Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
File:                     323830343a6139633a3a2f33332d3333203d3e203532383938.roa (raw, json)
Hash identifier:          46hIFEi2BuOALgWnlQAaVLWp2F2NEq92rJzY+/G8SCA=
Subject key identifier:   C6:2B:CA:59:CE:FD:79:06:36:75:9B:2A:71:C7:B5:AC:3C:1D:C3:17
Certificate issuer:       /CN=ADE422DDDDCA4BE538D94666695572095FCEDC5B
Certificate serial:       2AA51657BD91EBC6C937FD5BA72587AF54B9F86B
Authority key identifier: AD:E4:22:DD:DD:CA:4B:E5:38:D9:46:66:69:55:72:09:5F:CE:DC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
Signing time:             Thu 14 Mar 2024 13:06:42 +0000
ROA not before:           Thu 14 Mar 2024 13:01:42 +0000
ROA not after:            Thu 13 Mar 2025 13:06:42 +0000
asID:                     52898
IP address blocks:        2804:a9c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a5:16:57:bd:91:eb:c6:c9:37:fd:5b:a7:25:87:af:54:b9:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE422DDDDCA4BE538D94666695572095FCEDC5B
        Validity
            Not Before: Mar 14 13:01:42 2024 GMT
            Not After : Mar 13 13:06:42 2025 GMT
        Subject: CN=C62BCA59CEFD790636759B2A71C7B5AC3C1DC317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:8b:5a:9c:f8:ad:83:57:14:93:d9:24:a8:
                    96:44:dc:fa:cc:3c:84:75:2b:70:a2:c8:78:82:1d:
                    71:d4:7d:45:c0:d8:67:02:7c:d6:2d:cf:4f:93:54:
                    15:f9:74:a1:9f:20:11:3d:20:fc:29:0c:21:7a:2d:
                    36:4e:49:d7:e8:e7:d3:50:20:8b:0f:fc:96:95:27:
                    0f:d0:3b:a4:9d:c5:1a:b2:0e:d9:de:1e:8c:6e:49:
                    8d:ac:49:10:b0:f6:db:57:89:b5:c9:2e:63:a5:b6:
                    57:b2:ee:60:56:eb:ef:af:fa:35:b6:58:30:30:d2:
                    12:41:36:a6:36:58:a1:4d:03:d5:94:d7:6b:96:74:
                    21:df:0b:1f:cf:5c:05:cc:42:98:21:b7:98:1b:a0:
                    7f:a4:2f:3a:44:57:0c:0a:ed:c7:24:20:a1:ec:3e:
                    2a:bf:1b:5b:28:15:b5:18:a4:1d:e2:2b:17:b0:7d:
                    ff:42:d4:27:c9:84:c1:34:88:fd:fc:e9:7c:a5:3f:
                    b1:fe:27:e3:99:7f:19:3e:60:f5:87:b0:ec:58:b6:
                    4e:b1:d6:ac:a0:6f:39:85:b7:ab:aa:11:6c:02:01:
                    e5:25:9b:83:4d:ec:da:74:1e:b5:5c:c8:ce:ad:a2:
                    64:1b:09:61:09:66:7f:6c:76:99:e4:c8:44:ce:98:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2B:CA:59:CE:FD:79:06:36:75:9B:2A:71:C7:B5:AC:3C:1D:C3:17
            X509v3 Authority Key Identifier:
                keyid:AD:E4:22:DD:DD:CA:4B:E5:38:D9:46:66:69:55:72:09:5F:CE:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33332d3333203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a2:50:28:0f:b0:07:c3:68:77:ca:90:91:10:2c:8d:93:9d:ae:
         f4:0c:c1:d8:9d:4e:70:ed:ef:00:b4:56:9a:d7:28:4c:df:e8:
         21:91:03:69:08:6b:bd:49:9f:1d:8d:ff:f1:3e:d1:83:01:1f:
         13:78:b6:d9:09:73:6a:55:9b:4f:fa:5a:dc:ef:f0:4e:97:51:
         a7:d4:39:c9:88:46:1e:5f:d7:75:d4:37:ca:00:b3:ca:a0:e0:
         c9:5b:c4:d1:9b:51:c5:08:34:e1:8d:2e:be:56:dd:1f:80:ed:
         45:7b:08:76:7c:e0:dc:21:04:99:b4:af:d1:cd:1c:41:d7:07:
         6e:9b:fe:47:2f:42:2e:23:6f:b2:1d:77:bc:ee:01:f0:d7:bb:
         7d:41:e9:f5:a6:76:86:6e:ef:d9:a4:4c:dd:73:fd:15:d7:c6:
         ec:bb:af:44:9b:7c:b4:27:ee:78:43:8e:e5:26:c4:a2:43:3a:
         57:44:41:b7:1c:0d:02:15:c6:98:0e:26:a1:ab:be:8e:8c:4f:
         44:14:6d:49:38:cf:01:2d:2f:60:3f:4e:8f:e4:f3:3c:82:18:
         8b:5c:55:cd:e6:b6:f6:5c:c7:ce:fc:83:9e:28:9b:a6:6c:89:
         83:fd:e4:95:30:cc:b8:3a:b1:1b:0e:77:3f:2e:26:39:d2:34:
         37:29:ab:b7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKqUWV72R68bJN/1bpyWHr1S5+GswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFNDIyRERERENBNEJFNTM4RDk0NjY2Njk1NTcyMDk1
RkNFREM1QjAeFw0yNDAzMTQxMzAxNDJaFw0yNTAzMTMxMzA2NDJaMDMxMTAvBgNV
BAMTKEM2MkJDQTU5Q0VGRDc5MDYzNjc1OUIyQTcxQzdCNUFDM0MxREMzMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJ4tanPitg1cUk9kkqJZE3PrM
PIR1K3CiyHiCHXHUfUXA2GcCfNYtz0+TVBX5dKGfIBE9IPwpDCF6LTZOSdfo59NQ
IIsP/JaVJw/QO6SdxRqyDtneHoxuSY2sSRCw9ttXibXJLmOltley7mBW6++v+jW2
WDAw0hJBNqY2WKFNA9WU12uWdCHfCx/PXAXMQpght5gboH+kLzpEVwwK7cckIKHs
Piq/G1soFbUYpB3iKxewff9C1CfJhME0iP386XylP7H+J+OZfxk+YPWHsOxYtk6x
1qygbzmFt6uqEWwCAeUlm4NN7Np0HrVcyM6tomQbCWEJZn9sdpnkyETOmJeFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUxivKWc79eQY2dZsqcce1rDwdwxcwHwYDVR0j
BBgwFoAUreQi3d3KS+U42UZmaVVyCV/O3FswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FuaEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4
cTQvMC9BREU0MjJEREREQ0E0QkU1MzhEOTQ2NjY2OTU1NzIwOTVGQ0VEQzVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FERTQyMkRERERDQTRCRTUz
OEQ5NDY2NjY5NTU3MjA5NUZDRURDNUIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhbmhHWGNHYmU3bXpIU2RYUzFaMWY0cGhjU0NFelBSSFJvc1dRcWVleHE0LzAv
MzIzODMwMzQzYTYxMzk2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDM1MzIzODM5
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgcoBAqcADANBgkqhkiG9w0BAQsFAAOCAQEAolAoD7AHw2h3
ypCRECyNk52u9AzB2J1OcO3vALRWmtcoTN/oIZEDaQhrvUmfHY3/8T7RgwEfE3i2
2QlzalWbT/pa3O/wTpdRp9Q5yYhGHl/XddQ3ygCzyqDgyVvE0ZtRxQg04Y0uvlbd
H4DtRXsIdnzg3CEEmbSv0c0cQdcHbpv+Ry9CLiNvsh13vO4B8Ne7fUHp9aZ2hm7v
2aRM3XP9FdfG7LuvRJt8tCfueEOO5SbEokM6V0RBtxwNAhXGmA4moau+joxPRBRt
STjPAS0vYD9Oj+TzPIIYi1xVzea29lzHzvyDniibpmyJg/3klTDMuDqxGw53Py4m
OdI0Nymrtw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org