Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/323830343a353466383a3a2f33322d3332203d3e20323638363831.roa
File:                     323830343a353466383a3a2f33322d3332203d3e20323638363831.roa (raw, json)
Hash identifier:          tZoweEg6E1LAuZ8XqvnwRlQw+J4YjBve3Ju5fd9a8bs=
Subject key identifier:   7A:59:74:EE:E9:36:62:55:4E:78:36:C6:43:83:55:03:3D:35:2D:39
Certificate issuer:       /CN=168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2
Certificate serial:       62EB75A319626D5D28820205505368C0177652FB
Authority key identifier: 16:8A:ED:4F:A1:6F:CD:E9:F4:E0:C5:DF:9C:58:35:2F:63:B6:B5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/323830343a353466383a3a2f33322d3332203d3e20323638363831.roa
Signing time:             Mon 24 Apr 2023 22:01:02 +0000
ROA not before:           Mon 24 Apr 2023 21:56:02 +0000
ROA not after:            Mon 22 Apr 2024 22:01:02 +0000
asID:                     268681
IP address blocks:        2804:54f8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:eb:75:a3:19:62:6d:5d:28:82:02:05:50:53:68:c0:17:76:52:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2
        Validity
            Not Before: Apr 24 21:56:02 2023 GMT
            Not After : Apr 22 22:01:02 2024 GMT
        Subject: CN=7A5974EEE93662554E7836C6438355033D352D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:17:1d:7f:14:d0:93:12:99:fb:88:44:00:
                    72:5c:72:28:7b:5b:ee:f5:b7:a1:ee:56:b2:40:08:
                    c9:27:13:88:44:0d:61:fd:ef:65:b8:a3:97:dc:27:
                    18:1c:63:3b:2c:39:ed:3c:87:24:d5:9b:c2:fd:56:
                    56:96:07:bc:fe:6e:e8:dc:54:af:41:f0:25:07:a3:
                    f0:2c:93:fb:0b:f7:af:8d:d2:3f:a0:cc:97:60:8b:
                    6f:a2:a0:80:65:ce:fd:6a:16:70:58:33:60:65:44:
                    80:1a:a3:44:03:5a:04:68:48:e2:3c:65:aa:8b:c4:
                    fd:49:9d:32:8a:a4:16:0f:b8:09:3d:3d:e9:b5:18:
                    ac:4e:95:1b:2b:15:ce:5a:69:9a:b8:cf:5c:9c:0a:
                    49:f8:ec:b5:ef:d4:d9:fe:2e:7f:3e:c0:c4:ef:47:
                    57:8d:c9:5f:9a:96:13:73:78:5f:7b:19:47:2b:32:
                    33:52:85:2b:a5:0d:6d:8f:7f:c3:71:75:7e:c6:25:
                    da:67:9f:0e:0f:dd:53:a5:f0:65:4c:61:6d:fe:cb:
                    28:26:0e:9e:1c:e5:17:77:b7:b6:60:a9:04:f6:90:
                    c9:ce:40:97:80:b0:46:bd:7b:aa:9d:fa:79:d5:2b:
                    23:f8:5e:c3:e7:ae:6b:f2:ef:23:5c:fb:72:81:b1:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:59:74:EE:E9:36:62:55:4E:78:36:C6:43:83:55:03:3D:35:2D:39
            X509v3 Authority Key Identifier:
                keyid:16:8A:ED:4F:A1:6F:CD:E9:F4:E0:C5:DF:9C:58:35:2F:63:B6:B5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/323830343a353466383a3a2f33322d3332203d3e20323638363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:27:49:10:31:7a:3c:66:3e:22:54:2d:cd:c3:ee:00:83:
         48:5a:3c:40:54:d6:67:12:60:11:0c:03:a0:a1:e2:0c:60:b2:
         11:d1:b2:7e:b2:b4:cf:63:b0:0a:66:b4:19:6c:f1:05:2d:5a:
         a5:8d:25:65:6e:31:34:07:af:63:85:2d:ac:cb:52:17:c4:2d:
         b8:4c:57:26:f9:12:1e:ae:6c:b4:1d:dd:45:7c:04:1e:ec:06:
         7b:e6:72:29:d1:f2:c2:45:7a:04:1b:f4:c6:c7:47:76:b2:52:
         27:c6:27:79:a3:be:44:a9:de:2c:66:9a:7c:ab:18:02:e5:b4:
         cc:0f:97:17:a7:c7:6b:96:56:cf:f4:1a:65:4c:66:59:bb:08:
         2c:e4:4c:84:04:dc:3c:c1:ef:81:ea:f8:46:ce:af:dd:a9:91:
         f9:bb:c2:3d:3a:fd:0b:64:db:01:3c:a7:56:75:59:21:d7:bd:
         46:31:85:4e:41:08:e5:d7:59:5e:5d:d3:70:34:ad:6b:bb:62:
         58:31:40:6d:da:0b:66:33:3f:dc:7d:6b:5b:2f:42:9f:cb:65:
         c4:67:34:92:41:d5:b5:40:79:99:bc:89:25:a1:7f:a1:72:f3:
         88:ea:14:27:72:01:79:6b:60:41:78:0d:1d:71:56:67:0a:7f:
         33:37:6e:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYut1oxlibV0oggIFUFNowBd2UvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4QUVENEZBMTZGQ0RFOUY0RTBDNURGOUM1ODM1MkY2
M0I2QjVBMjAeFw0yMzA0MjQyMTU2MDJaFw0yNDA0MjIyMjAxMDJaMDMxMTAvBgNV
BAMTKDdBNTk3NEVFRTkzNjYyNTU0RTc4MzZDNjQzODM1NTAzM0QzNTJEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdRcdfxTQkxKZ+4hEAHJccih7
W+71t6HuVrJACMknE4hEDWH972W4o5fcJxgcYzssOe08hyTVm8L9VlaWB7z+bujc
VK9B8CUHo/Ask/sL96+N0j+gzJdgi2+ioIBlzv1qFnBYM2BlRIAao0QDWgRoSOI8
ZaqLxP1JnTKKpBYPuAk9Pem1GKxOlRsrFc5aaZq4z1ycCkn47LXv1Nn+Ln8+wMTv
R1eNyV+alhNzeF97GUcrMjNShSulDW2Pf8NxdX7GJdpnnw4P3VOl8GVMYW3+yygm
Dp4c5Rd3t7ZgqQT2kMnOQJeAsEa9e6qd+nnVKyP4XsPnrmvy7yNc+3KBsVIxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUell07uk2YlVOeDbGQ4NVAz01LTkwHwYDVR0j
BBgwFoAUFortT6Fvzen04MXfnFg1L2O2taIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFU
SGMvMC8xNjhBRUQ0RkExNkZDREU5RjRFMEM1REY5QzU4MzUyRjYzQjZCNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2OEFFRDRGQTE2RkNERTlG
NEUwQzVERjlDNTgzNTJGNjNCNkI1QTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDTXNZUUVNNFFRdVRjQUtrQVNyZVRHdVR4THpieGZrY1pvYVJndkZBVEhjLzAv
MzIzODMwMzQzYTM1MzQ2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzYzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARU+DANBgkqhkiG9w0BAQsFAAOCAQEAqWsnSRAx
ejxmPiJULc3D7gCDSFo8QFTWZxJgEQwDoKHiDGCyEdGyfrK0z2OwCma0GWzxBS1a
pY0lZW4xNAevY4UtrMtSF8QtuExXJvkSHq5stB3dRXwEHuwGe+ZyKdHywkV6BBv0
xsdHdrJSJ8YneaO+RKneLGaafKsYAuW0zA+XF6fHa5ZWz/QaZUxmWbsILORMhATc
PMHvger4Rs6v3amR+bvCPTr9C2TbATynVnVZIde9RjGFTkEI5ddZXl3TcDSta7ti
WDFAbdoLZjM/3H1rWy9Cn8tlxGc0kkHVtUB5mbyJJaF/oXLziOoUJ3IBeWtgQXgN
HXFWZwp/Mzdufw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org