Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/1/323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa
File:                     323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa (raw, json)
Hash identifier:          ZgyP+huzu+KDXfULA7OyAvFkwKTv44v4R/3ncDKdHmQ=
Subject key identifier:   86:0B:E8:92:F7:3B:FE:7F:FB:CB:42:91:45:5E:52:6A:33:DC:CB:CA
Certificate issuer:       /CN=38E519DDEE70A7D943E82F69D4B020AC54D3BB31
Certificate serial:       32701B779879B323E0897708920D1270017DE619
Authority key identifier: 38:E5:19:DD:EE:70:A7:D9:43:E8:2F:69:D4:B0:20:AC:54:D3:BB:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E519DDEE70A7D943E82F69D4B020AC54D3BB31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/1/323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     272242
IP address blocks:        2804:8424:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:70:1b:77:98:79:b3:23:e0:89:77:08:92:0d:12:70:01:7d:e6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E519DDEE70A7D943E82F69D4B020AC54D3BB31
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:96:57:e6:84:12:30:22:90:73:f1:a4:02:
                    da:18:54:93:29:57:28:0b:90:f0:f1:ec:05:0d:59:
                    e4:aa:c4:81:0a:c9:5a:21:dd:4d:99:7c:dd:c1:29:
                    0b:2a:a4:fc:84:23:e8:ae:36:5c:cf:bb:0e:29:f5:
                    54:f3:e0:60:df:5c:7a:e8:5f:0d:03:45:42:a4:51:
                    05:f2:c4:ca:4c:2d:a1:78:3e:c3:08:58:f4:34:d7:
                    45:bf:b6:76:82:e6:19:39:7f:c2:5e:61:0a:3e:83:
                    c9:fb:b8:f2:17:c2:56:45:dc:4d:d6:a7:47:8e:b2:
                    72:52:f2:b7:aa:0e:88:84:ac:75:d3:33:06:1e:e4:
                    ae:27:7d:8c:9c:e9:29:f1:cc:ee:03:f1:d0:94:0e:
                    ab:72:ce:a5:e1:c6:e2:8a:76:a2:77:c9:65:53:0d:
                    8b:ed:2a:35:13:76:a5:b1:5e:55:83:20:a9:d8:c4:
                    27:2d:67:d6:a7:2a:1a:81:c5:92:cb:fd:3b:16:76:
                    1d:8e:96:95:b3:58:5a:ef:a9:c5:4e:d2:73:62:59:
                    dc:cd:ab:70:9b:2f:7c:25:9e:95:c3:c4:65:22:cc:
                    45:09:0d:a7:9c:fd:54:2a:a5:eb:6d:fe:1a:ee:2c:
                    20:34:ed:18:fc:f5:b0:84:69:8f:9b:4f:0c:ff:bb:
                    b8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0B:E8:92:F7:3B:FE:7F:FB:CB:42:91:45:5E:52:6A:33:DC:CB:CA
            X509v3 Authority Key Identifier:
                keyid:38:E5:19:DD:EE:70:A7:D9:43:E8:2F:69:D4:B0:20:AC:54:D3:BB:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/1/38E519DDEE70A7D943E82F69D4B020AC54D3BB31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E519DDEE70A7D943E82F69D4B020AC54D3BB31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/1/323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8424:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:de:bf:d0:14:da:d5:2e:43:0e:2e:87:02:c0:ff:8b:ee:51:
         81:dd:e6:1e:d4:20:64:69:5d:e0:0a:ad:12:5d:a1:50:fc:36:
         60:40:8f:24:5b:4a:e9:da:c0:03:29:18:f8:eb:05:1e:ba:18:
         ad:e6:a8:f9:c4:03:55:c6:fc:1f:65:c1:97:a2:59:81:45:32:
         b2:cb:f4:34:bd:f6:54:cc:32:9f:d0:ac:ff:10:79:85:58:90:
         90:1c:52:fc:a2:a3:77:c5:6f:09:0e:30:4b:50:5d:ea:21:2b:
         0a:5c:35:d7:65:ba:d8:7a:65:c8:21:84:5a:c8:85:9b:34:64:
         57:b8:c2:6e:83:aa:d9:c2:9a:aa:af:2b:7a:33:0a:02:9d:9d:
         f9:99:12:ae:b2:44:b2:a4:fa:e6:8a:ce:51:c9:25:4a:b7:0d:
         ee:1a:1b:8e:50:32:9d:dd:41:e3:6f:a6:b1:f8:2e:8b:15:29:
         13:d2:e6:3f:65:57:42:c2:d0:db:08:63:10:44:b6:4c:8b:b8:
         88:fa:10:e7:00:75:7b:fe:46:05:f5:7c:1b:71:68:3d:7e:70:
         f3:fe:a6:c0:bb:72:0d:fd:23:74:67:f2:b3:a1:63:49:db:3c:
         d8:8b:e7:d7:43:f3:1c:6b:f4:f6:df:02:20:86:62:7c:f0:5d:
         56:84:f9:4e
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUMnAbd5h5syPgiXcIkg0ScAF95hkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFNTE5RERFRTcwQTdEOTQzRTgyRjY5RDRCMDIwQUM1
NEQzQkIzMTAeFw0yNDA0MDMxODI2NDZaFw0yNTA0MDIxODMxNDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY3ODk2NTdFNjg0MTIzMDIy
OTA3M0YxQTQwMkRBMTg1NDkzMjk1NzI4MEI5MEYwRjFFQzA1MEQ1OUU0QUFDNDgx
MEFDOTVBMjFERDREOTk3Q0REQzEyOTBCMkFBNEZDODQyM0U4QUUzNjVDQ0ZCQjBF
MjlGNTU0RjNFMDYwREY1QzdBRTg1RjBEMDM0NTQyQTQ1MTA1RjJDNENBNEMyREEx
NzgzRUMzMDg1OEY0MzRENzQ1QkZCNjc2ODJFNjE5Mzk3RkMyNUU2MTBBM0U4M0M5
RkJCOEYyMTdDMjU2NDVEQzRERDZBNzQ3OEVCMjcyNTJGMkI3QUEwRTg4ODRBQzc1
RDMzMzA2MUVFNEFFMjc3RDhDOUNFOTI5RjFDQ0VFMDNGMUQwOTQwRUFCNzJDRUE1
RTFDNkUyOEE3NkEyNzdDOTY1NTMwRDhCRUQyQTM1MTM3NkE1QjE1RTU1ODMyMEE5
RDhDNDI3MkQ2N0Q2QTcyQTFBODFDNTkyQ0JGRDNCMTY3NjFEOEU5Njk1QjM1ODVB
RUZBOUM1NEVEMjczNjI1OURDQ0RBQjcwOUIyRjdDMjU5RTk1QzNDNDY1MjJDQzQ1
MDkwREE3OUNGRDU0MkFBNUVCNkRGRTFBRUUyQzIwMzRFRDE4RkNGNUIwODQ2OThG
OUI0RjBDRkZCQkI4RTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtniWV+aEEjAikHPxpALaGFSTKVcoC5Dw8ewFDVnkqsSBCslaId1N
mXzdwSkLKqT8hCPorjZcz7sOKfVU8+Bg31x66F8NA0VCpFEF8sTKTC2heD7DCFj0
NNdFv7Z2guYZOX/CXmEKPoPJ+7jyF8JWRdxN1qdHjrJyUvK3qg6IhKx10zMGHuSu
J32MnOkp8czuA/HQlA6rcs6l4cbiinaid8llUw2L7So1E3alsV5VgyCp2MQnLWfW
pyoagcWSy/07FnYdjpaVs1ha76nFTtJzYlnczatwmy98JZ6Vw8RlIsxFCQ2nnP1U
KqXrbf4a7iwgNO0Y/PWwhGmPm08M/7u46QIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FIYL6JL3O/5/+8tCkUVeUmoz3MvKMB8GA1UdIwQYMBaAFDjlGd3ucKfZQ+gvadSw
IKxU07sxMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNxc1cyV2hwVHM2eEQx
RHJQNEZ4ZjJZZWU1b3RHZnc0N3RIaUdxRU1IZWdyLzEvMzhFNTE5RERFRTcwQTdE
OTQzRTgyRjY5RDRCMDIwQUM1NEQzQkIzMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zOEU1MTlEREVFNzBBN0Q5NDNFODJGNjlENEIwMjBBQzU0RDNC
QjMxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zcXNXMldocFRzNnhEMURyUDRG
eGYyWWVlNW90R2Z3NDd0SGlHcUVNSGVnci8xLzMyMzgzMDM0M2EzODM0MzIzNDNh
MzQzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzMjM0MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBIQkQDANBgkqhkiG9w0BAQsFAAOCAQEAmt6/0BTa1S5DDi6HAsD/
i+5Rgd3mHtQgZGld4AqtEl2hUPw2YECPJFtK6drAAykY+OsFHroYreao+cQDVcb8
H2XBl6JZgUUyssv0NL32VMwyn9Cs/xB5hViQkBxS/KKjd8VvCQ4wS1Bd6iErClw1
12W62HplyCGEWsiFmzRkV7jCboOq2cKaqq8rejMKAp2d+ZkSrrJEsqT65orOUckl
SrcN7hobjlAynd1B42+msfguixUpE9LmP2VXQsLQ2whjEES2TIu4iPoQ5wB1e/5G
BfV8G3FoPX5w8/6mwLtyDf0jdGfys6FjSds82Ivn10PzHGv09t8CIIZifPBdVoT5
Tg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org