Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/323830343a343339303a3a2f33322d3334203d3e203238313934.roa
File:                     323830343a343339303a3a2f33322d3334203d3e203238313934.roa (raw, json)
Hash identifier:          mPQdN4K72nMmvk9acl9n9MGcaPCpQHTpNM0K0ZifYZM=
Subject key identifier:   D2:FE:73:EC:33:99:BA:80:D9:A9:9D:BE:A1:1A:88:D6:BE:03:F5:2A
Certificate issuer:       /CN=9BDBA20C31BBEBFE68ABC7F43F742C279C96B734
Certificate serial:       1B0639926BE7292585404362D2350AD5F2996F7E
Authority key identifier: 9B:DB:A2:0C:31:BB:EB:FE:68:AB:C7:F4:3F:74:2C:27:9C:96:B7:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/323830343a343339303a3a2f33322d3334203d3e203238313934.roa
Signing time:             Mon 07 Aug 2023 21:24:00 +0000
ROA not before:           Mon 07 Aug 2023 21:19:00 +0000
ROA not after:            Mon 05 Aug 2024 21:24:00 +0000
asID:                     28194
IP address blocks:        2804:4390::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:06:39:92:6b:e7:29:25:85:40:43:62:d2:35:0a:d5:f2:99:6f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BDBA20C31BBEBFE68ABC7F43F742C279C96B734
        Validity
            Not Before: Aug  7 21:19:00 2023 GMT
            Not After : Aug  5 21:24:00 2024 GMT
        Subject: CN=D2FE73EC3399BA80D9A99DBEA11A88D6BE03F52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:92:5c:52:b7:fb:60:e8:de:d7:26:c3:5a:
                    fb:5c:e3:ce:b5:9f:48:86:a0:5c:60:b2:d3:f0:60:
                    0a:57:9d:2e:bd:a2:15:39:5c:ea:a9:dd:fd:a7:d6:
                    ab:6f:7b:bd:2a:d6:01:3a:1d:03:e7:07:e0:ec:d6:
                    cb:a4:0b:42:b1:b2:82:dc:10:5f:f1:e9:fc:52:f7:
                    b7:8d:95:51:f9:dd:f2:fd:51:69:79:56:fe:ee:87:
                    66:82:49:ce:81:30:9e:cb:05:3f:6a:b7:07:3a:7f:
                    b9:96:8f:9a:45:42:ab:ab:85:88:61:5a:c0:cf:e3:
                    91:dc:12:dd:44:ec:9e:fb:3d:8b:65:78:e2:b9:3c:
                    d2:8a:75:88:47:20:20:7b:aa:f0:3a:bc:43:36:82:
                    dd:6e:d0:7b:46:f3:32:6d:9d:dd:7c:31:96:99:60:
                    ca:2b:f5:54:f8:3d:42:77:e2:ec:a2:6b:90:37:98:
                    08:a4:24:70:df:b5:7a:85:91:04:d3:64:9f:c0:eb:
                    03:e2:ea:38:4d:fd:de:76:fd:4a:dd:cb:cc:d4:67:
                    87:ab:0b:8b:bc:c3:c9:3b:ac:c3:2a:42:c6:2b:63:
                    8d:df:61:ea:39:f2:15:a4:a6:78:aa:f4:21:08:f4:
                    f6:0a:0e:25:f8:68:af:f0:a7:c9:9b:20:9c:bb:bb:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FE:73:EC:33:99:BA:80:D9:A9:9D:BE:A1:1A:88:D6:BE:03:F5:2A
            X509v3 Authority Key Identifier:
                keyid:9B:DB:A2:0C:31:BB:EB:FE:68:AB:C7:F4:3F:74:2C:27:9C:96:B7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/323830343a343339303a3a2f33322d3334203d3e203238313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4390::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:df:57:2a:dd:36:c2:27:bb:cb:a3:45:43:8b:18:bb:10:96:
         d2:79:c4:d8:ff:d5:4d:22:70:46:e2:f9:a3:85:52:87:3c:2f:
         0b:24:52:1e:9a:e6:12:ee:31:2d:14:76:f3:d8:8d:ab:c4:02:
         dc:ad:c5:f8:a2:94:78:61:02:2a:98:34:b8:ae:17:ae:5f:a6:
         78:33:10:53:50:b4:3a:06:73:87:84:a8:0f:38:a2:9b:a0:dd:
         e9:29:b8:b2:b9:f5:ba:c7:94:5c:e9:14:24:6f:94:ad:25:b8:
         a7:49:82:2c:fe:d4:8a:02:ae:c5:6b:15:01:cb:96:02:b2:3e:
         ec:28:cd:2b:55:0b:0c:f4:27:7b:4a:ba:1d:be:d2:4c:1c:f3:
         0d:6f:54:08:11:9e:d0:ea:07:7b:98:3a:9f:5a:e4:f1:91:9b:
         29:b2:a7:f4:26:7c:79:65:ba:c1:c7:f1:f9:4f:10:f6:58:fe:
         c7:88:c1:f4:2a:61:69:83:cb:68:f5:19:00:ca:0c:fa:c3:bb:
         d8:49:38:7b:0e:f5:88:cc:c1:f6:6f:e7:49:a0:9f:0e:cc:14:
         83:43:4c:e6:d8:c5:49:96:9a:3d:60:e2:25:72:c4:5b:6c:25:
         59:24:fb:3a:3c:21:77:d0:69:f6:15:1c:68:09:aa:a3:22:c7:
         1f:5b:6e:90
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUGwY5kmvnKSWFQENi0jUK1fKZb34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJEQkEyMEMzMUJCRUJGRTY4QUJDN0Y0M0Y3NDJDMjc5
Qzk2QjczNDAeFw0yMzA4MDcyMTE5MDBaFw0yNDA4MDUyMTI0MDBaMDMxMTAvBgNV
BAMTKEQyRkU3M0VDMzM5OUJBODBEOUE5OURCRUExMUE4OEQ2QkUwM0Y1MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgGZJcUrf7YOje1ybDWvtc4861
n0iGoFxgstPwYApXnS69ohU5XOqp3f2n1qtve70q1gE6HQPnB+Ds1sukC0KxsoLc
EF/x6fxS97eNlVH53fL9UWl5Vv7uh2aCSc6BMJ7LBT9qtwc6f7mWj5pFQqurhYhh
WsDP45HcEt1E7J77PYtleOK5PNKKdYhHICB7qvA6vEM2gt1u0HtG8zJtnd18MZaZ
YMor9VT4PUJ34uyia5A3mAikJHDftXqFkQTTZJ/A6wPi6jhN/d52/Urdy8zUZ4er
C4u8w8k7rMMqQsYrY43fYeo58hWkpniq9CEI9PYKDiX4aK/wp8mbIJy7u0jPAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU0v5z7DOZuoDZqZ2+oRqI1r4D9SowHwYDVR0j
BBgwFoAUm9uiDDG76/5oq8f0P3QsJ5yWtzQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9udHZmRFBtUnIzUTRWTnVNakNKMWsxTlhIckI2Sm9xOE4zdEFCU3l1aVBB
LzAvOUJEQkEyMEMzMUJCRUJGRTY4QUJDN0Y0M0Y3NDJDMjc5Qzk2QjczNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC85QkRCQTIwQzMxQkJFQkZFNjhB
QkM3RjQzRjc0MkMyNzlDOTZCNzM0LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
dHZmRFBtUnIzUTRWTnVNakNKMWsxTlhIckI2Sm9xOE4zdEFCU3l1aVBBLzAvMzIz
ODMwMzQzYTM0MzMzOTMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzODMxMzkz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgEQ5AwDQYJKoZIhvcNAQELBQADggEBAHzfVyrdNsInu8uj
RUOLGLsQltJ5xNj/1U0icEbi+aOFUoc8LwskUh6a5hLuMS0UdvPYjavEAtytxfii
lHhhAiqYNLiuF65fpngzEFNQtDoGc4eEqA84opug3ekpuLK59brHlFzpFCRvlK0l
uKdJgiz+1IoCrsVrFQHLlgKyPuwozStVCwz0J3tKuh2+0kwc8w1vVAgRntDqB3uY
Op9a5PGRmymyp/QmfHllusHH8flPEPZY/seIwfQqYWmDy2j1GQDKDPrDu9hJOHsO
9YjMwfZv50mgnw7MFINDTObYxUmWmj1g4iVyxFtsJVkk+zo8IXfQafYVHGgJqqMi
xx9bbpA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org