Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa
File:                     323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa (raw, json)
Hash identifier:          GlNnXnZWjhXIyX9FK94BEvGFJLYgX/kYou5cCHnP7hc=
Subject key identifier:   68:36:5D:1F:87:C2:86:27:0F:F1:2C:9C:A6:74:1E:42:F0:3E:8A:88
Certificate issuer:       /CN=2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F
Certificate serial:       74109E32BA5FF50F113B267A4CA7AFD2CFD31996
Authority key identifier: 2A:49:F6:1A:38:C4:E4:F1:DB:9B:F9:3B:13:E1:3C:54:88:74:FD:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa
Signing time:             Sat 06 Apr 2024 15:27:30 +0000
ROA not before:           Sat 06 Apr 2024 15:22:30 +0000
ROA not after:            Sat 05 Apr 2025 15:27:30 +0000
asID:                     271246
IP address blocks:        2801:80:3e20::/44 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:9e:32:ba:5f:f5:0f:11:3b:26:7a:4c:a7:af:d2:cf:d3:19:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F
        Validity
            Not Before: Apr  6 15:22:30 2024 GMT
            Not After : Apr  5 15:27:30 2025 GMT
        Subject: CN=68365D1F87C286270FF12C9CA6741E42F03E8A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:bd:e7:23:ea:a5:95:07:09:37:54:61:81:
                    59:d8:68:92:88:40:ef:89:91:cd:84:7f:d8:b0:f3:
                    ac:45:d1:fc:7f:a1:2f:a3:78:e8:b8:91:cf:c4:6d:
                    74:9a:73:f6:2c:98:6e:d2:55:7a:40:34:3e:b6:57:
                    0e:df:69:ba:dc:25:ca:c5:16:4b:29:0c:dc:f7:46:
                    e7:bd:c1:f4:fd:b1:83:00:fe:23:1d:45:b8:8c:5b:
                    7e:fd:97:e9:20:b4:27:11:cb:a1:20:03:fe:20:85:
                    26:1d:68:86:8d:79:37:c6:51:30:c1:61:22:25:16:
                    2b:7d:7a:2f:f9:f1:1b:72:dd:f6:55:c7:9d:8e:d6:
                    7c:7f:bf:ea:6f:e9:aa:1c:1d:29:4c:11:ab:a7:b2:
                    71:f0:5b:97:a9:63:58:bc:a5:3b:2b:8b:e1:e1:d6:
                    81:10:ff:e8:2c:1f:77:fe:85:9f:fb:03:3b:db:64:
                    2c:cd:b2:37:68:48:64:20:89:0f:d3:64:f7:3e:84:
                    58:f6:72:3f:0c:76:94:09:8f:6e:34:c2:d1:a5:c7:
                    9a:a6:d3:fa:1e:e0:98:93:a0:f3:02:59:90:48:7f:
                    77:a7:8c:d8:6b:8a:62:ce:42:7d:f9:dc:19:7b:6c:
                    6e:92:d6:d0:4a:00:98:3a:d4:56:a4:b4:71:db:7c:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:36:5D:1F:87:C2:86:27:0F:F1:2C:9C:A6:74:1E:42:F0:3E:8A:88
            X509v3 Authority Key Identifier:
                keyid:2A:49:F6:1A:38:C4:E4:F1:DB:9B:F9:3B:13:E1:3C:54:88:74:FD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:ed:c2:b4:f4:c8:00:03:86:ab:01:82:50:84:10:a1:e8:
         28:42:32:f2:66:4a:e6:09:a9:93:75:0c:fd:e6:b4:45:3c:59:
         20:df:fd:58:9d:b0:51:bc:a4:6e:ee:f6:eb:31:8b:f9:b2:72:
         de:28:1e:03:77:6b:5f:7e:6a:68:96:e1:22:b4:7b:08:86:94:
         f0:84:21:42:e1:9c:34:b5:20:f0:22:73:66:4b:a0:85:1b:8a:
         35:bc:dc:1e:35:dc:7f:9b:4b:60:da:2a:db:49:90:4a:21:61:
         99:64:21:a7:d8:b0:fa:2a:23:b2:0d:00:ab:d4:10:29:0c:f2:
         f5:55:ee:0e:27:05:c9:e0:96:2f:1b:ee:86:99:07:76:22:af:
         24:44:9a:40:1e:21:54:3f:85:31:82:b9:77:f7:c3:96:d5:bf:
         21:16:ab:41:da:2a:29:61:49:8f:37:31:36:cb:1d:1c:42:52:
         e7:09:3e:c4:a5:6d:2a:8a:c2:94:99:9a:36:3c:dd:b2:3d:ce:
         8d:1b:49:4a:a8:79:de:08:11:65:99:9c:d3:23:1d:b0:93:ad:
         89:46:53:8c:09:2b:23:34:55:85:c5:b6:f1:1e:e6:34:73:2c:
         cb:a1:3c:cf:11:8b:cc:b4:13:8b:d8:75:3d:85:84:54:90:66:
         aa:0e:35:bd
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUdBCeMrpf9Q8ROyZ6TKev0s/TGZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE0OUY2MUEzOEM0RTRGMURCOUJGOTNCMTNFMTNDNTQ4
ODc0RkQ0RjAeFw0yNDA0MDYxNTIyMzBaFw0yNTA0MDUxNTI3MzBaMDMxMTAvBgNV
BAMTKDY4MzY1RDFGODdDMjg2MjcwRkYxMkM5Q0E2NzQxRTQyRjAzRThBODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94L3nI+qllQcJN1RhgVnYaJKI
QO+Jkc2Ef9iw86xF0fx/oS+jeOi4kc/EbXSac/YsmG7SVXpAND62Vw7fabrcJcrF
FkspDNz3Rue9wfT9sYMA/iMdRbiMW379l+kgtCcRy6EgA/4ghSYdaIaNeTfGUTDB
YSIlFit9ei/58Rty3fZVx52O1nx/v+pv6aocHSlMEaunsnHwW5epY1i8pTsri+Hh
1oEQ/+gsH3f+hZ/7AzvbZCzNsjdoSGQgiQ/TZPc+hFj2cj8MdpQJj240wtGlx5qm
0/oe4JiToPMCWZBIf3enjNhrimLOQn353Bl7bG6S1tBKAJg61FaktHHbfOOVAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUaDZdH4fChicP8SycpnQeQvA+iogwHwYDVR0j
BBgwFoAUKkn2GjjE5PHbm/k7E+E8VIh0/U8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVDaFVYRDI0WllvM3g1ZWg4R1M1Z3hINVhMcUVHRG9EQkVqcUEza1U5
cG4vMS8yQTQ5RjYxQTM4QzRFNEYxREI5QkY5M0IxM0UxM0M1NDg4NzRGRDRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJBNDlGNjFBMzhDNEU0RjFE
QjlCRjkzQjEzRTEzQzU0ODg3NEZENEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1Q2hVWEQyNFpZbzN4NWVoOEdTNWd4SDVYTHFFR0RvREJFanFBM2tVOXBuLzEv
MzIzODMwMzEzYTM4MzAzYTMzNjUzMjMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNl
MjAzMjM3MzEzMjM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQCAPiAwDQYJKoZIhvcNAQELBQAD
ggEBAB5E7cK09MgAA4arAYJQhBCh6ChCMvJmSuYJqZN1DP3mtEU8WSDf/VidsFG8
pG7u9usxi/myct4oHgN3a19+amiW4SK0ewiGlPCEIULhnDS1IPAic2ZLoIUbijW8
3B413H+bS2DaKttJkEohYZlkIafYsPoqI7INAKvUECkM8vVV7g4nBcngli8b7oaZ
B3YiryREmkAeIVQ/hTGCuXf3w5bVvyEWq0HaKilhSY83MTbLHRxCUucJPsSlbSqK
wpSZmjY83bI9zo0bSUqoed4IEWWZnNMjHbCTrYlGU4wJKyM0VYXFtvEe5jRzLMuh
PM8Ri8y0E4vYdT2FhFSQZqoONb0=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org