Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a633030303a3a2f33342d3334203d3e20323730333035.roa
File:                     323830343a366130303a633030303a3a2f33342d3334203d3e20323730333035.roa (raw, json)
Hash identifier:          84ZNUcMOkTBlCznh75iTpM41KI6s2C4OzHKCnkLM/wA=
Subject key identifier:   9D:29:95:4B:BE:CF:2B:5C:6E:57:F7:3A:EF:8E:06:79:EB:C8:F4:06
Certificate issuer:       /CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
Certificate serial:       5B3F9BABEA4DFFCAAC152AC49F951628EA4FBEE1
Authority key identifier: 40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a633030303a3a2f33342d3334203d3e20323730333035.roa
Signing time:             Mon 08 May 2023 13:42:26 +0000
ROA not before:           Mon 08 May 2023 13:37:26 +0000
ROA not after:            Mon 06 May 2024 13:42:26 +0000
asID:                     270305
IP address blocks:        2804:6a00:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3f:9b:ab:ea:4d:ff:ca:ac:15:2a:c4:9f:95:16:28:ea:4f:be:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
        Validity
            Not Before: May  8 13:37:26 2023 GMT
            Not After : May  6 13:42:26 2024 GMT
        Subject: CN=9D29954BBECF2B5C6E57F73AEF8E0679EBC8F406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:a7:78:41:0e:1e:62:2a:44:f5:b5:bb:52:
                    29:7a:13:f9:ca:d3:24:ec:7b:ca:4c:f5:c0:3b:49:
                    07:27:a4:ce:52:f8:ab:28:47:42:77:18:56:df:41:
                    af:0c:ac:09:86:82:2f:f4:27:41:01:51:05:ba:0c:
                    c4:05:cf:ec:92:79:51:a5:ba:66:53:c9:b2:8b:b4:
                    28:67:0b:94:f7:58:c1:5b:fb:fc:92:6e:ff:26:47:
                    79:da:1d:ed:6b:b4:61:43:e7:37:ba:51:3c:d2:20:
                    b4:48:e7:7d:6e:b3:e7:8a:d9:3b:19:98:93:56:d8:
                    98:f4:20:22:f0:73:c0:90:87:22:f3:91:70:85:86:
                    6c:1d:20:e1:54:9e:af:43:93:bd:63:df:25:2c:76:
                    85:d8:c4:61:03:82:d1:22:f6:9c:a1:7f:05:f9:95:
                    a1:b4:7c:4a:15:72:81:2a:d9:f2:c6:6c:ff:0b:e4:
                    f7:56:ea:ba:22:e7:ad:8a:72:21:36:66:42:05:86:
                    be:67:70:be:92:ce:98:b5:77:4d:b8:d8:1a:8d:1a:
                    bc:40:5c:d4:ad:f4:ee:0b:aa:9b:69:53:ab:34:07:
                    e6:fb:d8:8d:57:c7:76:40:e2:f7:97:40:6a:b3:c2:
                    33:3d:b8:d1:ec:da:a7:b6:e7:70:b8:c0:84:21:79:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:29:95:4B:BE:CF:2B:5C:6E:57:F7:3A:EF:8E:06:79:EB:C8:F4:06
            X509v3 Authority Key Identifier:
                keyid:40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a633030303a3a2f33342d3334203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         36:45:19:0e:04:0e:f6:f9:a4:ad:46:f6:11:df:c7:40:50:90:
         55:f6:59:ab:54:cf:98:3b:17:5a:9a:46:29:c9:7b:16:5e:0c:
         19:ca:48:0a:54:53:66:5b:a8:83:3d:b9:2d:e2:c5:b7:9f:5d:
         87:66:35:6f:23:26:3c:eb:33:bb:bc:c6:1d:41:39:e1:3f:e1:
         7e:83:2f:b9:6e:54:22:53:6f:eb:77:31:fc:b9:46:59:b7:1a:
         3a:02:14:16:91:be:5f:07:0b:c6:2a:1a:1a:b7:64:90:45:51:
         5e:5e:60:06:b8:5e:e6:66:9c:5a:5d:3f:34:b6:0b:50:66:86:
         f5:ec:fe:bd:38:49:f5:5a:a9:a7:51:c2:35:c4:1d:cd:69:0d:
         c6:7c:15:20:bd:73:82:89:81:c3:0b:60:bd:b3:42:12:4a:ed:
         93:d5:2b:91:3b:d0:8c:aa:a2:e1:62:9f:59:de:82:0d:13:d9:
         cc:9b:9f:ed:70:8a:84:1c:78:ce:cb:b3:9a:a0:2c:da:06:95:
         8e:e7:4a:b9:21:f1:70:b6:14:f9:9f:1a:69:88:66:8d:12:9b:
         59:ce:b2:3d:95:b3:7e:92:b2:b1:18:1c:73:a0:db:3a:c6:da:
         d0:63:de:6d:e0:d8:76:9b:f3:07:29:1b:28:b7:ac:3a:99:32:
         5f:6a:9f:ee
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUWz+bq+pN/8qsFSrEn5UWKOpPvuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAxOUU2OEI2REVDOEFBRUM2RDI4NTMyODI3N0VGNjhB
Q0M2QzlCNDAeFw0yMzA1MDgxMzM3MjZaFw0yNDA1MDYxMzQyMjZaMDMxMTAvBgNV
BAMTKDlEMjk5NTRCQkVDRjJCNUM2RTU3RjczQUVGOEUwNjc5RUJDOEY0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyad4QQ4eYipE9bW7Uil6E/nK
0yTse8pM9cA7SQcnpM5S+KsoR0J3GFbfQa8MrAmGgi/0J0EBUQW6DMQFz+ySeVGl
umZTybKLtChnC5T3WMFb+/ySbv8mR3naHe1rtGFD5ze6UTzSILRI531us+eK2TsZ
mJNW2Jj0ICLwc8CQhyLzkXCFhmwdIOFUnq9Dk71j3yUsdoXYxGEDgtEi9pyhfwX5
laG0fEoVcoEq2fLGbP8L5PdW6roi562KciE2ZkIFhr5ncL6Szpi1d0242BqNGrxA
XNSt9O4LqptpU6s0B+b72I1Xx3ZA4veXQGqzwjM9uNHs2qe253C4wIQheWaXAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUnSmVS77PK1xuV/c6744GeevI9AYwHwYDVR0j
BBgwFoAUQBnmi23siq7G0oUygnfvaKzGybQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzEvNDAxOUU2OEI2REVDOEFBRUM2RDI4NTMyODI3N0VGNjhBQ0M2QzlCNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80MDE5RTY4QjZERUM4QUFFQzZE
Mjg1MzI4Mjc3RUY2OEFDQzZDOUI0LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzEvMzIz
ODMwMzQzYTM2NjEzMDMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzczMDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEagDAMA0GCSqGSIb3DQEBCwUAA4IB
AQA2RRkOBA72+aStRvYR38dAUJBV9lmrVM+YOxdamkYpyXsWXgwZykgKVFNmW6iD
Pbkt4sW3n12HZjVvIyY86zO7vMYdQTnhP+F+gy+5blQiU2/rdzH8uUZZtxo6AhQW
kb5fBwvGKhoat2SQRVFeXmAGuF7mZpxaXT80tgtQZob17P69OEn1WqmnUcI1xB3N
aQ3GfBUgvXOCiYHDC2C9s0ISSu2T1SuRO9CMqqLhYp9Z3oINE9nMm5/tcIqEHHjO
y7OaoCzaBpWO50q5IfFwthT5nxppiGaNEptZzrI9lbN+krKxGBxzoNs6xtrQY95t
4Nh2m/MHKRsot6w6mTJfap/u
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org