Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa
File:                     323830343a363338383a3a2f33322d313238203d3e20323639333637.roa (raw, json)
Hash identifier:          tuAyIpRK2rHT63Okt/6p0ggSmAZrhJbYDzN/m6ej6f4=
Subject key identifier:   06:4F:CF:A7:AA:7A:56:D7:FE:59:ED:86:11:AF:6D:85:34:57:EA:6E
Certificate issuer:       /CN=449501A41FB5B63BE134A62426AA3A72D306EF80
Certificate serial:       3149274D8BC4F76E9BD8A80231471913DCD85BA3
Authority key identifier: 44:95:01:A4:1F:B5:B6:3B:E1:34:A6:24:26:AA:3A:72:D3:06:EF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449501A41FB5B63BE134A62426AA3A72D306EF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa
Signing time:             Tue 02 Apr 2024 18:03:33 +0000
ROA not before:           Tue 02 Apr 2024 17:58:33 +0000
ROA not after:            Tue 01 Apr 2025 18:03:33 +0000
asID:                     269367
IP address blocks:        2804:6388::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:49:27:4d:8b:c4:f7:6e:9b:d8:a8:02:31:47:19:13:dc:d8:5b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449501A41FB5B63BE134A62426AA3A72D306EF80
        Validity
            Not Before: Apr  2 17:58:33 2024 GMT
            Not After : Apr  1 18:03:33 2025 GMT
        Subject: CN=064FCFA7AA7A56D7FE59ED8611AF6D853457EA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:53:55:ef:8b:47:ad:c1:1d:3a:7a:56:e7:
                    16:2d:d4:82:eb:3a:a2:dd:3e:54:7f:c8:c2:37:3c:
                    e2:aa:19:d9:ba:6a:fc:1d:17:1d:d8:b3:fb:66:2b:
                    76:49:a6:ee:4e:8b:92:2c:8c:41:52:5f:f1:8e:21:
                    ca:14:fb:fa:b7:1b:87:c5:ee:77:9a:8e:b1:a0:96:
                    91:0c:dd:2c:98:16:35:ce:d9:73:81:5a:3c:69:f6:
                    ab:59:19:91:24:f9:e2:5a:e9:44:79:0b:65:cd:f2:
                    63:c6:b6:50:46:76:17:36:03:ec:9b:13:11:33:09:
                    a0:13:46:5e:df:3f:35:4e:f6:75:b3:66:ac:43:cb:
                    70:58:c3:e8:9c:d3:60:17:a6:eb:ed:92:39:02:e1:
                    ea:a6:05:ba:00:c5:1b:95:76:df:99:8b:b5:f4:b3:
                    7e:8c:9e:b8:cf:86:0f:b8:f1:a8:37:b9:93:ab:57:
                    65:22:4c:ac:16:7d:46:d5:18:1a:fa:e0:2f:2a:4e:
                    02:b4:62:38:fb:d0:61:d3:77:a9:a6:c8:05:4f:a3:
                    9e:75:3f:a3:ae:aa:dd:ab:ea:b1:be:33:a5:8a:ce:
                    8f:59:a5:85:e8:2d:a4:98:ff:e1:14:07:02:48:75:
                    f5:bd:f2:fb:40:a9:db:c2:81:f0:e4:dc:53:fc:77:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4F:CF:A7:AA:7A:56:D7:FE:59:ED:86:11:AF:6D:85:34:57:EA:6E
            X509v3 Authority Key Identifier:
                keyid:44:95:01:A4:1F:B5:B6:3B:E1:34:A6:24:26:AA:3A:72:D3:06:EF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/449501A41FB5B63BE134A62426AA3A72D306EF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449501A41FB5B63BE134A62426AA3A72D306EF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6388::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:15:84:e0:c6:53:c8:4e:25:e3:17:5f:c3:b6:99:2a:2a:
         46:dc:60:4f:e8:93:09:f8:bd:20:e5:d5:5f:ac:0e:cc:6c:05:
         a1:3d:f4:ed:e3:8b:cf:c8:8b:ab:4f:ae:11:20:96:85:f0:81:
         4f:ef:65:31:a6:65:e3:de:ec:29:62:0b:f5:00:c7:46:74:2f:
         b7:9c:e3:18:0d:37:d8:ef:74:2e:78:1e:55:3c:79:b3:d2:1d:
         3b:b6:cd:eb:a4:bb:07:3b:f2:8d:af:c6:40:37:42:bf:62:3b:
         79:fc:e7:f0:86:cf:cc:1b:c2:52:55:cc:ef:55:46:19:b3:31:
         80:18:81:91:97:6a:48:96:9b:83:23:24:2e:b2:fa:3b:52:f0:
         f9:15:29:6f:96:1a:fe:38:0f:97:a1:d3:04:9d:d0:82:a8:7c:
         c9:5f:0f:0c:59:4c:a5:23:6a:a7:1f:61:e0:db:11:ed:bd:30:
         34:bc:23:b5:b3:c2:6f:47:41:39:c8:cd:01:1d:f7:b4:4f:e9:
         d7:c0:8f:ac:6e:2f:c8:a5:25:3d:6e:55:84:0c:b1:f3:1f:97:
         ea:4e:61:5f:11:ed:60:7e:bc:02:fd:23:e9:b5:3c:50:c4:80:
         4c:fc:dd:31:ad:56:82:c4:b3:98:dc:5b:73:9b:ee:35:07:46:
         cf:0e:8e:60
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUMUknTYvE926b2KgCMUcZE9zYW6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NTAxQTQxRkI1QjYzQkUxMzRBNjI0MjZBQTNBNzJE
MzA2RUY4MDAeFw0yNDA0MDIxNzU4MzNaFw0yNTA0MDExODAzMzNaMDMxMTAvBgNV
BAMTKDA2NEZDRkE3QUE3QTU2RDdGRTU5RUQ4NjExQUY2RDg1MzQ1N0VBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4lNV74tHrcEdOnpW5xYt1ILr
OqLdPlR/yMI3POKqGdm6avwdFx3Ys/tmK3ZJpu5Oi5IsjEFSX/GOIcoU+/q3G4fF
7neajrGglpEM3SyYFjXO2XOBWjxp9qtZGZEk+eJa6UR5C2XN8mPGtlBGdhc2A+yb
ExEzCaATRl7fPzVO9nWzZqxDy3BYw+ic02AXpuvtkjkC4eqmBboAxRuVdt+Zi7X0
s36MnrjPhg+48ag3uZOrV2UiTKwWfUbVGBr64C8qTgK0Yjj70GHTd6mmyAVPo551
P6Ouqt2r6rG+M6WKzo9ZpYXoLaSY/+EUBwJIdfW98vtAqdvCgfDk3FP8dxk5AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUBk/Pp6p6Vtf+We2GEa9thTRX6m4wHwYDVR0j
BBgwFoAURJUBpB+1tjvhNKYkJqo6ctMG74AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RZNTlKanVodnE5M1N0YnZoSHk1cE1Ya2NiNmJTVjhTS3dqVGFFeGlO
cUgvMC80NDk1MDFBNDFGQjVCNjNCRTEzNEE2MjQyNkFBM0E3MkQzMDZFRjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0OTUwMUE0MUZCNUI2M0JF
MTM0QTYyNDI2QUEzQTcyRDMwNkVGODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkWTU5Smp1aHZxOTNTdGJ2aEh5NXBNWGtjYjZiU1Y4U0t3alRhRXhpTnFILzAv
MzIzODMwMzQzYTM2MzMzODM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMzM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGOIMA0GCSqGSIb3DQEBCwUAA4IBAQAtNhWE
4MZTyE4l4xdfw7aZKipG3GBP6JMJ+L0g5dVfrA7MbAWhPfTt44vPyIurT64RIJaF
8IFP72UxpmXj3uwpYgv1AMdGdC+3nOMYDTfY73QueB5VPHmz0h07ts3rpLsHO/KN
r8ZAN0K/Yjt5/Ofwhs/MG8JSVczvVUYZszGAGIGRl2pIlpuDIyQusvo7UvD5FSlv
lhr+OA+XodMEndCCqHzJXw8MWUylI2qnH2Hg2xHtvTA0vCO1s8JvR0E5yM0BHfe0
T+nXwI+sbi/IpSU9blWEDLHzH5fqTmFfEe1gfrwC/SPptTxQxIBM/N0xrVaCxLOY
3Ftzm+41B0bPDo5g
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org