Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa
File:                     323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa (raw, json)
Hash identifier:          7P6yE7tKLSfAHSLoMxNM023R6tOxjfT+Pa/6ND+lzLc=
Subject key identifier:   41:A3:B0:AE:D6:AD:1E:63:7B:DD:9A:D4:13:8A:9D:E9:4B:CC:F6:A8
Certificate issuer:       /CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Certificate serial:       539A584D8A570752E46DD06B2C335F2D91BA8D3C
Authority key identifier: CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa
Signing time:             Mon 26 Feb 2024 20:00:46 +0000
ROA not before:           Mon 26 Feb 2024 19:55:46 +0000
ROA not after:            Mon 24 Feb 2025 20:00:46 +0000
asID:                     268746
IP address blocks:        2804:5a10:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9a:58:4d:8a:57:07:52:e4:6d:d0:6b:2c:33:5f:2d:91:ba:8d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
        Validity
            Not Before: Feb 26 19:55:46 2024 GMT
            Not After : Feb 24 20:00:46 2025 GMT
        Subject: CN=41A3B0AED6AD1E637BDD9AD4138A9DE94BCCF6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:f5:07:2e:7e:45:40:98:40:67:fd:4e:4d:
                    5b:00:9f:eb:6a:bc:ab:c9:9d:d4:43:62:91:24:0b:
                    2b:d0:ec:c7:40:c8:0f:60:40:53:10:d9:b8:cb:d4:
                    02:fe:c7:74:0a:80:7c:64:9a:d0:42:e0:cf:e9:ad:
                    3e:a5:cf:21:02:1d:44:f0:7d:87:0f:94:e8:be:11:
                    fe:c9:72:eb:76:21:7f:5c:7d:b7:a4:13:b8:9f:8e:
                    97:33:79:06:b2:dc:d0:d7:c3:34:85:7a:95:16:32:
                    72:02:7e:06:56:df:47:82:70:24:2a:27:dc:c1:6a:
                    bc:44:56:fc:da:2c:72:fd:58:1d:00:25:ad:e0:df:
                    59:19:e3:0e:41:d2:2b:e7:11:47:85:47:b9:b9:a6:
                    d8:89:a7:53:c4:2c:06:bd:0e:27:e5:2d:9c:a3:25:
                    12:be:03:67:54:69:57:46:ae:ca:23:57:61:df:37:
                    04:d6:87:fd:c4:82:fa:17:bf:2b:05:84:3b:65:e1:
                    25:77:d5:72:ef:73:ff:6d:af:8c:ed:42:f8:95:9f:
                    4c:0c:04:ca:d1:ca:e2:44:f7:fb:4a:a6:bf:b8:04:
                    d6:69:61:c7:cc:26:17:82:33:db:c7:c7:76:0d:b3:
                    2e:79:ac:99:40:c3:e6:51:a8:d2:80:0f:0f:d1:ed:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:B0:AE:D6:AD:1E:63:7B:DD:9A:D4:13:8A:9D:E9:4B:CC:F6:A8
            X509v3 Authority Key Identifier:
                keyid:CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:fd:94:67:62:e5:67:9c:49:b9:76:7b:aa:90:97:0f:80:
         b0:aa:63:3a:72:0d:40:63:dc:45:eb:2c:e7:75:43:53:1b:50:
         14:60:32:e2:77:59:87:b7:38:a5:b8:97:d3:53:2b:ba:8c:31:
         7f:89:6c:91:ed:ff:dd:4f:7b:e5:85:66:57:f3:82:f0:a6:18:
         04:78:79:c9:2e:74:a3:a1:86:65:be:c0:5d:fb:4d:ff:f7:d6:
         b4:e5:56:74:7e:50:e6:ef:84:fd:ef:08:1b:a5:44:5a:e3:eb:
         a7:d5:c2:8d:42:8d:c2:84:a8:3d:2d:7a:13:cc:d6:95:50:1b:
         a2:c9:c9:93:d6:6c:a8:aa:b7:0a:8b:70:ba:15:05:2b:8d:bc:
         71:45:b8:a2:58:46:f3:f1:1f:a4:2d:71:22:5d:89:cf:54:40:
         fb:8e:25:e4:39:16:6c:43:74:2d:b6:4c:3b:d6:b6:f6:e2:8b:
         61:32:34:05:f1:7d:a0:43:c1:7d:49:d5:ce:5a:c3:c9:a4:b9:
         0f:7e:10:cb:c0:d5:29:dc:b9:a4:60:7a:a7:34:51:14:80:98:
         57:6c:89:0a:18:d3:d7:ad:57:18:ec:e0:25:8d:8f:cb:af:43:
         24:b3:39:96:31:e6:6e:b7:74:32:d2:15:69:46:5a:85:9c:91:
         de:bd:71:19
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUU5pYTYpXB1LkbdBrLDNfLZG6jTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y4MjlFQjBCMzVEQTI5QjQ5NzA0MkQ3RTc5MEYwRUVD
MzU1MTJFNDAeFw0yNDAyMjYxOTU1NDZaFw0yNTAyMjQyMDAwNDZaMDMxMTAvBgNV
BAMTKDQxQTNCMEFFRDZBRDFFNjM3QkREOUFENDEzOEE5REU5NEJDQ0Y2QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDvUHLn5FQJhAZ/1OTVsAn+tq
vKvJndRDYpEkCyvQ7MdAyA9gQFMQ2bjL1AL+x3QKgHxkmtBC4M/prT6lzyECHUTw
fYcPlOi+Ef7Jcut2IX9cfbekE7ifjpczeQay3NDXwzSFepUWMnICfgZW30eCcCQq
J9zBarxEVvzaLHL9WB0AJa3g31kZ4w5B0ivnEUeFR7m5ptiJp1PELAa9DiflLZyj
JRK+A2dUaVdGrsojV2HfNwTWh/3EgvoXvysFhDtl4SV31XLvc/9tr4ztQviVn0wM
BMrRyuJE9/tKpr+4BNZpYcfMJheCM9vHx3YNsy55rJlAw+ZRqNKADw/R7SizAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUQaOwrtatHmN73ZrUE4qd6UvM9qgwHwYDVR0j
BBgwFoAUz4KesLNdoptJcELX55Dw7sNVEuQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvQ0Y4MjlFQjBCMzVEQTI5QjQ5NzA0MkQ3RTc5MEYwRUVDMzU1MTJFNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9DRjgyOUVCMEIzNURBMjlCNDk3
MDQyRDdFNzkwRjBFRUMzNTUxMkU0LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzIz
ODMwMzQzYTM1NjEzMTMwM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2Uy
MDMyMzYzODM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWhCwMA0GCSqGSIb3DQEBCwUAA4IB
AQBfL/2UZ2LlZ5xJuXZ7qpCXD4CwqmM6cg1AY9xF6yzndUNTG1AUYDLid1mHtzil
uJfTUyu6jDF/iWyR7f/dT3vlhWZX84LwphgEeHnJLnSjoYZlvsBd+03/99a05VZ0
flDm74T97wgbpURa4+un1cKNQo3ChKg9LXoTzNaVUBuiycmT1myoqrcKi3C6FQUr
jbxxRbiiWEbz8R+kLXEiXYnPVED7jiXkORZsQ3Qttkw71rb24othMjQF8X2gQ8F9
SdXOWsPJpLkPfhDLwNUp3LmkYHqnNFEUgJhXbIkKGNPXrVcY7OAljY/Lr0MkszmW
MeZut3Qy0hVpRlqFnJHevXEZ
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:46 2024 by rpki-client on console-ams.rpki-client.org