Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33322d3332203d3e20323730353834.roa
File:                     323830343a366534303a3a2f33322d3332203d3e20323730353834.roa (raw, json)
Hash identifier:          ioHVGrrZVz3DsJmYDcgLBJby/ocdC0piUSFZQciojVw=
Subject key identifier:   1F:10:C5:65:C7:F8:B0:ED:1B:EF:47:B2:99:81:57:9E:4C:06:EA:FD
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       021A12A7BEA42C11AF55CA6C70B7427C9826FE4F
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33322d3332203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:10 +0000
ROA not before:           Fri 31 Mar 2023 16:27:10 +0000
ROA not after:            Fri 29 Mar 2024 16:32:10 +0000
asID:                     270584
IP address blocks:        2804:6e40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1a:12:a7:be:a4:2c:11:af:55:ca:6c:70:b7:42:7c:98:26:fe:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:10 2023 GMT
            Not After : Mar 29 16:32:10 2024 GMT
        Subject: CN=1F10C565C7F8B0ED1BEF47B29981579E4C06EAFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:d9:84:f3:d3:6b:61:e8:7d:9a:e4:8b:8c:
                    64:0f:72:7a:8f:96:68:c0:f1:11:19:27:cc:6a:19:
                    fe:5d:08:cf:1f:63:2e:d7:4e:80:03:de:13:d1:45:
                    e5:4a:7c:e9:9c:f2:a4:81:b8:60:24:c0:41:7e:2f:
                    11:07:1e:bd:86:b3:c6:b1:67:1f:b3:d4:5f:2f:80:
                    11:0e:2a:e3:14:a6:b6:74:ee:34:ab:d7:ec:34:be:
                    61:3f:b1:c1:eb:8d:ca:0c:5a:84:e3:8c:b5:3f:fc:
                    03:e3:ad:d5:dd:71:d3:0b:02:65:8f:82:94:2b:42:
                    2b:d4:bd:8a:5f:d2:29:c6:b2:1b:ea:75:f2:94:27:
                    2f:83:a1:62:36:d4:fe:84:01:3a:8c:d5:39:28:b5:
                    89:d8:e7:69:cd:b8:43:81:42:51:65:9e:4e:07:e5:
                    87:af:45:1f:0a:8f:4b:10:f5:fb:5d:af:6d:c3:47:
                    c6:cd:d4:74:11:9d:70:8a:81:24:3a:a2:72:04:4b:
                    31:cb:9a:da:02:c9:ad:02:b2:b0:23:07:41:65:d5:
                    b3:8a:81:48:0d:95:99:d6:6f:9a:48:c7:b4:68:b9:
                    0e:bc:74:02:5d:32:5b:a7:61:24:9a:91:f7:a5:dd:
                    ef:de:e8:1a:22:18:39:6b:b9:f3:f1:e7:c9:4d:54:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:10:C5:65:C7:F8:B0:ED:1B:EF:47:B2:99:81:57:9E:4C:06:EA:FD
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33322d3332203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:6f:a2:5d:0c:3f:ea:9c:dd:a2:ac:a8:67:ac:3a:94:2e:1b:
         bf:ed:06:e7:09:5a:9f:ac:cd:45:eb:9d:ad:1d:37:44:ef:41:
         91:95:fc:9a:07:40:6c:e8:49:e6:2b:90:31:33:1e:39:93:4b:
         7e:a5:2e:a8:8e:aa:8f:78:c4:fe:5a:65:5d:63:0b:0d:8e:7a:
         8c:b0:4b:78:18:a2:ef:f4:3d:c3:61:7d:0e:1f:b8:d6:25:5e:
         08:70:b6:be:97:7e:1d:2d:3e:c3:21:64:b1:a9:ad:1a:02:9e:
         8f:fd:04:29:a6:f9:a2:02:6e:e4:4b:0f:ad:ca:06:38:2d:34:
         b1:b7:d5:a4:06:f8:60:ce:ae:a1:bc:a1:a8:ab:0e:a8:9a:c4:
         01:84:82:1d:8b:1b:6c:f9:1a:b1:46:6d:f0:48:5f:94:52:82:
         9c:55:41:27:e2:62:d8:49:07:dd:6a:fa:7e:31:82:04:b4:f2:
         92:dd:3b:dd:00:04:9f:9d:8f:d0:88:de:46:01:0b:a5:f0:97:
         03:cd:80:6d:0f:1c:2f:42:b7:90:7b:28:5a:be:e1:54:8c:0f:
         b0:64:95:23:69:57:a6:76:9d:67:f4:c8:91:a3:7c:23:56:61:
         df:25:6f:9b:c0:af:97:06:de:d0:3f:64:54:e3:c0:d7:01:78:
         36:78:e4:50
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAhoSp76kLBGvVcpscLdCfJgm/k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlBRUVFNTY3QjA3QkZFRkZFQkE2N0VBNUE4NzJBNjdB
RTI4QTlDNzAeFw0yMzAzMzExNjI3MTBaFw0yNDAzMjkxNjMyMTBaMDMxMTAvBgNV
BAMTKDFGMTBDNTY1QzdGOEIwRUQxQkVGNDdCMjk5ODE1NzlFNEMwNkVBRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jtmE89NrYeh9muSLjGQPcnqP
lmjA8REZJ8xqGf5dCM8fYy7XToAD3hPRReVKfOmc8qSBuGAkwEF+LxEHHr2Gs8ax
Zx+z1F8vgBEOKuMUprZ07jSr1+w0vmE/scHrjcoMWoTjjLU//APjrdXdcdMLAmWP
gpQrQivUvYpf0inGshvqdfKUJy+DoWI21P6EATqM1TkotYnY52nNuEOBQlFlnk4H
5YevRR8Kj0sQ9ftdr23DR8bN1HQRnXCKgSQ6onIESzHLmtoCya0CsrAjB0Fl1bOK
gUgNlZnWb5pIx7RouQ68dAJdMlunYSSakfel3e/e6BoiGDlrufPx58lNVJpTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUHxDFZcf4sO0b70eymYFXnkwG6v0wHwYDVR0j
BBgwFoAUaa7uVnsHv+/+umfqWocqZ64oqccwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uYWZjMURMb2I4MWVhazl2cTRxNm5qTWpMQmFWR3A0VWRFTnRCYm5wRW5L
LzAvNjlBRUVFNTY3QjA3QkZFRkZFQkE2N0VBNUE4NzJBNjdBRTI4QTlDNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82OUFFRUU1NjdCMDdCRkVGRkVC
QTY3RUE1QTg3MkE2N0FFMjhBOUM3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
YWZjMURMb2I4MWVhazl2cTRxNm5qTWpMQmFWR3A0VWRFTnRCYm5wRW5LLzAvMzIz
ODMwMzQzYTM2NjUzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMwMzUz
ODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARuQDANBgkqhkiG9w0BAQsFAAOCAQEAtG+iXQw/6pzd
oqyoZ6w6lC4bv+0G5wlan6zNReudrR03RO9BkZX8mgdAbOhJ5iuQMTMeOZNLfqUu
qI6qj3jE/lplXWMLDY56jLBLeBii7/Q9w2F9Dh+41iVeCHC2vpd+HS0+wyFksamt
GgKej/0EKab5ogJu5EsPrcoGOC00sbfVpAb4YM6uobyhqKsOqJrEAYSCHYsbbPka
sUZt8EhflFKCnFVBJ+Ji2EkH3Wr6fjGCBLTykt073QAEn52P0IjeRgELpfCXA82A
bQ8cL0K3kHsoWr7hVIwPsGSVI2lXpnadZ/TIkaN8I1Zh3yVvm8Cvlwbe0D9kVOPA
1wF4NnjkUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org