Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33322d3438203d3e20323638353933.roa
File:                     323830343a353339343a3a2f33322d3438203d3e20323638353933.roa (raw, json)
Hash identifier:          TPgvD/L/4CTg19oqkgGDDuVxaKQAC8Jp6zqFjTxWgvY=
Subject key identifier:   04:7C:E7:1A:B6:66:19:3F:44:60:BF:C7:FC:30:01:2D:E1:9B:44:BC
Certificate issuer:       /CN=B3A5736ACE6C497662EBAA10658C96B12B253181
Certificate serial:       42D5465742144CFC87FD628AAFD94D05BEF43F42
Authority key identifier: B3:A5:73:6A:CE:6C:49:76:62:EB:AA:10:65:8C:96:B1:2B:25:31:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3A5736ACE6C497662EBAA10658C96B12B253181.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33322d3438203d3e20323638353933.roa
Signing time:             Tue 20 Feb 2024 19:06:43 +0000
ROA not before:           Tue 20 Feb 2024 19:01:43 +0000
ROA not after:            Tue 18 Feb 2025 19:06:43 +0000
asID:                     268593
IP address blocks:        2804:5394::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d5:46:57:42:14:4c:fc:87:fd:62:8a:af:d9:4d:05:be:f4:3f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A5736ACE6C497662EBAA10658C96B12B253181
        Validity
            Not Before: Feb 20 19:01:43 2024 GMT
            Not After : Feb 18 19:06:43 2025 GMT
        Subject: CN=047CE71AB666193F4460BFC7FC30012DE19B44BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:09:c4:4b:76:fc:73:e4:2f:69:77:30:bd:
                    af:33:26:73:58:83:db:48:2e:c0:a0:de:f6:ba:58:
                    64:53:12:e5:5f:b2:04:20:a9:d2:32:04:5c:26:3c:
                    ac:61:9e:01:93:6b:a5:d9:92:85:b1:52:9c:bd:87:
                    a7:14:ae:f9:59:ff:25:e9:53:3a:d4:e6:e9:7a:f0:
                    2e:6c:c3:1d:6a:aa:5e:6b:fa:73:df:e8:fb:6d:cc:
                    fe:7a:bf:28:d3:cb:07:b5:6a:3a:82:55:9e:a6:51:
                    da:4d:f2:aa:7c:b5:28:ba:1d:e9:91:f2:d9:a5:f5:
                    0f:71:8f:18:85:ce:4a:3a:6d:a7:c2:b1:72:fd:46:
                    02:ea:a1:3f:1e:fe:7a:73:29:17:47:e2:f6:ff:c9:
                    99:4e:92:4e:71:a7:4c:21:9f:76:11:81:bb:d1:98:
                    f0:9d:de:f7:a7:c9:c1:09:e9:ba:8e:bf:22:e1:63:
                    d4:ff:3e:97:e9:ef:77:53:de:a7:96:cf:12:68:18:
                    57:99:e2:fb:9e:fb:8c:25:0e:e4:e2:b5:a1:1c:8d:
                    08:5b:5a:27:bb:bb:ed:99:ef:9e:5a:65:c8:5e:94:
                    8f:17:dd:e7:0c:f6:08:63:e9:db:28:20:a5:f8:ef:
                    11:ea:1f:ed:c3:0b:8d:5f:6a:36:a0:80:55:ec:f4:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7C:E7:1A:B6:66:19:3F:44:60:BF:C7:FC:30:01:2D:E1:9B:44:BC
            X509v3 Authority Key Identifier:
                keyid:B3:A5:73:6A:CE:6C:49:76:62:EB:AA:10:65:8C:96:B1:2B:25:31:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/B3A5736ACE6C497662EBAA10658C96B12B253181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3A5736ACE6C497662EBAA10658C96B12B253181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33322d3438203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5394::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:5f:51:e9:1b:e0:5f:01:d8:1d:61:86:e8:64:df:54:db:
         70:68:95:e9:d4:ef:de:40:62:d7:b1:2b:c8:e3:90:94:9b:d2:
         d4:07:50:32:26:53:f9:2a:bd:07:f8:a1:f0:b6:b6:a6:13:df:
         9c:35:b9:0a:86:71:9f:ea:5a:37:e5:c5:95:c3:4a:79:c4:42:
         ff:ab:cc:16:e8:c0:35:61:d8:f2:b0:eb:be:5b:4c:94:c6:d0:
         15:1d:cc:22:14:cd:57:ee:29:99:15:a3:a3:33:63:10:0b:cf:
         b2:53:b9:f9:d0:9a:64:c8:3c:1e:23:c9:b9:e6:1c:86:f3:b7:
         a2:bd:f9:6f:a6:0a:f5:3a:05:3c:23:e6:45:82:9d:0b:97:bf:
         1d:06:83:96:4f:b7:6e:3c:f5:21:89:e9:1e:cb:5a:ad:c5:f4:
         32:b7:d4:ff:65:ee:ea:5c:26:f4:0a:fa:d9:bc:e7:80:37:81:
         6d:0f:27:15:05:26:a4:0f:14:29:58:81:d9:3c:52:44:d2:72:
         1a:22:9c:2b:db:e0:29:fb:95:b2:39:4d:4a:e9:34:51:14:c9:
         48:30:3a:36:92:7f:09:59:4f:0a:1d:5d:97:01:7c:5f:c4:0d:
         85:89:5d:49:f3:c7:64:34:ea:de:52:38:1c:63:6a:02:52:21:
         ae:65:65:e0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQtVGV0IUTPyH/WKKr9lNBb70P0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNBNTczNkFDRTZDNDk3NjYyRUJBQTEwNjU4Qzk2QjEy
QjI1MzE4MTAeFw0yNDAyMjAxOTAxNDNaFw0yNTAyMTgxOTA2NDNaMDMxMTAvBgNV
BAMTKDA0N0NFNzFBQjY2NjE5M0Y0NDYwQkZDN0ZDMzAwMTJERTE5QjQ0QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsAnES3b8c+QvaXcwva8zJnNY
g9tILsCg3va6WGRTEuVfsgQgqdIyBFwmPKxhngGTa6XZkoWxUpy9h6cUrvlZ/yXp
UzrU5ul68C5swx1qql5r+nPf6PttzP56vyjTywe1ajqCVZ6mUdpN8qp8tSi6HemR
8tml9Q9xjxiFzko6bafCsXL9RgLqoT8e/npzKRdH4vb/yZlOkk5xp0whn3YRgbvR
mPCd3venycEJ6bqOvyLhY9T/Ppfp73dT3qeWzxJoGFeZ4vue+4wlDuTitaEcjQhb
Wie7u+2Z755aZchelI8X3ecM9ghj6dsoIKX47xHqH+3DC41fajaggFXs9OztAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBHznGrZmGT9EYL/H/DABLeGbRLwwHwYDVR0j
BBgwFoAUs6Vzas5sSXZi66oQZYyWsSslMYEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RQdXJqUERtOEE3RVkxWkxMckppbm0xRVBjajZLdHBOR2dvMVNGNU13
eW4vMC9CM0E1NzM2QUNFNkM0OTc2NjJFQkFBMTA2NThDOTZCMTJCMjUzMTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IzQTU3MzZBQ0U2QzQ5NzY2
MkVCQUExMDY1OEM5NkIxMkIyNTMxODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUUHVyalBEbThBN0VZMVpMTHJKaW5tMUVQY2o2S3RwTkdnbzFTRjVNd3luLzAv
MzIzODMwMzQzYTM1MzMzOTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARTlDANBgkqhkiG9w0BAQsFAAOCAQEAZv5fUekb
4F8B2B1hhuhk31TbcGiV6dTv3kBi17EryOOQlJvS1AdQMiZT+Sq9B/ih8La2phPf
nDW5CoZxn+paN+XFlcNKecRC/6vMFujANWHY8rDrvltMlMbQFR3MIhTNV+4pmRWj
ozNjEAvPslO5+dCaZMg8HiPJueYchvO3or35b6YK9ToFPCPmRYKdC5e/HQaDlk+3
bjz1IYnpHstarcX0MrfU/2Xu6lwm9Ar62bzngDeBbQ8nFQUmpA8UKViB2TxSRNJy
GiKcK9vgKfuVsjlNSuk0URTJSDA6NpJ/CVlPCh1dlwF8X8QNhYldSfPHZDTq3lI4
HGNqAlIhrmVl4A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org