Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/323830343a3335383a3a2f33322d313237203d3e203533323436.roa
File:                     323830343a3335383a3a2f33322d313237203d3e203533323436.roa (raw, json)
Hash identifier:          Rg3neeM+ksGUIrTcFJrZIhMpa9wngyksrdaWI/s33Rs=
Subject key identifier:   A0:C3:BC:13:32:F3:F1:F8:69:C7:C0:C6:1D:4D:2B:BF:57:E6:FD:8F
Certificate issuer:       /CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
Certificate serial:       3FE873A2A2528DC8A957A426EEF76D03A1EFC155
Authority key identifier: 48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/323830343a3335383a3a2f33322d313237203d3e203533323436.roa
Signing time:             Thu 05 Oct 2023 14:27:05 +0000
ROA not before:           Thu 05 Oct 2023 14:22:05 +0000
ROA not after:            Thu 03 Oct 2024 14:27:05 +0000
asID:                     53246
IP address blocks:        2804:358::/32 maxlen: 127

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e8:73:a2:a2:52:8d:c8:a9:57:a4:26:ee:f7:6d:03:a1:ef:c1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
        Validity
            Not Before: Oct  5 14:22:05 2023 GMT
            Not After : Oct  3 14:27:05 2024 GMT
        Subject: CN=A0C3BC1332F3F1F869C7C0C61D4D2BBF57E6FD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:cd:5b:0e:4e:2f:b6:c1:6d:dc:ce:7f:6d:
                    a5:80:d1:c0:2e:5c:5d:70:86:73:5f:fb:b7:2d:1e:
                    f2:1b:fa:d4:65:70:fd:4e:2b:71:2f:bf:3b:a9:20:
                    66:00:27:25:66:2f:73:90:41:e1:0f:6a:1c:ff:88:
                    59:93:3e:eb:6a:ab:d0:c5:2a:e8:ca:03:90:d2:17:
                    a7:86:9f:4d:95:13:7b:3a:5b:ef:d2:06:fd:9b:b8:
                    61:82:b3:ba:d1:e5:a8:75:18:5a:5e:a2:30:78:b6:
                    c9:96:92:c1:a0:1e:91:d8:37:e7:6f:d4:46:aa:96:
                    2c:b8:04:4d:81:0c:c9:c0:71:3f:7a:a3:05:d5:06:
                    3f:c4:cc:13:5c:66:62:5b:dc:2f:4e:13:37:36:04:
                    34:01:f2:ea:ac:8f:aa:fb:8c:08:7e:7b:43:17:23:
                    20:06:17:d0:77:ef:75:a6:c0:f8:fb:bc:b7:b5:a2:
                    31:bb:13:bf:01:fd:54:63:92:8b:d9:86:9c:3f:2d:
                    cf:e1:47:d6:b2:29:77:8d:03:4e:54:41:61:b8:21:
                    2d:06:1d:c0:79:20:08:49:3c:71:38:24:b4:0b:6d:
                    d4:f5:90:da:10:df:61:89:27:56:c2:46:4a:53:a4:
                    d5:56:01:fb:ad:39:c3:49:3c:7e:da:1b:d7:5e:dd:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C3:BC:13:32:F3:F1:F8:69:C7:C0:C6:1D:4D:2B:BF:57:E6:FD:8F
            X509v3 Authority Key Identifier:
                keyid:48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/323830343a3335383a3a2f33322d313237203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:358::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:60:60:55:db:a1:77:b2:f6:e3:51:be:90:25:dd:fe:bd:d6:
         4e:62:e3:0c:34:a6:5f:aa:af:83:1e:d3:99:04:7b:de:42:30:
         ee:cc:2b:8c:b3:e4:ae:bd:55:08:f8:ac:6f:9e:cb:41:05:d5:
         4e:67:25:a4:05:5e:b8:fb:e3:e7:ae:8c:ce:8f:22:b1:6f:aa:
         dd:d2:be:1a:c8:b3:cb:cb:2f:66:d2:4b:04:8d:d6:63:46:ab:
         c7:3a:e4:9e:ed:24:00:5f:48:02:5e:9d:d3:d8:cc:3f:1f:d1:
         b5:a1:0a:14:5f:bb:0c:b3:1f:cc:71:09:20:3c:50:84:2b:1a:
         2c:2c:90:90:f1:50:56:91:c5:fb:7e:15:2e:f8:d5:38:d6:ac:
         5a:69:62:68:2a:ce:f1:2a:cb:05:ef:27:f1:e3:8b:84:01:27:
         72:b0:ee:3c:f1:f1:9a:63:79:45:f3:62:45:ba:3e:58:2d:c8:
         40:81:66:f6:e5:7e:36:3f:ce:93:bd:ff:5b:2a:20:db:c8:bb:
         21:8d:b1:35:f0:7f:54:27:7e:80:85:80:c1:57:41:64:9d:d7:
         5c:1d:69:cc:cb:50:e9:ac:69:2a:0a:87:64:fd:1b:56:b6:6e:
         b7:7b:66:53:4c:d6:f6:3b:3f:45:b6:95:ca:f3:c5:7a:77:14:
         04:20:ba:a3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUP+hzoqJSjcipV6Qm7vdtA6HvwVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEM0M4QkUyQzAyOTI1NUJFNkQ2RjI5NTZBRjc0Njgx
QjgzNzBGOTAeFw0yMzEwMDUxNDIyMDVaFw0yNDEwMDMxNDI3MDVaMDMxMTAvBgNV
BAMTKEEwQzNCQzEzMzJGM0YxRjg2OUM3QzBDNjFENEQyQkJGNTdFNkZEOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayM1bDk4vtsFt3M5/baWA0cAu
XF1whnNf+7ctHvIb+tRlcP1OK3EvvzupIGYAJyVmL3OQQeEPahz/iFmTPutqq9DF
KujKA5DSF6eGn02VE3s6W+/SBv2buGGCs7rR5ah1GFpeojB4tsmWksGgHpHYN+dv
1Eaqliy4BE2BDMnAcT96owXVBj/EzBNcZmJb3C9OEzc2BDQB8uqsj6r7jAh+e0MX
IyAGF9B373WmwPj7vLe1ojG7E78B/VRjkovZhpw/Lc/hR9ayKXeNA05UQWG4IS0G
HcB5IAhJPHE4JLQLbdT1kNoQ32GJJ1bCRkpTpNVWAfutOcNJPH7aG9de3Y9nAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUoMO8EzLz8fhpx8DGHU0rv1fm/Y8wHwYDVR0j
BBgwFoAUSNPIviwCklW+bW8pVq90aBuDcPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJ2UW5tTmVRcWlVZERxRjRxZ1hSQkJOM29DUGtNRVBmZEhZOGkzSlZQ
eDEvMC80OEQzQzhCRTJDMDI5MjU1QkU2RDZGMjk1NkFGNzQ2ODFCODM3MEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4RDNDOEJFMkMwMjkyNTVC
RTZENkYyOTU2QUY3NDY4MUI4MzcwRjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSdlFubU5lUXFpVWREcUY0cWdYUkJCTjNvQ1BrTUVQZmRIWThpM0pWUHgxLzAv
MzIzODMwMzQzYTMzMzUzODNhM2EyZjMzMzIyZDMxMzIzNzIwM2QzZTIwMzUzMzMy
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEA1gwDQYJKoZIhvcNAQELBQADggEBANRgYFXboXey
9uNRvpAl3f691k5i4ww0pl+qr4Me05kEe95CMO7MK4yz5K69VQj4rG+ey0EF1U5n
JaQFXrj74+eujM6PIrFvqt3SvhrIs8vLL2bSSwSN1mNGq8c65J7tJABfSAJendPY
zD8f0bWhChRfuwyzH8xxCSA8UIQrGiwskJDxUFaRxft+FS741TjWrFppYmgqzvEq
ywXvJ/Hji4QBJ3Kw7jzx8ZpjeUXzYkW6PlgtyECBZvblfjY/zpO9/1sqINvIuyGN
sTXwf1QnfoCFgMFXQWSd11wdaczLUOmsaSoKh2T9G1a2brd7ZlNM1vY7P0W2lcrz
xXp3FAQguqM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org