Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e20323032.roa
File:                     323830343a333831303a3a2f33322d313238203d3e20323032.roa (raw, json)
Hash identifier:          hjFarS8AOPh4SIoDvz+ny7EcG1Rbn2b9tszYfeLtWeg=
Subject key identifier:   DF:D6:84:89:74:AB:1E:AA:E6:CB:55:50:78:C4:13:BA:5D:12:D3:6F
Certificate issuer:       /CN=548D6970267EF22027E90B3D68AB2E122A2BA170
Certificate serial:       72B443B661E71621AB43D3BA36ED25E22F6B7430
Authority key identifier: 54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e20323032.roa
Signing time:             Thu 22 Feb 2024 13:16:15 +0000
ROA not before:           Thu 22 Feb 2024 13:11:15 +0000
ROA not after:            Thu 20 Feb 2025 13:16:15 +0000
asID:                     202
IP address blocks:        2804:3810::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b4:43:b6:61:e7:16:21:ab:43:d3:ba:36:ed:25:e2:2f:6b:74:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548D6970267EF22027E90B3D68AB2E122A2BA170
        Validity
            Not Before: Feb 22 13:11:15 2024 GMT
            Not After : Feb 20 13:16:15 2025 GMT
        Subject: CN=DFD6848974AB1EAAE6CB555078C413BA5D12D36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:e2:86:26:9f:57:56:66:01:60:b9:ff:61:
                    73:52:0b:1a:07:c5:5e:6a:dd:f9:e6:57:d5:8f:fc:
                    69:e2:3f:01:a2:12:6d:7c:27:0d:c4:21:59:98:f7:
                    ed:de:29:07:f4:23:12:08:05:12:93:2e:93:2c:8f:
                    40:e2:8f:c0:08:c6:42:b3:7c:ef:14:71:25:b7:da:
                    64:e2:c0:25:6f:23:b4:c7:7a:32:cd:91:8e:ad:ab:
                    38:86:c8:64:f7:85:78:94:df:39:3e:5d:61:3f:96:
                    d2:f8:1c:0f:64:a6:4e:99:95:c4:a0:16:e2:6f:c3:
                    c8:87:64:a3:51:02:12:01:aa:46:1a:89:e7:d7:ba:
                    50:bd:d1:d0:7f:34:2d:2a:0e:60:a9:eb:ad:09:f3:
                    11:5d:70:f5:b2:44:54:b0:e1:b9:30:ce:16:5d:37:
                    f2:d8:c6:f8:d1:64:36:bd:d6:32:30:2d:f7:a2:db:
                    59:c5:d9:cb:0b:27:19:e2:08:da:b5:cc:ea:02:c2:
                    20:7d:1e:98:4a:05:04:9b:f9:4b:1d:f4:8d:17:15:
                    3a:66:87:aa:f6:61:46:2e:7c:6d:7f:d4:3e:50:f6:
                    cd:18:f9:d9:37:a7:98:e2:3d:a9:27:c9:f9:cd:e7:
                    e5:a0:3e:2c:cd:6d:7e:fa:a6:c7:bd:08:d5:b1:df:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D6:84:89:74:AB:1E:AA:E6:CB:55:50:78:C4:13:BA:5D:12:D3:6F
            X509v3 Authority Key Identifier:
                keyid:54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/548D6970267EF22027E90B3D68AB2E122A2BA170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3810::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:b3:12:91:ff:7d:e4:e7:28:ed:52:23:fd:63:70:ff:40:
         ec:eb:1b:70:91:d1:14:31:b5:2c:ab:c5:59:9b:6e:13:f1:79:
         d4:3e:69:27:0b:c5:9e:7c:43:bc:10:bd:5a:99:36:6f:d9:e6:
         2c:4d:af:c6:f8:e7:51:cf:ab:a2:5a:34:86:e1:31:70:d6:4d:
         2e:a4:7f:53:77:51:31:e3:34:d8:3c:9a:27:19:cc:5f:97:e6:
         ce:ac:5d:bc:a7:92:7d:29:08:30:66:85:49:77:c1:0d:92:21:
         9a:0e:6a:70:df:35:02:8d:3e:3d:c1:41:86:92:4f:62:5b:67:
         56:6c:f8:e7:48:12:8b:2d:65:c8:63:dd:e5:12:8d:83:30:7f:
         eb:c9:00:70:61:23:88:b9:c9:0e:73:35:13:44:1c:91:51:df:
         3d:ff:d3:82:de:8b:45:33:70:85:57:d0:16:8f:5f:8f:8e:49:
         bd:93:ee:a9:fc:15:e6:38:03:74:d9:12:63:72:df:9b:c5:e6:
         61:0e:07:39:03:1a:cf:2d:72:47:2e:7d:df:55:58:8c:3d:01:
         12:87:9d:1e:75:f6:09:6b:22:85:44:86:f0:2d:cf:d5:e4:a6:
         33:73:2e:b8:19:ef:2e:37:20:b5:6a:36:c3:05:23:26:ee:34:
         8a:d3:52:1c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUcrRDtmHnFiGrQ9O6Nu0l4i9rdDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ4RDY5NzAyNjdFRjIyMDI3RTkwQjNENjhBQjJFMTIy
QTJCQTE3MDAeFw0yNDAyMjIxMzExMTVaFw0yNTAyMjAxMzE2MTVaMDMxMTAvBgNV
BAMTKERGRDY4NDg5NzRBQjFFQUFFNkNCNTU1MDc4QzQxM0JBNUQxMkQzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8peKGJp9XVmYBYLn/YXNSCxoH
xV5q3fnmV9WP/GniPwGiEm18Jw3EIVmY9+3eKQf0IxIIBRKTLpMsj0Dij8AIxkKz
fO8UcSW32mTiwCVvI7THejLNkY6tqziGyGT3hXiU3zk+XWE/ltL4HA9kpk6ZlcSg
FuJvw8iHZKNRAhIBqkYaiefXulC90dB/NC0qDmCp660J8xFdcPWyRFSw4bkwzhZd
N/LYxvjRZDa91jIwLfei21nF2csLJxniCNq1zOoCwiB9HphKBQSb+Usd9I0XFTpm
h6r2YUYufG1/1D5Q9s0Y+dk3p5jiPaknyfnN5+WgPizNbX76pse9CNWx37ELAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU39aEiXSrHqrmy1VQeMQTul0S028wHwYDVR0j
BBgwFoAUVI1pcCZ+8iAn6Qs9aKsuEioroXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05GN2FIdlZlYVpvM0M1THRmWVFweEFzWFhDTkUyeThZSEx1WnU3SkxZ
cWIvMC81NDhENjk3MDI2N0VGMjIwMjdFOTBCM0Q2OEFCMkUxMjJBMkJBMTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0OEQ2OTcwMjY3RUYyMjAy
N0U5MEIzRDY4QUIyRTEyMkEyQkExNzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNORjdhSHZWZWFabzNDNUx0ZllRcHhBc1hYQ05FMnk4WUhMdVp1N0pMWXFiLzAv
MzIzODMwMzQzYTMzMzgzMTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjMw
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBDgQMA0GCSqGSIb3DQEBCwUAA4IBAQCEqrMSkf995Oco
7VIj/WNw/0Ds6xtwkdEUMbUsq8VZm24T8XnUPmknC8WefEO8EL1amTZv2eYsTa/G
+OdRz6uiWjSG4TFw1k0upH9Td1Ex4zTYPJonGcxfl+bOrF28p5J9KQgwZoVJd8EN
kiGaDmpw3zUCjT49wUGGkk9iW2dWbPjnSBKLLWXIY93lEo2DMH/ryQBwYSOIuckO
czUTRByRUd89/9OC3otFM3CFV9AWj1+Pjkm9k+6p/BXmOAN02RJjct+bxeZhDgc5
AxrPLXJHLn3fVViMPQESh50edfYJayKFRIbwLc/V5KYzcy64Ge8uNyC1ajbDBSMm
7jSK01Ic
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-ams.rpki-client.org