Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3230303a3a2f34302d3430203d3e20323637333235.roa
File:                     323830343a346262343a3230303a3a2f34302d3430203d3e20323637333235.roa (raw, json)
Hash identifier:          yJSAcSVcfGcP6bmPeFye9d/n29FDKpuz849rP7i4ieA=
Subject key identifier:   4B:2F:21:28:93:ED:CB:0D:5D:05:CE:94:DD:8A:59:53:AE:05:50:A1
Certificate issuer:       /CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
Certificate serial:       199803745D50FC50509A56B1F387C5543447236D
Authority key identifier: 5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3230303a3a2f34302d3430203d3e20323637333235.roa
Signing time:             Tue 05 Dec 2023 17:44:45 +0000
ROA not before:           Tue 05 Dec 2023 17:39:45 +0000
ROA not after:            Tue 03 Dec 2024 17:44:45 +0000
asID:                     267325
IP address blocks:        2804:4bb4:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:98:03:74:5d:50:fc:50:50:9a:56:b1:f3:87:c5:54:34:47:23:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
        Validity
            Not Before: Dec  5 17:39:45 2023 GMT
            Not After : Dec  3 17:44:45 2024 GMT
        Subject: CN=4B2F212893EDCB0D5D05CE94DD8A5953AE0550A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:6d:ea:2d:7e:97:8f:02:6a:04:f3:1e:c0:
                    d8:b7:f6:95:a5:c4:17:09:87:a4:b7:37:d4:c2:7e:
                    25:0b:e5:fb:0a:83:b4:c0:8a:e1:06:b7:b6:d8:b6:
                    53:ad:34:37:6c:f2:c8:b6:b7:2c:51:04:0e:00:12:
                    a3:14:2f:32:1d:80:3c:9a:b6:eb:23:fa:42:9d:45:
                    ec:f3:c8:a9:c2:2e:f8:6e:50:96:a9:5a:aa:c1:93:
                    99:2c:d3:fd:c5:b4:bf:48:c4:87:df:56:a4:4b:93:
                    3c:4a:32:79:d7:ac:40:b4:10:39:c7:a6:3b:4c:53:
                    5c:9a:f1:ac:ff:fb:6d:fe:3c:ce:76:67:4d:db:cb:
                    2b:44:54:6b:4d:e4:81:8a:f6:04:f3:85:8f:a6:29:
                    c3:53:63:d2:37:20:25:61:ad:5d:35:56:ea:5a:27:
                    b7:fa:86:de:c1:ae:ff:bf:ac:fe:3e:22:b1:33:8e:
                    2d:40:1a:df:f2:1c:20:f2:44:e7:dd:55:d2:27:08:
                    a2:cd:67:b9:9a:a1:97:ed:f0:d6:6a:21:6b:86:91:
                    07:3f:16:6f:32:2d:c2:20:08:09:13:cf:82:b5:a5:
                    cb:cd:a4:3f:27:4c:46:20:2c:1f:01:69:4d:d3:f6:
                    3f:2a:b6:03:d7:1c:49:54:2e:ea:9a:de:03:ed:18:
                    92:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2F:21:28:93:ED:CB:0D:5D:05:CE:94:DD:8A:59:53:AE:05:50:A1
            X509v3 Authority Key Identifier:
                keyid:5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3230303a3a2f34302d3430203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:94:70:f5:8b:c4:0c:ed:d2:c2:e4:2a:2d:df:5b:2a:e8:
         46:53:7b:c6:c3:07:1e:d6:24:52:fe:32:db:a5:06:03:41:54:
         e4:34:ed:51:5a:e7:26:12:0d:7e:61:30:17:be:74:b2:f1:58:
         3c:93:6f:d5:8e:bc:bd:d8:51:39:a7:cc:14:17:3b:e6:c9:3f:
         da:c2:92:c2:71:27:38:fc:3c:a2:9c:d1:a8:0d:bc:a0:1c:75:
         85:ba:97:9c:ce:91:b9:74:99:88:3d:ce:60:c2:1f:29:7e:a0:
         25:3f:de:60:7f:9b:06:8a:c7:b3:41:e6:31:94:a9:cc:c4:ba:
         90:45:44:b2:fc:0d:8f:04:fa:18:8a:87:26:ca:ec:a7:a6:f8:
         07:40:e3:1a:63:0d:5a:e5:e6:55:b9:c5:e5:64:e3:58:03:90:
         c8:a2:76:36:52:7c:2a:a9:c5:2b:3c:21:7f:0e:f2:cf:0d:99:
         7a:67:c4:a1:21:67:3c:b3:43:a2:f3:a4:dd:76:a0:20:e1:df:
         44:ad:ae:80:02:f5:13:44:42:e5:d9:b3:f9:cf:5f:1a:8e:7e:
         32:10:64:ef:68:77:55:3f:b8:f4:ba:74:5b:73:e7:5e:fb:13:
         26:fd:64:a2:11:0c:8b:b0:ac:dc:3d:f5:b3:62:97:a5:8e:45:
         10:3f:8a:ab
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUGZgDdF1Q/FBQmlax84fFVDRHI20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGNDAwNDM5NzgxRkU4NDkwQTg2NjJCRjhDM0UwRTVD
ODJDODlBMjAeFw0yMzEyMDUxNzM5NDVaFw0yNDEyMDMxNzQ0NDVaMDMxMTAvBgNV
BAMTKDRCMkYyMTI4OTNFRENCMEQ1RDA1Q0U5NEREOEE1OTUzQUUwNTUwQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOG3qLX6XjwJqBPMewNi39pWl
xBcJh6S3N9TCfiUL5fsKg7TAiuEGt7bYtlOtNDds8si2tyxRBA4AEqMULzIdgDya
tusj+kKdRezzyKnCLvhuUJapWqrBk5ks0/3FtL9IxIffVqRLkzxKMnnXrEC0EDnH
pjtMU1ya8az/+23+PM52Z03byytEVGtN5IGK9gTzhY+mKcNTY9I3ICVhrV01Vupa
J7f6ht7Brv+/rP4+IrEzji1AGt/yHCDyROfdVdInCKLNZ7maoZft8NZqIWuGkQc/
Fm8yLcIgCAkTz4K1pcvNpD8nTEYgLB8BaU3T9j8qtgPXHElULuqa3gPtGJJNAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUSy8hKJPtyw1dBc6U3YpZU64FUKEwHwYDVR0j
BBgwFoAUX/QAQ5eB/oSQqGYr+MPg5cgsiaIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kUHpSZWpUeUFNOWFNOG9ZR0RpdGVYRG5MRmloYVJ1ekQxZWY0UGlLd243
LzAvNUZGNDAwNDM5NzgxRkU4NDkwQTg2NjJCRjhDM0UwRTVDODJDODlBMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81RkY0MDA0Mzk3ODFGRTg0OTBB
ODY2MkJGOEMzRTBFNUM4MkM4OUEyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
UHpSZWpUeUFNOWFNOG9ZR0RpdGVYRG5MRmloYVJ1ekQxZWY0UGlLd243LzAvMzIz
ODMwMzQzYTM0NjI2MjM0M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz
MjM2MzczMzMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBEu0AjANBgkqhkiG9w0BAQsFAAOCAQEA
ZdmUcPWLxAzt0sLkKi3fWyroRlN7xsMHHtYkUv4y26UGA0FU5DTtUVrnJhINfmEw
F750svFYPJNv1Y68vdhROafMFBc75sk/2sKSwnEnOPw8opzRqA28oBx1hbqXnM6R
uXSZiD3OYMIfKX6gJT/eYH+bBorHs0HmMZSpzMS6kEVEsvwNjwT6GIqHJsrsp6b4
B0DjGmMNWuXmVbnF5WTjWAOQyKJ2NlJ8KqnFKzwhfw7yzw2ZemfEoSFnPLNDovOk
3XagIOHfRK2ugAL1E0RC5dmz+c9fGo5+MhBk72h3VT+49Lp0W3PnXvsTJv1kohEM
i7Cs3D31s2KXpY5FED+Kqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org