Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3230303a3a2f34302d313238203d3e20323636363336.roa
File:                     323830343a336630633a3230303a3a2f34302d313238203d3e20323636363336.roa (raw, json)
Hash identifier:          UCRjw/1stu0UsjFsh5//vtSofdYOF1Xf6/cEal1AXkI=
Subject key identifier:   7B:F6:2B:13:1F:F1:65:0E:7B:3C:11:CF:CB:67:3D:E2:E3:7A:69:E2
Certificate issuer:       /CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
Certificate serial:       3F64AAEC5ACE7CFB95E7D4F727A0034C560D1DD2
Authority key identifier: 9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3230303a3a2f34302d313238203d3e20323636363336.roa
Signing time:             Mon 06 Mar 2023 02:54:11 +0000
ROA not before:           Mon 06 Mar 2023 02:49:11 +0000
ROA not after:            Mon 04 Mar 2024 02:54:11 +0000
asID:                     266636
IP address blocks:        2804:3f0c:200::/40 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:64:aa:ec:5a:ce:7c:fb:95:e7:d4:f7:27:a0:03:4c:56:0d:1d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
        Validity
            Not Before: Mar  6 02:49:11 2023 GMT
            Not After : Mar  4 02:54:11 2024 GMT
        Subject: CN=7BF62B131FF1650E7B3C11CFCB673DE2E37A69E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:ce:39:8d:61:65:14:0f:56:0f:4f:24:ce:
                    8f:c5:f3:ca:d4:d7:f0:c3:4f:41:b4:9e:95:1d:c5:
                    e3:8c:0e:90:c0:94:cb:13:35:ca:35:ef:5d:3c:b8:
                    89:5f:1b:03:b9:bf:a2:f7:fc:2a:9e:ca:f3:82:1b:
                    53:dc:95:42:2d:e8:d4:38:0b:5c:37:96:89:de:99:
                    07:7d:ae:a1:d4:73:98:09:3d:65:96:e5:a2:91:63:
                    a1:43:07:6c:64:02:14:6a:c4:70:9f:9b:dc:e5:4c:
                    ae:a1:b4:1e:11:44:5c:e3:19:cf:d6:ee:d2:ca:2b:
                    60:e9:4b:5d:bb:ab:9a:29:66:8b:fa:ea:23:b7:c2:
                    b7:bf:c3:66:fa:9f:53:5c:ee:91:0f:68:8c:ad:c6:
                    00:53:93:0f:b8:c6:b8:b1:2c:66:2b:83:e1:0a:96:
                    8a:73:5a:a0:c8:9a:b8:e4:44:68:3d:92:2e:65:c8:
                    eb:81:fc:81:9d:cf:0f:3c:6a:c1:da:59:b5:06:7c:
                    30:77:86:ae:da:34:8c:18:bb:69:5e:a3:bf:1a:89:
                    ed:f9:bf:da:2a:f2:b0:18:0e:3a:da:46:60:ad:c0:
                    ff:ca:df:e5:83:6a:8e:ea:37:e8:2e:44:66:31:2f:
                    49:e6:6c:a6:b7:46:24:81:77:94:a5:0b:20:f7:6e:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:2B:13:1F:F1:65:0E:7B:3C:11:CF:CB:67:3D:E2:E3:7A:69:E2
            X509v3 Authority Key Identifier:
                keyid:9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3230303a3a2f34302d313238203d3e20323636363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f0c:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:11:15:1b:9d:09:7d:4a:f5:c4:f4:28:ac:03:66:6c:b4:
         87:06:c9:cd:51:9d:81:b9:06:ca:db:88:f5:81:22:dd:42:b4:
         d0:0b:c1:7e:8a:a8:5f:78:b2:bc:1a:9e:ec:5c:99:e7:41:6d:
         9e:da:2c:72:f0:e6:85:86:9b:f3:c8:1c:6f:ed:f9:33:5c:4a:
         64:81:60:24:c7:19:74:7e:e5:d7:5a:81:b0:87:05:49:23:fd:
         c2:97:94:ac:0a:0e:4f:38:7b:a4:ef:35:4d:ec:a5:94:ac:0e:
         75:9a:68:8d:e4:ff:d9:fe:65:50:3c:13:6d:9e:db:24:53:c2:
         49:e7:de:98:2d:e3:ce:47:2c:15:a2:0a:d0:70:86:86:9c:fb:
         62:98:1e:e1:b7:67:b4:d3:8f:e2:d2:1f:0c:16:c3:0c:d9:0f:
         6c:67:12:06:29:3d:1c:7f:1f:13:8a:81:fe:c3:ee:6e:28:06:
         ad:a4:2f:49:53:df:a6:f6:c7:b9:57:30:5d:7f:9c:88:3a:00:
         e1:d7:f0:c8:ce:6e:7f:38:8d:75:11:04:58:7a:12:a2:6e:7f:
         e5:dc:27:94:7d:31:fa:b0:49:73:19:fb:2b:ae:57:e4:01:71:
         b8:36:5f:32:a7:18:7e:25:00:22:62:0c:99:d8:bf:7f:48:49:
         e5:f2:79:bb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUP2Sq7FrOfPuV59T3J6ADTFYNHdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURGMDMzRDE0RDgxMDI0RTZEOTlEQUY4NkU0NzkxMTI4
MDVBRTNFMjAeFw0yMzAzMDYwMjQ5MTFaFw0yNDAzMDQwMjU0MTFaMDMxMTAvBgNV
BAMTKDdCRjYyQjEzMUZGMTY1MEU3QjNDMTFDRkNCNjczREUyRTM3QTY5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+845jWFlFA9WD08kzo/F88rU
1/DDT0G0npUdxeOMDpDAlMsTNco17108uIlfGwO5v6L3/CqeyvOCG1PclUIt6NQ4
C1w3lonemQd9rqHUc5gJPWWW5aKRY6FDB2xkAhRqxHCfm9zlTK6htB4RRFzjGc/W
7tLKK2DpS127q5opZov66iO3wre/w2b6n1Nc7pEPaIytxgBTkw+4xrixLGYrg+EK
lopzWqDImrjkRGg9ki5lyOuB/IGdzw88asHaWbUGfDB3hq7aNIwYu2leo78aie35
v9oq8rAYDjraRmCtwP/K3+WDao7qN+guRGYxL0nmbKa3RiSBd5SlCyD3bgRPAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUe/YrEx/xZQ57PBHPy2c94uN6aeIwHwYDVR0j
BBgwFoAUnfAz0U2BAk5tmdr4bkeREoBa4+IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SNVV1eDM5d21xZDR1M3hhQkdoRGlrc3BrUkVXWWtUalFMQjVvYzM5ckt6
LzAvOURGMDMzRDE0RDgxMDI0RTZEOTlEQUY4NkU0NzkxMTI4MDVBRTNFMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC85REYwMzNEMTREODEwMjRFNkQ5
OURBRjg2RTQ3OTExMjgwNUFFM0UyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
NVV1eDM5d21xZDR1M3hhQkdoRGlrc3BrUkVXWWtUalFMQjVvYzM5ckt6LzAvMzIz
ODMwMzQzYTMzNjYzMDYzM2EzMjMwMzAzYTNhMmYzNDMwMmQzMTMyMzgyMDNkM2Uy
MDMyMzYzNjM2MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEPwwCMA0GCSqGSIb3DQEBCwUAA4IB
AQCstxEVG50JfUr1xPQorANmbLSHBsnNUZ2BuQbK24j1gSLdQrTQC8F+iqhfeLK8
Gp7sXJnnQW2e2ixy8OaFhpvzyBxv7fkzXEpkgWAkxxl0fuXXWoGwhwVJI/3Cl5Ss
Cg5POHuk7zVN7KWUrA51mmiN5P/Z/mVQPBNtntskU8JJ596YLePORywVogrQcIaG
nPtimB7ht2e004/i0h8MFsMM2Q9sZxIGKT0cfx8TioH+w+5uKAatpC9JU9+m9se5
VzBdf5yIOgDh1/DIzm5/OI11EQRYehKibn/l3CeUfTH6sElzGfsrrlfkAXG4Nl8y
pxh+JQAiYgyZ2L9/SEnl8nm7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org