Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/323830343a386134343a3a2f33322d3438203d3e20323733363538.roa
File:                     323830343a386134343a3a2f33322d3438203d3e20323733363538.roa (raw, json)
Hash identifier:          gh+919aoa6afTEclASggG5wd34DRaLvbu1ZtxmSzj9s=
Subject key identifier:   AC:16:B9:4E:49:88:12:7B:D1:DF:5A:60:6D:F4:13:EE:F8:71:21:B1
Certificate issuer:       /CN=696FC8A2C502940E2825B88248E05882327C131C
Certificate serial:       4853875A07A2FA00DF49D65B14238DFAA2A7FDF4
Authority key identifier: 69:6F:C8:A2:C5:02:94:0E:28:25:B8:82:48:E0:58:82:32:7C:13:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/696FC8A2C502940E2825B88248E05882327C131C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/323830343a386134343a3a2f33322d3438203d3e20323733363538.roa
Signing time:             Thu 04 Apr 2024 01:45:26 +0000
ROA not before:           Thu 04 Apr 2024 01:40:26 +0000
ROA not after:            Thu 03 Apr 2025 01:45:26 +0000
asID:                     273658
IP address blocks:        2804:8a44::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:53:87:5a:07:a2:fa:00:df:49:d6:5b:14:23:8d:fa:a2:a7:fd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696FC8A2C502940E2825B88248E05882327C131C
        Validity
            Not Before: Apr  4 01:40:26 2024 GMT
            Not After : Apr  3 01:45:26 2025 GMT
        Subject: CN=AC16B94E4988127BD1DF5A606DF413EEF87121B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:ee:96:f3:0e:95:86:16:15:b9:cc:2b:82:
                    4d:d3:15:85:38:80:84:3e:10:f4:e4:1b:83:a4:fa:
                    39:36:f2:15:d2:e3:1d:07:38:75:b6:dd:ab:38:b0:
                    d8:b1:3a:7c:bf:93:e9:93:c7:06:80:00:b3:e4:88:
                    77:dd:e3:26:ff:3c:39:aa:1f:04:b1:38:a1:8c:59:
                    70:f3:80:ad:f5:81:4d:3e:e8:57:89:47:23:63:f1:
                    81:4f:7c:78:ed:5d:a4:74:ef:91:79:bd:81:81:da:
                    57:77:bf:d8:a7:d1:5a:7b:68:86:85:1f:31:ae:ed:
                    6e:71:12:94:82:93:86:c3:25:0c:f3:ec:45:23:cb:
                    0f:af:d0:ad:41:ce:3f:57:b1:d3:60:e8:c5:c5:bf:
                    de:27:70:6b:d1:4e:63:4f:05:8d:e7:be:f8:62:6b:
                    74:30:07:8a:a6:56:fa:52:7f:54:54:01:b0:12:cc:
                    67:23:c0:6e:45:90:8b:4e:31:89:04:b9:04:5a:56:
                    8c:b5:8c:33:a6:92:ba:01:1a:68:d4:d6:22:67:ed:
                    34:08:a9:2d:e7:bf:7e:82:ad:ca:9f:f2:53:b0:62:
                    71:65:10:5c:87:6b:dc:4f:7b:5d:22:69:64:a0:96:
                    07:52:1f:d9:7d:92:28:d6:ba:5c:62:d5:cf:d0:76:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:16:B9:4E:49:88:12:7B:D1:DF:5A:60:6D:F4:13:EE:F8:71:21:B1
            X509v3 Authority Key Identifier:
                keyid:69:6F:C8:A2:C5:02:94:0E:28:25:B8:82:48:E0:58:82:32:7C:13:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/696FC8A2C502940E2825B88248E05882327C131C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/696FC8A2C502940E2825B88248E05882327C131C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/323830343a386134343a3a2f33322d3438203d3e20323733363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a44::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:a9:f4:51:91:f1:97:a4:3b:dc:fe:78:2c:eb:c0:21:ae:b8:
         39:54:cb:89:8c:4b:24:8b:ba:71:59:21:16:48:19:9a:22:77:
         46:28:6c:e0:15:8e:f8:dd:e8:7b:fd:85:67:44:5a:01:90:53:
         c2:3b:19:bd:4e:b4:a0:a4:36:98:e4:7c:57:84:04:24:13:a7:
         07:8e:28:8c:8b:91:93:66:f7:f6:ca:2b:7c:2d:70:79:ca:19:
         24:17:7a:bc:14:6f:ad:05:7c:38:ab:32:80:35:89:8d:eb:02:
         f6:31:62:0a:72:f4:c2:55:db:b2:22:fa:69:8f:1d:39:ff:8f:
         02:f6:30:94:b6:f8:e0:37:37:a8:35:c3:b1:03:f5:b2:a1:e2:
         50:c5:05:e1:65:19:6d:b1:25:f0:2e:6b:07:00:88:af:34:b3:
         bb:67:a7:d6:92:be:b3:5c:61:f2:fc:7b:d5:d2:2e:48:1e:83:
         7b:7a:28:0f:05:a5:00:d3:3f:51:92:60:99:13:38:4e:68:7d:
         b4:21:ac:a1:57:02:4c:83:75:23:5d:33:fe:08:21:7b:d4:6c:
         51:c2:a9:8f:6c:f7:cf:86:4f:df:46:eb:0e:23:fc:c7:da:89:
         30:a4:e2:27:55:95:09:9c:f6:5c:82:2d:ee:70:73:97:fc:0e:
         3e:be:89:d1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSFOHWgei+gDfSdZbFCON+qKn/fQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2RkM4QTJDNTAyOTQwRTI4MjVCODgyNDhFMDU4ODIz
MjdDMTMxQzAeFw0yNDA0MDQwMTQwMjZaFw0yNTA0MDMwMTQ1MjZaMDMxMTAvBgNV
BAMTKEFDMTZCOTRFNDk4ODEyN0JEMURGNUE2MDZERjQxM0VFRjg3MTIxQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/+6W8w6VhhYVucwrgk3TFYU4
gIQ+EPTkG4Ok+jk28hXS4x0HOHW23as4sNixOny/k+mTxwaAALPkiHfd4yb/PDmq
HwSxOKGMWXDzgK31gU0+6FeJRyNj8YFPfHjtXaR075F5vYGB2ld3v9in0Vp7aIaF
HzGu7W5xEpSCk4bDJQzz7EUjyw+v0K1Bzj9XsdNg6MXFv94ncGvRTmNPBY3nvvhi
a3QwB4qmVvpSf1RUAbASzGcjwG5FkItOMYkEuQRaVoy1jDOmkroBGmjU1iJn7TQI
qS3nv36Crcqf8lOwYnFlEFyHa9xPe10iaWSglgdSH9l9kijWulxi1c/QdnmzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrBa5TkmIEnvR31pgbfQT7vhxIbEwHwYDVR0j
BBgwFoAUaW/IosUClA4oJbiCSOBYgjJ8ExwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzhIY2QxaW02aVM2ZzdpbjJDM2VoOXpzUnR0MXQ5RDJjYUxlZ2c5VHR1
NEsvMS82OTZGQzhBMkM1MDI5NDBFMjgyNUI4ODI0OEUwNTg4MjMyN0MxMzFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NkZDOEEyQzUwMjk0MEUy
ODI1Qjg4MjQ4RTA1ODgyMzI3QzEzMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM4SGNkMWltNmlTNmc3aW4yQzNlaDl6c1J0dDF0OUQyY2FMZWdnOVR0dTRLLzEv
MzIzODMwMzQzYTM4NjEzNDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzYzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASKRDANBgkqhkiG9w0BAQsFAAOCAQEAqKn0UZHx
l6Q73P54LOvAIa64OVTLiYxLJIu6cVkhFkgZmiJ3Rihs4BWO+N3oe/2FZ0RaAZBT
wjsZvU60oKQ2mOR8V4QEJBOnB44ojIuRk2b39sorfC1wecoZJBd6vBRvrQV8OKsy
gDWJjesC9jFiCnL0wlXbsiL6aY8dOf+PAvYwlLb44Dc3qDXDsQP1sqHiUMUF4WUZ
bbEl8C5rBwCIrzSzu2en1pK+s1xh8vx71dIuSB6De3ooDwWlANM/UZJgmRM4Tmh9
tCGsoVcCTIN1I10z/gghe9RsUcKpj2z3z4ZP30brDiP8x9qJMKTiJ1WVCZz2XIIt
7nBzl/wOPr6J0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org