Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a383030303a3a2f33342d3336203d3e20323632383033.roa
File:                     323830343a3235303a383030303a3a2f33342d3336203d3e20323632383033.roa (raw, json)
Hash identifier:          6U+XI9gTn6M0y2o9YWXfxZJHtZkP7Pv8Siwmw1aOKSA=
Subject key identifier:   C3:16:D9:07:7C:10:71:A5:9C:97:B7:04:8D:1A:8D:93:26:46:8D:A0
Certificate issuer:       /CN=A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B
Certificate serial:       3E6B002507D09357FD6FD7E0A12D992D10576DB1
Authority key identifier: A2:8C:39:40:8C:13:CA:9D:E2:7B:AE:FC:F4:DD:6F:B6:6B:0B:E7:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a383030303a3a2f33342d3336203d3e20323632383033.roa
Signing time:             Fri 22 Dec 2023 19:09:19 +0000
ROA not before:           Fri 22 Dec 2023 19:04:19 +0000
ROA not after:            Fri 20 Dec 2024 19:09:19 +0000
asID:                     262803
IP address blocks:        2804:250:8000::/34 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6b:00:25:07:d0:93:57:fd:6f:d7:e0:a1:2d:99:2d:10:57:6d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B
        Validity
            Not Before: Dec 22 19:04:19 2023 GMT
            Not After : Dec 20 19:09:19 2024 GMT
        Subject: CN=C316D9077C1071A59C97B7048D1A8D9326468DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:5b:13:57:03:84:c3:65:29:f7:49:02:61:
                    53:ff:f5:f1:71:d8:49:1c:e5:8b:34:67:f4:25:c0:
                    b7:1f:37:77:1d:39:a8:4b:49:11:f0:5c:09:93:a1:
                    f1:b1:15:b4:29:31:fb:31:c3:40:1c:f2:09:0a:61:
                    6e:3b:a1:ad:f6:24:35:b4:d8:ba:31:57:7f:e2:de:
                    a9:63:d9:45:70:0c:b6:61:85:4c:31:a3:c3:e9:2e:
                    8c:f9:58:0b:f6:6b:b6:55:91:77:1d:1b:80:42:ad:
                    d4:50:1d:76:d9:95:eb:2c:f2:a6:b0:5f:b7:14:01:
                    57:29:ae:92:a6:ed:09:74:61:df:7a:c4:9f:5e:64:
                    aa:39:49:1b:5e:9f:36:40:b2:1c:e5:59:d0:0f:9e:
                    ee:80:90:09:3b:02:65:f6:70:22:7a:3c:6c:e7:77:
                    af:4c:f2:4e:93:7f:62:4f:2f:21:6f:ff:71:40:1b:
                    01:e2:ef:91:a0:55:a7:42:db:a6:f6:51:4d:28:4d:
                    ba:f0:51:39:a8:53:06:37:17:f1:da:39:d2:13:7c:
                    3e:ba:7c:14:7e:3d:17:06:90:cb:af:f1:44:43:8d:
                    5f:91:c3:00:99:5c:f4:9d:b3:62:73:c2:d6:71:5c:
                    ac:cf:fe:07:49:c4:66:17:bb:2b:d9:05:2b:75:f4:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:16:D9:07:7C:10:71:A5:9C:97:B7:04:8D:1A:8D:93:26:46:8D:A0
            X509v3 Authority Key Identifier:
                keyid:A2:8C:39:40:8C:13:CA:9D:E2:7B:AE:FC:F4:DD:6F:B6:6B:0B:E7:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a383030303a3a2f33342d3336203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:73:b7:5f:25:c3:4d:a8:4b:82:ad:2a:9b:18:1e:2f:8d:
         14:04:04:16:e2:9d:a0:20:5d:ae:f1:e3:d6:8c:ae:2b:ba:78:
         64:10:72:0f:df:72:b6:53:a9:1b:18:d6:03:e7:ce:ec:c5:72:
         13:0d:d0:15:49:72:f7:63:01:02:ae:e2:e4:8f:04:17:5b:fa:
         cc:4a:73:a8:82:a7:13:f8:af:9c:8b:8c:94:f6:6d:01:bd:e4:
         75:c3:44:05:99:e0:72:da:dd:59:37:06:86:33:f2:57:ff:03:
         45:73:52:43:71:f8:b6:08:b8:87:7d:a6:de:77:07:eb:06:7a:
         fc:79:0d:81:4f:35:5f:e2:38:5d:42:f2:32:92:07:2c:d1:97:
         9b:50:40:a8:5c:e7:77:6e:ef:61:45:17:e0:61:86:ca:f5:cf:
         cd:58:e6:ad:a2:aa:15:6e:f8:ff:21:c0:13:af:ec:45:b1:56:
         e7:fa:a0:28:30:cd:87:7a:1b:b4:42:ba:f1:44:e4:95:39:1d:
         7d:04:b1:1e:c4:f0:4a:31:04:96:3a:45:9a:97:fc:60:dd:ea:
         cb:89:b1:57:5d:da:4d:62:fb:17:ea:d4:1f:52:e1:03:0a:de:
         9a:8b:d3:8c:5a:0a:71:08:94:08:68:22:dc:c1:6d:2f:80:5c:
         bb:09:6f:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPmsAJQfQk1f9b9fgoS2ZLRBXbbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI4QzM5NDA4QzEzQ0E5REUyN0JBRUZDRjRERDZGQjY2
QjBCRTcyQjAeFw0yMzEyMjIxOTA0MTlaFw0yNDEyMjAxOTA5MTlaMDMxMTAvBgNV
BAMTKEMzMTZEOTA3N0MxMDcxQTU5Qzk3QjcwNDhEMUE4RDkzMjY0NjhEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDVsTVwOEw2Up90kCYVP/9fFx
2Ekc5Ys0Z/QlwLcfN3cdOahLSRHwXAmTofGxFbQpMfsxw0Ac8gkKYW47oa32JDW0
2LoxV3/i3qlj2UVwDLZhhUwxo8PpLoz5WAv2a7ZVkXcdG4BCrdRQHXbZless8qaw
X7cUAVcprpKm7Ql0Yd96xJ9eZKo5SRtenzZAshzlWdAPnu6AkAk7AmX2cCJ6PGzn
d69M8k6Tf2JPLyFv/3FAGwHi75GgVadC26b2UU0oTbrwUTmoUwY3F/HaOdITfD66
fBR+PRcGkMuv8URDjV+RwwCZXPSds2JzwtZxXKzP/gdJxGYXuyvZBSt19PHxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwxbZB3wQcaWcl7cEjRqNkyZGjaAwHwYDVR0j
BBgwFoAUoow5QIwTyp3ie6789N1vtmsL5yswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1U24xZE5zR1Bq
UEovMC9BMjhDMzk0MDhDMTNDQTlERTI3QkFFRkNGNERENkZCNjZCMEJFNzJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyOEMzOTQwOEMxM0NBOURF
MjdCQUVGQ0Y0REQ2RkI2NkIwQkU3MkIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhZGFrZ1BkZ21FN044TFp0RWpCTnBoZm1zcWlwamdldVNuMWROc0dQalBKLzAv
MzIzODMwMzQzYTMyMzUzMDNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM2MjAzZDNl
MjAzMjM2MzIzODMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBAJQgDANBgkqhkiG9w0BAQsFAAOC
AQEAPwtzt18lw02oS4KtKpsYHi+NFAQEFuKdoCBdrvHj1oyuK7p4ZBByD99ytlOp
GxjWA+fO7MVyEw3QFUly92MBAq7i5I8EF1v6zEpzqIKnE/ivnIuMlPZtAb3kdcNE
BZngctrdWTcGhjPyV/8DRXNSQ3H4tgi4h32m3ncH6wZ6/HkNgU81X+I4XULyMpIH
LNGXm1BAqFznd27vYUUX4GGGyvXPzVjmraKqFW74/yHAE6/sRbFW5/qgKDDNh3ob
tEK68UTklTkdfQSxHsTwSjEEljpFmpf8YN3qy4mxV13aTWL7F+rUH1LhAwremovT
jFoKcQiUCGgi3MFtL4BcuwlvhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org