Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          twrCrgYtTIrQTdzShWs4CXhL9IhBTVurORa09l6NF0c=
Subject key identifier:   46:50:90:E0:CD:5F:19:41:FE:17:25:FF:8A:82:22:CE:7D:22:CD:3A
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       4554784561A147B704ED03120303DD9C887A6BC6
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:01 +0000
ROA not before:           Tue 26 Sep 2023 14:55:01 +0000
ROA not after:            Tue 24 Sep 2024 15:00:01 +0000
asID:                     266248
IP address blocks:        2804:3d04:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:54:78:45:61:a1:47:b7:04:ed:03:12:03:03:dd:9c:88:7a:6b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:01 2023 GMT
            Not After : Sep 24 15:00:01 2024 GMT
        Subject: CN=3082010A0282010100B8D5B89A8C1DB4EE376525CDB1924A99F9FAE2C5778E61C68F8DBD24ED038A417FCBDEEF2493C838842E5FEFCD92133663E9472509C72B5840DC2E599CFBC174E5BB3EC75E3AF808FCE32976556C8378576D56CF6CC7D21424A9877DA91FBE96E1C95DEDAD81BD3F551369FB87A56212B5C78CC73D50E2F6A368DD2DA41975A7F73F0C9B86B1C8F3289B94458BA54AF583CE03819736CF3FF77F563E692A8BF4A74CE7CD4A38FF891FA58162936E2AEAB43F99442E740EF7DB6F4A821AF58A4CE3F09302C5423A1ED58FAB652BF23E1B05796E850693DC707FF0FD110FE28CCA54AA3DD874D9E7DF185FB051F3B4F5120CA2A58056D086CA16A4CD42BC4C1E2B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:b8:9a:8c:1d:b4:ee:37:65:25:cd:b1:92:
                    4a:99:f9:fa:e2:c5:77:8e:61:c6:8f:8d:bd:24:ed:
                    03:8a:41:7f:cb:de:ef:24:93:c8:38:84:2e:5f:ef:
                    cd:92:13:36:63:e9:47:25:09:c7:2b:58:40:dc:2e:
                    59:9c:fb:c1:74:e5:bb:3e:c7:5e:3a:f8:08:fc:e3:
                    29:76:55:6c:83:78:57:6d:56:cf:6c:c7:d2:14:24:
                    a9:87:7d:a9:1f:be:96:e1:c9:5d:ed:ad:81:bd:3f:
                    55:13:69:fb:87:a5:62:12:b5:c7:8c:c7:3d:50:e2:
                    f6:a3:68:dd:2d:a4:19:75:a7:f7:3f:0c:9b:86:b1:
                    c8:f3:28:9b:94:45:8b:a5:4a:f5:83:ce:03:81:97:
                    36:cf:3f:f7:7f:56:3e:69:2a:8b:f4:a7:4c:e7:cd:
                    4a:38:ff:89:1f:a5:81:62:93:6e:2a:ea:b4:3f:99:
                    44:2e:74:0e:f7:db:6f:4a:82:1a:f5:8a:4c:e3:f0:
                    93:02:c5:42:3a:1e:d5:8f:ab:65:2b:f2:3e:1b:05:
                    79:6e:85:06:93:dc:70:7f:f0:fd:11:0f:e2:8c:ca:
                    54:aa:3d:d8:74:d9:e7:df:18:5f:b0:51:f3:b4:f5:
                    12:0c:a2:a5:80:56:d0:86:ca:16:a4:cd:42:bc:4c:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:90:E0:CD:5F:19:41:FE:17:25:FF:8A:82:22:CE:7D:22:CD:3A
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:28:e9:af:d0:b8:9d:c5:a5:55:66:03:72:f3:a7:ec:21:
         61:43:c7:74:a4:e6:6e:97:d6:47:e6:bd:b6:92:90:65:f3:62:
         58:9c:66:82:f3:d7:b2:2c:c8:fb:da:cd:ee:22:0c:bd:be:b2:
         c3:63:f6:71:db:f4:a9:e6:07:d8:07:d4:7c:c4:28:b7:cd:9c:
         23:76:0c:75:5a:80:22:a0:da:a1:7e:ed:a4:4b:94:f5:d8:5b:
         21:f2:bc:62:f5:1e:14:5b:c9:17:fe:cb:54:7f:2f:94:5e:ea:
         51:c4:ba:32:f8:f7:42:ad:c1:7b:38:d9:ed:9e:8e:f4:c5:26:
         ba:6b:65:5c:37:6f:fc:d0:18:50:44:63:6c:35:75:3c:20:71:
         51:7f:28:44:24:00:ba:25:b6:58:f3:87:6f:80:ac:49:71:11:
         d8:3e:99:2a:8e:89:91:64:8a:15:75:db:57:7a:29:9a:99:d1:
         31:2a:bd:6d:62:e0:83:1a:e6:1f:93:c4:f1:9f:41:fa:7a:c7:
         9e:3a:58:c5:c7:ca:ca:bf:83:9f:9c:12:89:b0:8d:34:ae:cb:
         57:9e:a5:30:57:97:17:48:03:50:e3:cf:3d:30:78:e1:64:06:
         2c:33:b8:21:2d:11:62:27:55:d5:76:3f:7b:55:0f:ae:f1:57:
         6c:ef:7d:1d
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIURVR4RWGhR7cE7QMSAwPdnIh6a8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEyRjQwRTcxRDgwRkU0QkZEMjUzMTc2OTAxNzc4NzdF
NkU3ODA2RDAeFw0yMzA5MjYxNDU1MDFaFw0yNDA5MjQxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhENUI4OUE4QzFEQjRFRTM3
NjUyNUNEQjE5MjRBOTlGOUZBRTJDNTc3OEU2MUM2OEY4REJEMjRFRDAzOEE0MTdG
Q0JERUVGMjQ5M0M4Mzg4NDJFNUZFRkNEOTIxMzM2NjNFOTQ3MjUwOUM3MkI1ODQw
REMyRTU5OUNGQkMxNzRFNUJCM0VDNzVFM0FGODA4RkNFMzI5NzY1NTZDODM3ODU3
NkQ1NkNGNkNDN0QyMTQyNEE5ODc3REE5MUZCRTk2RTFDOTVERURBRDgxQkQzRjU1
MTM2OUZCODdBNTYyMTJCNUM3OENDNzNENTBFMkY2QTM2OEREMkRBNDE5NzVBN0Y3
M0YwQzlCODZCMUM4RjMyODlCOTQ0NThCQTU0QUY1ODNDRTAzODE5NzM2Q0YzRkY3
N0Y1NjNFNjkyQThCRjRBNzRDRTdDRDRBMzhGRjg5MUZBNTgxNjI5MzZFMkFFQUI0
M0Y5OTQ0MkU3NDBFRjdEQjZGNEE4MjFBRjU4QTRDRTNGMDkzMDJDNTQyM0ExRUQ1
OEZBQjY1MkJGMjNFMUIwNTc5NkU4NTA2OTNEQzcwN0ZGMEZEMTEwRkUyOENDQTU0
QUEzREQ4NzREOUU3REYxODVGQjA1MUYzQjRGNTEyMENBMkE1ODA1NkQwODZDQTE2
QTRDRDQyQkM0QzFFMkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuNW4mowdtO43ZSXNsZJKmfn64sV3jmHGj429JO0DikF/y97vJJPI
OIQuX+/NkhM2Y+lHJQnHK1hA3C5ZnPvBdOW7PsdeOvgI/OMpdlVsg3hXbVbPbMfS
FCSph32pH76W4cld7a2BvT9VE2n7h6ViErXHjMc9UOL2o2jdLaQZdaf3PwybhrHI
8yiblEWLpUr1g84DgZc2zz/3f1Y+aSqL9KdM581KOP+JH6WBYpNuKuq0P5lELnQO
99tvSoIa9YpM4/CTAsVCOh7Vj6tlK/I+GwV5boUGk9xwf/D9EQ/ijMpUqj3YdNnn
3xhfsFHztPUSDKKlgFbQhsoWpM1CvEweKwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FEZQkODNXxlB/hcl/4qCIs59Is06MB8GA1UdIwQYMBaAFIEvQOcdgP5L/SUxdpAX
eHfm54BtMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzAvODEyRjQwRTcxRDgwRkU0
QkZEMjUzMTc2OTAxNzc4NzdFNkU3ODA2RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MTJGNDBFNzFEODBGRTRCRkQyNTMxNzY5MDE3Nzg3N0U2RTc4
MDZELmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8wLzMyMzgzMDM0M2EzMzY0MzAzNDNh
NjYzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBD0E8DANBgkqhkiG9w0BAQsFAAOCAQEAUgwo6a/QuJ3FpVVmA3Lz
p+whYUPHdKTmbpfWR+a9tpKQZfNiWJxmgvPXsizI+9rN7iIMvb6yw2P2cdv0qeYH
2AfUfMQot82cI3YMdVqAIqDaoX7tpEuU9dhbIfK8YvUeFFvJF/7LVH8vlF7qUcS6
Mvj3Qq3BezjZ7Z6O9MUmumtlXDdv/NAYUERjbDV1PCBxUX8oRCQAuiW2WPOHb4Cs
SXER2D6ZKo6JkWSKFXXbV3opmpnRMSq9bWLggxrmH5PE8Z9B+nrHnjpYxcfKyr+D
n5wSibCNNK7LV56lMFeXF0gDUOPPPTB44WQGLDO4IS0RYidV1XY/e1UPrvFXbO99
HQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org