Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa
File:                     323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (raw, json)
Hash identifier:          HKlBwlLqr56MaMlEfF6V8YrAmae7QNeUJtZyJYtlHO0=
Subject key identifier:   20:6E:C3:0A:A1:C7:BA:3D:97:73:76:5E:18:75:9A:8F:36:BE:5C:98
Certificate issuer:       /CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
Certificate serial:       1FE52C83BC8B613147D324BAA0B6B89C98CBCADB
Authority key identifier: D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa
Signing time:             Wed 20 Mar 2024 18:29:11 +0000
ROA not before:           Wed 20 Mar 2024 18:24:11 +0000
ROA not after:            Wed 19 Mar 2025 18:29:11 +0000
asID:                     266584
IP address blocks:        2804:3e44::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e5:2c:83:bc:8b:61:31:47:d3:24:ba:a0:b6:b8:9c:98:cb:ca:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
        Validity
            Not Before: Mar 20 18:24:11 2024 GMT
            Not After : Mar 19 18:29:11 2025 GMT
        Subject: CN=206EC30AA1C7BA3D9773765E18759A8F36BE5C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:bf:50:56:fe:2f:c1:ec:32:7b:d6:6e:86:
                    c3:be:d3:15:f8:2f:b8:fc:02:cf:a6:f7:48:10:bc:
                    d0:8e:3a:85:2f:f9:98:96:d6:13:3f:a9:13:c5:f9:
                    fe:df:2e:a0:ca:15:c7:6c:71:84:40:f1:b3:75:dc:
                    d3:8f:ad:f8:75:65:63:c4:36:a8:68:df:2c:4b:17:
                    51:38:5a:4c:e8:6e:a4:3c:b3:68:22:9e:0b:c2:86:
                    af:ee:61:2b:72:85:a8:34:75:57:9f:46:96:75:19:
                    88:7c:68:ec:69:f3:13:14:07:e5:c1:29:1e:d6:76:
                    6d:9e:8e:0f:04:a1:b3:56:44:99:24:25:e9:e4:98:
                    41:7e:ee:f2:c1:2b:1e:66:26:10:77:55:ce:3b:7e:
                    c8:45:81:24:72:a1:a6:0e:7d:bd:cb:5f:9f:31:59:
                    35:3e:ca:ec:20:57:bf:b0:97:5f:cc:9b:e1:31:a8:
                    2d:90:a7:e6:8b:6a:a0:61:1a:a8:d4:b9:69:33:8c:
                    7c:32:a6:f3:d9:62:a9:26:c1:23:75:aa:ad:b8:96:
                    79:f4:19:3e:77:3c:05:84:d0:3a:51:c6:f0:96:b4:
                    b6:ec:e0:87:e8:07:bd:b0:2f:a3:3d:96:93:2d:2a:
                    55:a0:e3:14:b5:7e:f9:f1:2e:1a:e7:5f:67:21:c7:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6E:C3:0A:A1:C7:BA:3D:97:73:76:5E:18:75:9A:8F:36:BE:5C:98
            X509v3 Authority Key Identifier:
                keyid:D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:22:f6:44:09:d9:82:2a:1b:c8:d4:60:fb:c0:71:e8:a2:04:
         78:9e:f9:45:f9:56:ce:fa:31:57:cd:3f:28:0a:68:07:af:cb:
         71:b0:a6:e6:57:b8:3a:63:22:36:4e:3a:79:a8:a5:fb:a2:02:
         3c:03:20:87:8f:2a:6b:a3:20:eb:71:e2:0b:11:7a:ff:a3:8d:
         5f:44:03:3f:3d:c4:dc:e7:f6:f0:27:9f:06:b2:b4:8b:1b:22:
         a2:e5:bb:66:79:cc:b8:ef:79:44:f0:6b:c8:75:f4:af:d1:9d:
         5a:95:aa:f0:62:e3:00:b3:95:f5:28:6b:71:39:b6:fe:d3:b1:
         c6:8e:cf:cd:f1:a5:81:49:d5:35:bb:2d:f0:c5:f1:e2:08:19:
         04:d3:b1:da:38:5a:a1:4b:36:d6:a9:d8:c3:5d:60:bd:d4:25:
         0a:3d:80:12:c8:61:47:43:8a:92:ea:13:0c:88:bb:8a:37:55:
         32:13:81:46:35:40:af:46:83:84:b1:8e:f0:3b:8a:21:da:e7:
         f3:c5:a6:5f:cf:4f:dd:7b:32:3c:3e:8d:81:7f:f9:5a:4d:ba:
         be:e1:a2:0b:1f:e2:96:6e:d3:2f:2c:05:9a:43:85:fa:45:55:
         e3:ca:ea:94:34:5a:a0:f1:cc:a5:7d:09:23:85:fb:d9:b8:2d:
         e4:e7:21:01
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH+Usg7yLYTFH0yS6oLa4nJjLytswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZGNTUzRUNGQ0RCQTI1MjJFNDRBQUFDRjM4Nzc5OUUx
Q0E5OEVEQjAeFw0yNDAzMjAxODI0MTFaFw0yNTAzMTkxODI5MTFaMDMxMTAvBgNV
BAMTKDIwNkVDMzBBQTFDN0JBM0Q5NzczNzY1RTE4NzU5QThGMzZCRTVDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOt79QVv4vwewye9ZuhsO+0xX4
L7j8As+m90gQvNCOOoUv+ZiW1hM/qRPF+f7fLqDKFcdscYRA8bN13NOPrfh1ZWPE
Nqho3yxLF1E4WkzobqQ8s2gingvChq/uYStyhag0dVefRpZ1GYh8aOxp8xMUB+XB
KR7Wdm2ejg8EobNWRJkkJenkmEF+7vLBKx5mJhB3Vc47fshFgSRyoaYOfb3LX58x
WTU+yuwgV7+wl1/Mm+ExqC2Qp+aLaqBhGqjUuWkzjHwypvPZYqkmwSN1qq24lnn0
GT53PAWE0DpRxvCWtLbs4IfoB72wL6M9lpMtKlWg4xS1fvnxLhrnX2chx0vBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIG7DCqHHuj2Xc3ZeGHWajza+XJgwHwYDVR0j
BBgwFoAU1vVT7PzbolIuRKqs84d5nhypjtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMC9ENkY1NTNFQ0ZDREJBMjUyMkU0NEFBQUNGMzg3Nzk5RTFDQTk4RURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2RjU1M0VDRkNEQkEyNTIy
RTQ0QUFBQ0YzODc3OTlFMUNBOThFREIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtS2F6YXk5WFdvN2VaalR0UVU4b1FXdkxzVEhhTkZlYW5OV1o2VFpydE1lLzAv
MzIzODMwMzQzYTMzNjUzNDM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM2
MzUzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+RDANBgkqhkiG9w0BAQsFAAOCAQEARSL2RAnZ
giobyNRg+8Bx6KIEeJ75RflWzvoxV80/KApoB6/LcbCm5le4OmMiNk46eail+6IC
PAMgh48qa6Mg63HiCxF6/6ONX0QDPz3E3Of28CefBrK0ixsiouW7ZnnMuO95RPBr
yHX0r9GdWpWq8GLjALOV9ShrcTm2/tOxxo7PzfGlgUnVNbst8MXx4ggZBNOx2jha
oUs21qnYw11gvdQlCj2AEshhR0OKkuoTDIi7ijdVMhOBRjVAr0aDhLGO8DuKIdrn
88WmX89P3XsyPD6NgX/5Wk26vuGiCx/ilm7TLywFmkOF+kVV48rqlDRaoPHMpX0J
I4X72bgt5OchAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org