Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33342d3334203d3e20323633303236.roa
File:                     323830343a6132383a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier:          TGwCfF/48IbCjX14XwqQ4VHmGXfNLb/WZb6t3thCZio=
Subject key identifier:   EC:C2:30:BE:13:37:2F:46:72:D7:C9:E7:12:76:E9:B0:43:AE:28:DE
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       36C6939F96FD7700C9B3D9458C06B39CA61F526B
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33342d3334203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:23:24 +0000
ROA not before:           Thu 30 Nov 2023 20:18:24 +0000
ROA not after:            Thu 28 Nov 2024 20:23:24 +0000
asID:                     263026
IP address blocks:        2804:a28::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c6:93:9f:96:fd:77:00:c9:b3:d9:45:8c:06:b3:9c:a6:1f:52:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:18:24 2023 GMT
            Not After : Nov 28 20:23:24 2024 GMT
        Subject: CN=ECC230BE13372F4672D7C9E71276E9B043AE28DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d1:cf:cc:a8:8a:d8:4b:14:f9:e4:19:47:95:
                    0e:bc:dc:cb:23:c5:0e:46:ee:18:61:b0:ca:1e:a5:
                    70:8b:43:9b:e7:2c:03:7e:b9:ba:b4:6b:fd:04:04:
                    58:6d:20:7f:c7:af:2c:c5:19:d4:1a:e9:a9:a5:eb:
                    23:1e:5b:37:34:0e:d0:b3:2d:da:86:f4:eb:08:a7:
                    b9:92:9d:6b:12:a3:38:c7:32:c2:71:7d:73:8e:9b:
                    86:ad:8e:f3:db:d7:da:5f:73:d6:c7:a5:7a:70:c5:
                    94:b6:7c:98:59:e3:c2:b0:92:7e:a2:fa:8b:31:3f:
                    6f:22:c5:0f:25:d9:e4:99:d8:f2:82:a8:37:32:7c:
                    5c:a6:8a:4e:8f:1f:83:64:3c:d5:8c:f4:50:87:62:
                    22:22:e1:e2:be:24:cb:f7:bc:36:4c:80:b2:46:a3:
                    83:f2:8a:27:f3:62:38:68:0c:54:1f:45:11:bd:01:
                    51:91:42:9c:ae:dc:c9:1f:65:ac:81:46:53:6c:d8:
                    e5:96:cb:e5:9b:e2:f4:c0:26:26:27:53:38:03:6e:
                    2a:c2:34:f3:74:01:f6:5c:12:97:ed:72:29:89:1e:
                    cc:2d:b9:f7:da:6d:47:50:3a:3b:7a:c1:1e:a3:9e:
                    dc:a7:fe:6c:42:c3:33:6c:e2:aa:78:5f:bb:c8:af:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:30:BE:13:37:2F:46:72:D7:C9:E7:12:76:E9:B0:43:AE:28:DE
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33342d3334203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/34

    Signature Algorithm: sha256WithRSAEncryption
         e1:98:5e:fd:27:57:2c:2d:e6:ed:10:6c:3c:45:c5:27:91:e8:
         e5:9a:18:88:f9:b1:30:ed:a4:3d:fc:19:72:92:c7:99:6f:5b:
         bb:ce:09:8f:03:57:1f:0b:00:e3:35:17:00:9a:82:5e:37:5f:
         fb:ca:fa:8f:df:b9:29:d4:db:10:98:8b:8a:90:2e:fa:fd:66:
         59:00:b6:23:05:12:6c:c9:de:6b:4c:2b:07:98:26:0b:98:3c:
         ae:35:af:c6:26:05:e8:38:2c:15:00:d8:80:93:f5:17:7c:3b:
         5e:d8:8b:fe:0a:7d:fd:2f:23:cc:74:9a:18:5e:99:66:1f:38:
         c0:0c:1a:54:70:08:62:fc:85:67:70:5d:40:78:e9:fc:ad:cc:
         c9:88:e9:1e:ca:dc:e6:d7:c0:0e:47:b4:ef:9a:4f:1c:bb:4a:
         bb:90:43:02:10:df:a5:df:73:df:d6:44:ae:61:1d:04:c0:18:
         e7:73:ad:f6:36:b6:c7:1a:1b:ac:b9:24:ae:a8:d8:5c:98:0e:
         bb:ff:2b:0f:d8:af:86:17:e8:a9:96:1a:48:6e:6c:3c:46:c1:
         a9:de:9f:64:23:e9:98:ce:4a:b6:72:4d:6a:4a:3f:30:18:23:
         d3:5b:33:14:21:4c:1e:05:44:0a:9f:82:3f:a3:91:82:0a:2a:
         b6:c3:13:81
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUNsaTn5b9dwDJs9lFjAaznKYfUmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBC
M0E5RDAxNzAeFw0yMzExMzAyMDE4MjRaFw0yNDExMjgyMDIzMjRaMDMxMTAvBgNV
BAMTKEVDQzIzMEJFMTMzNzJGNDY3MkQ3QzlFNzEyNzZFOUIwNDNBRTI4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD50c/MqIrYSxT55BlHlQ683Msj
xQ5G7hhhsMoepXCLQ5vnLAN+ubq0a/0EBFhtIH/HryzFGdQa6aml6yMeWzc0DtCz
LdqG9OsIp7mSnWsSozjHMsJxfXOOm4atjvPb19pfc9bHpXpwxZS2fJhZ48Kwkn6i
+osxP28ixQ8l2eSZ2PKCqDcyfFymik6PH4NkPNWM9FCHYiIi4eK+JMv3vDZMgLJG
o4PyiifzYjhoDFQfRRG9AVGRQpyu3MkfZayBRlNs2OWWy+Wb4vTAJiYnUzgDbirC
NPN0AfZcEpftcimJHswtuffabUdQOjt6wR6jntyn/mxCwzNs4qp4X7vIr1EjAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU7MIwvhM3L0Zy18nnEnbpsEOuKN4wHwYDVR0j
BBgwFoAUjxLnkOE7oh5pKtRzVp8bkLOp0BcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzAvOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBCM0E5RDAxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84RjEyRTc5MEUxM0JBMjFFNjky
QUQ0NzM1NjlGMUI5MEIzQTlEMDE3LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzIz
ODMwMzQzYTYxMzIzODNhM2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzMzMwMzIz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBigECigAMA0GCSqGSIb3DQEBCwUAA4IBAQDhmF79J1csLebt
EGw8RcUnkejlmhiI+bEw7aQ9/BlykseZb1u7zgmPA1cfCwDjNRcAmoJeN1/7yvqP
37kp1NsQmIuKkC76/WZZALYjBRJsyd5rTCsHmCYLmDyuNa/GJgXoOCwVANiAk/UX
fDte2Iv+Cn39LyPMdJoYXplmHzjADBpUcAhi/IVncF1AeOn8rczJiOkeytzm18AO
R7Tvmk8cu0q7kEMCEN+l33Pf1kSuYR0EwBjnc632NrbHGhusuSSuqNhcmA67/ysP
2K+GF+iplhpIbmw8RsGp3p9kI+mYzkq2ck1qSj8wGCPTWzMUIUweBUQKn4I/o5GC
Ciq2wxOB
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org