Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a633030303a3a2f33342d3334203d3e20323633343435.roa
File:                     323830343a313165303a633030303a3a2f33342d3334203d3e20323633343435.roa (raw, json)
Hash identifier:          GPe2Wfr1T7PMcMUvx4p47QFihvQ18iuhx1LehW2RfEI=
Subject key identifier:   AB:81:57:EB:D4:27:C9:B9:2F:65:E0:6F:F2:EE:C3:16:E9:8A:1F:48
Certificate issuer:       /CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Certificate serial:       29D05CFAB1D67603DB0990DBCAA98301AD7B1D40
Authority key identifier: F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a633030303a3a2f33342d3334203d3e20323633343435.roa
Signing time:             Thu 04 Jan 2024 14:41:48 +0000
ROA not before:           Thu 04 Jan 2024 14:36:48 +0000
ROA not after:            Thu 02 Jan 2025 14:41:48 +0000
asID:                     263445
IP address blocks:        2804:11e0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d0:5c:fa:b1:d6:76:03:db:09:90:db:ca:a9:83:01:ad:7b:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1076108B5AD0183155EEC96C47E216B36ED588E
        Validity
            Not Before: Jan  4 14:36:48 2024 GMT
            Not After : Jan  2 14:41:48 2025 GMT
        Subject: CN=AB8157EBD427C9B92F65E06FF2EEC316E98A1F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:62:46:0e:d6:e5:87:6e:0d:f7:19:96:6a:
                    9b:9d:fb:fb:91:87:6e:66:71:8f:29:75:d2:f4:d3:
                    d0:f7:5c:7a:9a:88:e6:ed:e4:8d:97:31:bc:71:2b:
                    a9:d5:84:b4:43:29:9d:45:a6:af:04:42:e4:97:6d:
                    e3:4e:f8:0a:d2:9d:3b:80:f4:d2:df:0a:13:d8:9c:
                    36:f9:55:84:ed:4e:1b:4c:cb:10:a5:02:6b:d9:3f:
                    99:19:cc:cc:2b:5a:4c:0a:3c:b0:36:ab:f4:6d:07:
                    5d:fb:69:83:37:5b:5b:ed:5b:50:23:05:12:b4:f3:
                    24:89:cf:e9:ea:9b:6a:5d:fb:30:e0:cc:7d:8c:d5:
                    cc:fd:aa:e5:1c:aa:22:55:37:cc:c5:4d:bd:7b:ec:
                    90:d0:ea:d4:71:91:d6:0f:3c:34:53:2e:10:0b:30:
                    63:f7:59:13:11:48:e0:98:b5:b6:fe:d2:7d:d4:7a:
                    b1:73:9d:5a:9c:56:dd:b8:f6:5d:bd:ec:df:21:c9:
                    fb:02:f2:14:4b:0f:4e:e4:9c:7e:77:33:0f:e0:13:
                    83:05:53:6b:41:74:e5:63:97:97:02:a1:8b:48:aa:
                    1b:d1:4a:a0:76:d0:52:62:4d:e0:e2:a2:53:b9:f9:
                    cc:d4:55:e2:e8:23:43:ed:f3:1e:91:ae:87:ce:c5:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:81:57:EB:D4:27:C9:B9:2F:65:E0:6F:F2:EE:C3:16:E9:8A:1F:48
            X509v3 Authority Key Identifier:
                keyid:F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/F1076108B5AD0183155EEC96C47E216B36ED588E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a633030303a3a2f33342d3334203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11e0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:ac:0f:62:69:f8:20:9e:8b:5f:3d:8c:47:8c:35:af:ea:24:
         50:08:d2:07:07:62:cb:d6:e7:2e:b8:e0:9f:f0:b4:f4:25:6a:
         cd:cf:54:5c:98:ee:ab:2e:21:e3:f9:58:4d:e0:2c:1b:91:89:
         a1:2f:48:38:ea:2f:34:96:2e:c6:96:99:bb:2b:68:a3:6b:76:
         94:3a:95:45:18:aa:50:10:f7:ac:77:39:8f:8f:00:2c:e6:84:
         fb:e9:5c:28:fe:0e:ff:6e:34:28:73:9f:83:5f:43:a9:9a:b8:
         96:1e:e8:7d:61:00:b9:e9:2c:10:1e:3f:64:e5:a2:07:ed:4c:
         45:d4:69:ca:d7:12:af:7a:69:dc:74:27:12:fb:d9:e9:f4:89:
         18:c7:c8:aa:ca:55:77:96:40:8a:ff:42:c0:5a:9e:d0:b5:0d:
         51:45:82:d7:1a:28:b9:c8:08:c6:4a:7d:61:0c:32:d5:3f:4f:
         e0:31:7e:2f:fa:51:ab:60:b1:2e:ad:5f:d8:73:2e:6f:02:bd:
         b6:0b:ca:e6:0c:ba:57:27:5b:d5:20:ab:9d:62:49:a9:4e:f2:
         7f:c3:b9:2b:02:3d:3d:b2:73:55:ab:c2:d0:34:16:7f:90:bf:
         2d:6a:51:df:21:f4:18:53:11:66:0a:37:c2:b4:6b:d9:4d:5f:
         16:54:ee:e8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKdBc+rHWdgPbCZDbyqmDAa17HUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEwNzYxMDhCNUFEMDE4MzE1NUVFQzk2QzQ3RTIxNkIz
NkVENTg4RTAeFw0yNDAxMDQxNDM2NDhaFw0yNTAxMDIxNDQxNDhaMDMxMTAvBgNV
BAMTKEFCODE1N0VCRDQyN0M5QjkyRjY1RTA2RkYyRUVDMzE2RTk4QTFGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQ2JGDtblh24N9xmWapud+/uR
h25mcY8pddL009D3XHqaiObt5I2XMbxxK6nVhLRDKZ1Fpq8EQuSXbeNO+ArSnTuA
9NLfChPYnDb5VYTtThtMyxClAmvZP5kZzMwrWkwKPLA2q/RtB137aYM3W1vtW1Aj
BRK08ySJz+nqm2pd+zDgzH2M1cz9quUcqiJVN8zFTb177JDQ6tRxkdYPPDRTLhAL
MGP3WRMRSOCYtbb+0n3UerFznVqcVt249l297N8hyfsC8hRLD07knH53Mw/gE4MF
U2tBdOVjl5cCoYtIqhvRSqB20FJiTeDiolO5+czUVeLoI0Pt8x6RrofOxV/hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUq4FX69QnybkvZeBv8u7DFumKH0gwHwYDVR0j
BBgwFoAU8QdhCLWtAYMVXuyWxH4hazbtWI4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE
bXgvMC9GMTA3NjEwOEI1QUQwMTgzMTU1RUVDOTZDNDdFMjE2QjM2RUQ1ODhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxMDc2MTA4QjVBRDAxODMx
NTVFRUM5NkM0N0UyMTZCMzZFRDU4OEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o5b3NwV2JWcXRZTllrUGJma3hWYmljS2RNRFhXSmdEQnFSTlV5SFM2RG14LzAv
MzIzODMwMzQzYTMxMzE2NTMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM0MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEeDAMA0GCSqGSIb3DQEBCwUA
A4IBAQBnrA9iafggnotfPYxHjDWv6iRQCNIHB2LL1ucuuOCf8LT0JWrNz1RcmO6r
LiHj+VhN4CwbkYmhL0g46i80li7Glpm7K2ija3aUOpVFGKpQEPesdzmPjwAs5oT7
6Vwo/g7/bjQoc5+DX0OpmriWHuh9YQC56SwQHj9k5aIH7UxF1GnK1xKvemncdCcS
+9np9IkYx8iqylV3lkCK/0LAWp7QtQ1RRYLXGii5yAjGSn1hDDLVP0/gMX4v+lGr
YLEurV/Ycy5vAr22C8rmDLpXJ1vVIKudYkmpTvJ/w7krAj09snNVq8LQNBZ/kL8t
alHfIfQYUxFmCjfCtGvZTV8WVO7o
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org