Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33342d3334203d3e20323632353332.roa
File:                     323830343a6563383a343030303a3a2f33342d3334203d3e20323632353332.roa (raw, json)
Hash identifier:          opM1G26XJtQDkkdY0oESbcNXloZkciMBrPFuBqza8vU=
Subject key identifier:   66:4D:0F:22:77:A5:94:32:09:83:94:D4:1F:01:BF:53:71:8A:46:32
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       093773E224E2DE3D12F42551F9297D1BEA7C44CD
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33342d3334203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:25 +0000
ROA not before:           Wed 28 Feb 2024 14:06:25 +0000
ROA not after:            Wed 26 Feb 2025 14:11:25 +0000
asID:                     262532
IP address blocks:        2804:ec8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:37:73:e2:24:e2:de:3d:12:f4:25:51:f9:29:7d:1b:ea:7c:44:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:25 2024 GMT
            Not After : Feb 26 14:11:25 2025 GMT
        Subject: CN=664D0F2277A59432098394D41F01BF53718A4632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:23:c3:42:3c:04:de:eb:26:6b:10:07:1e:75:
                    b5:9c:18:49:d0:9d:05:2f:8b:c7:af:e3:97:fb:8c:
                    0a:81:c9:63:1a:ac:dc:51:3d:fd:7e:bd:ed:6e:f9:
                    86:be:6b:56:6b:41:79:b6:3b:66:b1:0d:ea:b1:51:
                    83:04:f4:ae:c3:59:53:ff:86:f1:f3:76:87:d2:b5:
                    a4:75:a5:ff:e8:aa:07:7e:db:1e:09:d1:7d:f6:75:
                    53:bf:ed:d4:05:c6:43:89:c3:90:92:c1:27:7e:da:
                    da:e2:77:89:2e:22:ba:01:c8:e6:4b:18:d4:8d:3b:
                    4d:2a:ba:4c:d1:bd:c3:ec:12:ae:0d:00:10:ce:9f:
                    8c:1b:02:17:fc:26:08:7d:59:3b:7b:e8:3f:78:6a:
                    d7:85:9c:8b:01:32:5e:c7:53:ed:ed:f6:65:89:43:
                    09:98:75:8e:1f:02:fa:17:a1:cd:6c:84:0f:f0:7f:
                    44:6b:7f:16:89:64:f3:a6:c8:d7:9c:72:7e:8f:a8:
                    d2:fa:ca:82:9e:97:7c:ff:26:0b:02:f2:6d:3f:2a:
                    63:9b:1a:fa:d6:5e:f3:52:40:82:b1:f5:79:be:f3:
                    3c:a5:b1:90:4a:54:27:c0:2a:95:10:cc:bb:d4:9a:
                    cf:23:74:1a:d7:c4:bc:65:11:a8:3d:74:8e:20:c4:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:0F:22:77:A5:94:32:09:83:94:D4:1F:01:BF:53:71:8A:46:32
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33342d3334203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         07:a2:a8:6f:92:67:ad:a0:29:c2:81:66:33:02:a4:3f:13:59:
         4c:61:39:47:15:ca:86:53:ac:21:7f:d8:34:9c:c4:29:10:13:
         e8:cb:5e:11:73:e4:0c:f3:ca:f4:33:92:09:84:93:f7:6f:60:
         a5:dc:20:8e:a5:c7:2c:ca:c9:3e:44:4b:a2:82:91:33:cc:dc:
         04:98:fd:ca:a6:e9:d9:47:52:9b:b7:83:4d:c3:cd:bf:a7:3c:
         da:3b:ee:2c:99:1c:d4:f4:8f:8e:5b:3b:34:5b:08:ad:d0:a8:
         e9:1e:6a:41:6c:db:fe:0c:5b:10:83:df:cb:f5:6f:75:9d:63:
         3e:ec:52:45:dc:88:46:6b:37:ac:51:89:00:3e:f3:42:51:4e:
         5e:fb:94:a4:fc:51:d2:04:75:fa:48:2d:dd:78:e8:7b:a7:71:
         22:50:6b:e0:3a:a0:16:bb:44:88:3f:53:65:2b:22:f4:ce:85:
         3a:28:b0:b4:16:25:6c:46:87:55:93:8b:1e:fe:e2:e2:df:69:
         46:b5:75:63:f0:d0:77:5d:82:5f:78:20:e7:6b:c0:56:e9:21:
         8a:5b:fc:ac:c0:c4:5f:1e:1e:4d:fc:fe:a5:23:0d:d2:d8:ed:
         c3:12:e7:7d:bc:5c:8b:c2:f3:47:f5:1c:a0:e3:05:54:8c:9e:
         bf:36:11:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCTdz4iTi3j0S9CVR+Sl9G+p8RM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNDREQjBGQ0JEMUREMjdCOTM4MzdGOEIwNTJDRTNC
OUIyOTJBRjAeFw0yNDAyMjgxNDA2MjVaFw0yNTAyMjYxNDExMjVaMDMxMTAvBgNV
BAMTKDY2NEQwRjIyNzdBNTk0MzIwOTgzOTRENDFGMDFCRjUzNzE4QTQ2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYI8NCPATe6yZrEAcedbWcGEnQ
nQUvi8ev45f7jAqByWMarNxRPf1+ve1u+Ya+a1ZrQXm2O2axDeqxUYME9K7DWVP/
hvHzdofStaR1pf/oqgd+2x4J0X32dVO/7dQFxkOJw5CSwSd+2trid4kuIroByOZL
GNSNO00qukzRvcPsEq4NABDOn4wbAhf8Jgh9WTt76D94ateFnIsBMl7HU+3t9mWJ
QwmYdY4fAvoXoc1shA/wf0RrfxaJZPOmyNeccn6PqNL6yoKel3z/JgsC8m0/KmOb
GvrWXvNSQIKx9Xm+8zylsZBKVCfAKpUQzLvUms8jdBrXxLxlEag9dI4gxB89AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZk0PInellDIJg5TUHwG/U3GKRjIwHwYDVR0j
BBgwFoAUySRNsPy9HdJ7k4N/iwUs47mykq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9DOTI0NERCMEZDQkQxREQyN0I5MzgzN0Y4QjA1MkNFM0I5QjI5MkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5MjQ0REIwRkNCRDFERDI3
QjkzODM3RjhCMDUyQ0UzQjlCMjkyQUYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzIzODMwMzQzYTY1NjMzODNhMzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzIzNTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA7IQDANBgkqhkiG9w0BAQsFAAOC
AQEAB6Kob5JnraApwoFmMwKkPxNZTGE5RxXKhlOsIX/YNJzEKRAT6MteEXPkDPPK
9DOSCYST929gpdwgjqXHLMrJPkRLooKRM8zcBJj9yqbp2UdSm7eDTcPNv6c82jvu
LJkc1PSPjls7NFsIrdCo6R5qQWzb/gxbEIPfy/VvdZ1jPuxSRdyIRms3rFGJAD7z
QlFOXvuUpPxR0gR1+kgt3Xjoe6dxIlBr4DqgFrtEiD9TZSsi9M6FOiiwtBYlbEaH
VZOLHv7i4t9pRrV1Y/DQd12CX3gg52vAVukhilv8rMDEXx4eTfz+pSMN0tjtwxLn
fbxci8LzR/UcoOMFVIyevzYRAg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org