Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa
File:                     323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier:          KDrlLdfi+DsEMb0+BsJ3p20l3iIS50sHIGs6RlfooWo=
Subject key identifier:   70:30:B0:90:7B:0D:72:CD:89:CD:66:FA:CC:5F:13:5A:02:E6:08:EB
Certificate issuer:       /CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Certificate serial:       3E7FDF2845BD2255D84BA4DF31F5387A62A8E540
Authority key identifier: 7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa
Signing time:             Fri 29 Dec 2023 18:38:36 +0000
ROA not before:           Fri 29 Dec 2023 18:33:36 +0000
ROA not after:            Fri 27 Dec 2024 18:38:36 +0000
asID:                     262847
IP address blocks:        2804:2e8:8040::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7f:df:28:45:bd:22:55:d8:4b:a4:df:31:f5:38:7a:62:a8:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
        Validity
            Not Before: Dec 29 18:33:36 2023 GMT
            Not After : Dec 27 18:38:36 2024 GMT
        Subject: CN=7030B0907B0D72CD89CD66FACC5F135A02E608EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:fc:b1:12:e1:cc:c0:e8:b5:80:e4:75:68:
                    e9:3e:ce:e3:42:d3:28:ce:e8:2e:1e:fd:31:51:70:
                    28:3c:97:bd:9f:05:9c:08:07:02:00:40:f4:9f:d4:
                    a9:b7:b8:7d:e2:f9:6c:25:41:5b:ba:9f:a7:a5:22:
                    29:c7:94:5c:97:22:ad:3a:9c:7a:15:26:e3:44:ba:
                    f2:2d:e5:8d:3d:26:aa:d8:7a:40:a0:ef:d9:20:ed:
                    bd:b0:31:dc:f8:21:82:c8:47:55:72:26:5a:06:c6:
                    3e:e2:36:0f:ad:ff:43:9d:35:48:38:69:83:fa:84:
                    e2:95:1f:e9:39:26:36:62:7f:f7:fa:0d:ed:26:2a:
                    eb:b4:6f:0e:93:7b:1c:01:4a:37:07:5c:01:df:c1:
                    4c:50:a7:13:37:cb:18:cf:c5:d0:91:cc:d4:13:4c:
                    47:06:51:80:95:ba:f3:06:74:d7:af:a7:2c:ef:eb:
                    7c:1a:e0:5d:b9:a2:b9:49:b5:4a:59:26:f3:4f:ee:
                    8a:7e:7d:2b:4c:41:00:4b:a9:f3:f0:6d:2c:12:3b:
                    e3:df:9f:94:b7:2a:3d:30:51:d3:fb:5a:15:13:2b:
                    99:9c:ad:45:6b:8d:24:5a:11:da:d1:e2:7c:2b:c7:
                    73:85:2a:47:9d:c3:8c:be:da:55:39:80:60:79:06:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:B0:90:7B:0D:72:CD:89:CD:66:FA:CC:5F:13:5A:02:E6:08:EB
            X509v3 Authority Key Identifier:
                keyid:7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/7E89C742D551BF248E147A7AC13D94D12B15C8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:8040::/42

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:b7:10:93:76:bb:36:9e:91:b0:08:d8:43:96:c8:90:34:
         65:18:1d:8c:a1:9f:d1:53:b9:03:29:e0:26:da:f9:be:94:fb:
         41:b7:d0:02:d5:6b:03:ed:08:31:a3:2c:70:a3:15:2a:cf:30:
         8c:62:3e:9e:0c:c6:c7:25:5f:e0:0b:43:1b:b8:1b:2d:10:9e:
         c9:78:44:88:23:79:6a:2e:3f:b5:d9:20:fc:7f:ce:5a:33:e6:
         64:26:f1:08:11:44:dc:d0:13:8e:e6:dd:38:69:e5:22:68:73:
         40:12:0c:f4:65:7e:71:f0:13:b7:2b:51:2c:c6:72:05:e9:d8:
         9c:03:a9:c3:a4:c7:fc:0b:3b:0f:22:8b:57:fa:f0:a5:21:be:
         cf:ff:be:30:a7:3e:7d:f2:fd:b9:70:40:88:7b:28:91:f1:46:
         39:ac:3e:53:19:c7:da:74:c9:e9:23:18:6f:d0:02:6e:02:b6:
         91:76:88:22:86:06:aa:a9:c5:ce:09:56:78:f6:fc:a0:7e:5a:
         93:9b:a4:6d:5c:6d:63:1e:6b:3f:b2:ba:b5:70:3f:23:f3:80:
         88:01:09:b9:d5:0c:9a:27:00:5f:3c:a2:ee:2f:ce:07:1a:dc:
         9e:6c:db:77:45:e4:42:0c:5b:1d:93:4b:35:df:ca:1e:0d:cc:
         48:d2:1f:0f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUPn/fKEW9IlXYS6TfMfU4emKo5UAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U4OUM3NDJENTUxQkYyNDhFMTQ3QTdBQzEzRDk0RDEy
QjE1QzhGNjAeFw0yMzEyMjkxODMzMzZaFw0yNDEyMjcxODM4MzZaMDMxMTAvBgNV
BAMTKDcwMzBCMDkwN0IwRDcyQ0Q4OUNENjZGQUNDNUYxMzVBMDJFNjA4RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLvyxEuHMwOi1gOR1aOk+zuNC
0yjO6C4e/TFRcCg8l72fBZwIBwIAQPSf1Km3uH3i+WwlQVu6n6elIinHlFyXIq06
nHoVJuNEuvIt5Y09JqrYekCg79kg7b2wMdz4IYLIR1VyJloGxj7iNg+t/0OdNUg4
aYP6hOKVH+k5JjZif/f6De0mKuu0bw6TexwBSjcHXAHfwUxQpxM3yxjPxdCRzNQT
TEcGUYCVuvMGdNevpyzv63wa4F25orlJtUpZJvNP7op+fStMQQBLqfPwbSwSO+Pf
n5S3Kj0wUdP7WhUTK5mcrUVrjSRaEdrR4nwrx3OFKkedw4y+2lU5gGB5BuPlAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUcDCwkHsNcs2JzWb6zF8TWgLmCOswHwYDVR0j
BBgwFoAUfonHQtVRvySOFHp6wT2U0SsVyPYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMS83RTg5Qzc0MkQ1NTFCRjI0OEUxNDdBN0FDMTNEOTREMTJCMTVDOEY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFODlDNzQyRDU1MUJGMjQ4
RTE0N0E3QUMxM0Q5NEQxMkIxNUM4RjYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzEv
MzIzODMwMzQzYTMyNjUzODNhMzgzMDM0MzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNl
MjAzMjM2MzIzODM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBALogEAwDQYJKoZIhvcNAQELBQAD
ggEBAIyGtxCTdrs2npGwCNhDlsiQNGUYHYyhn9FTuQMp4Cba+b6U+0G30ALVawPt
CDGjLHCjFSrPMIxiPp4MxsclX+ALQxu4Gy0Qnsl4RIgjeWouP7XZIPx/zloz5mQm
8QgRRNzQE47m3Thp5SJoc0ASDPRlfnHwE7crUSzGcgXp2JwDqcOkx/wLOw8ii1f6
8KUhvs//vjCnPn3y/blwQIh7KJHxRjmsPlMZx9p0yekjGG/QAm4CtpF2iCKGBqqp
xc4JVnj2/KB+WpObpG1cbWMeaz+yurVwPyPzgIgBCbnVDJonAF88ou4vzgca3J5s
23dF5EIMWx2TSzXfyh4NzEjSHw8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org