Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa
File:                     323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa (raw, json)
Hash identifier:          unMMbm189PuK6ym0L0JSocEO1Ckuhnt+4TS6HbM8hpI=
Subject key identifier:   95:2A:28:1B:25:86:24:7F:66:83:1E:BF:E3:76:FD:2B:BD:81:8B:BC
Certificate issuer:       /CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
Certificate serial:       6D54D5AD03FD8AA12626447F48455C11261AFCDF
Authority key identifier: 51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     266020
IP address blocks:        2804:393c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:54:d5:ad:03:fd:8a:a1:26:26:44:7f:48:45:5c:11:26:1a:fc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:fc:5a:da:06:f2:4a:31:c5:82:8c:3e:9d:
                    d4:d8:c0:33:cd:c8:83:44:ec:7e:8d:56:02:c5:00:
                    30:4c:27:33:91:3d:35:37:cf:17:05:72:bd:44:47:
                    3f:4a:f7:92:09:56:37:8c:f3:bb:da:32:3c:93:2d:
                    3f:8b:79:18:1e:fc:e8:bb:57:2d:02:23:02:bb:a7:
                    59:1b:cc:1a:5a:b0:ec:14:f3:df:3f:78:b8:0c:a0:
                    eb:3e:cd:88:ed:1a:7c:60:f4:ce:15:fb:d7:e4:ff:
                    99:38:39:86:38:d5:e1:c9:32:30:42:fe:22:63:39:
                    c4:73:3e:36:23:36:94:6d:d1:e6:0d:09:53:da:8e:
                    0c:14:ac:b3:cd:57:b0:5a:e4:6b:f2:9b:64:a2:33:
                    46:88:fb:22:ce:f2:8e:ff:18:be:fd:20:7c:ec:3c:
                    3c:fd:b0:96:5a:e1:52:03:de:21:f3:c1:2e:f9:43:
                    d8:10:d3:12:da:07:98:98:3d:da:7e:0e:1a:22:33:
                    8d:aa:53:21:1b:63:43:ee:5b:95:fa:8e:7b:7a:54:
                    19:9a:79:c4:bb:95:23:aa:b6:24:30:c8:41:1c:a5:
                    fe:5e:c2:24:95:f1:6a:ac:51:57:8e:73:ca:27:3e:
                    2d:e2:a6:4d:32:b0:de:85:39:5e:18:f5:50:d0:b2:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2A:28:1B:25:86:24:7F:66:83:1E:BF:E3:76:FD:2B:BD:81:8B:BC
            X509v3 Authority Key Identifier:
                keyid:51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:87:9a:a9:09:5d:3e:88:5e:e0:61:96:81:c1:04:2d:01:
         50:a5:c2:07:55:1a:b6:5c:ef:bb:64:c7:16:a4:1f:f1:e3:d2:
         ce:57:e0:da:c6:ee:cb:16:e0:f1:fc:c4:37:c0:0a:58:17:5e:
         90:8b:b5:5d:c3:2b:48:c1:68:0f:43:95:a3:ab:32:f0:41:f1:
         47:53:4d:4e:3f:5f:c9:12:87:90:58:50:64:ba:bd:e9:2e:81:
         76:c7:37:36:c4:22:3b:46:5e:15:79:c2:9c:10:29:2a:b3:0d:
         05:87:31:7a:de:ed:25:30:a3:c4:41:47:29:ff:c6:df:16:80:
         e6:cf:0f:f8:1b:00:24:5d:a9:ac:48:70:25:22:b2:ad:b5:22:
         4c:b4:0a:a3:00:0b:e0:9c:84:60:51:1a:3d:e1:40:8f:4c:a0:
         a7:b9:bc:7a:37:d1:6f:73:2c:95:e6:f7:c8:5c:90:30:60:64:
         17:9f:5e:98:1a:80:30:20:d1:8a:26:ea:c1:18:9c:6b:6a:f3:
         f7:86:9c:71:4a:18:25:3e:8a:a4:29:4d:49:69:71:02:b8:57:
         ed:76:b8:be:8a:1f:fc:4c:f3:3f:c8:f2:3d:ee:ef:b2:9a:69:
         8a:3a:33:5e:e5:35:74:96:02:36:1a:1e:01:61:87:67:aa:33:
         67:c3:dd:ec
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUbVTVrQP9iqEmJkR/SEVcESYa/N8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE0OUQzMTA2MDYwNDZGREY4M0E3OEU4RTlEODkzNzRG
RDFEMEVGMzAeFw0yNDA0MDMxODU1MDJaFw0yNTA0MDMxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjkwN0ZDNUFEQTA2RjI0QTMx
QzU4MjhDM0U5REQ0RDhDMDMzQ0RDODgzNDRFQzdFOEQ1NjAyQzUwMDMwNEMyNzMz
OTEzRDM1MzdDRjE3MDU3MkJENDQ0NzNGNEFGNzkyMDk1NjM3OENGM0JCREEzMjND
OTMyRDNGOEI3OTE4MUVGQ0U4QkI1NzJEMDIyMzAyQkJBNzU5MUJDQzFBNUFCMEVD
MTRGM0RGM0Y3OEI4MENBMEVCM0VDRDg4RUQxQTdDNjBGNENFMTVGQkQ3RTRGRjk5
MzgzOTg2MzhENUUxQzkzMjMwNDJGRTIyNjMzOUM0NzMzRTM2MjMzNjk0NkREMUU2
MEQwOTUzREE4RTBDMTRBQ0IzQ0Q1N0IwNUFFNDZCRjI5QjY0QTIzMzQ2ODhGQjIy
Q0VGMjhFRkYxOEJFRkQyMDdDRUMzQzNDRkRCMDk2NUFFMTUyMDNERTIxRjNDMTJF
Rjk0M0Q4MTBEMzEyREEwNzk4OTgzRERBN0UwRTFBMjIzMzhEQUE1MzIxMUI2MzQz
RUU1Qjk1RkE4RTdCN0E1NDE5OUE3OUM0QkI5NTIzQUFCNjI0MzBDODQxMUNBNUZF
NUVDMjI0OTVGMTZBQUM1MTU3OEU3M0NBMjczRTJERTJBNjREMzJCMERFODUzOTVF
MThGNTUwRDBCMjEwQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuQf8WtoG8koxxYKMPp3U2MAzzciDROx+jVYCxQAwTCczkT01N88X
BXK9REc/SveSCVY3jPO72jI8ky0/i3kYHvzou1ctAiMCu6dZG8waWrDsFPPfP3i4
DKDrPs2I7Rp8YPTOFfvX5P+ZODmGONXhyTIwQv4iYznEcz42IzaUbdHmDQlT2o4M
FKyzzVewWuRr8ptkojNGiPsizvKO/xi+/SB87Dw8/bCWWuFSA94h88Eu+UPYENMS
2geYmD3afg4aIjONqlMhG2ND7luV+o57elQZmnnEu5UjqrYkMMhBHKX+XsIklfFq
rFFXjnPKJz4t4qZNMrDehTleGPVQ0LIQtwIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FJUqKBslhiR/ZoMev+N2/Su9gYu8MB8GA1UdIwQYMBaAFFFJ0xBgYEb9+Dp46OnY
k3T9HQ7zMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNBVHlxRHVwZHFwNlc3
d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzEvNTE0OUQzMTA2MDYwNDZG
REY4M0E3OEU4RTlEODkzNzRGRDFEMEVGMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81MTQ5RDMxMDYwNjA0NkZERjgzQTc4RThFOUQ4OTM3NEZEMUQw
RUYzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zQVR5cUR1cGRxcDZXN3dVSGQz
ejRIUEhRZ3I2VlNIZWhaWWR0VFZyRUFFTi8xLzMyMzgzMDM0M2EzMzM5MzM2MzNh
MzgzMDMwMzAzYTNhMmYzMzM0MjAzZDNlMjAzMjM2MzYzMDMyMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD
BgYoBDk8gDANBgkqhkiG9w0BAQsFAAOCAQEASLyHmqkJXT6IXuBhloHBBC0BUKXC
B1Uatlzvu2THFqQf8ePSzlfg2sbuyxbg8fzEN8AKWBdekIu1XcMrSMFoD0OVo6sy
8EHxR1NNTj9fyRKHkFhQZLq96S6Bdsc3NsQiO0ZeFXnCnBApKrMNBYcxet7tJTCj
xEFHKf/G3xaA5s8P+BsAJF2prEhwJSKyrbUiTLQKowAL4JyEYFEaPeFAj0ygp7m8
ejfRb3Msleb3yFyQMGBkF59emBqAMCDRiibqwRica2rz94accUoYJT6KpClNSWlx
ArhX7Xa4voof/EzzP8jyPe7vspppijozXuU1dJYCNhoeAWGHZ6ozZ8Pd7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org