Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a323030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a323030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          EkUHQ5baoyVBgi8CNRNkkcdlQYVHcBhASoAneCMNOS0=
Subject key identifier:   C2:E6:17:35:A8:48:EC:48:F8:21:42:F0:91:C5:1F:07:AA:A6:28:A2
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       4E01F562ECA720CD19ADB843ECA74BD1AA35656F
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a323030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:22 +0000
ROA not before:           Wed 28 Feb 2024 14:06:22 +0000
ROA not after:            Wed 26 Feb 2025 14:11:22 +0000
asID:                     262532
IP address blocks:        2804:ec8:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:01:f5:62:ec:a7:20:cd:19:ad:b8:43:ec:a7:4b:d1:aa:35:65:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:22 2024 GMT
            Not After : Feb 26 14:11:22 2025 GMT
        Subject: CN=C2E61735A848EC48F82142F091C51F07AAA628A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:a9:db:18:4f:f8:bd:e8:d5:e7:80:2b:57:
                    6d:01:17:e1:fa:13:b0:07:c6:d7:09:5d:c4:27:cf:
                    7e:a2:bf:e0:4e:8c:89:52:60:3d:f9:dd:97:2c:b6:
                    06:0a:77:a0:d8:e8:cd:3a:08:61:3e:ab:88:35:5f:
                    b2:60:8d:c8:e2:80:d5:0e:1f:82:c0:1f:92:de:ce:
                    b8:f1:f2:9e:51:07:53:cb:f8:1e:f6:2e:8a:32:08:
                    de:bf:35:f1:a6:02:59:8b:d3:0b:2b:a5:c3:0e:01:
                    8a:26:91:35:75:d5:8b:2e:44:4b:77:ea:50:d0:a9:
                    3f:4f:75:7d:2f:30:2e:27:b3:fd:21:23:22:47:70:
                    76:19:f7:18:07:a3:4a:d4:c5:c2:25:40:1c:7c:4a:
                    e7:08:ce:c8:35:d4:1a:3d:54:9a:32:46:41:5e:c2:
                    9b:b1:2d:39:9b:b0:34:7b:f4:6d:b7:65:2d:20:a9:
                    97:af:7e:18:ea:83:cc:8c:c1:6d:5c:6d:48:b1:71:
                    e3:1b:97:b1:1f:22:5d:ee:8b:b8:6a:e6:82:02:f7:
                    9e:01:b5:49:85:9a:55:6c:ce:6f:87:ee:ae:1d:8f:
                    29:55:a5:b8:9b:82:87:24:ab:08:fa:40:d2:a0:22:
                    cf:92:ca:65:f3:dc:e6:43:d1:ff:ef:45:64:97:b3:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:17:35:A8:48:EC:48:F8:21:42:F0:91:C5:1F:07:AA:A6:28:A2
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a323030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c8:40:88:2f:ea:10:8f:06:17:b6:e4:01:b4:f1:8c:e6:83:06:
         7d:59:a9:2e:47:12:fe:21:61:90:59:4e:27:10:5d:0e:7b:40:
         78:19:b4:62:5d:14:dc:56:09:c7:ac:1f:61:b3:13:af:50:f4:
         fa:61:9a:98:4e:70:c0:71:bd:19:71:57:ff:50:d2:c7:b2:60:
         0f:09:d2:a3:a3:00:8d:b7:cd:fb:08:01:cc:4f:b3:25:b5:49:
         d1:bf:49:9f:d7:08:42:e6:29:95:da:7b:89:0f:a0:ab:68:33:
         a4:39:cf:35:79:7a:51:85:5c:df:31:ac:09:a1:7b:e8:28:69:
         ca:57:b5:fe:08:df:7b:1f:ff:82:ae:3d:68:0d:db:73:4b:45:
         c7:db:01:1e:e0:bd:2b:40:ef:e5:ac:3e:79:b9:90:c6:33:79:
         b2:2e:72:c6:79:06:ba:b9:9e:69:85:d3:6c:4a:20:81:65:ee:
         78:13:24:b6:64:80:68:d9:ea:ab:b5:ff:9e:a2:65:95:0e:f4:
         e8:a4:a1:5d:8b:28:c5:79:8e:0b:06:7a:d6:2d:e0:68:e5:8a:
         ea:ea:f8:c3:aa:94:80:84:71:a6:a6:3c:6a:37:09:d1:db:86:
         26:65:dd:5b:6b:f5:95:f7:17:9d:7c:21:4d:87:aa:8c:fa:22:
         57:23:04:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTgH1YuynIM0ZrbhD7KdL0ao1ZW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNDREQjBGQ0JEMUREMjdCOTM4MzdGOEIwNTJDRTNC
OUIyOTJBRjAeFw0yNDAyMjgxNDA2MjJaFw0yNTAyMjYxNDExMjJaMDMxMTAvBgNV
BAMTKEMyRTYxNzM1QTg0OEVDNDhGODIxNDJGMDkxQzUxRjA3QUFBNjI4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuganbGE/4vejV54ArV20BF+H6
E7AHxtcJXcQnz36iv+BOjIlSYD353ZcstgYKd6DY6M06CGE+q4g1X7JgjcjigNUO
H4LAH5Lezrjx8p5RB1PL+B72LooyCN6/NfGmAlmL0wsrpcMOAYomkTV11YsuREt3
6lDQqT9PdX0vMC4ns/0hIyJHcHYZ9xgHo0rUxcIlQBx8SucIzsg11Bo9VJoyRkFe
wpuxLTmbsDR79G23ZS0gqZevfhjqg8yMwW1cbUixceMbl7EfIl3ui7hq5oIC954B
tUmFmlVszm+H7q4djylVpbibgockqwj6QNKgIs+SymXz3OZD0f/vRWSXs65jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwuYXNahI7Ej4IULwkcUfB6qmKKIwHwYDVR0j
BBgwFoAUySRNsPy9HdJ7k4N/iwUs47mykq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9DOTI0NERCMEZDQkQxREQyN0I5MzgzN0Y4QjA1MkNFM0I5QjI5MkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5MjQ0REIwRkNCRDFERDI3
QjkzODM3RjhCMDUyQ0UzQjlCMjkyQUYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzIzODMwMzQzYTY1NjMzODNhMzIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA7IIDANBgkqhkiG9w0BAQsFAAOC
AQEAyECIL+oQjwYXtuQBtPGM5oMGfVmpLkcS/iFhkFlOJxBdDntAeBm0Yl0U3FYJ
x6wfYbMTr1D0+mGamE5wwHG9GXFX/1DSx7JgDwnSo6MAjbfN+wgBzE+zJbVJ0b9J
n9cIQuYpldp7iQ+gq2gzpDnPNXl6UYVc3zGsCaF76Chpyle1/gjfex//gq49aA3b
c0tFx9sBHuC9K0Dv5aw+ebmQxjN5si5yxnkGurmeaYXTbEoggWXueBMktmSAaNnq
q7X/nqJllQ706KShXYsoxXmOCwZ61i3gaOWK6ur4w6qUgIRxpqY8ajcJ0duGJmXd
W2v1lfcXnXwhTYeqjPoiVyMEyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org