Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          HEYcXavjTbAnk9g+1PNk3Y9dyNAFRZ+fNl0CHxz6uTk=
Subject key identifier:   66:AF:65:79:50:24:23:0F:D9:94:8C:04:73:3E:5D:C3:E9:D6:51:73
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       09D9A7A8304B7F31B8020CAD5ED080E67D5AE1ED
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:45 +0000
ROA not before:           Thu 04 Apr 2024 05:58:45 +0000
ROA not after:            Thu 03 Apr 2025 06:03:45 +0000
asID:                     265010
IP address blocks:        2804:3160:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d9:a7:a8:30:4b:7f:31:b8:02:0c:ad:5e:d0:80:e6:7d:5a:e1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:45 2024 GMT
            Not After : Apr  3 06:03:45 2025 GMT
        Subject: CN=66AF65795024230FD9948C04733E5DC3E9D65173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:01:20:27:a7:ce:b9:74:52:17:e9:88:1b:
                    59:d0:88:81:4c:5f:1a:66:f5:6f:58:65:61:1e:16:
                    26:5a:67:aa:a2:05:be:7b:eb:f9:17:59:d1:d1:d0:
                    57:f2:a6:c5:0e:30:ea:ca:36:5e:02:1b:39:97:35:
                    d5:26:0a:19:cb:7f:d0:a0:64:e7:43:09:f7:54:50:
                    99:56:e8:52:ff:a8:f7:6c:44:bd:6c:e9:2c:eb:33:
                    21:cd:a3:7b:ad:c6:8c:1f:54:f6:cc:13:a2:39:43:
                    4a:20:b7:8d:f7:5e:cd:e9:80:c6:c0:cb:f2:8a:f8:
                    c8:41:86:e2:1e:90:6f:e0:7a:c2:f2:4a:94:a5:d1:
                    63:36:ae:96:0e:69:c6:a1:e6:f6:e7:81:fd:aa:0a:
                    17:c6:66:d9:a9:d3:91:0d:69:c2:c5:dd:35:ca:57:
                    41:a9:fa:ec:12:2e:1b:8c:24:af:f4:c4:94:c3:c0:
                    ec:bc:f8:8c:af:df:f6:8b:05:9e:8f:72:f3:d4:22:
                    27:fd:21:1f:93:67:cc:0d:11:9f:3b:bf:15:b2:da:
                    81:e4:7e:56:1a:5b:91:2b:fb:87:cc:22:77:e5:e9:
                    92:cf:65:35:01:aa:be:05:66:bb:0a:bd:53:7f:28:
                    3f:90:f4:4a:1d:50:66:7a:fd:2c:1b:79:62:61:3a:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:65:79:50:24:23:0F:D9:94:8C:04:73:3E:5D:C3:E9:D6:51:73
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:e2:0f:85:6d:a7:b6:e7:c8:58:c1:13:02:b6:4a:58:ec:
         cd:28:29:20:92:99:01:c6:71:a2:45:19:3f:d6:13:ca:77:29:
         61:ef:cf:ad:32:37:74:bd:9b:42:3a:ba:22:a3:96:2a:d5:7a:
         0f:e4:77:91:07:f8:cd:41:af:b1:62:92:b6:7b:5c:0d:10:31:
         2a:66:00:ab:7b:9d:7e:6f:07:76:09:6b:5b:e0:7d:f9:10:4b:
         33:93:5f:62:b5:96:66:90:87:b3:19:cb:ee:be:e7:e6:ed:62:
         92:3a:47:58:00:ce:b6:1a:df:e5:17:dc:bb:86:31:f0:5e:41:
         31:31:6c:7c:0d:3a:6b:cb:42:81:55:87:38:21:86:c8:c4:d4:
         dd:7e:5c:be:26:70:af:96:4f:f5:24:38:be:40:35:6e:9c:7f:
         a3:3d:99:a7:12:9f:01:af:d4:ad:21:fb:a3:7d:ad:f7:53:a5:
         41:55:09:30:32:d0:18:1a:ba:2d:20:65:dd:18:89:8d:34:1a:
         1d:6d:1f:cd:fe:29:b2:fa:91:44:bc:5a:7b:ce:80:21:e2:22:
         bb:a2:af:aa:bc:7b:e7:e2:40:18:71:7a:8b:56:59:3c:60:d3:
         ce:91:af:44:11:c4:77:47:4d:09:ae:b9:7a:7e:db:44:b3:1e:
         d2:33:4e:eb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUCdmnqDBLfzG4AgytXtCA5n1a4e0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg3RjM5NTU0M0I1RDE1QzlDNDI1MjNFOTZCODQyQ0U2
MURENEI5MDAeFw0yNDA0MDQwNTU4NDVaFw0yNTA0MDMwNjAzNDVaMDMxMTAvBgNV
BAMTKDY2QUY2NTc5NTAyNDIzMEZEOTk0OEMwNDczM0U1REMzRTlENjUxNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TQEgJ6fOuXRSF+mIG1nQiIFM
Xxpm9W9YZWEeFiZaZ6qiBb576/kXWdHR0FfypsUOMOrKNl4CGzmXNdUmChnLf9Cg
ZOdDCfdUUJlW6FL/qPdsRL1s6SzrMyHNo3utxowfVPbME6I5Q0ogt433Xs3pgMbA
y/KK+MhBhuIekG/gesLySpSl0WM2rpYOacah5vbngf2qChfGZtmp05ENacLF3TXK
V0Gp+uwSLhuMJK/0xJTDwOy8+Iyv3/aLBZ6PcvPUIif9IR+TZ8wNEZ87vxWy2oHk
flYaW5Er+4fMInfl6ZLPZTUBqr4FZrsKvVN/KD+Q9EodUGZ6/SwbeWJhOvmZAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUZq9leVAkIw/ZlIwEcz5dw+nWUXMwHwYDVR0j
BBgwFoAUaH85VUO10VycQlI+lrhCzmHdS5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMS82ODdGMzk1NTQzQjVEMTVDOUM0MjUyM0U5NkI4NDJDRTYxREQ0QjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0YzOTU1NDNCNUQxNUM5
QzQyNTIzRTk2Qjg0MkNFNjFERDRCOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzEv
MzIzODMwMzQzYTMzMzEzNjMwM2EzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzNTMwMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMWAAAzANBgkqhkiG9w0BAQsFAAOCAQEA
FT7iD4Vtp7bnyFjBEwK2SljszSgpIJKZAcZxokUZP9YTyncpYe/PrTI3dL2bQjq6
IqOWKtV6D+R3kQf4zUGvsWKStntcDRAxKmYAq3udfm8HdglrW+B9+RBLM5NfYrWW
ZpCHsxnL7r7n5u1ikjpHWADOthrf5Rfcu4Yx8F5BMTFsfA06a8tCgVWHOCGGyMTU
3X5cviZwr5ZP9SQ4vkA1bpx/oz2ZpxKfAa/UrSH7o32t91OlQVUJMDLQGBq6LSBl
3RiJjTQaHW0fzf4psvqRRLxae86AIeIiu6Kvqrx75+JAGHF6i1ZZPGDTzpGvRBHE
d0dNCa65en7bRLMe0jNO6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org