Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a313030303a3a2f33362d3336203d3e20323636353834.roa
File:                     323830343a336534343a313030303a3a2f33362d3336203d3e20323636353834.roa (raw, json)
Hash identifier:          ehdvnVI/d0JR2BjlH5QBoixitvs+3ZwMRQ9uG4IRLac=
Subject key identifier:   53:70:5D:5F:CE:5A:02:E1:9E:A5:5B:9C:3B:35:02:BC:B8:5D:F4:E6
Certificate issuer:       /CN=B1CD847C4F6557FAC96B06B7FB61C99A42396F20
Certificate serial:       270B46BFEA0835148633C5D1895819C7887652D5
Authority key identifier: B1:CD:84:7C:4F:65:57:FA:C9:6B:06:B7:FB:61:C9:9A:42:39:6F:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a313030303a3a2f33362d3336203d3e20323636353834.roa
Signing time:             Wed 22 Mar 2023 20:26:21 +0000
ROA not before:           Wed 22 Mar 2023 20:21:21 +0000
ROA not after:            Wed 20 Mar 2024 20:26:21 +0000
asID:                     266584
IP address blocks:        2804:3e44:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0b:46:bf:ea:08:35:14:86:33:c5:d1:89:58:19:c7:88:76:52:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1CD847C4F6557FAC96B06B7FB61C99A42396F20
        Validity
            Not Before: Mar 22 20:21:21 2023 GMT
            Not After : Mar 20 20:26:21 2024 GMT
        Subject: CN=53705D5FCE5A02E19EA55B9C3B3502BCB85DF4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:d8:8a:67:63:1c:86:7f:af:12:c3:54:1f:
                    95:bb:cb:c1:0e:63:05:df:65:ce:fe:c5:58:4a:42:
                    af:90:33:79:77:48:79:84:6a:38:dd:13:2a:06:69:
                    1b:ff:07:ab:b9:e5:1a:af:49:25:7f:05:6d:8b:83:
                    ec:f5:2e:f6:66:88:a1:b3:38:f5:b6:57:99:f4:0d:
                    2c:00:21:64:35:5d:ac:0a:9c:2e:c8:82:d6:91:e9:
                    7f:86:0c:95:05:16:ab:e5:48:fc:f1:41:29:d6:f0:
                    17:7d:80:66:68:7f:a3:ad:92:bd:c0:11:51:a6:d0:
                    06:35:9c:c1:e9:f1:df:ab:51:2a:24:32:d7:81:7e:
                    86:8b:22:dd:e2:05:de:b7:83:ac:20:a1:48:63:58:
                    f5:a0:b8:18:43:f0:00:87:00:a6:4a:40:12:da:ff:
                    3d:0d:d8:6c:47:ec:ae:5f:5f:dd:df:49:56:61:80:
                    b9:3d:b6:3c:e9:1b:a8:1d:45:b2:7a:30:ec:45:2b:
                    f0:bb:1d:cc:5b:08:01:06:aa:e4:f5:89:7d:3c:31:
                    1c:6c:6f:53:2a:a6:ec:96:35:1f:79:0e:92:fb:ce:
                    1f:30:a4:24:e3:76:86:d2:d1:78:3f:2c:3b:17:19:
                    1d:7f:b8:7e:da:3f:d9:c7:ef:2d:9a:e7:5d:db:50:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:70:5D:5F:CE:5A:02:E1:9E:A5:5B:9C:3B:35:02:BC:B8:5D:F4:E6
            X509v3 Authority Key Identifier:
                keyid:B1:CD:84:7C:4F:65:57:FA:C9:6B:06:B7:FB:61:C9:9A:42:39:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a313030303a3a2f33362d3336203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e44:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:ae:b6:2e:07:b0:3b:9d:4f:b2:bd:81:14:b7:da:28:ec:
         68:57:d8:77:a0:a4:f8:52:e8:0e:b9:5f:d2:e4:c5:2f:a0:72:
         56:7b:f7:61:44:e5:c8:dc:06:f7:2f:94:2b:08:9f:15:90:36:
         9d:aa:20:df:f4:c1:56:00:4d:a8:69:cc:bf:a9:73:79:59:fa:
         c6:ec:51:b4:f9:ae:dc:04:b4:a0:e1:9a:ee:a5:0b:2f:e4:2b:
         c4:38:dc:c6:6a:e7:e0:01:b0:65:cc:0e:22:9a:1f:b3:9c:50:
         f1:86:34:7f:22:10:bf:dc:56:f7:b8:f0:bc:e3:2c:91:46:c5:
         f0:5a:d2:4b:23:4f:a6:fb:f2:08:68:b1:fd:7c:5d:2e:f4:4f:
         7b:ed:89:1d:fa:3a:78:05:8e:8d:00:f1:97:76:2f:f0:40:e0:
         92:c8:59:a1:57:28:e2:6e:d1:f9:e1:1a:04:56:42:c7:48:70:
         84:2d:e2:94:17:d4:2a:f0:10:17:7a:c6:f7:75:49:cf:6a:32:
         8a:cd:d0:f1:b4:92:12:f6:3f:50:1d:d3:d2:71:c9:b0:7b:a2:
         e2:3d:17:56:ec:ce:bb:32:5f:cb:ca:ed:f2:14:ca:4c:5e:c6:
         80:d4:e0:31:36:8f:fe:fc:31:f0:70:17:94:fe:bf:80:c1:1e:
         31:54:2b:47
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJwtGv+oINRSGM8XRiVgZx4h2UtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFDRDg0N0M0RjY1NTdGQUM5NkIwNkI3RkI2MUM5OUE0
MjM5NkYyMDAeFw0yMzAzMjIyMDIxMjFaFw0yNDAzMjAyMDI2MjFaMDMxMTAvBgNV
BAMTKDUzNzA1RDVGQ0U1QTAyRTE5RUE1NUI5QzNCMzUwMkJDQjg1REY0RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCodiKZ2Mchn+vEsNUH5W7y8EO
YwXfZc7+xVhKQq+QM3l3SHmEajjdEyoGaRv/B6u55RqvSSV/BW2Lg+z1LvZmiKGz
OPW2V5n0DSwAIWQ1XawKnC7IgtaR6X+GDJUFFqvlSPzxQSnW8Bd9gGZof6Otkr3A
EVGm0AY1nMHp8d+rUSokMteBfoaLIt3iBd63g6wgoUhjWPWguBhD8ACHAKZKQBLa
/z0N2GxH7K5fX93fSVZhgLk9tjzpG6gdRbJ6MOxFK/C7HcxbCAEGquT1iX08MRxs
b1MqpuyWNR95DpL7zh8wpCTjdobS0Xg/LDsXGR1/uH7aP9nH7y2a513bUGyPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUU3BdX85aAuGepVucOzUCvLhd9OYwHwYDVR0j
BBgwFoAUsc2EfE9lV/rJawa3+2HJmkI5byAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMC9CMUNEODQ3QzRGNjU1N0ZBQzk2QjA2QjdGQjYxQzk5QTQyMzk2RjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxQ0Q4NDdDNEY2NTU3RkFD
OTZCMDZCN0ZCNjFDOTlBNDIzOTZGMjAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtS2F6YXk5WFdvN2VaalR0UVU4b1FXdkxzVEhhTkZlYW5OV1o2VFpydE1lLzAv
MzIzODMwMzQzYTMzNjUzNDM0M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEPkQQMA0GCSqGSIb3DQEBCwUA
A4IBAQBrJK62LgewO51Psr2BFLfaKOxoV9h3oKT4UugOuV/S5MUvoHJWe/dhROXI
3Ab3L5QrCJ8VkDadqiDf9MFWAE2oacy/qXN5WfrG7FG0+a7cBLSg4ZrupQsv5CvE
ONzGaufgAbBlzA4imh+znFDxhjR/IhC/3Fb3uPC84yyRRsXwWtJLI0+m+/IIaLH9
fF0u9E977Ykd+jp4BY6NAPGXdi/wQOCSyFmhVyjibtH54RoEVkLHSHCELeKUF9Qq
8BAXesb3dUnPajKKzdDxtJIS9j9QHdPSccmwe6LiPRdW7M67Ml/Lyu3yFMpMXsaA
1OAxNo/+/DHwcBeU/r+AwR4xVCtH
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org