Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33332d3333203d3e20323636393131.roa
File:                     323830343a343533343a3a2f33332d3333203d3e20323636393131.roa (raw, json)
Hash identifier:          C6myvW/RSiY8lKVELF58gKSM8XhtZ0gl/AMniZ3izCw=
Subject key identifier:   40:EC:0E:8D:34:D1:4A:C0:AE:16:EC:8A:78:9F:B7:72:81:2A:61:76
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       220104DC455CA0E450FEF8614F3CADD8C2AC2AA3
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33332d3333203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:49:08 +0000
ROA not before:           Wed 16 Aug 2023 13:44:08 +0000
ROA not after:            Wed 14 Aug 2024 13:49:08 +0000
asID:                     266911
IP address blocks:        2804:4534::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:01:04:dc:45:5c:a0:e4:50:fe:f8:61:4f:3c:ad:d8:c2:ac:2a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:44:08 2023 GMT
            Not After : Aug 14 13:49:08 2024 GMT
        Subject: CN=40EC0E8D34D14AC0AE16EC8A789FB772812A6176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:bc:cb:3b:e8:00:95:a5:bc:a4:f3:c5:7a:
                    48:fa:2d:8c:81:16:83:70:d2:8a:7b:bb:e4:02:19:
                    68:1b:f0:2e:88:7d:05:0c:c6:8f:40:59:ab:64:4c:
                    51:24:d1:3b:b0:ce:d7:bf:fd:62:9c:62:0c:00:52:
                    50:e7:60:81:e8:cf:c0:5b:8a:ea:53:1a:ca:5b:67:
                    b2:05:fb:ed:90:93:92:b2:1d:38:77:b3:4d:e3:ff:
                    0d:43:68:9d:28:f9:b8:7e:fb:b4:28:1b:62:af:c5:
                    fe:4f:84:33:e9:7d:d6:83:53:ec:22:08:f1:94:49:
                    ec:ef:1a:3b:fd:36:c3:e9:f9:b1:42:68:fd:38:d3:
                    00:8f:4b:23:27:b6:b5:fe:7a:23:b2:4f:66:70:c0:
                    28:fb:1b:4e:b0:07:99:52:87:a1:0e:fc:03:ba:07:
                    40:e3:ba:8b:96:0d:56:86:14:d6:23:5d:18:2e:48:
                    e8:82:46:fc:3e:39:06:a2:ae:4d:c3:32:3b:ed:8b:
                    de:e0:5d:56:a5:00:46:e6:96:85:2b:20:17:0b:70:
                    3a:8e:1d:7a:b5:74:16:d3:fc:09:c6:c6:47:dc:66:
                    bd:72:0a:8c:41:21:e0:c1:62:99:57:f4:b0:b2:4c:
                    f1:e2:b1:2b:f5:a0:0d:18:d3:5e:d7:8f:5f:6e:fa:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EC:0E:8D:34:D1:4A:C0:AE:16:EC:8A:78:9F:B7:72:81:2A:61:76
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a3a2f33332d3333203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4534::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:6d:3d:1a:fc:ba:45:19:e4:48:02:a4:af:a0:a3:9b:03:
         c2:ba:b1:cb:e1:5c:06:68:84:52:91:ed:cf:bf:8c:f7:b6:96:
         e6:82:c4:62:3d:3f:08:3b:01:b7:08:93:b7:7f:b7:06:5d:64:
         45:19:ce:01:af:05:dc:28:5f:01:c6:5b:9f:d8:0a:77:19:78:
         41:59:85:a7:e4:4c:a9:4d:c7:54:37:8d:14:92:2a:f5:f4:72:
         d6:f1:09:97:ea:f6:53:91:25:da:9e:0f:00:d4:e4:d4:1d:65:
         a9:31:34:cf:dd:6a:ed:6c:6f:e9:be:33:13:ca:e1:db:a0:ff:
         d3:11:f7:b7:9e:15:d5:bd:c5:6a:ca:94:8f:5c:53:ec:05:41:
         1b:44:71:57:8b:40:3d:d8:5f:d4:40:26:7a:22:df:ce:10:93:
         d2:46:1e:13:6e:6c:55:aa:02:b7:c4:92:ac:33:e9:89:24:34:
         79:82:c1:97:f1:f6:84:d2:7e:7f:41:28:67:9e:9f:07:63:fb:
         9c:64:44:b1:ae:b6:81:ae:75:43:50:e7:fc:d6:f8:19:0b:e2:
         b9:ff:89:1f:a1:a1:59:ab:df:42:5e:9a:d6:95:a2:55:22:71:
         63:29:09:d7:a9:81:3a:2d:1e:cb:7a:1a:25:33:ae:74:96:2d:
         65:c0:6c:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIgEE3EVcoORQ/vhhTzyt2MKsKqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk3MEEzNkIwRDQzMDUwMkE1Njk1NTRGRTRGODVFNzM1
MDhFQTdDRjAeFw0yMzA4MTYxMzQ0MDhaFw0yNDA4MTQxMzQ5MDhaMDMxMTAvBgNV
BAMTKDQwRUMwRThEMzREMTRBQzBBRTE2RUM4QTc4OUZCNzcyODEyQTYxNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgErzLO+gAlaW8pPPFekj6LYyB
FoNw0op7u+QCGWgb8C6IfQUMxo9AWatkTFEk0Tuwzte//WKcYgwAUlDnYIHoz8Bb
iupTGspbZ7IF++2Qk5KyHTh3s03j/w1DaJ0o+bh++7QoG2Kvxf5PhDPpfdaDU+wi
CPGUSezvGjv9NsPp+bFCaP040wCPSyMntrX+eiOyT2ZwwCj7G06wB5lSh6EO/AO6
B0DjuouWDVaGFNYjXRguSOiCRvw+OQairk3DMjvti97gXValAEbmloUrIBcLcDqO
HXq1dBbT/AnGxkfcZr1yCoxBIeDBYplX9LCyTPHisSv1oA0Y017Xj19u+gQhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQOwOjTTRSsCuFuyKeJ+3coEqYXYwHwYDVR0j
BBgwFoAUKXCjaw1DBQKlaVVP5Phec1COp88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2g5NzZaYlJZY1RUaWVTdWVWQ0FDRkxHRG1SRUREM0N4aGpDSFFUTGVR
WHcvMC8yOTcwQTM2QjBENDMwNTAyQTU2OTU1NEZFNEY4NUU3MzUwOEVBN0NGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI5NzBBMzZCMEQ0MzA1MDJB
NTY5NTU0RkU0Rjg1RTczNTA4RUE3Q0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoOTc2WmJSWWNUVGllU3VlVkNBQ0ZMR0RtUkVERDNDeGhqQ0hRVExlUVh3LzAv
MzIzODMwMzQzYTM0MzUzMzM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzkzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARFNAAwDQYJKoZIhvcNAQELBQADggEBADmPbT0a
/LpFGeRIAqSvoKObA8K6scvhXAZohFKR7c+/jPe2luaCxGI9Pwg7AbcIk7d/twZd
ZEUZzgGvBdwoXwHGW5/YCncZeEFZhafkTKlNx1Q3jRSSKvX0ctbxCZfq9lORJdqe
DwDU5NQdZakxNM/dau1sb+m+MxPK4dug/9MR97eeFdW9xWrKlI9cU+wFQRtEcVeL
QD3YX9RAJnoi384Qk9JGHhNubFWqArfEkqwz6YkkNHmCwZfx9oTSfn9BKGeenwdj
+5xkRLGutoGudUNQ5/zW+BkL4rn/iR+hoVmr30JemtaVolUicWMpCdepgTotHst6
GiUzrnSWLWXAbD0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org