Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3a2f34312d3431203d3e20323637323536.roa
File:                     323830343a346161633a3a2f34312d3431203d3e20323637323536.roa (raw, json)
Hash identifier:          FjTWD3a7bGlD3alsuLTp92ILiUg1/8/lau+YrfW5fng=
Subject key identifier:   90:5F:3A:8B:E1:FA:8D:74:D2:D7:5B:1E:30:15:B6:94:53:A5:2E:12
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       61EC257080E1CDE0736A75681A07E9AA09E1C7D2
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3a2f34312d3431203d3e20323637323536.roa
Signing time:             Fri 08 Mar 2024 20:03:22 +0000
ROA not before:           Fri 08 Mar 2024 19:58:22 +0000
ROA not after:            Fri 07 Mar 2025 20:03:22 +0000
asID:                     267256
IP address blocks:        2804:4aac::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ec:25:70:80:e1:cd:e0:73:6a:75:68:1a:07:e9:aa:09:e1:c7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar  8 19:58:22 2024 GMT
            Not After : Mar  7 20:03:22 2025 GMT
        Subject: CN=905F3A8BE1FA8D74D2D75B1E3015B69453A52E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:d8:e3:0f:55:d5:69:d8:d3:4e:ea:e7:12:
                    16:85:96:4f:a9:f8:f4:8f:64:cf:24:68:4a:25:c0:
                    02:dc:01:92:8e:4e:d3:93:d2:41:bb:dd:76:e7:73:
                    d9:29:77:8f:7e:56:39:b0:6b:41:fa:b7:94:4b:4e:
                    44:00:ea:5d:89:a8:6c:29:be:75:a7:07:b8:99:1d:
                    3c:ca:41:e9:ed:43:c8:f8:4f:93:a4:c3:f5:48:36:
                    12:57:25:5a:c7:1e:ec:35:bc:17:03:f4:58:67:86:
                    34:36:00:a2:0c:4c:26:d1:df:5c:4b:f6:e7:11:19:
                    41:c3:32:59:6d:11:8c:b8:6c:eb:66:36:f4:da:dc:
                    fd:14:63:ee:e3:8e:bc:db:ae:f2:d8:b4:8a:6a:e4:
                    8b:4a:09:a1:bf:02:e7:5c:a3:85:bd:59:6f:87:df:
                    e6:97:fe:a4:60:9e:de:94:67:1a:cc:91:f9:6e:70:
                    21:bd:57:ad:95:cb:27:04:72:f6:d4:64:a2:fc:6b:
                    a7:3a:88:50:89:3e:50:3f:19:45:be:aa:11:8d:5d:
                    fc:bf:48:f5:54:dd:8d:5d:e4:81:c5:00:b0:89:d7:
                    b0:50:a4:63:2b:35:56:48:44:6a:21:02:65:40:4d:
                    0c:a2:18:95:f1:70:53:1d:57:aa:59:aa:6e:39:3f:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5F:3A:8B:E1:FA:8D:74:D2:D7:5B:1E:30:15:B6:94:53:A5:2E:12
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3a2f34312d3431203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4aac::/41

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:bb:60:d7:90:f0:65:99:70:64:c0:97:03:24:89:1d:46:
         8c:ad:8c:c7:fe:39:49:29:03:7d:e6:ce:01:29:b7:ad:f8:8a:
         18:e2:cb:b1:09:dc:eb:a5:b5:81:11:bd:e3:63:2d:fd:f2:46:
         70:c4:b3:78:7b:e9:85:9d:7e:3e:e9:70:30:0f:94:2b:94:ac:
         07:c4:e1:9d:b1:37:7b:d2:7d:0e:b3:a6:6a:7b:8d:7e:c5:41:
         39:04:5d:93:68:3c:4f:56:59:ca:10:a9:8f:91:ac:5a:03:82:
         ba:96:06:e7:49:9e:17:8f:61:b8:da:7f:57:81:78:7a:eb:52:
         77:16:3a:cb:d8:59:c5:a8:38:68:87:22:35:2b:13:ac:60:6e:
         b5:68:a1:3e:c9:9f:5c:e7:e1:19:21:5e:45:c2:b6:b2:9b:50:
         eb:30:23:d3:bf:b5:a7:6e:70:e9:ad:17:37:a1:3c:84:de:b1:
         ee:ff:16:40:30:fb:9e:0e:6b:d2:5d:22:bd:70:74:53:07:ad:
         a0:59:62:30:2c:bc:76:2b:65:5c:98:c5:f8:9b:1a:63:47:e5:
         8c:0e:f1:5e:18:3e:5c:33:6b:cf:a1:d1:aa:88:e9:f7:40:5a:
         bd:7c:ea:9c:8c:bf:f1:9b:f7:47:95:83:6f:52:31:f4:5a:f6:
         79:f6:2f:de
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYewlcIDhzeBzanVoGgfpqgnhx9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyRTZEM0MwRDkzOTVCMTZFRTc0RjQwMjdBOThDMDg3
NkMyRTc4RDAeFw0yNDAzMDgxOTU4MjJaFw0yNTAzMDcyMDAzMjJaMDMxMTAvBgNV
BAMTKDkwNUYzQThCRTFGQThENzREMkQ3NUIxRTMwMTVCNjk0NTNBNTJFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FdjjD1XVadjTTurnEhaFlk+p
+PSPZM8kaEolwALcAZKOTtOT0kG73Xbnc9kpd49+Vjmwa0H6t5RLTkQA6l2JqGwp
vnWnB7iZHTzKQentQ8j4T5Okw/VINhJXJVrHHuw1vBcD9FhnhjQ2AKIMTCbR31xL
9ucRGUHDMlltEYy4bOtmNvTa3P0UY+7jjrzbrvLYtIpq5ItKCaG/Audco4W9WW+H
3+aX/qRgnt6UZxrMkflucCG9V62VyycEcvbUZKL8a6c6iFCJPlA/GUW+qhGNXfy/
SPVU3Y1d5IHFALCJ17BQpGMrNVZIRGohAmVATQyiGJXxcFMdV6pZqm45P/+TAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUkF86i+H6jXTS11seMBW2lFOlLhIwHwYDVR0j
BBgwFoAUiS5tPA2TlbFu509AJ6mMCHbC540wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC84OTJFNkQzQzBEOTM5NUIxNkVFNzRGNDAyN0E5OEMwODc2QzJFNzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg5MkU2RDNDMEQ5Mzk1QjE2
RUU3NEY0MDI3QTk4QzA4NzZDMkU3OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzIzODMwMzQzYTM0NjE2MTYzM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzIzNjM3
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcHKARKrAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAS2btg
15DwZZlwZMCXAySJHUaMrYzH/jlJKQN95s4BKbet+IoY4suxCdzrpbWBEb3jYy39
8kZwxLN4e+mFnX4+6XAwD5QrlKwHxOGdsTd70n0Os6Zqe41+xUE5BF2TaDxPVlnK
EKmPkaxaA4K6lgbnSZ4Xj2G42n9XgXh661J3FjrL2FnFqDhohyI1KxOsYG61aKE+
yZ9c5+EZIV5Fwraym1DrMCPTv7WnbnDprRc3oTyE3rHu/xZAMPueDmvSXSK9cHRT
B62gWWIwLLx2K2VcmMX4mxpjR+WMDvFeGD5cM2vPodGqiOn3QFq9fOqcjL/xm/dH
lYNvUjH0WvZ59i/e
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org