3:6c:4f:52:e7:9b:
                    dd:f7:3a:92:3b:9c:3f:2f:8c:2c:1e:eb:df:9c:7e:
                    92:56:5b:52:21:74:cf:79:b5:14:27:cd:54:3e:01:
                    2e:5a:e9:24:e9:b9:40:1d:40:8d:65:2c:ba:47:8f:
                    b2:81:62:39:c9:58:ba:d1:27:12:b8:a7:28:43:a9:
                    9b:56:b3:77:a9:e1:5b:83:fd:c4:d6:2c:30:34:4f:
                    98:67:db:ea:cd:74:65:89:c1:d8:1d:d7:4d:0e:57:
                    cf:c7:96:08:aa:ed:e1:22:fa:31:4b:93:05:e4:6e:
                    6b:aa:1d:9c:05:0d:b2:c1:03:0a:08:e1:8d:5d:56:
                    f6:11:cb:38:57:79:72:a1:61:d3:41:f7:15:6b:1a:
                    3a:1c:45:a0:fc:40:cc:42:a5:50:eb:41:f0:b8:8a:
                    84:66:ba:5c:72:21:91:da:0f:99:4c:34:7e:56:0f:
                    21:47:0c:e6:bf:25:7c:2c:1b:9b:69:a8:79:64:d9:
                    80:36:b2:e0:14:e1:2e:a5:43:67:7a:a8:eb:de:00:
                    61:2a:cb:9e:27:5f:82:5a:13:c0:60:e9:a0:c9:e7:
                    1d:0a:06:b1:3c:77:42:60:6d:47:bd:a8:be:48:07:
                    f7:b1:b6:64:f8:7e:3c:92:a9:8b:62:0a:d1:ff:2e:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:92:92:38:A6:45:31:90:00:53:23:B6:45:42:F4:14:8F:49:16:65
            X509v3 Authority Key Identifier:
                keyid:71:70:34:ED:5F:FB:B4:D5:BA:BA:C1:AC:A4:3A:16:7B:4F:81:92:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/323830343a376130383a3a2f33322d3334203d3e20323731333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:08:67:fa:fb:87:77:11:12:cc:f9:fd:5f:a8:49:12:4c:52:
         7e:80:f3:b3:4e:71:d9:37:87:cd:1a:9b:ac:2c:e9:20:67:ba:
         9c:8e:35:0f:92:12:1f:7d:29:8b:7f:5d:8f:28:b5:7e:f8:d7:
         22:ef:db:29:e9:1d:f2:a8:c0:b7:fd:d5:c3:93:ab:56:79:50:
         99:2d:b6:30:ea:47:af:cf:40:47:b0:e2:3e:4d:bc:bc:ac:ab:
         8d:d7:59:8d:65:01:5d:86:56:e6:14:30:da:28:be:69:89:4e:
         c5:43:43:ee:bb:1d:c9:ee:5d:44:25:78:09:c7:1a:ca:69:1a:
         52:98:40:d5:1d:8d:32:66:12:18:79:3d:15:50:23:5f:40:92:
         c9:0e:e5:25:8d:de:5c:cb:5c:19:bb:9f:16:53:93:3f:0c:ad:
         65:15:0b:37:bf:e0:5e:8f:eb:97:4c:0b:ea:8f:c6:d8:ab:5f:
         b4:57:7b:bf:b6:4a:a1:83:c8:3d:d7:08:0f:22:7f:1c:e7:21:
         88:cf:46:07:90:35:63:19:75:db:66:fe:e3:b6:83:50:d5:ca:
         68:01:59:58:4b:c2:9e:2b:c2:15:fb:20:3b:7d:6b:99:98:8e:
         7b:5c:8b:68:2d:0e:8f:14:0b:19:23:10:bc:d0:d3:9a:48:56:
         1f:d4:81:ee
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD/0d+Y7EHDwmiF1SyWVOwEu/t9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3MDM0RUQ1RkZCQjRENUJBQkFDMUFDQTQzQTE2N0I0
RjgxOTJEMjAeFw0yMzAzMTkxMzIzMzZaFw0yNDAzMTcxMzI4MzZaMDMxMTAvBgNV
BAMTKDhFOTI5MjM4QTY0NTMxOTAwMDUzMjNCNjQ1NDJGNDE0OEY0OTE2NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmkDyoxxlZdNsT1Lnm933OpI7
nD8vjCwe69+cfpJWW1IhdM95tRQnzVQ+AS5a6STpuUAdQI1lLLpHj7KBYjnJWLrR
JxK4pyhDqZtWs3ep4VuD/cTWLDA0T5hn2+rNdGWJwdgd100OV8/Hlgiq7eEi+jFL
kwXkbmuqHZwFDbLBAwoI4Y1dVvYRyzhXeXKhYdNB9xVrGjocRaD8QMxCpVDrQfC4
ioRmulxyIZHaD5lMNH5WDyFHDOa/JXwsG5tpqHlk2YA2suAU4S6lQ2d6qOveAGEq
y54nX4JaE8Bg6aDJ5x0KBrE8d0JgbUe9qL5IB/extmT4fjySqYtiCtH/Lu99AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjpKSOKZFMZAAUyO2RUL0FI9JFmUwHwYDVR0j
BBgwFoAUcXA07V/7tNW6usGspDoWe0+BktIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0
NUsvMS83MTcwMzRFRDVGRkJCNEQ1QkFCQUMxQUNBNDNBMTY3QjRGODE5MkQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxNzAzNEVENUZGQkI0RDVC
QUJBQzFBQ0E0M0ExNjdCNEY4MTkyRDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlSzhQbm5XVng5NGlkZG8zcmJGSGpBUDJCb0pyVllOaGtCVERYVm5BNDVLLzEv
MzIzODMwMzQzYTM3NjEzMDM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMx
MzMzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR6CDANBgkqhkiG9w0BAQsFAAOCAQEAMwhn+vuH
dxESzPn9X6hJEkxSfoDzs05x2TeHzRqbrCzpIGe6nI41D5ISH30pi39djyi1fvjX
Iu/bKekd8qjAt/3Vw5OrVnlQmS22MOpHr89AR7DiPk28vKyrjddZjWUBXYZW5hQw
2ii+aYlOxUND7rsdye5dRCV4CccaymkaUphA1R2NMmYSGHk9FVAjX0CSyQ7lJY3e
XMtcGbufFlOTPwytZRULN7/gXo/rl0wL6o/G2KtftFd7v7ZKoYPIPdcIDyJ/HOch
iM9GB5A1Yxl122b+47aDUNXKaAFZWEvCnivCFfsgO31rmZiOe1yLaC0OjxQLGSMQ
vNDTmkhWH9SB7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org