Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/323830343a346137383a3a2f33322d3438203d3e20323637323432.roa
File:                     323830343a346137383a3a2f33322d3438203d3e20323637323432.roa (raw, json)
Hash identifier:          KbJriqGWlKAabNazj3fG8RHFMi7X0WggqO5wILwVbZw=
Subject key identifier:   DF:FF:F2:FA:EC:4A:02:EE:7D:71:17:E2:C3:D0:F4:01:6E:A2:4E:13
Certificate issuer:       /CN=BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13
Certificate serial:       403C6524C24AD4E91E4A7BCB78DB53AC647D4F95
Authority key identifier: BA:4E:F3:88:A4:6A:F3:E0:3A:8B:6D:2D:69:A4:1E:F3:8A:C6:DB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/323830343a346137383a3a2f33322d3438203d3e20323637323432.roa
Signing time:             Fri 22 Dec 2023 20:37:06 +0000
ROA not before:           Fri 22 Dec 2023 20:32:06 +0000
ROA not after:            Fri 20 Dec 2024 20:37:06 +0000
asID:                     267242
IP address blocks:        2804:4a78::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3c:65:24:c2:4a:d4:e9:1e:4a:7b:cb:78:db:53:ac:64:7d:4f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13
        Validity
            Not Before: Dec 22 20:32:06 2023 GMT
            Not After : Dec 20 20:37:06 2024 GMT
        Subject: CN=DFFFF2FAEC4A02EE7D7117E2C3D0F4016EA24E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:34:08:ce:61:9f:3e:81:e0:51:ba:fe:a7:
                    01:2a:c1:87:2c:83:2c:5c:66:6c:45:bb:35:4a:69:
                    4f:7d:00:a3:b7:d0:aa:d7:40:81:b5:de:d1:6c:12:
                    3e:79:31:13:9f:e1:4f:24:a3:ad:d9:fe:fd:59:19:
                    11:2f:ce:57:62:80:14:53:4c:c9:bc:f8:74:25:17:
                    ff:f2:9a:99:1d:97:61:63:02:77:72:18:ef:02:77:
                    b9:a2:78:da:8e:54:69:a7:32:50:7b:3b:e9:ca:b0:
                    0e:37:2e:54:84:28:f0:b8:b5:3c:08:68:63:74:c2:
                    1f:0f:db:6e:98:07:f7:19:2f:04:43:54:c0:50:35:
                    45:e6:ab:10:b2:83:10:a3:52:2d:13:1a:e7:3f:e9:
                    f4:3f:7e:fb:1f:04:55:1d:51:ad:14:1f:cc:06:cb:
                    9c:f9:8f:c8:89:0a:b7:89:af:6d:f6:34:7e:d8:b6:
                    74:6a:e2:b5:9d:21:71:ad:f5:fe:91:0a:73:77:ff:
                    aa:dd:58:af:1b:7d:9f:ec:e3:80:3f:e5:7f:f5:6e:
                    77:45:72:53:6f:74:97:34:1a:e5:1c:41:48:b7:d0:
                    6e:67:da:63:9e:3c:b7:de:3e:c8:af:14:95:35:25:
                    6b:9a:4a:99:80:16:00:12:05:5b:03:b7:95:dd:09:
                    14:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FF:F2:FA:EC:4A:02:EE:7D:71:17:E2:C3:D0:F4:01:6E:A2:4E:13
            X509v3 Authority Key Identifier:
                keyid:BA:4E:F3:88:A4:6A:F3:E0:3A:8B:6D:2D:69:A4:1E:F3:8A:C6:DB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/323830343a346137383a3a2f33322d3438203d3e20323637323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:ee:d0:80:19:8e:ce:f2:9d:e4:ab:cb:90:c1:82:9a:17:
         04:4a:d3:df:43:b5:d6:c8:a7:7c:cf:fd:cd:3e:b8:52:84:4b:
         ba:1e:14:7f:e9:e7:43:79:61:fd:43:98:71:2d:80:74:51:be:
         7c:55:ec:ca:89:74:7e:73:2f:23:83:64:48:10:fd:64:3b:ce:
         ab:a7:a2:61:92:f1:b0:47:06:34:8d:e3:67:f7:45:67:30:85:
         c4:22:86:34:44:7e:a3:bf:5f:12:f8:06:d5:8e:d2:e5:8e:05:
         f2:de:d5:ec:ee:65:bc:b1:fc:47:7f:ac:0f:20:ed:47:e4:9b:
         05:77:a3:cb:aa:1a:d5:75:22:2d:5c:b0:cb:04:05:cf:12:af:
         01:83:67:dd:46:dd:f1:30:c6:5e:69:b3:f9:90:f6:c0:44:74:
         2f:0a:35:e4:9b:37:f4:a6:77:c3:7e:30:f8:97:ef:22:5d:82:
         1a:97:cb:a7:95:c7:7c:79:27:32:f8:5e:7d:ad:85:06:f7:d7:
         35:42:8b:5b:0c:f5:6d:1a:05:e1:a2:50:67:cf:e4:a6:c1:fc:
         9e:c1:e1:62:ca:ba:d8:5c:88:cc:2c:65:ad:e1:40:c9:1b:e7:
         b3:59:80:5a:67:07:bc:70:39:83:e5:d9:3a:b3:05:83:9a:9f:
         77:7d:28:f1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQDxlJMJK1OkeSnvLeNtTrGR9T5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0RUYzODhBNDZBRjNFMDNBOEI2RDJENjlBNDFFRjM4
QUM2REIxMzAeFw0yMzEyMjIyMDMyMDZaFw0yNDEyMjAyMDM3MDZaMDMxMTAvBgNV
BAMTKERGRkZGMkZBRUM0QTAyRUU3RDcxMTdFMkMzRDBGNDAxNkVBMjRFMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqjQIzmGfPoHgUbr+pwEqwYcs
gyxcZmxFuzVKaU99AKO30KrXQIG13tFsEj55MROf4U8ko63Z/v1ZGREvzldigBRT
TMm8+HQlF//ympkdl2FjAndyGO8Cd7mieNqOVGmnMlB7O+nKsA43LlSEKPC4tTwI
aGN0wh8P226YB/cZLwRDVMBQNUXmqxCygxCjUi0TGuc/6fQ/fvsfBFUdUa0UH8wG
y5z5j8iJCreJr232NH7YtnRq4rWdIXGt9f6RCnN3/6rdWK8bfZ/s44A/5X/1bndF
clNvdJc0GuUcQUi30G5n2mOePLfePsivFJU1JWuaSpmAFgASBVsDt5XdCRQHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3//y+uxKAu59cRfiw9D0AW6iThMwHwYDVR0j
BBgwFoAUuk7ziKRq8+A6i20taaQe84rG2xMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHhDdDRBbThQR1ZqaXZHc2hqalBObmJhaWJWeW5jcmFoaVVFNjdaUEFW
YVQvMC9CQTRFRjM4OEE0NkFGM0UwM0E4QjZEMkQ2OUE0MUVGMzhBQzZEQjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBNEVGMzg4QTQ2QUYzRTAz
QThCNkQyRDY5QTQxRUYzOEFDNkRCMTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h4Q3Q0QW04UEdWaml2R3NoampQTm5iYWliVnluY3JhaGlVRTY3WlBBVmFULzAv
MzIzODMwMzQzYTM0NjEzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzIzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKeDANBgkqhkiG9w0BAQsFAAOCAQEAR4zu0IAZ
js7yneSry5DBgpoXBErT30O11sinfM/9zT64UoRLuh4Uf+nnQ3lh/UOYcS2AdFG+
fFXsyol0fnMvI4NkSBD9ZDvOq6eiYZLxsEcGNI3jZ/dFZzCFxCKGNER+o79fEvgG
1Y7S5Y4F8t7V7O5lvLH8R3+sDyDtR+SbBXejy6oa1XUiLVywywQFzxKvAYNn3Ubd
8TDGXmmz+ZD2wER0Lwo15Js39KZ3w34w+JfvIl2CGpfLp5XHfHknMvhefa2FBvfX
NUKLWwz1bRoF4aJQZ8/kpsH8nsHhYsq62FyIzCxlreFAyRvns1mAWmcHvHA5g+XZ
OrMFg5qfd30o8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org